This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft File: VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft (raw, json) Hash identifier: 1JMhOsZhYHl1b7JpSG4bw3n4VfNyit0g74CVDHiBwlM= Subject key identifier: 14:92:3B:AE:0B:D8:9B:BA:F4:25:EE:B3:03:39:3A:1A:29:8F:C8:70 Authority key identifier: 57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD Certificate issuer: /CN=57060106b416792b2a2e9a7eb402a238570168bd Certificate serial: 019B42EE3635E0714AB02E745BC5ECEF605D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft Manifest number: 14F0 Signing time: Sun 21 Dec 2025 22:01:06 +0000 Manifest this update: Sun 21 Dec 2025 22:01:06 +0000 Manifest next update: Mon 22 Dec 2025 22:01:06 +0000 Files and hashes: 1: VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl (hash: mT2UlIx7jwlhTmu8ajEu+4x/zovvBI6BPetFxxHDDJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:36:35:e0:71:4a:b0:2e:74:5b:c5:ec:ef:60:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57060106b416792b2a2e9a7eb402a238570168bd Validity Not Before: Dec 21 22:01:06 2025 GMT Not After : Dec 22 22:01:06 2025 GMT Subject: CN=14923bae0bd89bbaf425eeb303393a1a298fc870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:64:6d:80:cf:de:8b:b5:13:20:d4:a2:8f:8a: 65:7d:f1:0f:6a:1f:3b:e2:51:31:94:d1:80:44:f5: d6:48:a3:4a:7d:2c:f3:84:28:9a:60:28:91:2e:80: 5e:57:23:75:19:6e:93:60:85:f9:21:e7:e3:dd:66: 7d:17:45:06:ad:5e:8b:24:85:d9:44:8c:0a:6e:18: 7e:2c:31:d8:cc:47:94:f8:9d:a8:99:f8:dd:12:3e: a6:e0:de:64:99:27:d0:fd:e4:0e:88:85:03:5d:1f: 64:fe:b7:48:9a:e6:bf:db:9d:78:56:27:12:68:66: be:7d:7e:bc:e8:7d:5d:d5:ca:0b:54:0c:57:64:61: a0:e9:32:f8:bb:54:89:be:9f:37:77:5d:38:77:8b: f6:0f:bb:15:b0:e1:7c:ef:ec:87:22:75:36:30:d8: 0a:2d:19:26:e4:88:a2:11:08:3d:07:83:8f:e8:e5: 7b:5d:94:53:fa:46:e3:bf:83:38:34:7b:5a:4b:e4: e2:48:61:e1:f7:f0:ca:3b:93:d2:cf:bc:9e:63:eb: 65:eb:14:3c:18:09:8c:1f:a2:c0:a9:ed:5d:a0:c0: 5d:f9:95:e4:e1:75:9a:f6:83:7f:d1:75:fd:53:5f: 89:40:23:59:90:75:ff:78:cb:25:d3:e5:43:fc:28: fb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:92:3B:AE:0B:D8:9B:BA:F4:25:EE:B3:03:39:3A:1A:29:8F:C8:70 X509v3 Authority Key Identifier: keyid:57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:46:75:76:85:e9:4a:f4:27:dd:d7:51:ed:2d:3f:3a:88:8c: 86:87:f8:82:69:40:36:4c:1d:c3:9f:d7:9d:94:77:e0:b9:6a: da:87:3e:d4:ad:2f:2e:e9:c0:b1:18:f0:b2:0e:58:b0:63:30: a7:83:8c:e6:cc:e0:48:37:84:86:1d:d2:8f:f8:a3:7d:8b:76: 52:37:8d:cf:a5:b6:ca:a3:68:a2:48:a8:57:49:5d:ab:29:af: f9:fc:94:a1:81:da:f6:68:08:f4:3d:2a:a4:aa:6e:3b:fc:20: f9:79:fd:59:e5:19:f1:39:ce:bb:d6:ee:13:09:7e:77:19:d0: b5:72:33:c4:8f:ba:83:36:d7:49:ef:0b:3d:6b:8a:6a:0e:e4: c9:d3:cb:86:1d:51:4b:6d:1b:36:f9:c5:dd:8f:76:fe:3f:99: 95:cc:60:96:31:4c:d2:29:18:d3:1d:8b:01:ef:fc:6b:cd:97: 28:79:c2:42:44:1d:7b:19:0c:e2:66:e9:47:ae:1f:8d:96:25: 13:90:5d:32:db:b7:97:c1:4e:e4:ab:cd:91:3a:b8:0a:96:76: 6a:b5:f5:72:89:c0:f4:ff:a1:1d:37:d5:d3:ff:d8:e4:16:f5: 34:23:d6:6e:4c:da:b1:72:09:52:cd:49:04:82:3e:23:6a:1e: 1f:51:20:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7jY14HFKsC50W8Xs72BdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MDYwMTA2YjQxNjc5MmIyYTJlOWE3ZWI0MDJhMjM4NTcw MTY4YmQwHhcNMjUxMjIxMjIwMTA2WhcNMjUxMjIyMjIwMTA2WjAzMTEwLwYDVQQD EygxNDkyM2JhZTBiZDg5YmJhZjQyNWVlYjMwMzM5M2ExYTI5OGZjODcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGRtgM/ei7UTINSij4plffEPah87 4lExlNGARPXWSKNKfSzzhCiaYCiRLoBeVyN1GW6TYIX5Iefj3WZ9F0UGrV6LJIXZ RIwKbhh+LDHYzEeU+J2omfjdEj6m4N5kmSfQ/eQOiIUDXR9k/rdImua/2514VicS aGa+fX686H1d1coLVAxXZGGg6TL4u1SJvp83d104d4v2D7sVsOF87+yHInU2MNgK LRkm5IiiEQg9B4OP6OV7XZRT+kbjv4M4NHtaS+TiSGHh9/DKO5PSz7yeY+tl6xQ8 GAmMH6LAqe1doMBd+ZXk4XWa9oN/0XX9U1+JQCNZkHX/eMsl0+VD/Cj7xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSSO64L2Ju69CXuswM5Ohopj8hwMB8GA1UdIwQY MBaAFFcGAQa0FnkrKi6afrQCojhXAWi9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVndZQkJyUVdlU3NxTHBwLXRBS2lPRmNCYUwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS83OTkyNzgtNmYzNS00YzNhLTk3ZDAt OWJmY2ZkZDc5NjliLzEvVndZQkJyUVdlU3NxTHBwLXRBS2lPRmNCYUwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS83OTkyNzgtNmYzNS00YzNhLTk3ZDAtOWJmY2ZkZDc5Njli LzEvVndZQkJyUVdlU3NxTHBwLXRBS2lPRmNCYUwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0Z1doXp SvQn3ddR7S0/OoiMhof4gmlANkwdw5/XnZR34Llq2oc+1K0vLunAsRjwsg5YsGMw p4OM5szgSDeEhh3Sj/ijfYt2UjeNz6W2yqNookioV0ldqymv+fyUoYHa9mgI9D0q pKpuO/wg+Xn9WeUZ8TnOu9buEwl+dxnQtXIzxI+6gzbXSe8LPWuKag7kydPLhh1R S20bNvnF3Y92/j+ZlcxgljFM0ikY0x2LAe/8a82XKHnCQkQdexkM4mbpR64fjZYl E5BdMtu3l8FO5KvNkTq4CpZ2arX1conA9P+hHTfV0//Y5Bb1NCPWbkzasXIJUs1J BII+I2oeH1EgMQ== -----END CERTIFICATE-----Generated at Mon Dec 22 05:32:58 2025 by rpki-client