This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft File: VxRWZJaS5gVm3gCOEmu90dLr7UU.mft (raw, json) Hash identifier: xVkguK/t+6KJHlY1vTkOaNXHtDAgMKjPIfUyRX/ChaY= Subject key identifier: 7E:3A:DF:E3:41:B7:1E:1C:0F:B6:AA:DB:FA:33:02:CC:BC:89:EE:A1 Authority key identifier: 57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45 Certificate issuer: /CN=571456649692e60566de008e126bbdd1d2ebed45 Certificate serial: 019B25513AF67D87743B4C2DF4332EB9996B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft Manifest number: 0FF7 Signing time: Tue 16 Dec 2025 04:00:38 +0000 Manifest this update: Tue 16 Dec 2025 04:00:38 +0000 Manifest next update: Wed 17 Dec 2025 04:00:38 +0000 Files and hashes: 1: VxRWZJaS5gVm3gCOEmu90dLr7UU.crl (hash: XEf2NFcq3alXoFDSU5fsD4YdYXitS5P2ejuEXiu35Do=) 2: t0KxoFR4-v-aF7ApZp5a51UCPdE.roa (hash: wDmBNX7FNw1Byb+j/pduuukElypr1eZvZiRjB9AwIB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:3a:f6:7d:87:74:3b:4c:2d:f4:33:2e:b9:99:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571456649692e60566de008e126bbdd1d2ebed45 Validity Not Before: Dec 16 04:00:38 2025 GMT Not After : Dec 17 04:00:38 2025 GMT Subject: CN=7e3adfe341b71e1c0fb6aadbfa3302ccbc89eea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2a:21:6a:f4:3f:ae:78:60:28:5c:44:ba:5e: 44:72:1f:0d:90:aa:ee:9b:87:39:52:86:03:34:0d: 45:8d:d1:ef:f3:49:a1:dd:bf:a8:42:ae:cd:71:73: a5:61:c8:d0:4d:e4:ec:29:fb:b6:52:a0:03:9b:37: 30:e9:d3:43:db:e0:88:a1:ff:22:44:a4:62:78:d1: 57:fb:93:55:b9:3e:98:2e:6e:4e:5e:f5:83:ea:80: eb:10:be:25:e4:a6:68:96:69:61:6b:61:71:9e:1a: 6a:49:71:36:fa:8b:df:92:ea:1b:4e:7c:22:53:02: e0:f2:f6:6e:98:80:33:72:b5:75:c0:90:89:95:10: a3:39:f4:42:69:f8:c2:f4:b2:31:10:f6:3a:bb:fb: 2e:5e:c1:0b:74:43:78:b2:3f:80:c6:9e:71:e5:1b: dd:52:39:84:a9:e9:86:8e:bb:65:8e:af:cc:5e:93: ab:91:f2:57:14:00:65:0d:b9:4e:3f:52:90:3b:f8: 4b:09:d3:9f:53:33:f0:06:bf:9c:8a:d6:1e:ea:45: dd:2a:60:e6:2e:91:37:6a:de:21:83:a4:b9:55:f4: 3f:69:4b:8d:90:11:15:99:8f:6f:bb:1e:7b:4d:5d: 25:e1:1d:89:f8:ac:68:68:23:6a:9e:26:e9:8d:f3: cb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3A:DF:E3:41:B7:1E:1C:0F:B6:AA:DB:FA:33:02:CC:BC:89:EE:A1 X509v3 Authority Key Identifier: keyid:57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b0:d4:29:14:d3:62:2c:a4:d2:53:40:66:87:53:59:99:37: 09:f2:53:39:1e:a1:1d:09:84:18:e4:d7:1f:c2:ac:e5:7b:d5: c5:6c:b8:2e:3d:86:df:2e:26:3c:ad:03:e8:6e:1c:1e:33:d1: 7a:7d:39:9e:55:2c:b4:9b:b8:1d:30:8f:4a:75:08:fb:1b:56: 44:65:e1:bf:74:4b:56:9c:0d:73:ff:e7:72:d3:e6:5d:53:b8: 58:7a:a8:38:1c:d4:4c:58:41:76:aa:d4:4a:05:77:69:05:3e: 62:2e:ec:2d:f7:35:e7:18:e7:f8:84:77:06:c6:33:f7:88:a7: d1:d3:64:07:82:99:f2:17:29:6c:f7:a2:c2:8b:d5:1d:4c:57: 55:36:5d:c5:57:24:31:a9:13:ee:2a:90:8f:4d:8c:69:4e:6b: cf:f4:32:3f:62:8a:8b:6b:08:b3:74:30:2b:46:03:94:82:9d: 02:41:93:0c:a2:45:46:45:3e:0a:5c:cd:a4:dc:6e:a3:66:9e: d5:a1:d5:bb:51:1f:a5:45:79:ff:06:ec:c0:fe:dd:2e:68:eb: 5d:3c:12:83:db:d6:97:75:92:81:7f:09:c1:1a:5d:c2:b8:8d: 82:00:50:55:7e:d8:f3:a5:f3:39:8c:c1:13:0b:1c:6d:e3:ba: eb:88:0c:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUTr2fYd0O0wt9DMuuZlrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MTQ1NjY0OTY5MmU2MDU2NmRlMDA4ZTEyNmJiZGQxZDJl YmVkNDUwHhcNMjUxMjE2MDQwMDM4WhcNMjUxMjE3MDQwMDM4WjAzMTEwLwYDVQQD Eyg3ZTNhZGZlMzQxYjcxZTFjMGZiNmFhZGJmYTMzMDJjY2JjODllZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiohavQ/rnhgKFxEul5Ech8NkKru m4c5UoYDNA1FjdHv80mh3b+oQq7NcXOlYcjQTeTsKfu2UqADmzcw6dND2+CIof8i RKRieNFX+5NVuT6YLm5OXvWD6oDrEL4l5KZolmlha2FxnhpqSXE2+ovfkuobTnwi UwLg8vZumIAzcrV1wJCJlRCjOfRCafjC9LIxEPY6u/suXsELdEN4sj+Axp5x5Rvd UjmEqemGjrtljq/MXpOrkfJXFABlDblOP1KQO/hLCdOfUzPwBr+citYe6kXdKmDm LpE3at4hg6S5VfQ/aUuNkBEVmY9vux57TV0l4R2J+KxoaCNqnibpjfPLcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH463+NBtx4cD7aq2/ozAsy8ie6hMB8GA1UdIwQY MBaAFFcUVmSWkuYFZt4AjhJrvdHS6+1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhSV1pKYVM1Z1ZtM2dDT0VtdTkwZExyN1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wOGE3ZmYtMmNlZi00MjQ4LTlmZTgt MDRjOGYzZWVjZWViLzEvVnhSV1pKYVM1Z1ZtM2dDT0VtdTkwZExyN1VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wOGE3ZmYtMmNlZi00MjQ4LTlmZTgtMDRjOGYzZWVjZWVi LzEvVnhSV1pKYVM1Z1ZtM2dDT0VtdTkwZExyN1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrDUKRTT Yiyk0lNAZodTWZk3CfJTOR6hHQmEGOTXH8Ks5XvVxWy4Lj2G3y4mPK0D6G4cHjPR en05nlUstJu4HTCPSnUI+xtWRGXhv3RLVpwNc//nctPmXVO4WHqoOBzUTFhBdqrU SgV3aQU+Yi7sLfc15xjn+IR3BsYz94in0dNkB4KZ8hcpbPeiwovVHUxXVTZdxVck MakT7iqQj02MaU5rz/QyP2KKi2sIs3QwK0YDlIKdAkGTDKJFRkU+ClzNpNxuo2ae 1aHVu1EfpUV5/wbswP7dLmjrXTwSg9vWl3WSgX8JwRpdwriNggBQVX7Y86XzOYzB EwscbeO664gMpw== -----END CERTIFICATE-----Generated at Tue Dec 16 10:39:02 2025 by rpki-client