This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft File: VrWL59KDOsOZKLi4aCdBtQMUZF0.mft (raw, json) Hash identifier: uZsCSHkIwAOnO8I9qIDO6lxt2Y04B4WakadH5sjs3vQ= Subject key identifier: 35:42:38:49:38:33:A3:CD:9E:44:93:C7:80:1F:7D:12:2A:42:55:83 Authority key identifier: 56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D Certificate issuer: /CN=56b58be7d2833ac39928b8b8682741b50314645d Certificate serial: 019B32D6637F1204A510D90287756E8B9084 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft Manifest number: 0A72 Signing time: Thu 18 Dec 2025 19:01:09 +0000 Manifest this update: Thu 18 Dec 2025 19:01:09 +0000 Manifest next update: Fri 19 Dec 2025 19:01:09 +0000 Files and hashes: 1: VrWL59KDOsOZKLi4aCdBtQMUZF0.crl (hash: JiD94kM7DArqUl03plPgMbiRfBv4Tw7sBFRl500lEAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:63:7f:12:04:a5:10:d9:02:87:75:6e:8b:90:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b58be7d2833ac39928b8b8682741b50314645d Validity Not Before: Dec 18 19:01:09 2025 GMT Not After : Dec 19 19:01:09 2025 GMT Subject: CN=354238493833a3cd9e4493c7801f7d122a425583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6f:cd:3c:50:0f:94:ce:15:94:a6:11:1a:74: 97:7d:01:de:c5:52:d2:56:87:08:17:74:68:e1:06: a3:3d:99:1c:9d:dd:bf:9a:13:9d:36:e9:ae:d8:12: a7:6a:ce:f1:0b:93:d7:13:cd:b0:0c:89:55:f6:ea: 87:35:da:7a:82:19:eb:46:c6:ea:ec:96:51:5a:4a: ad:2c:45:15:31:20:ee:85:2d:d6:13:14:c7:de:72: b4:2a:81:19:bb:ad:06:f2:9f:52:e1:9b:d6:97:bf: fc:8c:d7:7c:bd:1c:13:97:73:16:79:8f:5a:9c:fa: 41:54:7a:11:0f:13:16:d3:51:e7:8d:25:4d:4c:14: 60:33:ae:cf:d0:3c:9c:ed:de:fa:87:f0:ac:6f:62: ae:d8:6e:9b:4b:06:52:32:fe:ed:4b:ba:97:ca:25: 5e:77:18:03:45:b2:eb:4a:30:c7:be:03:8c:5c:c4: 78:52:af:5e:ef:2f:af:03:35:66:de:0f:f6:b4:22: b1:4f:6e:e5:c4:2d:a6:de:7d:6f:2f:1b:e3:e4:66: 0d:d9:b7:38:6f:57:ab:f6:75:65:2e:2e:2f:68:9e: 99:fe:b2:f9:6b:68:f1:68:9d:3d:ca:a7:4b:fc:3d: 36:66:0b:cb:a5:07:12:89:ea:47:b9:68:a9:6b:48: 61:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:42:38:49:38:33:A3:CD:9E:44:93:C7:80:1F:7D:12:2A:42:55:83 X509v3 Authority Key Identifier: keyid:56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:e4:e7:1e:f4:60:7f:b8:b6:f2:c1:32:11:70:de:bf:63:91: 34:36:73:79:42:6b:4c:61:89:74:51:4b:5b:69:f8:99:00:a4: 26:e7:73:0d:73:85:c8:e4:93:cb:c6:71:a5:c5:ce:61:99:82: d5:79:a9:06:ec:9d:54:84:3a:d3:c6:d0:c3:c7:81:23:a2:07: 43:78:d1:ee:c5:bb:7c:b4:6e:02:7a:b5:a4:9f:b6:90:39:7b: 9d:a3:8a:a6:63:c9:7a:b1:3a:c2:b9:0b:c0:aa:1c:ee:ff:8c: 41:d0:f4:de:01:c1:52:de:dd:f1:78:47:ad:31:97:39:47:30: 45:0d:42:09:39:11:27:9a:47:a2:fc:bd:db:24:89:2c:2a:93: 2b:61:9f:91:c3:76:11:4c:fc:d9:a4:c9:b9:c8:c7:10:e4:f7: 8c:b2:1a:b7:33:98:e1:71:b0:d8:60:27:b1:e8:b5:35:05:55: 67:dd:a4:1f:2b:02:1b:45:cb:6d:60:6e:57:ca:c4:1f:ef:a5: 8b:ba:b0:43:7f:2c:1f:76:66:ca:49:78:f5:7b:77:c2:14:41: db:1a:32:fd:a7:77:6d:0c:4e:d6:cf:86:9d:f7:a2:50:02:08: 07:c9:37:a8:fb:ce:ed:66:33:5c:83:4d:f1:b2:aa:09:bb:03: 0b:58:b6:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1mN/EgSlENkCh3Vui5CEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YjU4YmU3ZDI4MzNhYzM5OTI4YjhiODY4Mjc0MWI1MDMx NDY0NWQwHhcNMjUxMjE4MTkwMTA5WhcNMjUxMjE5MTkwMTA5WjAzMTEwLwYDVQQD EygzNTQyMzg0OTM4MzNhM2NkOWU0NDkzYzc4MDFmN2QxMjJhNDI1NTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW/NPFAPlM4VlKYRGnSXfQHexVLS VocIF3Ro4QajPZkcnd2/mhOdNumu2BKnas7xC5PXE82wDIlV9uqHNdp6ghnrRsbq 7JZRWkqtLEUVMSDuhS3WExTH3nK0KoEZu60G8p9S4ZvWl7/8jNd8vRwTl3MWeY9a nPpBVHoRDxMW01HnjSVNTBRgM67P0Dyc7d76h/Csb2Ku2G6bSwZSMv7tS7qXyiVe dxgDRbLrSjDHvgOMXMR4Uq9e7y+vAzVm3g/2tCKxT27lxC2m3n1vLxvj5GYN2bc4 b1er9nVlLi4vaJ6Z/rL5a2jxaJ09yqdL/D02ZgvLpQcSiepHuWipa0hhwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVCOEk4M6PNnkSTx4AffRIqQlWDMB8GA1UdIwQY MBaAFFa1i+fSgzrDmSi4uGgnQbUDFGRdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lYTk1NzktMzUzMi00OWZiLTkxODIt ZjNhOGJmMzcyMDU2LzEvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9lYTk1NzktMzUzMi00OWZiLTkxODItZjNhOGJmMzcyMDU2 LzEvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQeTnHvRg f7i28sEyEXDev2ORNDZzeUJrTGGJdFFLW2n4mQCkJudzDXOFyOSTy8ZxpcXOYZmC 1XmpBuydVIQ608bQw8eBI6IHQ3jR7sW7fLRuAnq1pJ+2kDl7naOKpmPJerE6wrkL wKoc7v+MQdD03gHBUt7d8XhHrTGXOUcwRQ1CCTkRJ5pHovy92ySJLCqTK2GfkcN2 EUz82aTJucjHEOT3jLIatzOY4XGw2GAnsei1NQVVZ92kHysCG0XLbWBuV8rEH++l i7qwQ38sH3Zmykl49Xt3whRB2xoy/ad3bQxO1s+GnfeiUAIIB8k3qPvO7WYzXINN 8bKqCbsDC1i2/A== -----END CERTIFICATE-----Generated at Fri Dec 19 04:51:56 2025 by rpki-client