This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft File: VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft (raw, json) Hash identifier: bCxO1Gi7DJfOqqV9BUGMpg2HoJj5/jQyfRzamZbe8H4= Subject key identifier: 2C:E8:A3:E6:2C:0A:79:0B:1B:27:59:73:C6:05:2F:30:4A:64:72:C7 Authority key identifier: 54:DE:B1:D6:A3:77:AC:9D:1F:5B:88:8C:5C:D1:D4:00:C7:99:72:71 Certificate issuer: /CN=54deb1d6a377ac9d1f5b888c5cd1d400c7997271 Certificate serial: 019AF841B820879570A506DB1193652D5756 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft Manifest number: 01D7 Signing time: Sun 07 Dec 2025 10:00:47 +0000 Manifest this update: Sun 07 Dec 2025 10:00:47 +0000 Manifest next update: Mon 08 Dec 2025 10:00:47 +0000 Files and hashes: 1: 0KZX05rL8h9xkUYSwRaJ35ZtOBw.roa (hash: 0p1i5WbBLqVZcu2ejejVhnVH/tBsiXUpsUEhbMpG3eU=) 2: VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl (hash: vLTKbUaK60fmoi4HpF95POvxAKhKqTvuhsQ7dZneO1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:41:b8:20:87:95:70:a5:06:db:11:93:65:2d:57:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54deb1d6a377ac9d1f5b888c5cd1d400c7997271 Validity Not Before: Dec 7 10:00:47 2025 GMT Not After : Dec 8 10:00:47 2025 GMT Subject: CN=2ce8a3e62c0a790b1b275973c6052f304a6472c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e1:a6:c2:67:26:4d:64:60:cc:eb:06:69:20: a3:fb:bd:82:74:79:8e:42:ed:0e:6a:89:ec:94:46: bd:f9:0d:3e:7e:98:ff:48:2d:44:e5:b8:1b:ce:cd: 09:9e:fb:7f:ba:b8:e3:f8:df:a8:cb:99:b1:13:91: d6:9c:e1:31:af:23:b4:49:d7:bf:b2:32:f7:e3:95: 4c:48:de:29:e8:e9:55:55:ba:22:2a:b6:a0:e1:ff: e8:c3:18:e8:69:5b:e1:1c:65:12:aa:b4:c8:b8:1d: d5:08:ac:dd:87:f8:43:e9:cb:c3:55:92:d0:29:43: f3:f7:76:76:03:16:c6:da:56:07:93:d5:26:00:08: 87:f5:b7:c5:b1:80:a6:b7:16:d3:12:45:73:0b:b1: 7e:68:3b:74:3d:99:f5:f2:6a:75:00:21:f7:4f:f1: 93:87:36:2a:51:15:54:2b:5e:ef:97:19:05:23:cf: cf:46:56:f9:5b:00:92:22:52:71:03:dd:63:74:1c: 36:51:32:64:20:7d:37:10:bd:eb:fe:0f:8d:c8:83: 19:2e:ff:3f:81:b5:a6:09:28:5d:32:d1:6b:b7:59: c3:37:a4:05:9f:5c:c5:67:de:bf:74:61:08:0f:2f: a4:e8:2d:24:e8:ee:cc:41:1a:9d:4e:e8:6a:f7:36: 22:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E8:A3:E6:2C:0A:79:0B:1B:27:59:73:C6:05:2F:30:4A:64:72:C7 X509v3 Authority Key Identifier: keyid:54:DE:B1:D6:A3:77:AC:9D:1F:5B:88:8C:5C:D1:D4:00:C7:99:72:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:59:40:0b:49:03:e1:e5:ff:54:05:6e:72:0d:e9:1e:aa:71: 92:cc:28:52:ef:2f:a6:68:3e:71:de:17:b1:fb:3c:d4:3d:fe: 91:5e:07:cf:1b:3e:3d:79:66:e9:7a:69:f0:bf:e0:ac:30:2d: 29:d2:fc:b9:3b:e8:6b:87:dd:aa:48:df:ba:49:1a:d3:2f:56: 7b:3a:77:e3:45:21:22:ce:2c:b8:b1:73:ca:6a:94:2d:70:ff: 79:83:1b:81:bd:ce:76:4b:a6:84:43:ba:b0:d5:49:12:0a:f5: 39:af:78:2a:2d:5a:7b:87:ca:11:b6:aa:00:a6:74:31:88:0d: f3:e8:d2:85:1e:dc:80:6a:f9:a8:d7:a4:2a:0a:1b:5c:5f:1c: ce:bb:5a:70:47:87:13:04:91:1c:66:49:b9:3e:78:af:1e:32: bd:9b:07:2d:2d:aa:5f:80:10:0c:34:60:2f:60:3a:e0:b3:eb: 5e:63:a1:78:f5:3d:0f:06:8f:51:ae:c6:dc:8a:d9:d0:2a:ed: ef:97:cc:2b:b9:7c:d9:3d:50:84:89:a9:92:63:c5:af:50:c3: f3:9e:00:38:81:18:a0:3f:84:de:4b:df:fe:a8:f0:8a:3f:7f: 81:a1:b6:ee:80:66:90:ed:24:4c:05:a3:cb:b9:7d:bc:6c:fb: 70:bc:ef:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4Qbggh5VwpQbbEZNlLVdWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZGViMWQ2YTM3N2FjOWQxZjViODg4YzVjZDFkNDAwYzc5 OTcyNzEwHhcNMjUxMjA3MTAwMDQ3WhcNMjUxMjA4MTAwMDQ3WjAzMTEwLwYDVQQD EygyY2U4YTNlNjJjMGE3OTBiMWIyNzU5NzNjNjA1MmYzMDRhNjQ3MmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOGmwmcmTWRgzOsGaSCj+72CdHmO Qu0OaonslEa9+Q0+fpj/SC1E5bgbzs0Jnvt/urjj+N+oy5mxE5HWnOExryO0Sde/ sjL345VMSN4p6OlVVboiKrag4f/owxjoaVvhHGUSqrTIuB3VCKzdh/hD6cvDVZLQ KUPz93Z2AxbG2lYHk9UmAAiH9bfFsYCmtxbTEkVzC7F+aDt0PZn18mp1ACH3T/GT hzYqURVUK17vlxkFI8/PRlb5WwCSIlJxA91jdBw2UTJkIH03EL3r/g+NyIMZLv8/ gbWmCShdMtFrt1nDN6QFn1zFZ96/dGEIDy+k6C0k6O7MQRqdTuhq9zYi3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzoo+YsCnkLGydZc8YFLzBKZHLHMB8GA1UdIwQY MBaAFFTesdajd6ydH1uIjFzR1ADHmXJxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk42eDFxTjNySjBmVzRpTVhOSFVBTWVaY25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8wNDQzOWYtNDJlMy00ZTZjLWJkM2It YjMzNmYzMWU0YTc0LzEvVk42eDFxTjNySjBmVzRpTVhOSFVBTWVaY25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8wNDQzOWYtNDJlMy00ZTZjLWJkM2ItYjMzNmYzMWU0YTc0 LzEvVk42eDFxTjNySjBmVzRpTVhOSFVBTWVaY25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVlAC0kD 4eX/VAVucg3pHqpxkswoUu8vpmg+cd4Xsfs81D3+kV4Hzxs+PXlm6Xpp8L/grDAt KdL8uTvoa4fdqkjfukka0y9Wezp340UhIs4suLFzymqULXD/eYMbgb3OdkumhEO6 sNVJEgr1Oa94Ki1ae4fKEbaqAKZ0MYgN8+jShR7cgGr5qNekKgobXF8czrtacEeH EwSRHGZJuT54rx4yvZsHLS2qX4AQDDRgL2A64LPrXmOhePU9DwaPUa7G3IrZ0Crt 75fMK7l82T1QhImpkmPFr1DD854AOIEYoD+E3kvf/qjwij9/gaG27oBmkO0kTAWj y7l9vGz7cLzvKA== -----END CERTIFICATE-----Generated at Sun Dec 7 14:37:53 2025 by rpki-client