This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft File: vp7oIiPwQFhr4922qq9lXplCkSY.mft (raw, json) Hash identifier: hTPLHH950egjcil2Cy/uZsCTBo4/tL4CpWuU8McR05U= Subject key identifier: 1C:D4:CB:E1:3E:4B:48:3B:67:CF:0B:45:21:47:8B:EB:3B:7B:20:68 Authority key identifier: BE:9E:E8:22:23:F0:40:58:6B:E3:DD:B6:AA:AF:65:5E:99:42:91:26 Certificate issuer: /CN=be9ee82223f040586be3ddb6aaaf655e99429126 Certificate serial: 019B34C5E8996DE355B4B1531E5D0C903B25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft Manifest number: 08C8 Signing time: Fri 19 Dec 2025 04:02:23 +0000 Manifest this update: Fri 19 Dec 2025 04:02:23 +0000 Manifest next update: Sat 20 Dec 2025 04:02:23 +0000 Files and hashes: 1: vp7oIiPwQFhr4922qq9lXplCkSY.crl (hash: 6AYo2oJE11id06UApJrGSGY3gIYfyvdc2WceWl9XV1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:e8:99:6d:e3:55:b4:b1:53:1e:5d:0c:90:3b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9ee82223f040586be3ddb6aaaf655e99429126 Validity Not Before: Dec 19 04:02:23 2025 GMT Not After : Dec 20 04:02:23 2025 GMT Subject: CN=1cd4cbe13e4b483b67cf0b4521478beb3b7b2068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:99:a6:cf:64:ca:04:16:7a:40:45:e8:96:be: b8:16:3b:e6:10:a3:fb:2e:df:38:c2:c0:37:d2:f6: d9:67:59:0e:51:43:9f:31:dd:ef:8c:18:cd:3f:54: bb:bc:8e:c7:d7:71:08:9c:09:3a:d0:b8:f4:92:94: ac:75:b2:78:26:19:17:88:e4:8b:e6:4d:c6:b1:79: a7:fb:42:4c:88:a9:02:9a:5a:04:16:08:18:57:0c: 3f:98:f3:3c:d4:70:bb:ee:96:7a:b7:ef:a2:a4:ed: d9:c7:39:c1:b6:dc:c0:70:94:c7:3f:87:0f:64:fa: 3b:0c:5f:5d:64:5b:4e:c7:fa:ce:f6:a0:56:ff:f2: 0f:e8:08:3f:9b:5c:22:7f:fa:90:ce:c3:07:f2:b3: 4b:72:65:6a:8c:ef:dd:e8:8a:37:2f:85:d2:6e:c5: 8f:12:fb:2c:71:a9:9b:07:2c:74:c5:9c:fe:5d:fc: 45:bf:ac:a9:71:20:b3:ad:c4:03:9d:72:2c:00:05: 2f:f0:95:5e:99:ce:22:67:ce:65:a8:67:3d:df:ee: af:b5:f8:c4:12:24:29:4b:0a:be:bc:22:7c:25:48: 27:5b:1d:2b:f8:ec:76:7a:23:18:c8:94:d5:9f:5d: fa:a0:fd:0c:3a:89:74:3f:61:84:9c:c7:30:37:fd: 4b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D4:CB:E1:3E:4B:48:3B:67:CF:0B:45:21:47:8B:EB:3B:7B:20:68 X509v3 Authority Key Identifier: keyid:BE:9E:E8:22:23:F0:40:58:6B:E3:DD:B6:AA:AF:65:5E:99:42:91:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:c8:0b:f8:0e:b9:dd:9e:3d:7e:3c:38:a3:a0:f6:d5:cc:0e: a2:e7:20:ce:34:17:1a:2b:37:ba:52:a4:bd:40:75:e6:dc:2e: 53:82:f8:ea:67:df:24:f3:29:c7:58:e8:2a:d2:29:b2:47:93: 9d:7b:28:5b:4f:94:62:f5:ef:f3:e1:4b:0f:37:74:30:6b:2d: 71:6e:34:a0:fa:b3:88:58:d8:b3:f7:e3:16:30:53:36:a4:a7: 76:1b:f4:61:7a:44:20:b9:5a:8e:1b:46:ad:6c:2f:2a:f5:cd: 1c:98:f7:c4:c3:3c:2e:dd:15:92:e2:f1:ea:09:c8:7c:2a:76: c3:f3:86:a6:40:15:db:f9:1d:ab:b6:c2:88:6c:c4:5a:e9:96: 7c:d8:54:93:14:bc:9b:63:19:c8:f0:a1:d2:31:c3:df:ae:4c: d2:33:1c:e6:9f:71:97:f7:3a:3a:19:4e:87:7d:d8:50:16:94: a0:72:74:87:d4:e2:47:cd:61:35:34:82:26:82:c2:5b:29:79: 23:6f:49:79:c0:5a:2f:9b:72:e4:da:6a:be:06:c0:f2:57:94: a9:10:52:7e:e3:98:90:1d:07:e5:31:9c:b2:0e:28:e9:83:e5: 0b:72:37:08:2c:1a:26:45:7d:5e:fb:40:e1:16:c5:40:c7:50: ff:1e:b0:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xeiZbeNVtLFTHl0MkDslMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOWVlODIyMjNmMDQwNTg2YmUzZGRiNmFhYWY2NTVlOTk0 MjkxMjYwHhcNMjUxMjE5MDQwMjIzWhcNMjUxMjIwMDQwMjIzWjAzMTEwLwYDVQQD EygxY2Q0Y2JlMTNlNGI0ODNiNjdjZjBiNDUyMTQ3OGJlYjNiN2IyMDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pmmz2TKBBZ6QEXolr64FjvmEKP7 Lt84wsA30vbZZ1kOUUOfMd3vjBjNP1S7vI7H13EInAk60Lj0kpSsdbJ4JhkXiOSL 5k3GsXmn+0JMiKkCmloEFggYVww/mPM81HC77pZ6t++ipO3ZxznBttzAcJTHP4cP ZPo7DF9dZFtOx/rO9qBW//IP6Ag/m1wif/qQzsMH8rNLcmVqjO/d6Io3L4XSbsWP EvsscambByx0xZz+XfxFv6ypcSCzrcQDnXIsAAUv8JVemc4iZ85lqGc93+6vtfjE EiQpSwq+vCJ8JUgnWx0r+Ox2eiMYyJTVn136oP0MOol0P2GEnMcwN/1L8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzUy+E+S0g7Z88LRSFHi+s7eyBoMB8GA1UdIwQY MBaAFL6e6CIj8EBYa+PdtqqvZV6ZQpEmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnA3b0lpUHdRRmhyNDkyMnFxOWxYcGxDa1NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMjdjNDYtNTdlZS00ZjJmLTk4OWQt MjhjMGU3ZGYxNmEzLzEvdnA3b0lpUHdRRmhyNDkyMnFxOWxYcGxDa1NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zMjdjNDYtNTdlZS00ZjJmLTk4OWQtMjhjMGU3ZGYxNmEz LzEvdnA3b0lpUHdRRmhyNDkyMnFxOWxYcGxDa1NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMgL+A65 3Z49fjw4o6D21cwOoucgzjQXGis3ulKkvUB15twuU4L46mffJPMpx1joKtIpskeT nXsoW0+UYvXv8+FLDzd0MGstcW40oPqziFjYs/fjFjBTNqSndhv0YXpEILlajhtG rWwvKvXNHJj3xMM8Lt0VkuLx6gnIfCp2w/OGpkAV2/kdq7bCiGzEWumWfNhUkxS8 m2MZyPCh0jHD365M0jMc5p9xl/c6OhlOh33YUBaUoHJ0h9TiR81hNTSCJoLCWyl5 I29JecBaL5ty5NpqvgbA8leUqRBSfuOYkB0H5TGcsg4o6YPlC3I3CCwaJkV9XvtA 4RbFQMdQ/x6w3g== -----END CERTIFICATE-----Generated at Fri Dec 19 08:16:19 2025 by rpki-client