This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft File: Vq94S7xmnB23aovR0emTk9jyF2s.mft (raw, json) Hash identifier: zIrN7HWJ8syR47JomEjVPmOf2lbUHeIqUK6RkBREhs4= Subject key identifier: 02:7C:63:21:B4:4B:11:81:45:28:5C:86:02:0B:9C:43:BF:88:90:2D Authority key identifier: 56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B Certificate issuer: /CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b Certificate serial: 019B1F880240C0993D2E1AC33F3E128791D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft Manifest number: 113E Signing time: Mon 15 Dec 2025 01:02:45 +0000 Manifest this update: Mon 15 Dec 2025 01:02:45 +0000 Manifest next update: Tue 16 Dec 2025 01:02:45 +0000 Files and hashes: 1: Vq94S7xmnB23aovR0emTk9jyF2s.crl (hash: MoIjtXD609gD0eAob3pmhZOOztbEtGI8TsM1y/oIZwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:88:02:40:c0:99:3d:2e:1a:c3:3f:3e:12:87:91:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b Validity Not Before: Dec 15 01:02:45 2025 GMT Not After : Dec 16 01:02:45 2025 GMT Subject: CN=027c6321b44b118145285c86020b9c43bf88902d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a2:3a:f9:43:fd:fc:37:c0:bc:aa:99:bc:de: bf:3a:8c:43:4c:ad:02:e0:34:62:77:32:07:8d:5c: 77:1a:60:a8:bc:41:c5:63:35:52:5b:76:63:02:6f: ef:25:8d:58:af:81:ab:4a:aa:01:18:bb:52:23:20: a0:83:b2:e6:c8:e1:ec:b5:6e:8f:9f:bd:66:2d:e0: 2e:61:f6:95:5f:02:a2:65:f9:45:19:28:0c:e2:5a: 2d:8e:fd:09:44:68:c0:4e:00:40:8b:ca:5d:3e:9c: 1e:93:ce:44:22:52:b9:90:33:c3:91:05:67:fe:ca: 52:df:e5:c0:56:98:3b:cc:77:81:78:ff:c9:e4:33: b0:f6:d9:c8:ec:c1:c9:fa:42:e6:72:1d:01:bb:0d: d9:98:07:47:b4:d7:54:18:12:60:b2:cc:df:fb:09: 5d:cf:67:54:8d:4f:06:0d:94:bb:44:84:20:7a:22: 29:cf:9c:3a:46:e5:1b:91:53:02:60:a9:0a:61:ae: f5:e6:f7:c9:d9:a7:2b:c3:ef:50:a7:8d:86:ed:7f: d0:69:18:3c:7a:67:ce:fd:a1:b3:95:a8:42:46:86: 92:aa:14:99:73:4e:1e:81:f1:73:55:97:f7:fa:d6: c4:0f:b7:17:37:5d:9d:e9:9a:5e:35:4c:1c:9d:39: 53:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7C:63:21:B4:4B:11:81:45:28:5C:86:02:0B:9C:43:BF:88:90:2D X509v3 Authority Key Identifier: keyid:56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:cd:a0:cc:9b:50:13:78:90:ff:83:62:77:9b:06:2d:05:91: 61:e0:19:80:46:c9:0d:37:89:d5:f9:a5:b2:e9:fc:08:84:5a: af:b5:0e:ee:12:f9:9e:ca:4a:ac:d4:aa:5e:52:80:7b:b1:70: ad:8b:1c:f6:4e:e0:ed:04:40:b4:13:9c:95:65:fc:bb:6d:4a: 73:e6:d1:92:20:5f:5f:13:3c:95:ed:42:05:e3:6f:90:ea:50: 0f:cb:4a:21:03:af:a7:20:85:2b:1e:1a:f2:00:d3:69:b7:20: 0a:24:5c:2b:59:a3:8f:d4:4f:d4:ab:20:d1:d9:e4:90:43:7e: 3a:52:4d:08:f0:ff:eb:77:2d:7e:35:5e:5e:5d:c2:b0:cc:cd: b2:9e:34:2b:d1:3f:80:2b:14:11:66:cf:97:02:6d:b6:3e:09: a2:92:5d:8a:36:ed:8b:d6:83:be:fe:56:70:e7:19:28:b5:d9: d8:bc:23:40:01:77:ca:18:9e:1e:84:78:81:72:c5:07:ff:26: 30:bf:ca:18:a4:3d:46:d7:fe:c6:c4:e1:14:cb:43:6d:28:7e: d4:de:eb:52:5b:0a:08:11:8d:83:c1:de:e7:e1:b4:b3:d0:5c: ec:89:53:97:1b:fe:b4:a4:7d:5e:49:b3:fc:b6:6e:40:f4:2f: c8:0a:1d:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfiAJAwJk9LhrDPz4Sh5HWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YWY3ODRiYmM2NjljMWRiNzZhOGJkMWQxZTk5MzkzZDhm MjE3NmIwHhcNMjUxMjE1MDEwMjQ1WhcNMjUxMjE2MDEwMjQ1WjAzMTEwLwYDVQQD EygwMjdjNjMyMWI0NGIxMTgxNDUyODVjODYwMjBiOWM0M2JmODg5MDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaI6+UP9/DfAvKqZvN6/OoxDTK0C 4DRidzIHjVx3GmCovEHFYzVSW3ZjAm/vJY1Yr4GrSqoBGLtSIyCgg7LmyOHstW6P n71mLeAuYfaVXwKiZflFGSgM4lotjv0JRGjATgBAi8pdPpwek85EIlK5kDPDkQVn /spS3+XAVpg7zHeBeP/J5DOw9tnI7MHJ+kLmch0Buw3ZmAdHtNdUGBJgsszf+wld z2dUjU8GDZS7RIQgeiIpz5w6RuUbkVMCYKkKYa715vfJ2acrw+9Qp42G7X/QaRg8 emfO/aGzlahCRoaSqhSZc04egfFzVZf3+tbED7cXN12d6ZpeNUwcnTlTaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJ8YyG0SxGBRShchgILnEO/iJAtMB8GA1UdIwQY MBaAFFaveEu8Zpwdt2qL0dHpk5PY8hdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnE5NFM3eG1uQjIzYW92UjBlbVRrOWp5RjJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kZDE3ZTktMTkzNS00YThlLThkZTAt NTVlOThlMjVmY2FkLzEvVnE5NFM3eG1uQjIzYW92UjBlbVRrOWp5RjJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9kZDE3ZTktMTkzNS00YThlLThkZTAtNTVlOThlMjVmY2Fk LzEvVnE5NFM3eG1uQjIzYW92UjBlbVRrOWp5RjJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWc2gzJtQ E3iQ/4Nid5sGLQWRYeAZgEbJDTeJ1fmlsun8CIRar7UO7hL5nspKrNSqXlKAe7Fw rYsc9k7g7QRAtBOclWX8u21Kc+bRkiBfXxM8le1CBeNvkOpQD8tKIQOvpyCFKx4a 8gDTabcgCiRcK1mjj9RP1Ksg0dnkkEN+OlJNCPD/63ctfjVeXl3CsMzNsp40K9E/ gCsUEWbPlwJttj4JopJdijbti9aDvv5WcOcZKLXZ2LwjQAF3yhieHoR4gXLFB/8m ML/KGKQ9Rtf+xsThFMtDbSh+1N7rUlsKCBGNg8He5+G0s9Bc7IlTlxv+tKR9Xkmz /LZuQPQvyAod5g== -----END CERTIFICATE-----Generated at Mon Dec 15 04:59:22 2025 by rpki-client