This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft File: Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft (raw, json) Hash identifier: PT6szRc6bvp2SrCeAQOG97cRGB758lN/QcS6aXymkec= Subject key identifier: B4:A9:FA:C1:7A:D7:86:03:93:F8:C9:0A:A0:C9:05:5C:7E:3E:38:AA Authority key identifier: 55:BD:49:59:1C:82:0E:AE:C3:9B:CB:41:C8:4D:17:08:E1:30:44:7F Certificate issuer: /CN=55bd49591c820eaec39bcb41c84d1708e130447f Certificate serial: 019B2F671B217FA4C48DE3F8EB465271A57F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft Manifest number: 07D5 Signing time: Thu 18 Dec 2025 03:00:44 +0000 Manifest this update: Thu 18 Dec 2025 03:00:44 +0000 Manifest next update: Fri 19 Dec 2025 03:00:44 +0000 Files and hashes: 1: Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl (hash: 5p/9cJx5du62EazYWXYQZKf1ZZCxy/jPnkGx2KiTqfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:1b:21:7f:a4:c4:8d:e3:f8:eb:46:52:71:a5:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55bd49591c820eaec39bcb41c84d1708e130447f Validity Not Before: Dec 18 03:00:44 2025 GMT Not After : Dec 19 03:00:44 2025 GMT Subject: CN=b4a9fac17ad7860393f8c90aa0c9055c7e3e38aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d1:da:6c:2e:f7:da:ea:28:a9:d5:fa:f0:38: 9b:3f:a8:d2:7b:7e:c5:d2:73:c1:42:c9:65:e7:a8: b8:2f:fe:42:92:b7:1e:fb:28:91:19:c7:40:3c:1e: 14:61:d0:3a:c9:56:c7:b2:fb:b8:3b:af:bc:ef:01: 5e:3a:43:5d:ee:f9:97:41:ed:4c:e2:f7:c8:8e:4d: d2:a9:f2:2d:4f:6d:6a:e6:db:87:4f:cc:0e:ee:cb: c9:d6:ec:a8:89:2a:94:64:fa:bd:e6:77:45:ac:4a: 82:69:74:0d:e8:a5:95:60:95:40:e9:a8:6b:fe:f3: 53:cb:7d:7e:89:d5:8a:a8:86:2c:54:2c:01:cb:2e: 41:1c:46:0c:80:fe:09:56:39:b7:ff:a8:df:86:79: 57:33:10:c0:bf:d9:d0:bc:cf:76:a0:04:8a:aa:55: cb:64:1b:b4:45:5d:9a:9d:9c:db:98:8d:6a:37:85: 00:05:47:81:de:b7:d8:d0:0e:f5:f0:5f:c6:54:31: 34:3e:b0:78:df:d9:35:3f:f8:9f:08:01:4c:91:f6: 04:4e:74:23:1a:ce:f9:2a:e6:75:8e:36:1d:57:21: e4:6c:14:50:7d:cf:44:a4:64:7f:4b:37:83:ab:21: 89:b9:65:74:b6:dd:f4:79:7e:b8:5f:8e:df:5f:eb: 0c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A9:FA:C1:7A:D7:86:03:93:F8:C9:0A:A0:C9:05:5C:7E:3E:38:AA X509v3 Authority Key Identifier: keyid:55:BD:49:59:1C:82:0E:AE:C3:9B:CB:41:C8:4D:17:08:E1:30:44:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:b4:23:53:e2:59:71:85:02:a6:1b:a3:9f:1a:99:c5:4e:cd: 58:51:cb:5c:c2:f6:d0:bf:55:0f:07:a4:63:96:4b:52:36:71: d7:92:26:55:ac:a0:84:e6:25:53:ca:ba:66:e9:bb:bf:8a:b2: b6:c5:47:b4:01:9b:fa:68:f5:ac:d9:1c:29:77:c9:2f:11:84: 34:fa:27:18:f9:70:5b:0e:e6:7c:d6:35:ad:70:c2:e1:17:3a: ca:7f:03:13:41:39:22:04:d0:12:c4:77:c1:0f:28:ba:a9:08: 66:62:31:46:ce:ec:f4:25:5c:e6:00:90:97:69:60:9f:70:96: 7c:0e:ef:9c:2d:d5:cb:f5:fa:fc:b8:91:a1:c6:e0:95:69:7d: 55:0b:32:ed:2c:5a:a0:37:58:eb:54:16:bb:68:b3:68:70:c9: af:87:63:55:42:3c:08:42:90:f6:db:b0:dd:54:4e:44:fb:34: 7e:ac:73:38:d8:e1:d9:2f:38:d7:5b:a3:60:d5:76:23:ec:ae: 03:2d:11:c0:5c:a3:ed:ab:73:0d:43:b3:e0:00:96:3e:09:4f: 61:d2:06:88:f5:94:99:bd:c2:6d:4a:b7:33:d0:ec:46:a5:1e: d9:db:6d:e0:37:10:99:b4:e0:3f:1b:42:75:c2:fb:04:26:31: 58:24:f1:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZxshf6TEjeP460ZScaV/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmQ0OTU5MWM4MjBlYWVjMzliY2I0MWM4NGQxNzA4ZTEz MDQ0N2YwHhcNMjUxMjE4MDMwMDQ0WhcNMjUxMjE5MDMwMDQ0WjAzMTEwLwYDVQQD EyhiNGE5ZmFjMTdhZDc4NjAzOTNmOGM5MGFhMGM5MDU1YzdlM2UzOGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtHabC732uooqdX68DibP6jSe37F 0nPBQsll56i4L/5Ckrce+yiRGcdAPB4UYdA6yVbHsvu4O6+87wFeOkNd7vmXQe1M 4vfIjk3SqfItT21q5tuHT8wO7svJ1uyoiSqUZPq95ndFrEqCaXQN6KWVYJVA6ahr /vNTy31+idWKqIYsVCwByy5BHEYMgP4JVjm3/6jfhnlXMxDAv9nQvM92oASKqlXL ZBu0RV2anZzbmI1qN4UABUeB3rfY0A718F/GVDE0PrB439k1P/ifCAFMkfYETnQj Gs75KuZ1jjYdVyHkbBRQfc9EpGR/SzeDqyGJuWV0tt30eX64X47fX+sMnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSp+sF614YDk/jJCqDJBVx+PjiqMB8GA1UdIwQY MBaAFFW9SVkcgg6uw5vLQchNFwjhMER/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmIxSldSeUNEcTdEbTh0QnlFMFhDT0V3Ukg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mODc4MmQtZmQyYy00ZGYzLWEwZTYt M2YyN2ExOTY2NTc3LzEvVmIxSldSeUNEcTdEbTh0QnlFMFhDT0V3Ukg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mODc4MmQtZmQyYy00ZGYzLWEwZTYtM2YyN2ExOTY2NTc3 LzEvVmIxSldSeUNEcTdEbTh0QnlFMFhDT0V3Ukg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx7QjU+JZ cYUCphujnxqZxU7NWFHLXML20L9VDwekY5ZLUjZx15ImVayghOYlU8q6Zum7v4qy tsVHtAGb+mj1rNkcKXfJLxGENPonGPlwWw7mfNY1rXDC4Rc6yn8DE0E5IgTQEsR3 wQ8ouqkIZmIxRs7s9CVc5gCQl2lgn3CWfA7vnC3Vy/X6/LiRocbglWl9VQsy7Sxa oDdY61QWu2izaHDJr4djVUI8CEKQ9tuw3VRORPs0fqxzONjh2S8411ujYNV2I+yu Ay0RwFyj7atzDUOz4ACWPglPYdIGiPWUmb3CbUq3M9DsRqUe2dtt4DcQmbTgPxtC dcL7BCYxWCTxyg== -----END CERTIFICATE-----Generated at Thu Dec 18 08:02:28 2025 by rpki-client