This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft File: VdCGNM-l6BZpPCt54ui4ruuvWXY.mft (raw, json) Hash identifier: U1waCrrAUt/IR6TNlc+BmYkFM/Pi3gbHJEauML+FMzY= Subject key identifier: B1:36:9D:45:29:14:91:50:4C:C5:3B:28:00:09:C3:2E:95:0B:DC:32 Authority key identifier: 55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76 Certificate issuer: /CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976 Certificate serial: 019B4437B4FB2B1D1E9F8A76875F4979B502 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft Manifest number: 06EC Signing time: Mon 22 Dec 2025 04:01:00 +0000 Manifest this update: Mon 22 Dec 2025 04:01:00 +0000 Manifest next update: Tue 23 Dec 2025 04:01:00 +0000 Files and hashes: 1: VdCGNM-l6BZpPCt54ui4ruuvWXY.crl (hash: 89KGD+OosWqWiDIPXC8E1flvYc9+KNtgWGjSBQlEdXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:b4:fb:2b:1d:1e:9f:8a:76:87:5f:49:79:b5:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976 Validity Not Before: Dec 22 04:01:00 2025 GMT Not After : Dec 23 04:01:00 2025 GMT Subject: CN=b1369d45291491504cc53b280009c32e950bdc32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:29:58:0d:ae:b4:a3:b8:24:c0:67:a8:b7:10: 91:72:24:1d:d2:ce:92:67:f6:eb:96:e1:06:bb:62: 0f:3d:df:c2:e5:8c:f3:4d:cc:5c:d8:fb:40:4c:08: b0:47:48:47:d1:77:19:e8:76:38:b5:eb:f4:6b:f2: 78:f5:2f:f1:46:93:97:cf:b6:8e:f9:87:4c:ff:a1: ba:c6:e3:f2:eb:ae:95:3a:ca:bf:c9:d9:46:20:d6: 34:e8:53:1c:d1:d0:46:6d:00:53:db:3f:b3:40:9f: 4a:5e:71:43:55:3f:bf:f5:2a:b6:08:d3:e2:ba:20: 7c:62:33:79:ed:fb:6a:7c:30:5a:b0:89:dc:3b:8f: 88:f1:a3:79:29:73:14:4b:fe:9f:06:54:52:1b:dc: 6e:04:ac:e4:19:2a:4c:25:7e:b2:2e:17:52:fc:ae: 1e:86:e7:dc:ee:b3:ee:04:e3:ab:e9:aa:bd:e7:1f: d9:c3:18:4b:89:08:b7:5f:43:60:7c:23:dc:cd:6f: 73:32:ef:47:40:0a:5d:e1:26:60:21:6c:92:f2:ff: 62:d3:65:7b:9b:33:87:00:ba:6e:10:63:7e:17:a9: ea:66:ae:d2:e5:62:5d:24:ef:9f:b1:83:cb:6d:42: b7:83:b2:c3:b7:a6:63:46:7f:16:7f:68:ab:cc:69: 3e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:36:9D:45:29:14:91:50:4C:C5:3B:28:00:09:C3:2E:95:0B:DC:32 X509v3 Authority Key Identifier: keyid:55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:b3:27:30:cc:43:29:85:24:0d:80:d8:41:90:aa:6b:88:44: ec:ef:f1:b9:2d:eb:69:4f:46:27:b9:2f:cd:ad:ad:5b:77:23: d8:61:6f:6e:66:28:c9:1c:be:1f:29:48:d3:b4:a8:0c:e3:44: 22:18:36:d0:21:63:13:01:74:70:b7:eb:f5:dc:bf:8a:ae:1b: b9:2c:37:ec:5f:e1:2c:52:98:24:ff:8e:14:93:f7:d5:cc:4c: a7:a6:e7:3d:03:5d:f5:9a:eb:f9:7b:f4:c6:2c:c3:b2:46:9f: 1a:b7:a0:50:d1:b9:71:d2:dd:82:9c:a1:39:34:fc:31:e0:64: 81:e6:f7:92:9e:0b:93:b9:2f:9a:9e:b2:40:dc:5a:15:7b:6e: c6:a2:66:a4:f9:6a:25:b5:45:66:e9:20:c2:2e:a0:a7:78:d3: 20:96:0c:e9:64:74:27:54:a2:a2:e9:d3:d6:3c:9b:4c:82:76: b8:9a:37:a1:d1:d1:b1:22:cd:f6:0d:7f:75:e2:1c:85:4a:bc: 64:7d:56:3c:2a:1a:fc:7c:6e:aa:af:e9:de:92:33:4f:ed:fd: 0e:fe:4b:98:92:1e:e0:52:a9:8b:a3:e0:88:b9:38:f3:d4:a1: ad:15:86:d8:f4:06:0e:97:16:6b:2e:0a:e5:a9:81:c1:67:1e: 82:b7:e2:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN7T7Kx0en4p2h19JebUCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZDA4NjM0Y2ZhNWU4MTY2OTNjMmI3OWUyZThiOGFlZWJh ZjU5NzYwHhcNMjUxMjIyMDQwMTAwWhcNMjUxMjIzMDQwMTAwWjAzMTEwLwYDVQQD EyhiMTM2OWQ0NTI5MTQ5MTUwNGNjNTNiMjgwMDA5YzMyZTk1MGJkYzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvilYDa60o7gkwGeotxCRciQd0s6S Z/brluEGu2IPPd/C5YzzTcxc2PtATAiwR0hH0XcZ6HY4tev0a/J49S/xRpOXz7aO +YdM/6G6xuPy666VOsq/ydlGINY06FMc0dBGbQBT2z+zQJ9KXnFDVT+/9Sq2CNPi uiB8YjN57ftqfDBasIncO4+I8aN5KXMUS/6fBlRSG9xuBKzkGSpMJX6yLhdS/K4e hufc7rPuBOOr6aq95x/ZwxhLiQi3X0NgfCPczW9zMu9HQApd4SZgIWyS8v9i02V7 mzOHALpuEGN+F6nqZq7S5WJdJO+fsYPLbUK3g7LDt6ZjRn8Wf2irzGk+FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLE2nUUpFJFQTMU7KAAJwy6VC9wyMB8GA1UdIwQY MBaAFFXQhjTPpegWaTwreeLouK7rr1l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmRDR05NLWw2QlpwUEN0NTR1aTRydXV2V1hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xZGE3M2YtMDgyZS00ZjE3LWI2YTEt MDU3NWQwYTQ2YmFhLzEvVmRDR05NLWw2QlpwUEN0NTR1aTRydXV2V1hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8xZGE3M2YtMDgyZS00ZjE3LWI2YTEtMDU3NWQwYTQ2YmFh LzEvVmRDR05NLWw2QlpwUEN0NTR1aTRydXV2V1hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7MnMMxD KYUkDYDYQZCqa4hE7O/xuS3raU9GJ7kvza2tW3cj2GFvbmYoyRy+HylI07SoDONE Ihg20CFjEwF0cLfr9dy/iq4buSw37F/hLFKYJP+OFJP31cxMp6bnPQNd9Zrr+Xv0 xizDskafGregUNG5cdLdgpyhOTT8MeBkgeb3kp4Lk7kvmp6yQNxaFXtuxqJmpPlq JbVFZukgwi6gp3jTIJYM6WR0J1SiounT1jybTIJ2uJo3odHRsSLN9g1/deIchUq8 ZH1WPCoa/Hxuqq/p3pIzT+39Dv5LmJIe4FKpi6PgiLk489ShrRWG2PQGDpcWay4K 5amBwWcegrfiDw== -----END CERTIFICATE-----Generated at Mon Dec 22 12:12:49 2025 by rpki-client