This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft File: VBfj2w0cLPwitL6HTiWY3QmSlO0.mft (raw, json) Hash identifier: bEGOcsN2zOEyK66R7CfHAfYtBVHI5k3Btr52hMhU3qc= Subject key identifier: E5:A5:F7:20:03:EE:6D:2B:44:4C:40:0B:2D:5E:CB:FE:12:41:56:8F Authority key identifier: 54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED Certificate issuer: /CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed Certificate serial: 019B62791AEA8D778EB06912E2237FE1FAE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft Manifest number: 179C Signing time: Sun 28 Dec 2025 01:01:02 +0000 Manifest this update: Sun 28 Dec 2025 01:01:02 +0000 Manifest next update: Mon 29 Dec 2025 01:01:02 +0000 Files and hashes: 1: VBfj2w0cLPwitL6HTiWY3QmSlO0.crl (hash: 4GGXgCXhXJS9+ErEe51xNYN18ujzbVbOIwrNz0z5SS0=) 2: Xon3ZRUmiHyafmwSbpFGnaeltWw.roa (hash: M4Nh/8K2vjAav0TbJZxKf47ENVLTCLivupIBPIaomOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:79:1a:ea:8d:77:8e:b0:69:12:e2:23:7f:e1:fa:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed Validity Not Before: Dec 28 01:01:02 2025 GMT Not After : Dec 29 01:01:02 2025 GMT Subject: CN=e5a5f72003ee6d2b444c400b2d5ecbfe1241568f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8e:25:ac:48:a3:db:81:d5:7c:ce:74:a9:e0: bf:b3:63:27:48:62:53:e2:90:a5:10:7f:7b:6c:e9: 4f:ea:69:44:b7:f0:36:99:95:8e:4c:8c:1b:16:57: ee:3c:a5:25:14:75:c6:03:17:59:74:dd:2e:64:ee: db:c7:c3:9d:e5:e5:71:05:62:a7:d0:b5:5c:93:aa: 07:5c:49:19:a8:55:4c:3e:70:83:c6:e7:b7:dc:81: fe:46:4b:47:c6:eb:53:77:a8:93:e5:25:c3:c3:e3: cb:ed:11:fd:43:6b:60:38:e0:d9:fe:ae:fc:02:4a: c7:c6:6f:82:84:27:cd:a5:90:50:eb:73:89:8e:26: 3a:d9:08:4c:0e:26:9b:cc:bc:1c:c6:38:20:51:39: 22:dd:dd:37:d6:4c:74:82:6c:7a:04:37:dd:b1:cd: 27:df:6b:c0:67:89:e1:14:56:f2:53:07:19:26:3e: 96:f2:66:42:8d:46:e7:3c:03:bd:af:dd:ad:f1:a7: da:4c:d3:80:74:55:2a:04:ae:78:df:c5:64:9b:1c: 81:62:58:e4:5f:8f:46:ef:aa:b9:70:e8:ba:5e:89: e7:ee:2b:96:c4:55:52:b9:ce:fc:9f:91:b4:eb:42: 55:db:cc:bd:fa:b4:43:9a:07:09:65:61:77:f7:38: 99:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A5:F7:20:03:EE:6D:2B:44:4C:40:0B:2D:5E:CB:FE:12:41:56:8F X509v3 Authority Key Identifier: keyid:54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c5:78:93:51:e3:fe:b3:04:32:b1:10:16:aa:5b:df:c3:76: 39:a4:6f:bc:8c:04:66:b4:5a:47:36:bd:5d:6b:43:46:ee:f1: b3:f7:e7:da:ad:57:51:32:ec:56:6e:1b:24:0e:61:de:ae:07: 1c:fe:04:be:fd:d9:40:bb:7b:19:3b:ad:f4:8c:71:e4:38:1f: e6:d7:cd:7b:1c:71:cd:be:2d:6b:4a:71:2d:9b:f5:a3:ab:bd: 61:c5:1f:d6:79:1a:9b:9f:df:bf:8e:9a:24:18:9d:a5:64:91: 11:12:90:8f:e9:b7:e6:a1:fa:d5:ff:50:1a:ec:de:54:3b:8e: 32:6a:43:e8:08:b0:a7:c6:03:0e:d7:c1:27:76:8c:1e:fa:dc: ba:eb:e1:4b:06:21:4c:78:48:66:be:3e:a9:d5:dc:fc:e3:d7: 35:cb:80:32:61:70:9d:61:09:18:6b:b0:a5:02:83:9a:c6:97: 4b:10:04:4a:8f:c4:48:b3:16:40:74:18:78:3a:e0:14:85:af: 1e:c2:6a:21:df:fb:46:97:2b:29:04:74:ea:2e:f8:f0:de:07: 05:71:6b:f9:c8:e7:0b:6c:3c:71:b2:fb:52:b3:bc:d9:b5:4e: 60:75:5b:d7:1c:8c:e7:b8:48:cb:78:21:a6:0f:fb:de:b2:69: 70:be:d5:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtieRrqjXeOsGkS4iN/4frpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MTdlM2RiMGQxYzJjZmMyMmI0YmU4NzRlMjU5OGRkMDk5 Mjk0ZWQwHhcNMjUxMjI4MDEwMTAyWhcNMjUxMjI5MDEwMTAyWjAzMTEwLwYDVQQD EyhlNWE1ZjcyMDAzZWU2ZDJiNDQ0YzQwMGIyZDVlY2JmZTEyNDE1NjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI4lrEij24HVfM50qeC/s2MnSGJT 4pClEH97bOlP6mlEt/A2mZWOTIwbFlfuPKUlFHXGAxdZdN0uZO7bx8Od5eVxBWKn 0LVck6oHXEkZqFVMPnCDxue33IH+RktHxutTd6iT5SXDw+PL7RH9Q2tgOODZ/q78 AkrHxm+ChCfNpZBQ63OJjiY62QhMDiabzLwcxjggUTki3d031kx0gmx6BDfdsc0n 32vAZ4nhFFbyUwcZJj6W8mZCjUbnPAO9r92t8afaTNOAdFUqBK5438VkmxyBYljk X49G76q5cOi6Xonn7iuWxFVSuc78n5G060JV28y9+rRDmgcJZWF39ziZAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWl9yAD7m0rRExACy1ey/4SQVaPMB8GA1UdIwQY MBaAFFQX49sNHCz8IrS+h04lmN0JkpTtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkJmajJ3MGNMUHdpdEw2SFRpV1kzUW1TbE8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC81MDI0OGQtODI1Yy00NWUxLWI1ZmYt YjI5YTJjYmMzNTgwLzEvVkJmajJ3MGNMUHdpdEw2SFRpV1kzUW1TbE8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC81MDI0OGQtODI1Yy00NWUxLWI1ZmYtYjI5YTJjYmMzNTgw LzEvVkJmajJ3MGNMUHdpdEw2SFRpV1kzUW1TbE8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8V4k1Hj /rMEMrEQFqpb38N2OaRvvIwEZrRaRza9XWtDRu7xs/fn2q1XUTLsVm4bJA5h3q4H HP4Evv3ZQLt7GTut9Ixx5Dgf5tfNexxxzb4ta0pxLZv1o6u9YcUf1nkam5/fv46a JBidpWSRERKQj+m35qH61f9QGuzeVDuOMmpD6Aiwp8YDDtfBJ3aMHvrcuuvhSwYh THhIZr4+qdXc/OPXNcuAMmFwnWEJGGuwpQKDmsaXSxAESo/ESLMWQHQYeDrgFIWv HsJqId/7RpcrKQR06i748N4HBXFr+cjnC2w8cbL7UrO82bVOYHVb1xyM57hIy3gh pg/73rJpcL7V4A== -----END CERTIFICATE-----Generated at Sun Dec 28 04:58:46 2025 by rpki-client