This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft File: vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft (raw, json) Hash identifier: Vy3/wlFZMLsan8bAVQsyI9ofampjZmBeqJVVUlLYIN0= Subject key identifier: A7:0C:57:8F:61:A2:4A:FA:E2:1B:F7:BD:48:E7:6E:DA:C4:3C:57:60 Authority key identifier: BE:18:68:20:5B:3D:13:73:55:AA:71:F2:46:72:95:CD:87:19:52:C8 Certificate issuer: /CN=be1868205b3d137355aa71f2467295cd871952c8 Certificate serial: 019B33B24A8767E60176834E9086CF028112 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft Manifest number: 0D84 Signing time: Thu 18 Dec 2025 23:01:21 +0000 Manifest this update: Thu 18 Dec 2025 23:01:21 +0000 Manifest next update: Fri 19 Dec 2025 23:01:21 +0000 Files and hashes: 1: vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl (hash: oKCPmvBtDYMEr6JThRyva4N+6xX7Qicny5+wm12Y4pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:4a:87:67:e6:01:76:83:4e:90:86:cf:02:81:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be1868205b3d137355aa71f2467295cd871952c8 Validity Not Before: Dec 18 23:01:21 2025 GMT Not After : Dec 19 23:01:21 2025 GMT Subject: CN=a70c578f61a24afae21bf7bd48e76edac43c5760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a6:c2:0a:a1:60:d3:35:01:4f:26:22:92:83: 6f:8d:a0:47:1e:34:7c:09:96:ca:47:40:e5:47:35: 9f:3f:79:bf:24:1b:2b:15:8a:cf:ae:1f:82:58:02: 46:5f:ce:97:c7:92:b9:ef:97:e6:97:b1:14:ef:aa: 0c:29:58:af:99:80:04:b6:d6:72:12:17:a4:8e:28: ba:97:d5:03:de:b4:a3:0f:d1:75:73:28:70:7a:69: a5:ef:c3:68:6f:61:a5:e4:5f:75:fe:56:af:5b:a6: 2d:ab:49:51:83:f2:e6:16:32:0c:c9:01:d6:bb:96: ef:da:28:9a:40:af:29:12:8c:05:e2:9a:08:b5:08: b8:57:b8:59:c3:70:67:ec:71:c6:a7:1a:7a:6f:31: aa:6e:45:fa:01:af:82:25:46:b4:92:48:84:42:fd: b8:44:70:83:fe:eb:a9:ba:18:83:73:c6:6d:06:26: 8d:95:8c:ea:36:e6:a2:b4:c2:13:c9:e9:e6:f2:f0: bd:98:3c:2c:7d:25:c7:9d:f1:9e:29:24:27:6a:c5: a4:7b:e1:fe:65:79:31:3d:49:b2:8e:85:aa:5c:b4: 6f:0f:bf:1c:ca:e6:36:27:4e:56:69:dc:67:12:ec: ab:78:6c:9a:88:d2:20:ee:ed:63:c4:85:e5:aa:8c: ab:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0C:57:8F:61:A2:4A:FA:E2:1B:F7:BD:48:E7:6E:DA:C4:3C:57:60 X509v3 Authority Key Identifier: keyid:BE:18:68:20:5B:3D:13:73:55:AA:71:F2:46:72:95:CD:87:19:52:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:7f:e5:3e:7c:e1:1a:fb:46:41:17:e5:48:5f:74:3c:50:6f: 6d:ba:5b:a8:9e:d3:8b:43:64:ab:51:6a:4b:7a:15:2d:a9:e6: 29:58:06:9b:21:f1:64:16:b6:a6:37:c9:e7:76:12:5c:17:6f: 20:47:bf:e9:33:e3:51:1f:33:a1:47:50:41:e2:d2:e5:d6:86: 88:c9:7a:30:9c:4d:06:d5:25:be:e9:3f:c4:04:f7:c5:f4:66: 35:d7:65:17:f1:bd:b9:79:97:0c:45:39:ca:07:de:33:ce:54: 9f:ff:40:0a:41:9f:cb:af:4f:70:d0:4a:c2:ef:86:e0:15:91: 51:86:52:7f:c1:3f:ed:27:17:ba:92:4b:ab:c9:fb:91:cc:c7: 7b:77:c7:af:e6:cb:87:7f:a8:f5:78:ba:ad:3b:52:b0:d7:72: ac:76:45:98:21:92:79:49:f4:36:11:c2:d1:75:44:6c:e6:d3: 21:1f:48:8e:95:24:11:e5:3d:25:67:d2:e0:0e:d1:3f:89:d4: 96:a6:f5:77:83:ce:ce:67:d4:d4:3a:33:51:8f:ab:1b:25:f4: 9d:f9:68:5e:2f:c7:f9:9c:d3:3a:c7:fe:3f:e2:38:0b:f6:98: 41:9e:98:f1:e4:bc:38:ab:23:b1:07:e7:e1:ea:87:75:ef:b1: 4e:d1:38:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszskqHZ+YBdoNOkIbPAoESMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMTg2ODIwNWIzZDEzNzM1NWFhNzFmMjQ2NzI5NWNkODcx OTUyYzgwHhcNMjUxMjE4MjMwMTIxWhcNMjUxMjE5MjMwMTIxWjAzMTEwLwYDVQQD EyhhNzBjNTc4ZjYxYTI0YWZhZTIxYmY3YmQ0OGU3NmVkYWM0M2M1NzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiabCCqFg0zUBTyYikoNvjaBHHjR8 CZbKR0DlRzWfP3m/JBsrFYrPrh+CWAJGX86Xx5K575fml7EU76oMKVivmYAEttZy Ehekjii6l9UD3rSjD9F1cyhwemml78Nob2Gl5F91/lavW6Ytq0lRg/LmFjIMyQHW u5bv2iiaQK8pEowF4poItQi4V7hZw3Bn7HHGpxp6bzGqbkX6Aa+CJUa0kkiEQv24 RHCD/uupuhiDc8ZtBiaNlYzqNuaitMITyenm8vC9mDwsfSXHnfGeKSQnasWke+H+ ZXkxPUmyjoWqXLRvD78cyuY2J05WadxnEuyreGyaiNIg7u1jxIXlqoyr/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcMV49hokr64hv3vUjnbtrEPFdgMB8GA1UdIwQY MBaAFL4YaCBbPRNzVapx8kZylc2HGVLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmhob0lGczlFM05WcW5IeVJuS1Z6WWNaVXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9kOTgwZDEtOTJjOC00NGI0LWE1YWIt NzU3Zjk5OTI3NTcxLzEvdmhob0lGczlFM05WcW5IeVJuS1Z6WWNaVXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9kOTgwZDEtOTJjOC00NGI0LWE1YWItNzU3Zjk5OTI3NTcx LzEvdmhob0lGczlFM05WcW5IeVJuS1Z6WWNaVXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIX/lPnzh GvtGQRflSF90PFBvbbpbqJ7Ti0Nkq1FqS3oVLanmKVgGmyHxZBa2pjfJ53YSXBdv IEe/6TPjUR8zoUdQQeLS5daGiMl6MJxNBtUlvuk/xAT3xfRmNddlF/G9uXmXDEU5 ygfeM85Un/9ACkGfy69PcNBKwu+G4BWRUYZSf8E/7ScXupJLq8n7kczHe3fHr+bL h3+o9Xi6rTtSsNdyrHZFmCGSeUn0NhHC0XVEbObTIR9IjpUkEeU9JWfS4A7RP4nU lqb1d4POzmfU1DozUY+rGyX0nfloXi/H+ZzTOsf+P+I4C/aYQZ6Y8eS8OKsjsQfn 4eqHde+xTtE4NQ== -----END CERTIFICATE-----Generated at Fri Dec 19 03:09:26 2025 by rpki-client