This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft File: o-VcYHJU0eKwURqFbnADn_r0MDI.mft (raw, json) Hash identifier: zgL/2pJ2Xdz00JUMBg0ZaQ/7alrC1uunVY8qqKeMC5o= Subject key identifier: D0:5C:8C:0E:48:C7:CC:0F:A8:DA:DB:C1:9F:D0:F5:9A:77:42:29:35 Authority key identifier: A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32 Certificate issuer: /CN=a3e55c607254d1e2b0511a856e70039ffaf43032 Certificate serial: 019B5F42196A228B20DFDE16554A6B02802F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft Manifest number: 1314 Signing time: Sat 27 Dec 2025 10:02:05 +0000 Manifest this update: Sat 27 Dec 2025 10:02:05 +0000 Manifest next update: Sun 28 Dec 2025 10:02:05 +0000 Files and hashes: 1: o-VcYHJU0eKwURqFbnADn_r0MDI.crl (hash: lDCQ0kYm90gDblkbrWP9/BiT4j8gfWguleCglGGEo1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:42:19:6a:22:8b:20:df:de:16:55:4a:6b:02:80:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e55c607254d1e2b0511a856e70039ffaf43032 Validity Not Before: Dec 27 10:02:05 2025 GMT Not After : Dec 28 10:02:05 2025 GMT Subject: CN=d05c8c0e48c7cc0fa8dadbc19fd0f59a77422935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:72:b4:a2:33:b7:ec:ac:3b:48:f5:d7:61:7f: ad:5a:d9:fd:b8:09:02:8b:ec:7b:df:74:6f:e9:38: 7c:4a:c9:5a:52:1e:f4:be:1d:3d:12:2d:af:66:80: 2f:10:0b:02:4c:6b:ee:98:65:ad:5a:f6:10:b0:4b: a2:eb:d5:95:d4:82:cf:8b:57:ca:7a:dc:d6:6f:29: 28:3a:5d:0b:35:fe:d7:a2:8a:ea:1c:b9:9e:5d:44: 96:71:e8:23:8f:dd:69:ef:b8:2c:82:a1:ff:ea:f7: 4a:0b:ef:7b:45:c6:3c:fc:34:9f:ea:d6:de:49:d1: 63:95:41:82:ec:3e:d7:a4:c2:b8:e0:25:d2:46:76: 7c:b1:4d:d2:ac:5e:63:dd:39:5f:ad:e9:cd:d9:a5: f4:1e:75:7e:31:54:71:71:e8:0b:23:eb:b9:38:64: 86:db:cc:52:6c:b5:84:6f:ef:68:57:d7:86:8d:9f: 6c:0d:5d:a4:af:e5:fe:76:3c:c4:76:7a:04:0d:1d: fe:1c:71:2c:51:ec:6c:e8:67:16:69:8d:36:e0:37: 57:0e:d0:f4:68:fb:ba:ac:d8:eb:45:06:8a:14:06: 93:7d:2e:87:1d:a9:9c:47:4e:41:48:78:15:68:64: eb:49:c5:46:c4:6d:44:8b:15:17:1e:69:4d:d3:df: 26:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5C:8C:0E:48:C7:CC:0F:A8:DA:DB:C1:9F:D0:F5:9A:77:42:29:35 X509v3 Authority Key Identifier: keyid:A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c7:bd:8b:51:eb:34:f6:79:96:a9:8f:5d:8a:e8:3b:18:01: c8:e1:00:6b:fe:92:82:c8:ec:98:c6:9c:0b:58:c0:17:00:7a: e0:7a:62:df:71:63:20:77:3f:e5:19:dc:7c:e3:a3:b8:57:7b: 68:24:72:76:a3:3b:2c:8b:92:e7:56:8f:aa:92:07:37:80:cc: 86:5d:20:a4:12:99:d0:5d:e0:fe:d9:9b:17:9c:29:9a:41:3a: 4f:5b:64:40:11:cb:7e:ef:68:28:2f:fc:b9:b1:b6:2f:d4:9e: 5a:4c:0e:1f:f0:f6:1a:01:ec:94:cd:45:0f:0e:72:76:61:eb: 5a:94:e7:e9:26:14:ee:c5:f8:3e:20:5a:04:3e:84:f8:21:21: 71:9d:3f:01:4b:29:4f:e3:b3:29:a8:15:e2:59:e8:18:17:0a: 6c:77:20:76:f5:8d:9b:19:d0:b5:1b:42:d9:09:b0:2d:9b:43: f5:73:61:8c:ef:02:41:68:2d:25:6d:c4:88:9f:eb:9e:6f:06: c2:d5:4b:ca:5f:f1:00:24:b5:a3:3c:29:bc:c8:aa:b4:5c:bb: 4b:61:fb:9a:31:77:1b:3a:1e:2c:e1:62:90:47:33:f8:27:cf: 7e:9f:58:a1:dc:59:09:aa:b0:8b:f5:6c:71:62:8c:7c:cb:30: ae:d8:49:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQhlqIosg394WVUprAoAvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZTU1YzYwNzI1NGQxZTJiMDUxMWE4NTZlNzAwMzlmZmFm NDMwMzIwHhcNMjUxMjI3MTAwMjA1WhcNMjUxMjI4MTAwMjA1WjAzMTEwLwYDVQQD EyhkMDVjOGMwZTQ4YzdjYzBmYThkYWRiYzE5ZmQwZjU5YTc3NDIyOTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHK0ojO37Kw7SPXXYX+tWtn9uAkC i+x733Rv6Th8SslaUh70vh09Ei2vZoAvEAsCTGvumGWtWvYQsEui69WV1ILPi1fK etzWbykoOl0LNf7XoorqHLmeXUSWcegjj91p77gsgqH/6vdKC+97RcY8/DSf6tbe SdFjlUGC7D7XpMK44CXSRnZ8sU3SrF5j3TlfrenN2aX0HnV+MVRxcegLI+u5OGSG 28xSbLWEb+9oV9eGjZ9sDV2kr+X+djzEdnoEDR3+HHEsUexs6GcWaY024DdXDtD0 aPu6rNjrRQaKFAaTfS6HHamcR05BSHgVaGTrScVGxG1EixUXHmlN098m1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBcjA5Ix8wPqNrbwZ/Q9Zp3Qik1MB8GA1UdIwQY MBaAFKPlXGByVNHisFEahW5wA5/69DAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvby1WY1lISlUwZUt3VVJxRmJuQURuX3IwTURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yMDZhZmYtNDU5ZS00YWJiLTgxOWEt MmQzNjFlNGYzNDVjLzEvby1WY1lISlUwZUt3VVJxRmJuQURuX3IwTURJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8yMDZhZmYtNDU5ZS00YWJiLTgxOWEtMmQzNjFlNGYzNDVj LzEvby1WY1lISlUwZUt3VVJxRmJuQURuX3IwTURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8e9i1Hr NPZ5lqmPXYroOxgByOEAa/6SgsjsmMacC1jAFwB64Hpi33FjIHc/5RncfOOjuFd7 aCRydqM7LIuS51aPqpIHN4DMhl0gpBKZ0F3g/tmbF5wpmkE6T1tkQBHLfu9oKC/8 ubG2L9SeWkwOH/D2GgHslM1FDw5ydmHrWpTn6SYU7sX4PiBaBD6E+CEhcZ0/AUsp T+OzKagV4lnoGBcKbHcgdvWNmxnQtRtC2QmwLZtD9XNhjO8CQWgtJW3EiJ/rnm8G wtVLyl/xACS1ozwpvMiqtFy7S2H7mjF3GzoeLOFikEcz+CfPfp9YodxZCaqwi/Vs cWKMfMswrthJXQ== -----END CERTIFICATE-----Generated at Sat Dec 27 17:49:46 2025 by rpki-client