This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft File: VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft (raw, json) Hash identifier: exD41LYoePAfR5/U+7xPPIz7oPwAFMqmBkYgGvDZj1w= Subject key identifier: 34:D4:DC:18:D7:CA:7B:14:CD:35:AE:6B:CC:FD:3B:A3:47:C1:8E:83 Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44 Certificate issuer: /CN=54158203da3a1e96318e85043411e7d4d03d4c44 Certificate serial: 019B3BD99F7318BED40DC8E02A4A5547D4FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft Manifest number: 02B8 Signing time: Sat 20 Dec 2025 13:01:16 +0000 Manifest this update: Sat 20 Dec 2025 13:01:16 +0000 Manifest next update: Sun 21 Dec 2025 13:01:16 +0000 Files and hashes: 1: VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl (hash: l/dNV+cntcxRSrzvKBw+gYmMwONsQN96Yu+z3gVkRQA=) 2: vP7OBBy6Rc-iXCzpNtqqwwaR6pA.roa (hash: MbpCA8/2M3yt7Y/21BLSADPFYL3YqJ9PW3u4Q8kGOqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:9f:73:18:be:d4:0d:c8:e0:2a:4a:55:47:d4:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44 Validity Not Before: Dec 20 13:01:16 2025 GMT Not After : Dec 21 13:01:16 2025 GMT Subject: CN=34d4dc18d7ca7b14cd35ae6bccfd3ba347c18e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a0:ab:97:59:9c:69:57:a3:a8:af:fa:44:51: a6:33:89:49:0f:70:dd:f1:eb:3c:03:e3:4b:ac:a2: a5:01:99:78:96:ec:c4:5f:be:79:d8:67:d9:b0:9f: 38:f7:b2:0c:58:5b:4d:27:23:3a:b4:48:7a:33:d3: 8a:d7:cc:f0:3b:a8:d8:20:a1:7a:ca:56:41:2b:f5: 06:68:1c:a6:64:69:4f:f9:d8:f2:47:d3:b8:f0:7d: 8a:0d:c5:58:b2:9e:dc:db:27:f0:e8:85:0f:91:1a: 2a:09:59:46:48:57:1d:19:d8:a1:cc:1c:fa:cf:16: 5f:69:e5:2f:c9:b5:53:ce:d6:b7:79:48:c5:d7:c2: 08:3c:f3:9e:0a:87:8a:96:6f:a9:5e:21:97:84:74: 4e:d8:e1:64:f6:13:c0:ab:6b:f5:62:91:3e:98:0b: 76:30:42:62:e4:5a:03:c8:15:a0:09:bc:aa:2b:87: d9:76:0f:13:5b:9a:1b:67:7a:36:53:ab:ac:4a:ea: fc:cd:da:1b:2d:9e:6a:f4:cb:6d:db:4d:2d:b9:a3: 7a:6a:b3:56:12:bb:08:de:8e:3c:00:52:6e:2e:f0: 2c:73:dd:93:f2:f1:1c:15:43:a5:68:b5:4d:7b:2a: d8:d5:a4:b1:3b:83:5e:75:cd:19:27:5a:b0:db:7e: 4f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D4:DC:18:D7:CA:7B:14:CD:35:AE:6B:CC:FD:3B:A3:47:C1:8E:83 X509v3 Authority Key Identifier: keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:5d:6a:6b:a1:88:61:ae:6e:35:9f:56:81:1d:a7:0c:eb:d1: cc:ea:81:6e:38:77:8b:ff:d9:53:c5:05:30:83:e8:73:ce:01: bf:b0:83:d0:4c:7b:6a:6b:65:57:f5:e1:c4:9f:f8:31:82:37: 7e:7f:13:29:85:00:32:df:4c:f5:d4:85:37:fa:c6:1a:48:68: b1:23:d9:6c:6e:ec:da:44:04:ef:27:37:e1:99:f8:6e:93:15: c8:ee:d1:9e:87:3c:d9:bd:f5:9a:ee:e4:7b:a9:02:e2:e9:1e: a8:f6:72:b1:f6:5e:23:ee:0c:07:6a:af:a3:8f:18:e0:7d:ae: 3f:40:ec:5c:57:13:16:47:8c:eb:e9:9a:d9:ba:44:45:98:12: ca:e2:b2:7f:a8:37:24:a0:56:f0:57:7f:9a:4f:0b:0c:c8:f3: 4b:fd:89:1e:2b:72:de:c9:e0:07:6f:39:28:ed:5a:17:81:28: b6:12:b4:83:40:07:87:39:52:af:bc:e4:8c:4a:52:0f:fa:a3: 53:c3:12:83:c1:0e:a7:b6:f2:fa:6d:be:82:74:d2:28:dc:44: d0:bc:d4:32:bf:6e:89:8b:4e:63:a1:ab:9d:83:a4:5e:ae:88: c9:9b:88:7f:0a:32:93:ca:ec:41:c4:fa:48:eb:2a:ac:32:59: 14:1b:f2:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Z9zGL7UDcjgKkpVR9T8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MTU4MjAzZGEzYTFlOTYzMThlODUwNDM0MTFlN2Q0ZDAz ZDRjNDQwHhcNMjUxMjIwMTMwMTE2WhcNMjUxMjIxMTMwMTE2WjAzMTEwLwYDVQQD EygzNGQ0ZGMxOGQ3Y2E3YjE0Y2QzNWFlNmJjY2ZkM2JhMzQ3YzE4ZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6Crl1mcaVejqK/6RFGmM4lJD3Dd 8es8A+NLrKKlAZl4luzEX7552GfZsJ8497IMWFtNJyM6tEh6M9OK18zwO6jYIKF6 ylZBK/UGaBymZGlP+djyR9O48H2KDcVYsp7c2yfw6IUPkRoqCVlGSFcdGdihzBz6 zxZfaeUvybVTzta3eUjF18IIPPOeCoeKlm+pXiGXhHRO2OFk9hPAq2v1YpE+mAt2 MEJi5FoDyBWgCbyqK4fZdg8TW5obZ3o2U6usSur8zdobLZ5q9Mtt200tuaN6arNW ErsI3o48AFJuLvAsc92T8vEcFUOlaLVNeyrY1aSxO4Nedc0ZJ1qw235P1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTU3BjXynsUzTWua8z9O6NHwY6DMB8GA1UdIwQY MBaAFFQVggPaOh6WMY6FBDQR59TQPUxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkJXQ0E5bzZIcFl4am9VRU5CSG4xTkE5VEVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS85MWZkYjMtMTNlMi00MmIyLWFjNzMt MWE1NWQxZTRjMjFjLzEvVkJXQ0E5bzZIcFl4am9VRU5CSG4xTkE5VEVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS85MWZkYjMtMTNlMi00MmIyLWFjNzMtMWE1NWQxZTRjMjFj LzEvVkJXQ0E5bzZIcFl4am9VRU5CSG4xTkE5VEVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATl1qa6GI Ya5uNZ9WgR2nDOvRzOqBbjh3i//ZU8UFMIPoc84Bv7CD0Ex7amtlV/XhxJ/4MYI3 fn8TKYUAMt9M9dSFN/rGGkhosSPZbG7s2kQE7yc34Zn4bpMVyO7Rnoc82b31mu7k e6kC4ukeqPZysfZeI+4MB2qvo48Y4H2uP0DsXFcTFkeM6+ma2bpERZgSyuKyf6g3 JKBW8Fd/mk8LDMjzS/2JHity3sngB285KO1aF4EothK0g0AHhzlSr7zkjEpSD/qj U8MSg8EOp7by+m2+gnTSKNxE0LzUMr9uiYtOY6GrnYOkXq6IyZuIfwoyk8rsQcT6 SOsqrDJZFBvygg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:03:40 2025 by rpki-client