This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft File: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft (raw, json) Hash identifier: cn88iX2selsgH3ZHdAaDydejPOvTevJcw1gB3FWzGoM= Subject key identifier: 1C:C1:3F:B3:D2:84:42:F2:60:49:6E:E5:4E:17:5C:79:C0:98:D4:F9 Authority key identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D Certificate issuer: /CN=d959676fe138d4eb2aae19bb6731fee6292d793d Certificate serial: 019B39EAF931F2CEED977D68C7E384C13783 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 04:00:59 +0000 Manifest this update: Sat 20 Dec 2025 04:00:59 +0000 Manifest next update: Sun 21 Dec 2025 04:00:59 +0000 Files and hashes: 1: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl (hash: M6rAot2iql7e3NtnMIeVqRpKmmD8kf2JsrG3snYTFXA=) 2: F5Bzgfu76RvZ3yR1y7zwFf6G4kM.roa (hash: ep3IMQ4ZZkY9pT/SX8gdzLkWK4LgBK5MsjhgdqazgtY=) 3: aqOGkykY9Ju12UAZyyt6XVgtms4.roa (hash: E4BJpz+NX3TX7uydvegd/qgoqkfPLAjjVrCasy2lcGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:f9:31:f2:ce:ed:97:7d:68:c7:e3:84:c1:37:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d959676fe138d4eb2aae19bb6731fee6292d793d Validity Not Before: Dec 20 04:00:59 2025 GMT Not After : Dec 21 04:00:59 2025 GMT Subject: CN=1cc13fb3d28442f260496ee54e175c79c098d4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:81:44:0d:37:c9:68:0e:c0:26:42:2d:0a:f4: 9c:e4:4b:37:a6:9d:49:79:62:11:f0:a2:81:69:96: a2:e5:4a:b5:b8:93:07:f0:72:80:68:aa:8f:b4:2d: e6:1a:4d:26:9d:9b:d0:ad:a4:a2:a0:a8:7a:f8:f2: 59:94:21:37:e8:48:bf:c1:3d:1d:25:3d:bc:16:48: 20:20:fe:05:d6:4a:76:34:09:aa:e5:0f:e9:e5:31: 5f:dd:8c:a4:1f:e3:0f:3e:d3:f6:c8:16:1c:72:83: b8:02:59:9a:4d:1c:26:27:59:ed:ab:16:a7:64:1d: 67:44:85:3c:85:62:c0:f8:bb:67:50:aa:41:ba:75: 63:47:94:d3:40:16:dd:81:8c:2f:ff:1c:70:8a:f9: db:00:11:ca:5d:17:86:0c:05:94:ac:c6:7e:b5:c8: 66:d4:70:d4:76:bd:42:7e:13:01:97:76:ed:7c:1d: 62:4b:4c:b4:6c:18:20:14:9e:d1:86:03:49:da:73: 58:4f:b1:f6:4a:90:96:4b:3b:05:08:6f:f0:a6:de: cd:50:f0:d9:69:2d:00:f4:be:4a:b4:c7:9e:9b:a9: 28:08:47:b0:87:d4:63:c4:3a:be:70:e2:ff:45:be: 76:f6:93:ec:b8:e6:1b:7b:a8:be:4f:c1:c7:a5:07: 84:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C1:3F:B3:D2:84:42:F2:60:49:6E:E5:4E:17:5C:79:C0:98:D4:F9 X509v3 Authority Key Identifier: keyid:D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:8f:c0:c6:5d:9d:ba:91:e7:0d:bd:bf:ff:c9:eb:1c:64:f5: ba:6e:16:c2:52:a4:a0:16:b4:ad:6f:13:b9:83:e1:8d:e5:2b: 6f:58:c7:7a:18:73:36:6e:7a:96:f6:74:1d:a8:88:cb:b6:a5: 7a:72:37:dd:38:78:c9:1e:48:17:fb:bd:a8:14:78:5e:7f:0e: b9:51:b5:2e:f9:e2:1e:cd:a6:be:27:7a:67:c9:bf:cc:ae:c4: b6:cf:c7:83:77:40:b4:38:41:fa:94:bd:ad:5f:25:93:7e:6c: a5:6e:a6:4b:39:44:71:46:8c:4f:9b:25:93:fc:16:c3:11:3d: 70:6e:41:c2:a5:fd:6a:66:72:b4:81:51:2f:89:d9:1e:a4:76: fb:43:08:a1:f3:12:79:88:2c:9a:5d:57:4d:1d:59:d4:09:19: 5f:6a:02:7a:ba:f8:08:80:b7:9e:34:9b:30:f5:71:01:9c:1d: 4b:89:ce:ef:ad:d6:af:f8:1c:96:65:e8:50:11:a9:64:69:15: 99:e2:7c:cf:51:e9:9a:eb:25:4a:60:73:0d:85:48:4b:d7:3e: 4f:f3:d0:11:40:54:29:be:71:94:2e:f5:7b:c5:f2:88:c3:96: 84:a6:54:96:14:73:99:4f:01:32:27:5c:07:0f:75:33:3a:8d: d2:a6:27:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56vkx8s7tl31ox+OEwTeDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NTk2NzZmZTEzOGQ0ZWIyYWFlMTliYjY3MzFmZWU2Mjky ZDc5M2QwHhcNMjUxMjIwMDQwMDU5WhcNMjUxMjIxMDQwMDU5WjAzMTEwLwYDVQQD EygxY2MxM2ZiM2QyODQ0MmYyNjA0OTZlZTU0ZTE3NWM3OWMwOThkNGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIFEDTfJaA7AJkItCvSc5Es3pp1J eWIR8KKBaZai5Uq1uJMH8HKAaKqPtC3mGk0mnZvQraSioKh6+PJZlCE36Ei/wT0d JT28FkggIP4F1kp2NAmq5Q/p5TFf3YykH+MPPtP2yBYccoO4AlmaTRwmJ1ntqxan ZB1nRIU8hWLA+LtnUKpBunVjR5TTQBbdgYwv/xxwivnbABHKXReGDAWUrMZ+tchm 1HDUdr1CfhMBl3btfB1iS0y0bBggFJ7RhgNJ2nNYT7H2SpCWSzsFCG/wpt7NUPDZ aS0A9L5KtMeem6koCEewh9RjxDq+cOL/Rb529pPsuOYbe6i+T8HHpQeEcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzBP7PShELyYElu5U4XXHnAmNT5MB8GA1UdIwQY MBaAFNlZZ2/hONTrKq4Zu2cx/uYpLXk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jZjAyOGUtNzU3ZS00ODQzLWExZWEt NGM3NGQzMzJlYTU4LzEvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9jZjAyOGUtNzU3ZS00ODQzLWExZWEtNGM3NGQzMzJlYTU4 LzEvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWY/Axl2d upHnDb2//8nrHGT1um4WwlKkoBa0rW8TuYPhjeUrb1jHehhzNm56lvZ0HaiIy7al enI33Th4yR5IF/u9qBR4Xn8OuVG1LvniHs2mvid6Z8m/zK7Ets/Hg3dAtDhB+pS9 rV8lk35spW6mSzlEcUaMT5slk/wWwxE9cG5BwqX9amZytIFRL4nZHqR2+0MIofMS eYgsml1XTR1Z1AkZX2oCerr4CIC3njSbMPVxAZwdS4nO763Wr/gclmXoUBGpZGkV meJ8z1HpmuslSmBzDYVIS9c+T/PQEUBUKb5xlC71e8XyiMOWhKZUlhRzmU8BMidc Bw91MzqN0qYnug== -----END CERTIFICATE-----Generated at Sat Dec 20 09:10:06 2025 by rpki-client