This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft File: vm0t9XQLV9Se09LeKamMvGfyAWU.mft (raw, json) Hash identifier: gh2jW9fNzbhEeUZXRlWKfbgtpRVLcK9+4MF2DMBq7Og= Subject key identifier: 32:B1:54:EE:C1:63:4F:93:79:D4:42:08:96:01:1E:39:A8:45:DF:1A Authority key identifier: BE:6D:2D:F5:74:0B:57:D4:9E:D3:D2:DE:29:A9:8C:BC:67:F2:01:65 Certificate issuer: /CN=be6d2df5740b57d49ed3d2de29a98cbc67f20165 Certificate serial: 019B7591F98EEF02958ADFC114EDBB834E7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft Manifest number: 14DF Signing time: Wed 31 Dec 2025 18:00:59 +0000 Manifest this update: Wed 31 Dec 2025 18:00:59 +0000 Manifest next update: Thu 01 Jan 2026 18:00:59 +0000 Files and hashes: 1: vm0t9XQLV9Se09LeKamMvGfyAWU.crl (hash: UlDlQrbx7N63u18A8oiFS25HB5ejSZCSoYgQJS0Blp4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:91:f9:8e:ef:02:95:8a:df:c1:14:ed:bb:83:4e:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be6d2df5740b57d49ed3d2de29a98cbc67f20165 Validity Not Before: Dec 31 18:00:59 2025 GMT Not After : Jan 1 18:00:59 2026 GMT Subject: CN=32b154eec1634f9379d4420896011e39a845df1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:62:50:be:fa:ec:a7:57:6d:3f:21:6e:23:5f: 38:e6:b1:07:fb:71:90:d1:b4:c0:53:3e:ee:2f:d3: b0:89:37:d0:b6:13:fc:a6:95:30:8a:be:8d:a1:5f: 17:30:e3:a1:64:2f:8e:12:3f:48:98:b1:1a:bd:c5: 3f:62:06:17:73:6a:e3:e4:90:22:83:8e:14:0c:90: 4a:9d:80:98:85:47:1e:01:88:dc:33:11:f6:45:31: 68:6b:56:58:3d:71:ea:70:99:ab:45:0a:cb:47:c1: e7:09:b7:75:17:e6:fe:c6:8c:c3:d2:9b:31:88:eb: 10:d9:fc:bb:70:c2:aa:3d:0e:77:73:d4:47:ae:86: bf:ac:7e:fb:93:bb:f4:3a:1e:86:e6:25:bc:a9:a0: 3d:ea:bc:7c:9d:c6:c8:bf:d8:2d:df:02:60:4d:80: d3:8a:92:f9:c1:d8:07:e6:d5:5f:e0:61:8d:06:15: 73:8a:e4:90:ae:31:cf:63:73:2b:0d:dd:68:eb:88: 98:e3:97:a3:fc:33:f5:e8:0f:31:73:80:9c:4f:68: d9:9d:3e:29:d8:e4:f7:d3:e9:bf:cb:15:9f:ba:30: 95:ac:3e:63:86:32:11:12:48:b0:96:f1:f1:f2:73: 63:24:3e:9c:3c:b2:c3:2f:ea:8a:45:79:12:7c:4f: 80:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B1:54:EE:C1:63:4F:93:79:D4:42:08:96:01:1E:39:A8:45:DF:1A X509v3 Authority Key Identifier: keyid:BE:6D:2D:F5:74:0B:57:D4:9E:D3:D2:DE:29:A9:8C:BC:67:F2:01:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:a8:2e:a0:3d:87:ca:7e:e7:84:1c:3d:af:dd:22:3b:fb:fb: 72:94:33:4d:e8:20:76:ae:4b:75:96:fc:7c:f0:2c:21:35:7a: 40:37:27:ff:e1:0a:7d:92:00:0c:68:14:0e:24:e3:56:75:67: 8b:01:7e:9e:5f:cb:aa:68:88:a2:f8:53:f3:62:87:c3:e2:1f: 72:56:e0:f1:99:41:bc:72:8c:39:cd:26:a1:7e:e9:e2:5b:c0: 14:6d:f5:4e:96:d6:fa:6b:1a:2a:7b:12:99:91:a7:5e:09:7a: 60:46:e1:6e:b2:c8:5d:7b:d3:81:06:2c:ca:ef:a1:62:c1:0f: c7:89:c6:5f:6a:4f:66:c8:5e:c1:d8:4a:24:bd:b1:be:b6:e3: 3f:89:d6:6e:73:1a:f5:e7:37:04:be:a6:38:78:d2:59:5e:c4: 05:d7:c3:c2:7b:8e:a8:f0:93:cb:e6:f9:a5:f0:df:26:3b:bb: 7f:a3:8d:63:64:df:20:66:ec:80:06:fb:5e:76:b9:20:11:fc: 9e:3c:72:42:b0:4e:85:47:03:8d:f3:a2:7b:5f:cc:b8:26:30: 5a:d1:e2:01:f4:46:16:88:71:0d:37:9f:ce:7a:fb:65:6a:9b: 30:68:47:49:11:7f:6a:bf:b3:7f:4e:c7:3e:81:30:53:62:90: 32:3e:2c:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1kfmO7wKVit/BFO27g056MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNmQyZGY1NzQwYjU3ZDQ5ZWQzZDJkZTI5YTk4Y2JjNjdm MjAxNjUwHhcNMjUxMjMxMTgwMDU5WhcNMjYwMTAxMTgwMDU5WjAzMTEwLwYDVQQD EygzMmIxNTRlZWMxNjM0ZjkzNzlkNDQyMDg5NjAxMWUzOWE4NDVkZjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWJQvvrsp1dtPyFuI1845rEH+3GQ 0bTAUz7uL9OwiTfQthP8ppUwir6NoV8XMOOhZC+OEj9ImLEavcU/YgYXc2rj5JAi g44UDJBKnYCYhUceAYjcMxH2RTFoa1ZYPXHqcJmrRQrLR8HnCbd1F+b+xozD0psx iOsQ2fy7cMKqPQ53c9RHroa/rH77k7v0Oh6G5iW8qaA96rx8ncbIv9gt3wJgTYDT ipL5wdgH5tVf4GGNBhVziuSQrjHPY3MrDd1o64iY45ej/DP16A8xc4CcT2jZnT4p 2OT30+m/yxWfujCVrD5jhjIREkiwlvHx8nNjJD6cPLLDL+qKRXkSfE+AlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKxVO7BY0+TedRCCJYBHjmoRd8aMB8GA1UdIwQY MBaAFL5tLfV0C1fUntPS3impjLxn8gFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm0wdDlYUUxWOVNlMDlMZUthbU12R2Z5QVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wY2UzNzMtOTI5OC00OGZjLTkyNTkt YmE5MTc4Yzc5ZmM2LzEvdm0wdDlYUUxWOVNlMDlMZUthbU12R2Z5QVdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wY2UzNzMtOTI5OC00OGZjLTkyNTktYmE5MTc4Yzc5ZmM2 LzEvdm0wdDlYUUxWOVNlMDlMZUthbU12R2Z5QVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6guoD2H yn7nhBw9r90iO/v7cpQzTeggdq5LdZb8fPAsITV6QDcn/+EKfZIADGgUDiTjVnVn iwF+nl/LqmiIovhT82KHw+Ifclbg8ZlBvHKMOc0moX7p4lvAFG31TpbW+msaKnsS mZGnXgl6YEbhbrLIXXvTgQYsyu+hYsEPx4nGX2pPZshewdhKJL2xvrbjP4nWbnMa 9ec3BL6mOHjSWV7EBdfDwnuOqPCTy+b5pfDfJju7f6ONY2TfIGbsgAb7Xna5IBH8 njxyQrBOhUcDjfOie1/MuCYwWtHiAfRGFohxDTefznr7ZWqbMGhHSRF/ar+zf07H PoEwU2KQMj4sqw== -----END CERTIFICATE-----Generated at Wed Dec 31 21:46:05 2025 by rpki-client