This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft File: runVCGNpB2p412FjizKoqbjvcOc.mft (raw, json) Hash identifier: VX7txVVitnPi8ZYabqJIc1CbjCUlNOb1SA2E9AejO0s= Subject key identifier: 5F:60:B9:3C:3A:C5:2C:FE:2F:82:E1:3A:5B:04:B9:4B:87:D5:C1:67 Authority key identifier: AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7 Certificate issuer: /CN=aee9d5086369076a78d761638b32a8a9b8ef70e7 Certificate serial: 019B5117C2187ACBE071544228CC10229F4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 16:01:10 +0000 Manifest this update: Wed 24 Dec 2025 16:01:10 +0000 Manifest next update: Thu 25 Dec 2025 16:01:10 +0000 Files and hashes: 1: TI9bfzfYT_e9UXoNSSRvZ0SIvco.roa (hash: ysZXRJJDaCEwr01HXDnbPPBij8sh3z42AGc9cvU+Xhg=) 2: runVCGNpB2p412FjizKoqbjvcOc.crl (hash: YApOs5uwb2wLf1YC2A/XvfVzPWR/rhKm2w0oiJ5bpZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 16:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:c2:18:7a:cb:e0:71:54:42:28:cc:10:22:9f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aee9d5086369076a78d761638b32a8a9b8ef70e7 Validity Not Before: Dec 24 16:01:10 2025 GMT Not After : Dec 25 16:01:10 2025 GMT Subject: CN=5f60b93c3ac52cfe2f82e13a5b04b94b87d5c167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b3:54:ad:01:84:74:21:c0:e5:8f:82:a1:ec: f4:6c:8a:92:6e:4f:74:03:dd:95:a4:4a:d2:49:f2: ef:f0:50:c0:d0:72:8b:15:e4:0e:32:6c:80:d7:a9: 03:b0:6e:98:7f:a9:c4:f3:04:32:14:7f:1a:e5:49: e2:16:92:cd:94:c1:9d:30:94:ad:eb:85:29:ad:54: b4:17:d0:79:a0:bf:42:04:14:00:03:c9:9d:6e:47: 36:61:19:90:9d:9c:63:fd:cf:18:ba:7a:30:00:d1: 06:56:58:c6:64:8d:1b:0a:dc:c2:34:32:5d:ea:4a: e0:a8:12:ca:6a:4a:2a:f4:14:5f:92:d9:2f:64:39: d4:80:85:34:48:9e:08:18:16:60:29:a7:7f:09:54: 46:1e:f3:4f:b2:49:cd:8c:6d:b0:aa:a3:93:00:f9: 65:72:33:9b:79:8c:7a:1d:26:0a:0a:e5:33:59:9e: 79:70:3d:05:ad:86:dd:c4:e8:43:8b:59:8b:1c:1c: 98:78:3a:8a:8a:9e:c5:14:b3:0e:41:77:49:73:97: ad:00:44:57:2b:e9:4b:5a:a8:12:b0:b5:67:ea:88: c2:22:d3:07:f9:fc:6f:a1:f6:67:1f:7b:60:96:47: 4f:fc:4d:bb:af:12:05:f7:4e:c9:f4:7f:b7:78:06: 93:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:60:B9:3C:3A:C5:2C:FE:2F:82:E1:3A:5B:04:B9:4B:87:D5:C1:67 X509v3 Authority Key Identifier: keyid:AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ef:0d:ab:c6:15:fd:4c:de:fb:a8:a7:ca:23:36:01:71:35: 14:5b:9e:43:6b:d1:e7:80:99:10:b8:5d:52:c6:12:3b:e8:9e: 72:a6:2b:d5:7f:ac:07:d0:9d:93:89:ec:ca:08:c0:64:04:c5: dc:92:d2:0f:25:55:53:7a:d1:44:1a:24:1f:a1:8d:b6:7d:ca: ab:fa:3b:56:f6:16:4d:59:fb:13:12:26:ef:06:d2:f0:4e:0c: 1a:8d:e7:00:64:d7:31:49:87:82:f3:ac:f9:5f:e7:84:dc:b7: 25:73:a3:25:8a:43:e7:e7:cd:d3:c7:4f:6d:55:ab:00:aa:7f: b8:50:fd:79:4e:08:65:e5:02:ca:46:c0:92:4f:17:d6:4c:22: 08:50:36:b7:f4:81:10:b1:0c:5e:0d:47:28:b4:25:7d:c8:24: 09:1c:98:fe:7c:9a:a8:a9:97:ea:a1:c8:9e:44:a4:72:52:48: 08:d7:1a:71:ac:74:b3:f4:c9:c6:7a:85:fd:74:55:13:d1:96: 92:54:87:95:27:a7:aa:5d:3f:90:31:89:bc:68:b1:10:cf:87: a3:0d:86:9d:ac:a1:93:fd:b6:ab:cc:be:6e:9d:60:8f:79:30: 8f:6d:9b:39:68:ab:68:bb:8f:ab:85:15:15:e9:4e:7f:59:1b: 17:cf:c1:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF8IYesvgcVRCKMwQIp9LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZTlkNTA4NjM2OTA3NmE3OGQ3NjE2MzhiMzJhOGE5Yjhl ZjcwZTcwHhcNMjUxMjI0MTYwMTEwWhcNMjUxMjI1MTYwMTEwWjAzMTEwLwYDVQQD Eyg1ZjYwYjkzYzNhYzUyY2ZlMmY4MmUxM2E1YjA0Yjk0Yjg3ZDVjMTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbNUrQGEdCHA5Y+Coez0bIqSbk90 A92VpErSSfLv8FDA0HKLFeQOMmyA16kDsG6Yf6nE8wQyFH8a5UniFpLNlMGdMJSt 64UprVS0F9B5oL9CBBQAA8mdbkc2YRmQnZxj/c8YunowANEGVljGZI0bCtzCNDJd 6krgqBLKakoq9BRfktkvZDnUgIU0SJ4IGBZgKad/CVRGHvNPsknNjG2wqqOTAPll cjObeYx6HSYKCuUzWZ55cD0FrYbdxOhDi1mLHByYeDqKip7FFLMOQXdJc5etAERX K+lLWqgSsLVn6ojCItMH+fxvofZnH3tglkdP/E27rxIF907J9H+3eAaT1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9guTw6xSz+L4LhOlsEuUuH1cFnMB8GA1UdIwQY MBaAFK7p1QhjaQdqeNdhY4syqKm473DnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnVuVkNHTnBCMnA0MTJGaml6S29xYmp2Y09jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMTNkN2UtMTNmNS00ZTZlLWFiODct MjAxMzYxOGMwNGZmLzEvcnVuVkNHTnBCMnA0MTJGaml6S29xYmp2Y09jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMTNkN2UtMTNmNS00ZTZlLWFiODctMjAxMzYxOGMwNGZm LzEvcnVuVkNHTnBCMnA0MTJGaml6S29xYmp2Y09jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZe8Nq8YV /Uze+6inyiM2AXE1FFueQ2vR54CZELhdUsYSO+iecqYr1X+sB9Cdk4nsygjAZATF 3JLSDyVVU3rRRBokH6GNtn3Kq/o7VvYWTVn7ExIm7wbS8E4MGo3nAGTXMUmHgvOs +V/nhNy3JXOjJYpD5+fN08dPbVWrAKp/uFD9eU4IZeUCykbAkk8X1kwiCFA2t/SB ELEMXg1HKLQlfcgkCRyY/nyaqKmX6qHInkSkclJICNcacax0s/TJxnqF/XRVE9GW klSHlSenql0/kDGJvGixEM+How2Gnayhk/22q8y+bp1gj3kwj22bOWiraLuPq4UV FelOf1kbF8/BZA== -----END CERTIFICATE-----Generated at Thu Dec 25 01:21:40 2025 by rpki-client