This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft File: VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft (raw, json) Hash identifier: JpwA2JijV4WLnq35RIR8RKh8HPSaBeEHxQOWZUTtq2s= Subject key identifier: 32:98:E4:B4:1A:09:29:4A:A5:A7:AA:85:11:7F:0E:AA:98:35:A0:97 Authority key identifier: 54:0E:9A:C4:39:B8:F2:B2:7C:1A:26:7D:35:E0:19:5F:EC:85:94:4D Certificate issuer: /CN=540e9ac439b8f2b27c1a267d35e0195fec85944d Certificate serial: 019B42B780DEAB7F9C05871E627224D504B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft Manifest number: 0C01 Signing time: Sun 21 Dec 2025 21:01:20 +0000 Manifest this update: Sun 21 Dec 2025 21:01:20 +0000 Manifest next update: Mon 22 Dec 2025 21:01:20 +0000 Files and hashes: 1: VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl (hash: 6lZo1GKBYtJPmijLp3k4eYosB/cUkugCA8q4/n5PtQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:80:de:ab:7f:9c:05:87:1e:62:72:24:d5:04:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540e9ac439b8f2b27c1a267d35e0195fec85944d Validity Not Before: Dec 21 21:01:20 2025 GMT Not After : Dec 22 21:01:20 2025 GMT Subject: CN=3298e4b41a09294aa5a7aa85117f0eaa9835a097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bd:40:53:4a:2c:ba:31:92:39:2e:a9:98:ab: 8f:41:e2:3d:a1:74:c4:71:4f:5e:37:51:1d:07:fd: 52:03:8b:66:b5:f6:29:0b:86:e8:47:96:83:dd:ee: 6b:ca:64:a1:8a:08:5a:e4:7c:6c:30:44:ff:77:09: 99:81:da:6c:6f:be:df:05:b7:14:78:07:c5:7c:a6: d7:e2:7e:bf:6b:25:a1:e2:75:09:ad:61:bd:6e:79: 97:38:df:92:d9:ab:01:1a:81:06:2d:81:aa:f6:37: 7f:fe:84:2f:8a:e5:69:02:bc:ec:9e:44:3c:51:63: 62:d3:ca:61:03:09:c7:9a:f7:56:b7:34:85:12:ff: cb:95:6b:a4:25:c1:c7:00:8b:cc:3c:58:65:48:82: 53:ab:3a:37:01:fa:a5:96:93:a2:68:4d:72:db:ff: a1:a7:63:92:c0:ed:30:b0:58:e9:5f:2f:7b:0f:d4: f5:a3:79:14:32:0b:a8:a2:aa:52:7c:b8:85:41:71: ba:de:a4:e5:a8:92:eb:ba:61:06:95:1f:33:1a:97: 39:dc:c4:9c:18:25:39:75:d6:db:77:cd:00:92:84: 7e:0b:39:c3:fa:b3:52:21:b5:dc:2e:cb:96:d9:96: f2:35:85:8f:38:87:e9:ce:cd:61:9a:80:b5:8c:17: 6e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:98:E4:B4:1A:09:29:4A:A5:A7:AA:85:11:7F:0E:AA:98:35:A0:97 X509v3 Authority Key Identifier: keyid:54:0E:9A:C4:39:B8:F2:B2:7C:1A:26:7D:35:E0:19:5F:EC:85:94:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:f1:3f:f6:34:a3:78:fd:cc:bf:dd:a3:1c:d8:1d:db:cf:57: ce:0a:2f:00:bc:ad:da:86:6a:f9:91:23:67:26:31:ab:76:05: 1f:2d:88:7e:a5:b3:17:20:38:aa:dd:b0:ef:f8:25:b8:db:7c: f1:62:48:9d:d3:56:06:fe:4e:17:cf:f7:a9:7a:79:9f:a7:fb: bf:c3:fb:31:9a:d6:76:2d:42:78:36:81:72:30:fc:04:a3:e8: 63:18:ea:ed:cd:9a:2a:68:31:ab:a4:eb:90:58:59:d9:17:fc: 2c:34:a7:84:20:e0:d5:9a:4c:13:69:fb:5d:6a:15:72:3c:dc: 9d:a4:8b:08:5c:76:24:53:d1:82:31:e7:5d:20:cd:04:46:22: fc:74:52:74:c5:f9:3b:a8:a6:3d:e3:f2:e7:46:9d:97:a1:6f: aa:c5:09:41:b2:51:cc:16:67:77:97:2c:58:1a:91:ba:7c:43: de:ec:74:e0:68:9e:ec:49:1e:d5:00:6d:13:a7:82:0c:84:ce: d9:35:df:1d:8b:fa:79:7a:26:f8:10:bf:20:ce:ca:42:e0:0b: 22:79:28:df:f4:6d:45:ee:f5:41:6c:ff:c8:89:b1:6b:67:26: d5:c6:9c:bd:f6:22:0b:6a:66:cc:e6:93:29:05:50:dd:bf:d1: d8:e5:a6:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt4Deq3+cBYceYnIk1QS5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MGU5YWM0MzliOGYyYjI3YzFhMjY3ZDM1ZTAxOTVmZWM4 NTk0NGQwHhcNMjUxMjIxMjEwMTIwWhcNMjUxMjIyMjEwMTIwWjAzMTEwLwYDVQQD EygzMjk4ZTRiNDFhMDkyOTRhYTVhN2FhODUxMTdmMGVhYTk4MzVhMDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b1AU0osujGSOS6pmKuPQeI9oXTE cU9eN1EdB/1SA4tmtfYpC4boR5aD3e5rymShigha5HxsMET/dwmZgdpsb77fBbcU eAfFfKbX4n6/ayWh4nUJrWG9bnmXON+S2asBGoEGLYGq9jd//oQviuVpArzsnkQ8 UWNi08phAwnHmvdWtzSFEv/LlWukJcHHAIvMPFhlSIJTqzo3AfqllpOiaE1y2/+h p2OSwO0wsFjpXy97D9T1o3kUMguooqpSfLiFQXG63qTlqJLrumEGlR8zGpc53MSc GCU5ddbbd80AkoR+CznD+rNSIbXcLsuW2ZbyNYWPOIfpzs1hmoC1jBdu3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKY5LQaCSlKpaeqhRF/DqqYNaCXMB8GA1UdIwQY MBaAFFQOmsQ5uPKyfBomfTXgGV/shZRNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkE2YXhEbTQ4cko4R2laOU5lQVpYLXlGbEUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOThjNGUtMWZlOS00MmM4LWJkYmIt Yzk2ZTkzN2FjOTU1LzEvVkE2YXhEbTQ4cko4R2laOU5lQVpYLXlGbEUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iOThjNGUtMWZlOS00MmM4LWJkYmItYzk2ZTkzN2FjOTU1 LzEvVkE2YXhEbTQ4cko4R2laOU5lQVpYLXlGbEUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq/E/9jSj eP3Mv92jHNgd289XzgovALyt2oZq+ZEjZyYxq3YFHy2IfqWzFyA4qt2w7/gluNt8 8WJIndNWBv5OF8/3qXp5n6f7v8P7MZrWdi1CeDaBcjD8BKPoYxjq7c2aKmgxq6Tr kFhZ2Rf8LDSnhCDg1ZpME2n7XWoVcjzcnaSLCFx2JFPRgjHnXSDNBEYi/HRSdMX5 O6imPePy50adl6FvqsUJQbJRzBZnd5csWBqRunxD3ux04Gie7Eke1QBtE6eCDITO 2TXfHYv6eXom+BC/IM7KQuALInko3/RtRe71QWz/yImxa2cm1cacvfYiC2pmzOaT KQVQ3b/R2OWmQw== -----END CERTIFICATE-----Generated at Mon Dec 22 06:30:38 2025 by rpki-client