This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft File: VHFLUoQ1EPnzrDC4GbYQ15a338E.mft (raw, json) Hash identifier: 5zB0JJVJQ6i1SCJ0KTi0H9XHBsH3V4zZy/xUVHT6l3o= Subject key identifier: DF:8A:17:C5:D7:CB:D9:52:70:10:44:4B:6C:ED:07:E5:48:97:E1:09 Authority key identifier: 54:71:4B:52:84:35:10:F9:F3:AC:30:B8:19:B6:10:D7:96:B7:DF:C1 Certificate issuer: /CN=54714b52843510f9f3ac30b819b610d796b7dfc1 Certificate serial: 019B725975C7F7B7765631FCB1BB62CB8F23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft Manifest number: 133E Signing time: Wed 31 Dec 2025 03:00:23 +0000 Manifest this update: Wed 31 Dec 2025 03:00:23 +0000 Manifest next update: Thu 01 Jan 2026 03:00:23 +0000 Files and hashes: 1: VHFLUoQ1EPnzrDC4GbYQ15a338E.crl (hash: X9HArpYZtXDOHH7sLQUS0/ZptHlURXg2HZ1rGrlaHRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.crl rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:59:75:c7:f7:b7:76:56:31:fc:b1:bb:62:cb:8f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54714b52843510f9f3ac30b819b610d796b7dfc1 Validity Not Before: Dec 31 03:00:23 2025 GMT Not After : Jan 1 03:00:23 2026 GMT Subject: CN=df8a17c5d7cbd9527010444b6ced07e54897e109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1f:03:bc:6d:66:24:28:da:88:73:c0:1e:96: d4:8d:ad:8e:57:f0:5b:d4:55:cc:4a:93:c6:9b:ab: be:00:7f:18:a6:51:69:c2:5a:0a:80:8a:06:3b:da: 34:90:e2:6e:5c:67:2f:1e:8d:42:df:b5:1a:90:11: 50:0a:67:9e:66:3d:48:50:19:73:fe:e4:68:6b:39: f1:d7:bc:8d:89:dc:24:3e:f3:2d:81:df:eb:7e:fb: 70:be:d5:9d:82:06:84:59:2a:ca:64:76:4a:d1:7b: ff:93:9a:42:17:59:33:49:81:44:0b:28:d5:79:74: 86:4a:e5:be:94:e1:eb:36:df:33:2e:41:57:dc:63: 33:d4:3c:60:98:d3:2c:92:91:de:f9:5e:92:82:84: 15:c4:cc:e0:e5:f9:a2:c6:65:a4:58:1d:5c:da:61: 2d:76:2a:90:b4:b9:82:c3:74:62:00:df:a9:00:d4: ca:c2:ec:25:20:75:17:ee:69:61:93:85:95:b2:17: a2:aa:4a:fb:75:fe:cd:9b:e3:9c:ab:72:4a:2e:ac: b1:75:89:6d:25:8a:7d:36:f1:70:ad:43:aa:4b:a1: 71:0f:93:27:d3:b6:b1:88:f4:06:e4:6e:bc:22:6a: ba:50:2b:82:2d:99:a7:3b:cc:25:34:d6:cb:5e:c9: 3c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8A:17:C5:D7:CB:D9:52:70:10:44:4B:6C:ED:07:E5:48:97:E1:09 X509v3 Authority Key Identifier: keyid:54:71:4B:52:84:35:10:F9:F3:AC:30:B8:19:B6:10:D7:96:B7:DF:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:73:32:f4:ad:42:43:27:2b:2d:9a:af:08:d7:d3:42:a8:c5: 13:24:41:83:f1:79:db:94:30:55:ae:43:60:a0:2f:53:72:be: d1:58:9c:96:1c:6c:f6:94:45:ed:92:f8:a9:6f:21:1d:a7:00: ea:f6:b6:7d:7c:0c:7e:01:de:af:8d:52:cc:63:31:1e:a0:f0: 24:ad:db:b6:61:a6:91:49:05:5b:db:c2:65:c8:f0:bd:2e:15: 82:8e:1d:69:c0:dc:33:95:bc:ec:93:c5:0c:ad:5a:f1:c7:17: ce:51:30:70:35:23:75:01:56:63:57:81:26:98:90:65:6c:f2: 18:50:73:da:cd:7e:ed:0a:f4:3d:25:f9:bf:73:96:b4:1d:61: 4e:aa:d8:88:de:0c:21:c2:76:e5:25:ae:ed:8c:af:e7:78:2b: 2d:09:f8:aa:36:d5:02:74:d5:9f:be:2d:92:c5:54:40:55:c4: 38:8e:fc:c6:5e:92:5c:fa:ac:e4:82:b0:30:b5:b1:86:46:0b: be:4a:1f:d6:35:25:ba:ea:a1:be:e5:fb:8c:b6:ee:63:3a:f8: 42:b0:09:cd:10:db:fa:28:ef:0e:9d:5f:4c:8b:d5:56:40:ce: 35:50:bf:2d:b3:62:25:20:6e:54:10:f5:e1:17:9a:84:43:c5: b6:79:fa:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyWXXH97d2VjH8sbtiy48jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NzE0YjUyODQzNTEwZjlmM2FjMzBiODE5YjYxMGQ3OTZi N2RmYzEwHhcNMjUxMjMxMDMwMDIzWhcNMjYwMTAxMDMwMDIzWjAzMTEwLwYDVQQD EyhkZjhhMTdjNWQ3Y2JkOTUyNzAxMDQ0NGI2Y2VkMDdlNTQ4OTdlMTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR8DvG1mJCjaiHPAHpbUja2OV/Bb 1FXMSpPGm6u+AH8YplFpwloKgIoGO9o0kOJuXGcvHo1C37UakBFQCmeeZj1IUBlz /uRoaznx17yNidwkPvMtgd/rfvtwvtWdggaEWSrKZHZK0Xv/k5pCF1kzSYFECyjV eXSGSuW+lOHrNt8zLkFX3GMz1DxgmNMskpHe+V6SgoQVxMzg5fmixmWkWB1c2mEt diqQtLmCw3RiAN+pANTKwuwlIHUX7mlhk4WVsheiqkr7df7Nm+Ocq3JKLqyxdYlt JYp9NvFwrUOqS6FxD5Mn07axiPQG5G68Imq6UCuCLZmnO8wlNNbLXsk8yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+KF8XXy9lScBBES2ztB+VIl+EJMB8GA1UdIwQY MBaAFFRxS1KENRD586wwuBm2ENeWt9/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkhGTFVvUTFFUG56ckRDNEdiWVExNWEzMzhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jYmYwMzYtMTk4MC00NmIzLWI3ZjYt MjZjYWVjM2M0ODRhLzEvVkhGTFVvUTFFUG56ckRDNEdiWVExNWEzMzhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9jYmYwMzYtMTk4MC00NmIzLWI3ZjYtMjZjYWVjM2M0ODRh LzEvVkhGTFVvUTFFUG56ckRDNEdiWVExNWEzMzhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXMy9K1C QycrLZqvCNfTQqjFEyRBg/F525QwVa5DYKAvU3K+0Viclhxs9pRF7ZL4qW8hHacA 6va2fXwMfgHer41SzGMxHqDwJK3btmGmkUkFW9vCZcjwvS4Vgo4dacDcM5W87JPF DK1a8ccXzlEwcDUjdQFWY1eBJpiQZWzyGFBz2s1+7Qr0PSX5v3OWtB1hTqrYiN4M IcJ25SWu7Yyv53grLQn4qjbVAnTVn74tksVUQFXEOI78xl6SXPqs5IKwMLWxhkYL vkof1jUluuqhvuX7jLbuYzr4QrAJzRDb+ijvDp1fTIvVVkDONVC/LbNiJSBuVBD1 4ReahEPFtnn6vA== -----END CERTIFICATE-----Generated at Wed Dec 31 08:00:00 2025 by rpki-client