This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft File: V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft (raw, json) Hash identifier: KDBVB41+9A86sqnj11DizR1RIEMx8WJ8feaiZoj56pg= Subject key identifier: 8D:3B:40:87:D5:E8:CE:2E:52:EC:91:22:02:7B:33:EE:38:CC:5F:A3 Authority key identifier: 57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93 Certificate issuer: /CN=57d011b577f90aa7e8e0cc5229e1f29983824593 Certificate serial: 019AF16404D3A4038EDFEDE89C12410AAC2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 02:00:55 +0000 Manifest this update: Sat 06 Dec 2025 02:00:55 +0000 Manifest next update: Sun 07 Dec 2025 02:00:55 +0000 Files and hashes: 1: V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl (hash: 2Du1syyBg+RzBTvD9+rBWBS0HTlAZMsoW546Hs2jlEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:04:d3:a4:03:8e:df:ed:e8:9c:12:41:0a:ac:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57d011b577f90aa7e8e0cc5229e1f29983824593 Validity Not Before: Dec 6 02:00:55 2025 GMT Not After : Dec 7 02:00:55 2025 GMT Subject: CN=8d3b4087d5e8ce2e52ec9122027b33ee38cc5fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7d:50:4f:d6:96:23:ef:23:7d:f7:6e:5c:7e: 4a:c0:03:57:84:1e:30:21:af:f4:87:16:41:79:b0: 3c:a6:ed:f1:5c:2a:44:66:7d:5c:a0:03:f9:c8:dd: f1:9f:cc:c9:b2:8f:85:81:d8:7c:e8:25:e3:63:10: ef:3f:71:74:32:eb:4e:d1:f7:19:6b:f2:62:2a:9d: 9a:4d:60:d5:77:a1:5d:86:6c:59:af:e7:79:d5:8b: 6c:ec:c3:5c:15:43:44:bb:ee:76:9f:76:4f:fd:07: 22:e2:ba:cf:1a:f5:f1:ef:d2:19:e7:b3:43:d5:48: 7c:21:da:90:1d:d3:4d:2e:27:09:7d:b1:b1:6d:5b: e2:c5:6f:57:58:55:ed:aa:63:92:b7:19:1d:aa:2e: ab:37:c5:1f:7a:af:7d:d7:71:73:6e:d7:ce:87:10: f4:20:3e:f6:2d:e8:55:b0:72:27:42:27:65:a2:ef: 69:a9:93:1f:01:ad:55:02:af:53:96:c0:ee:85:5c: bd:b4:f9:f5:71:f7:17:7a:95:38:7b:80:5b:b2:8a: e2:38:bb:95:3d:4b:72:34:b8:52:9c:94:a4:4d:cf: b3:fd:b7:71:9d:e2:92:78:98:1c:ea:c6:49:ba:a5: d5:c9:b1:3a:13:bc:0e:67:64:de:64:4d:1a:91:bd: f2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3B:40:87:D5:E8:CE:2E:52:EC:91:22:02:7B:33:EE:38:CC:5F:A3 X509v3 Authority Key Identifier: keyid:57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:67:c5:f6:0f:bb:15:27:2e:5c:fc:4d:47:28:c4:77:ea:70: ed:6a:e0:fe:7f:c7:41:5f:de:b2:0d:37:53:3e:73:8a:4a:2f: ae:76:13:2b:2a:45:94:64:5c:7b:4b:39:f0:97:9d:ef:63:dc: 2d:8b:2c:c5:27:61:22:b7:d1:c6:20:d5:44:16:84:7d:d9:e1: 54:46:0f:aa:72:8b:16:0d:df:f6:6e:85:77:44:ad:43:94:f9: a1:a2:67:8f:cb:25:be:8a:68:5c:c5:f8:4e:e4:e2:1e:78:21: 26:99:e2:63:56:73:01:5a:bb:1c:ec:f5:a8:f5:cb:cc:1f:f5: 4f:1f:8f:92:0d:97:f8:44:d9:16:9f:54:50:38:00:f8:8c:6d: 8c:e0:27:f7:98:a7:79:9f:18:f5:2b:75:5e:17:7b:8f:09:10: e1:03:e9:c7:44:9e:50:ac:41:02:08:9e:87:34:14:af:a2:ab: 19:79:46:18:e6:10:b0:23:7f:cf:af:a4:38:2b:c6:5d:0d:7c: ea:13:ef:da:8a:86:55:a4:79:87:94:9f:66:00:e4:2a:4f:75: 04:74:cf:29:c5:5b:e9:53:f1:73:e7:0e:51:37:08:2f:73:42: d2:b3:0b:2a:da:25:13:b5:39:c1:73:1c:7b:fd:71:33:cd:69: 3e:ed:8d:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZATTpAOO3+3onBJBCqwtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ZDAxMWI1NzdmOTBhYTdlOGUwY2M1MjI5ZTFmMjk5ODM4 MjQ1OTMwHhcNMjUxMjA2MDIwMDU1WhcNMjUxMjA3MDIwMDU1WjAzMTEwLwYDVQQD Eyg4ZDNiNDA4N2Q1ZThjZTJlNTJlYzkxMjIwMjdiMzNlZTM4Y2M1ZmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxX1QT9aWI+8jffduXH5KwANXhB4w Ia/0hxZBebA8pu3xXCpEZn1coAP5yN3xn8zJso+Fgdh86CXjYxDvP3F0MutO0fcZ a/JiKp2aTWDVd6FdhmxZr+d51Yts7MNcFUNEu+52n3ZP/Qci4rrPGvXx79IZ57ND 1Uh8IdqQHdNNLicJfbGxbVvixW9XWFXtqmOStxkdqi6rN8Ufeq9913FzbtfOhxD0 ID72LehVsHInQidlou9pqZMfAa1VAq9TlsDuhVy9tPn1cfcXepU4e4BbsoriOLuV PUtyNLhSnJSkTc+z/bdxneKSeJgc6sZJuqXVybE6E7wOZ2TeZE0akb3yYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI07QIfV6M4uUuyRIgJ7M+44zF+jMB8GA1UdIwQY MBaAFFfQEbV3+Qqn6ODMUinh8pmDgkWTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjlBUnRYZjVDcWZvNE14U0tlSHltWU9DUlpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lN2U4ZmUtZWRlNi00OWU1LWEyZGMt MGQxZGEzNzEzZmU5LzEvVjlBUnRYZjVDcWZvNE14U0tlSHltWU9DUlpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9lN2U4ZmUtZWRlNi00OWU1LWEyZGMtMGQxZGEzNzEzZmU5 LzEvVjlBUnRYZjVDcWZvNE14U0tlSHltWU9DUlpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0GfF9g+7 FScuXPxNRyjEd+pw7Wrg/n/HQV/esg03Uz5zikovrnYTKypFlGRce0s58Jed72Pc LYssxSdhIrfRxiDVRBaEfdnhVEYPqnKLFg3f9m6Fd0StQ5T5oaJnj8slvopoXMX4 TuTiHnghJpniY1ZzAVq7HOz1qPXLzB/1Tx+Pkg2X+ETZFp9UUDgA+IxtjOAn95in eZ8Y9St1Xhd7jwkQ4QPpx0SeUKxBAgiehzQUr6KrGXlGGOYQsCN/z6+kOCvGXQ18 6hPv2oqGVaR5h5SfZgDkKk91BHTPKcVb6VPxc+cOUTcIL3NC0rMLKtolE7U5wXMc e/1xM81pPu2Nnw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:43 2025 by rpki-client