This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft File: V9mTMZ3MkpdpQxiyRus29V_xNw4.mft (raw, json) Hash identifier: 7Yp6b8oMPYX+neANhvUWR+djfGrFeqLp2abwLvLm020= Subject key identifier: 15:EF:12:7A:D7:4A:97:BE:8A:1B:42:F8:93:08:9E:E5:7E:07:84:6E Authority key identifier: 57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E Certificate issuer: /CN=57d993319dcc9297694318b246eb36f55ff1370e Certificate serial: 019AF0BEE452252E82F1BDAED33BE3FA3013 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft Manifest number: 1154 Signing time: Fri 05 Dec 2025 23:00:33 +0000 Manifest this update: Fri 05 Dec 2025 23:00:33 +0000 Manifest next update: Sat 06 Dec 2025 23:00:33 +0000 Files and hashes: 1: V9mTMZ3MkpdpQxiyRus29V_xNw4.crl (hash: 14zKat3w3EpTVegoahMjL6NRB6HhjYIexGEsYkunjj8=) 2: VzLG7lyXvVkTshnFEB9kwkc4pkQ.roa (hash: wIvPT3vGaYWNNjOSrAOSHFQIN6FXu9GPlBXc77PLE/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:e4:52:25:2e:82:f1:bd:ae:d3:3b:e3:fa:30:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57d993319dcc9297694318b246eb36f55ff1370e Validity Not Before: Dec 5 23:00:33 2025 GMT Not After : Dec 6 23:00:33 2025 GMT Subject: CN=15ef127ad74a97be8a1b42f893089ee57e07846e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d7:bd:10:ad:09:fc:57:e0:45:4c:ec:c7:3f: d7:40:43:4f:a6:e3:10:27:ee:0f:f1:9f:a9:19:18: 23:12:2a:b3:33:cd:c0:91:75:9f:99:36:2a:da:c3: b0:b7:a1:84:06:a2:c6:fa:4b:5d:48:ad:f2:86:db: c1:de:f6:99:c6:cd:16:fe:c6:24:ce:7a:88:8e:16: 5f:76:26:8e:a2:36:42:5b:ec:40:dc:d3:e3:5c:9b: 49:3d:43:85:aa:7a:bd:e7:55:33:19:f6:a5:b4:59: c0:7e:f1:59:fe:9d:7d:a3:80:0f:e6:6b:2a:52:70: 76:72:0a:f9:3a:ed:1b:85:4e:f7:f9:e0:cb:13:0e: e2:93:42:fe:b5:00:61:80:48:22:32:f1:f5:39:93: 36:1a:36:68:97:aa:88:55:c6:66:7b:b7:56:83:c2: 8e:ca:fe:7b:d7:ec:3e:67:63:9a:3b:36:18:b5:e5: 99:84:e6:67:a9:04:9e:d1:2e:45:2c:da:8c:20:1a: 96:ec:0c:29:72:92:b8:87:4f:4b:91:a9:37:64:7b: 79:fa:b6:e6:b1:ce:2b:6c:01:e7:b3:92:b7:cd:21: 8c:34:0b:85:d5:43:5a:7b:db:89:78:74:82:4c:49: a7:e3:d0:d9:6b:4c:46:75:cc:1b:73:8e:59:24:e4: 85:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:EF:12:7A:D7:4A:97:BE:8A:1B:42:F8:93:08:9E:E5:7E:07:84:6E X509v3 Authority Key Identifier: keyid:57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:56:0f:bb:b4:c4:2f:db:7a:2e:50:eb:8b:72:08:0e:74:d4: a8:46:c1:3e:8e:56:88:6a:51:73:ad:37:be:1f:10:19:26:24: 6e:1a:80:9d:63:1e:68:17:42:60:fb:57:0e:e6:6a:d4:8d:f0: 33:9b:cc:b3:d0:60:d8:e6:da:f1:2e:74:0d:d9:21:c3:55:52: 29:5a:08:97:d8:7f:b4:ad:30:6a:5d:0a:9e:c8:25:05:21:4f: 09:a1:4c:6f:2b:5f:03:a1:35:04:56:b0:dd:7a:6d:4c:ae:6e: b9:63:9c:af:83:af:5e:ed:d8:5e:ca:02:05:33:ea:e3:e8:28: 8f:a0:49:55:10:f0:4a:e3:9b:c8:bf:44:84:08:63:a9:8b:d7: a6:1b:12:25:9a:b1:3c:80:d6:1d:21:7c:b5:2d:43:68:6f:dc: 14:61:2e:f0:f9:35:24:6f:fd:3f:00:1f:d9:ba:ea:cf:b1:d7: e4:99:d6:eb:1c:5e:68:e9:47:34:3e:98:25:13:d5:ea:a6:b2: 7f:07:57:c3:e1:24:08:bd:3d:43:7a:73:cc:87:a0:09:33:2c: fb:49:aa:21:61:5c:4c:d1:a8:95:62:dd:36:52:cb:b1:08:72: ce:35:44:5b:04:0d:9b:53:b3:61:3f:17:cd:d9:6b:68:ad:63: df:8b:41:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvuRSJS6C8b2u0zvj+jATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ZDk5MzMxOWRjYzkyOTc2OTQzMThiMjQ2ZWIzNmY1NWZm MTM3MGUwHhcNMjUxMjA1MjMwMDMzWhcNMjUxMjA2MjMwMDMzWjAzMTEwLwYDVQQD EygxNWVmMTI3YWQ3NGE5N2JlOGExYjQyZjg5MzA4OWVlNTdlMDc4NDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9e9EK0J/FfgRUzsxz/XQENPpuMQ J+4P8Z+pGRgjEiqzM83AkXWfmTYq2sOwt6GEBqLG+ktdSK3yhtvB3vaZxs0W/sYk znqIjhZfdiaOojZCW+xA3NPjXJtJPUOFqnq951UzGfaltFnAfvFZ/p19o4AP5msq UnB2cgr5Ou0bhU73+eDLEw7ik0L+tQBhgEgiMvH1OZM2GjZol6qIVcZme7dWg8KO yv571+w+Z2OaOzYYteWZhOZnqQSe0S5FLNqMIBqW7AwpcpK4h09Lkak3ZHt5+rbm sc4rbAHns5K3zSGMNAuF1UNae9uJeHSCTEmn49DZa0xGdcwbc45ZJOSFKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXvEnrXSpe+ihtC+JMInuV+B4RuMB8GA1UdIwQY MBaAFFfZkzGdzJKXaUMYskbrNvVf8TcOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjltVE1aM01rcGRwUXhpeVJ1czI5Vl94Tnc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wZDMyZmUtYzlkYS00NDkzLWFiOGEt MDNhZmFjZWE3MDEwLzEvVjltVE1aM01rcGRwUXhpeVJ1czI5Vl94Tnc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8wZDMyZmUtYzlkYS00NDkzLWFiOGEtMDNhZmFjZWE3MDEw LzEvVjltVE1aM01rcGRwUXhpeVJ1czI5Vl94Tnc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVYPu7TE L9t6LlDri3IIDnTUqEbBPo5WiGpRc603vh8QGSYkbhqAnWMeaBdCYPtXDuZq1I3w M5vMs9Bg2Oba8S50Ddkhw1VSKVoIl9h/tK0wal0KnsglBSFPCaFMbytfA6E1BFaw 3XptTK5uuWOcr4OvXu3YXsoCBTPq4+goj6BJVRDwSuObyL9EhAhjqYvXphsSJZqx PIDWHSF8tS1DaG/cFGEu8Pk1JG/9PwAf2brqz7HX5JnW6xxeaOlHND6YJRPV6qay fwdXw+EkCL09Q3pzzIegCTMs+0mqIWFcTNGolWLdNlLLsQhyzjVEWwQNm1OzYT8X zdlraK1j34tBLw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:53 2025 by rpki-client