This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft File: 0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft (raw, json) Hash identifier: xgnTBmmPSj7GN8ZitwNEL7uRkolkispBG3va+AEL7gA= Subject key identifier: B3:D9:BF:A8:75:B8:77:10:C2:C8:23:4B:AA:69:BC:3F:12:4C:A7:5E Authority key identifier: D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06 Certificate issuer: /CN=d2b57f59782f941b5d2eb3d4286d5911b179e006 Certificate serial: 019AF2092838BC5744D111A61422DDCF4B7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: 0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl (hash: 8QLN64bHMqiDLE5+4qAtAms0J/CNTUn/3jDBUN1wk2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:28:38:bc:57:44:d1:11:a6:14:22:dd:cf:4b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2b57f59782f941b5d2eb3d4286d5911b179e006 Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=b3d9bfa875b87710c2c8234baa69bc3f124ca75e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e3:e7:ac:59:b9:d6:18:5a:e3:71:7c:4f:05: f6:be:ca:7b:04:b4:7f:6c:3b:04:90:f5:17:78:1d: a2:0f:18:b1:f4:20:d7:89:42:7d:18:f6:ff:03:55: 6d:cd:ed:2f:56:69:54:eb:83:30:26:b7:e0:aa:25: ee:f4:68:de:96:71:90:2c:6c:cf:b3:c2:91:77:45: ce:4b:ea:8a:75:b6:b0:24:9f:1e:61:78:05:b2:e0: 3c:bd:fb:b6:1e:24:9f:9e:b6:25:a5:0b:33:96:7d: 42:3e:9e:7d:b4:64:e8:4b:e3:9e:a5:bc:b3:c0:2e: 4c:04:9d:a7:48:36:d7:8b:c2:89:81:df:3d:65:e0: 19:2a:e2:69:05:80:4c:60:be:45:bb:03:a1:5f:ff: 5b:fc:ec:22:02:e8:77:01:3b:b4:51:bc:b8:d3:50: bb:29:2e:f7:57:fa:b4:f9:1c:81:8f:d2:f1:73:f8: ca:75:bc:f3:c4:86:8d:b7:e0:e9:50:f1:9b:91:c3: dc:83:00:f8:4e:db:07:4e:83:4d:93:89:37:70:86: 63:4b:e6:f3:f9:54:dd:f5:78:ae:e7:ef:ae:3e:3a: de:dc:42:b8:54:be:92:e4:52:fc:f9:37:90:bd:1d: 75:18:33:94:f6:da:ba:e1:d7:1b:9c:49:8d:0c:4e: 7a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D9:BF:A8:75:B8:77:10:C2:C8:23:4B:AA:69:BC:3F:12:4C:A7:5E X509v3 Authority Key Identifier: keyid:D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c7:5f:16:85:54:78:e7:90:50:b3:31:d6:12:a5:3b:9b:f2: cd:14:81:c6:48:38:22:8f:66:de:17:59:6c:b7:0e:2b:d0:71: d8:e0:66:4e:b1:6d:51:cd:64:21:5c:c6:6c:6b:39:e0:27:3e: 1d:fc:ba:b9:25:c2:25:2f:12:b0:bc:87:08:ae:a6:25:6b:09: 25:08:f2:19:c6:56:0f:d3:b8:09:94:e9:7b:31:31:80:11:aa: 4b:01:d1:ea:b9:bf:f6:ea:38:a8:e1:fb:c0:fe:69:ac:20:c3: c5:8a:a4:cc:74:94:0f:94:5e:56:3a:dd:f6:69:6e:ac:1f:60: 5f:d5:fb:f7:8b:8d:e4:15:18:f5:e4:e1:26:ae:07:7f:a5:c3: 24:7e:e2:b9:8b:2d:09:0a:2a:36:42:2f:56:d3:ff:77:54:a1: 12:0f:d8:ea:9e:97:8d:34:ca:0b:88:07:08:7e:f0:d9:7c:83: 23:f9:2e:2d:71:23:9f:0b:e8:f7:2e:5f:da:13:46:1a:de:2b: 2d:69:4d:81:4e:b9:36:e5:b1:87:9f:41:91:bb:c3:27:e5:7a: a4:68:24:1b:c4:d3:75:81:ae:bd:d1:a0:28:e0:4b:51:86:0c: 41:60:5f:ad:aa:29:b6:d3:b6:00:c4:85:1c:bf:1f:17:9a:d7: f8:90:3d:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSg4vFdE0RGmFCLdz0t6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYjU3ZjU5NzgyZjk0MWI1ZDJlYjNkNDI4NmQ1OTExYjE3 OWUwMDYwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD EyhiM2Q5YmZhODc1Yjg3NzEwYzJjODIzNGJhYTY5YmMzZjEyNGNhNzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOPnrFm51hha43F8TwX2vsp7BLR/ bDsEkPUXeB2iDxix9CDXiUJ9GPb/A1Vtze0vVmlU64MwJrfgqiXu9GjelnGQLGzP s8KRd0XOS+qKdbawJJ8eYXgFsuA8vfu2HiSfnrYlpQszln1CPp59tGToS+Oepbyz wC5MBJ2nSDbXi8KJgd89ZeAZKuJpBYBMYL5FuwOhX/9b/OwiAuh3ATu0Uby401C7 KS73V/q0+RyBj9Lxc/jKdbzzxIaNt+DpUPGbkcPcgwD4TtsHToNNk4k3cIZjS+bz +VTd9Xiu5++uPjre3EK4VL6S5FL8+TeQvR11GDOU9tq64dcbnEmNDE56qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPZv6h1uHcQwsgjS6ppvD8STKdeMB8GA1UdIwQY MBaAFNK1f1l4L5QbXS6z1ChtWRGxeeAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NTVlMzUtODdjYy00NDhlLWI3Yjct MDdjYjIyYmY0MjRkLzEvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi84NTVlMzUtODdjYy00NDhlLWI3YjctMDdjYjIyYmY0MjRk LzEvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8dfFoVU eOeQULMx1hKlO5vyzRSBxkg4Io9m3hdZbLcOK9Bx2OBmTrFtUc1kIVzGbGs54Cc+ Hfy6uSXCJS8SsLyHCK6mJWsJJQjyGcZWD9O4CZTpezExgBGqSwHR6rm/9uo4qOH7 wP5prCDDxYqkzHSUD5ReVjrd9mlurB9gX9X794uN5BUY9eThJq4Hf6XDJH7iuYst CQoqNkIvVtP/d1ShEg/Y6p6XjTTKC4gHCH7w2XyDI/kuLXEjnwvo9y5f2hNGGt4r LWlNgU65NuWxh59BkbvDJ+V6pGgkG8TTdYGuvdGgKOBLUYYMQWBfraopttO2AMSF HL8fF5rX+JA9Ww== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:41 2025 by rpki-client