This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.mft File: V8SpO0nzC6dgmbvaVi1HuSBIe_Q.mft (raw, json) Hash identifier: nKZaj6uXwVP0Kz+6Y6XaSV0TKzGHf6psWc5/9mrtXDo= Subject key identifier: 75:01:61:CA:00:41:67:42:61:60:08:23:B5:24:AD:AA:90:A4:9B:84 Authority key identifier: 57:C4:A9:3B:49:F3:0B:A7:60:99:BB:DA:56:2D:47:B9:20:48:7B:F4 Certificate issuer: /CN=57c4a93b49f30ba76099bbda562d47b920487bf4 Certificate serial: 019AF49BB3E3F289DD0D16B72717A132A979 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.mft Manifest number: E6 Signing time: Sat 06 Dec 2025 17:00:35 +0000 Manifest this update: Sat 06 Dec 2025 17:00:35 +0000 Manifest next update: Sun 07 Dec 2025 17:00:35 +0000 Files and hashes: 1: V8SpO0nzC6dgmbvaVi1HuSBIe_Q.crl (hash: BR4f/B2r3ISu7/xmQbS98IcTU8UPpkU1TSjpYhrfwhA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:b3:e3:f2:89:dd:0d:16:b7:27:17:a1:32:a9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c4a93b49f30ba76099bbda562d47b920487bf4 Validity Not Before: Dec 6 17:00:35 2025 GMT Not After : Dec 7 17:00:35 2025 GMT Subject: CN=750161ca0041674261600823b524adaa90a49b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:23:6f:69:6d:a7:41:33:01:60:c7:d9:e5:28: 09:26:23:2a:c4:10:4e:80:ac:19:35:c5:7d:86:22: 4c:04:c0:b0:76:0a:53:9f:2d:b4:f0:32:03:21:5b: 53:47:a4:44:d8:ba:ea:23:4f:3c:90:0c:8d:aa:a0: fb:1f:a6:1d:2d:c0:d9:a5:de:aa:e1:e3:d6:aa:15: c6:60:32:be:ab:43:8c:94:66:f1:64:e7:e7:ac:0e: 5b:e5:1d:f2:5a:0b:93:23:6f:bb:b6:91:a3:e9:fe: 02:05:d8:04:50:7a:1a:06:b0:9b:e0:21:29:84:b8: 66:19:5a:29:7b:33:c6:6c:af:cd:33:8c:ca:af:29: d8:a6:38:c3:5e:2f:47:63:d2:c1:dd:ac:71:c8:41: 49:28:0c:84:8c:16:8b:08:b5:0f:16:2e:1d:70:6d: 74:b9:29:d3:53:3e:21:ee:b6:3a:d7:73:51:29:8c: d9:2d:17:d8:7c:73:64:88:dd:53:58:15:c8:ea:1c: 5a:1a:81:07:ac:81:9f:45:f4:f3:b9:36:61:49:57: e0:b5:86:ea:ce:a8:db:a6:ed:cb:74:77:c2:89:3c: ab:f1:22:50:8c:0c:3b:f8:c5:d9:86:4c:65:99:c6: 98:56:f9:52:3f:a4:60:15:a0:56:70:fa:2f:01:b5: de:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:01:61:CA:00:41:67:42:61:60:08:23:B5:24:AD:AA:90:A4:9B:84 X509v3 Authority Key Identifier: keyid:57:C4:A9:3B:49:F3:0B:A7:60:99:BB:DA:56:2D:47:B9:20:48:7B:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:bf:a4:c6:af:f7:95:99:de:97:dc:1f:b7:12:9a:28:02:a3: e7:41:d5:ef:f0:e2:58:bb:54:92:f1:0c:b7:64:0b:3b:53:bf: 49:ff:ab:b4:5e:53:4a:3b:ca:1b:3d:e7:df:2a:1b:49:f7:ab: bd:ae:78:6a:d0:fc:37:40:ee:6b:ac:00:8d:10:90:ce:75:72: bf:e3:55:bf:41:2e:89:d1:85:92:58:69:02:3b:e2:af:36:2b: a4:5d:d6:f8:e3:ef:de:8b:6d:7c:53:66:64:e5:1a:bf:08:22: 79:5b:60:e7:ae:cb:47:23:e9:ce:c5:a5:2d:e1:a6:7d:f4:50: cf:5a:99:44:04:61:21:84:ce:fd:18:e8:2a:e0:17:cf:b0:6d: f6:95:5d:1c:8a:70:e8:94:2d:05:a1:49:b1:0c:3d:03:36:56: 40:72:44:bf:db:e8:72:28:bb:2f:ad:26:3c:6a:15:7c:d0:a8: fb:44:a8:d7:83:73:b2:fc:b4:e7:83:b4:68:d2:89:e3:2c:02: e6:71:0f:f2:04:50:c5:bf:90:af:ff:d9:1b:24:98:82:5a:de: 5c:a0:0e:4e:8f:6a:83:fd:f3:10:61:44:d5:de:cf:aa:70:64: 4e:0d:c8:a3:3b:3f:ea:14:eb:07:c9:d2:7a:1c:d6:ef:e4:77: 25:82:be:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m7Pj8ondDRa3JxehMql5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzRhOTNiNDlmMzBiYTc2MDk5YmJkYTU2MmQ0N2I5MjA0 ODdiZjQwHhcNMjUxMjA2MTcwMDM1WhcNMjUxMjA3MTcwMDM1WjAzMTEwLwYDVQQD Eyg3NTAxNjFjYTAwNDE2NzQyNjE2MDA4MjNiNTI0YWRhYTkwYTQ5Yjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCNvaW2nQTMBYMfZ5SgJJiMqxBBO gKwZNcV9hiJMBMCwdgpTny208DIDIVtTR6RE2LrqI088kAyNqqD7H6YdLcDZpd6q 4ePWqhXGYDK+q0OMlGbxZOfnrA5b5R3yWguTI2+7tpGj6f4CBdgEUHoaBrCb4CEp hLhmGVopezPGbK/NM4zKrynYpjjDXi9HY9LB3axxyEFJKAyEjBaLCLUPFi4dcG10 uSnTUz4h7rY613NRKYzZLRfYfHNkiN1TWBXI6hxaGoEHrIGfRfTzuTZhSVfgtYbq zqjbpu3LdHfCiTyr8SJQjAw7+MXZhkxlmcaYVvlSP6RgFaBWcPovAbXe0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUBYcoAQWdCYWAII7UkraqQpJuEMB8GA1UdIwQY MBaAFFfEqTtJ8wunYJm72lYtR7kgSHv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhTcE8wbnpDNmRnbWJ2YVZpMUh1U0JJZV9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82ZGVhZmQtZDFiYy00MTMzLWFlY2Et MTQ4NDkwMzY4YjljLzEvVjhTcE8wbnpDNmRnbWJ2YVZpMUh1U0JJZV9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS82ZGVhZmQtZDFiYy00MTMzLWFlY2EtMTQ4NDkwMzY4Yjlj LzEvVjhTcE8wbnpDNmRnbWJ2YVZpMUh1U0JJZV9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7+kxq/3 lZnel9wftxKaKAKj50HV7/DiWLtUkvEMt2QLO1O/Sf+rtF5TSjvKGz3n3yobSfer va54atD8N0Dua6wAjRCQznVyv+NVv0EuidGFklhpAjvirzYrpF3W+OPv3ottfFNm ZOUavwgieVtg567LRyPpzsWlLeGmffRQz1qZRARhIYTO/RjoKuAXz7Bt9pVdHIpw 6JQtBaFJsQw9AzZWQHJEv9vocii7L60mPGoVfNCo+0So14Nzsvy054O0aNKJ4ywC 5nEP8gRQxb+Qr//ZGySYglreXKAOTo9qg/3zEGFE1d7PqnBkTg3Iozs/6hTrB8nS ehzW7+R3JYK+IQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:32:54 2025 by rpki-client