This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft File: V9wqO2671XpOSCmt0_KgKnbld4k.mft (raw, json) Hash identifier: zm9iCGQs8vOZKWS9mL4U8XeV4JAY1VZTWfnTf52iobM= Subject key identifier: 35:8B:BF:13:0A:F2:13:D3:44:F2:CE:BE:67:B7:3D:17:63:FB:7E:4E Authority key identifier: 57:DC:2A:3B:6E:BB:D5:7A:4E:48:29:AD:D3:F2:A0:2A:76:E5:77:89 Certificate issuer: /CN=57dc2a3b6ebbd57a4e4829add3f2a02a76e57789 Certificate serial: 019AF61C91FA9856401F08DFA070F73DCDD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft Manifest number: 045A Signing time: Sun 07 Dec 2025 00:00:58 +0000 Manifest this update: Sun 07 Dec 2025 00:00:58 +0000 Manifest next update: Mon 08 Dec 2025 00:00:58 +0000 Files and hashes: 1: V9wqO2671XpOSCmt0_KgKnbld4k.crl (hash: YPVP2lgmnVrdCPavqRCgjfycCmjfuvFQVbXEYrvtRBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.crl rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:91:fa:98:56:40:1f:08:df:a0:70:f7:3d:cd:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57dc2a3b6ebbd57a4e4829add3f2a02a76e57789 Validity Not Before: Dec 7 00:00:58 2025 GMT Not After : Dec 8 00:00:58 2025 GMT Subject: CN=358bbf130af213d344f2cebe67b73d1763fb7e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:84:85:c7:df:a7:fe:ea:67:9d:f3:c4:ee:a1: 24:d6:2a:36:ba:cf:ac:02:18:ec:8f:6d:9e:30:a8: 80:27:f5:ce:86:a6:07:1a:c0:da:06:d4:a9:60:91: 8b:6c:09:6b:0a:45:bd:1e:cd:3e:56:89:b3:3f:76: 0e:ee:5b:58:47:36:e5:99:06:ef:33:aa:86:02:06: c8:a4:85:0d:07:3f:99:c3:f7:5a:c7:da:a8:0d:70: f0:05:92:d5:74:94:d8:c2:e1:95:e4:cc:96:df:c9: 21:60:3b:53:8e:fa:ed:7e:c5:b5:79:e7:d9:2a:ab: 1c:4b:46:7e:5e:56:7f:86:87:58:45:8f:05:84:fb: 7c:1f:a4:b2:6a:42:28:4f:ca:9f:0e:2d:16:18:ae: af:87:b2:a6:30:ea:9c:85:ea:e3:d0:9e:c5:86:5c: 06:d9:e3:e1:02:52:4d:a8:4d:74:70:25:84:21:e1: 0d:fc:c7:dd:6a:8c:30:7c:1a:60:56:65:94:06:3d: 0a:76:b0:c4:cf:01:fc:72:86:3b:61:e7:f0:f9:40: 8b:1d:02:c7:fd:be:37:9c:a6:ef:5e:df:e2:ed:e9: c9:2f:2d:78:65:50:06:3b:a1:6b:5c:b1:be:00:b7: c4:6e:b2:66:1e:d7:c5:a8:28:f2:67:75:7c:28:17: 2e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8B:BF:13:0A:F2:13:D3:44:F2:CE:BE:67:B7:3D:17:63:FB:7E:4E X509v3 Authority Key Identifier: keyid:57:DC:2A:3B:6E:BB:D5:7A:4E:48:29:AD:D3:F2:A0:2A:76:E5:77:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:5f:40:dd:a1:a1:b0:1b:8b:75:d3:d5:98:9a:dc:61:92:44: 3a:65:ea:d0:97:be:21:1b:12:52:a5:6b:ee:3c:f0:8e:20:5e: 2b:d4:49:c9:fb:c6:24:02:7f:b5:86:11:db:6d:85:1a:d4:54: 35:16:9f:b6:3e:4b:09:2f:d3:b5:50:10:30:ee:78:86:be:f4: 1e:07:a4:5a:41:8f:bf:26:70:1e:e7:a8:92:97:ce:55:e6:9d: 8e:10:19:1b:e7:21:b1:c4:f9:98:9d:92:c5:92:c3:22:f6:86: 3a:ef:ba:8e:b7:0e:64:ff:b1:a0:8d:be:e3:0a:82:00:fc:0d: a0:ce:01:1b:5b:70:fb:03:cc:5d:c4:a8:01:ff:92:40:ec:a9: 91:a4:4c:1d:bf:ef:cb:92:95:48:7d:32:71:f6:3a:84:78:6e: d6:1b:31:45:61:0b:40:61:8f:f3:db:68:ae:6e:58:58:64:e6: 8f:9e:5d:b9:18:e8:83:a9:fb:8c:6b:5e:41:35:c2:da:4d:a2: 7b:28:1a:c0:78:3b:f2:de:82:a6:fc:23:49:c4:86:ff:a7:8a: 73:6c:34:53:63:d0:db:31:f4:47:83:ed:c6:d1:2a:c9:a5:03: f6:49:48:21:ea:51:6d:a1:c8:1f:d7:0f:46:b0:1a:6b:f6:49: c3:af:28:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HJH6mFZAHwjfoHD3Pc3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ZGMyYTNiNmViYmQ1N2E0ZTQ4MjlhZGQzZjJhMDJhNzZl NTc3ODkwHhcNMjUxMjA3MDAwMDU4WhcNMjUxMjA4MDAwMDU4WjAzMTEwLwYDVQQD EygzNThiYmYxMzBhZjIxM2QzNDRmMmNlYmU2N2I3M2QxNzYzZmI3ZTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroSFx9+n/upnnfPE7qEk1io2us+s Ahjsj22eMKiAJ/XOhqYHGsDaBtSpYJGLbAlrCkW9Hs0+VomzP3YO7ltYRzblmQbv M6qGAgbIpIUNBz+Zw/dax9qoDXDwBZLVdJTYwuGV5MyW38khYDtTjvrtfsW1eefZ KqscS0Z+XlZ/hodYRY8FhPt8H6SyakIoT8qfDi0WGK6vh7KmMOqcherj0J7FhlwG 2ePhAlJNqE10cCWEIeEN/MfdaowwfBpgVmWUBj0KdrDEzwH8coY7Yefw+UCLHQLH /b43nKbvXt/i7enJLy14ZVAGO6FrXLG+ALfEbrJmHtfFqCjyZ3V8KBcuwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWLvxMK8hPTRPLOvme3PRdj+35OMB8GA1UdIwQY MBaAFFfcKjtuu9V6TkgprdPyoCp25XeJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjl3cU8yNjcxWHBPU0NtdDBfS2dLbmJsZDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS82NTQ1MDQtNTRlMS00NTAyLWFiMjIt NDA0NTlkNjkzNGFlLzEvVjl3cU8yNjcxWHBPU0NtdDBfS2dLbmJsZDRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS82NTQ1MDQtNTRlMS00NTAyLWFiMjItNDA0NTlkNjkzNGFl LzEvVjl3cU8yNjcxWHBPU0NtdDBfS2dLbmJsZDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARF9A3aGh sBuLddPVmJrcYZJEOmXq0Je+IRsSUqVr7jzwjiBeK9RJyfvGJAJ/tYYR222FGtRU NRaftj5LCS/TtVAQMO54hr70HgekWkGPvyZwHueokpfOVeadjhAZG+chscT5mJ2S xZLDIvaGOu+6jrcOZP+xoI2+4wqCAPwNoM4BG1tw+wPMXcSoAf+SQOypkaRMHb/v y5KVSH0ycfY6hHhu1hsxRWELQGGP89torm5YWGTmj55duRjog6n7jGteQTXC2k2i eygawHg78t6CpvwjScSG/6eKc2w0U2PQ2zH0R4PtxtEqyaUD9klIIepRbaHIH9cP RrAaa/ZJw68opw== -----END CERTIFICATE-----Generated at Sun Dec 7 06:09:01 2025 by rpki-client