This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft File: 0vcAvspCZT5kq0NaLwpPPZpQFLA.mft (raw, json) Hash identifier: 6xSsIpPoO/hs5iCxZiwciAouQpFozxzhkLNr8w3CKTE= Subject key identifier: E9:F4:66:15:E8:3E:CF:B1:00:43:ED:95:28:A9:C2:CC:A1:8C:11:7D Authority key identifier: D2:F7:00:BE:CA:42:65:3E:64:AB:43:5A:2F:0A:4F:3D:9A:50:14:B0 Certificate issuer: /CN=d2f700beca42653e64ab435a2f0a4f3d9a5014b0 Certificate serial: 019AF12CF9FE89DC53EBAB72B678455D77CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vcAvspCZT5kq0NaLwpPPZpQFLA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft Manifest number: 175B Signing time: Sat 06 Dec 2025 01:00:47 +0000 Manifest this update: Sat 06 Dec 2025 01:00:47 +0000 Manifest next update: Sun 07 Dec 2025 01:00:47 +0000 Files and hashes: 1: 0vcAvspCZT5kq0NaLwpPPZpQFLA.crl (hash: a4HP53js/EvqTZpKuMBXA5zcz6NALw7BTlpcrXJeEA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.crl rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft rsync://rpki.ripe.net/repository/DEFAULT/0vcAvspCZT5kq0NaLwpPPZpQFLA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f9:fe:89:dc:53:eb:ab:72:b6:78:45:5d:77:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2f700beca42653e64ab435a2f0a4f3d9a5014b0 Validity Not Before: Dec 6 01:00:47 2025 GMT Not After : Dec 7 01:00:47 2025 GMT Subject: CN=e9f46615e83ecfb10043ed9528a9c2cca18c117d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b4:d0:0c:8b:70:92:61:47:47:02:38:d1:a3: 90:45:a1:aa:12:4f:3d:c7:d7:ce:02:92:81:63:9a: ca:a1:9d:82:ed:e0:2e:10:fb:ee:0d:86:08:c8:c6: c7:62:b9:5e:6f:dc:21:44:9d:6c:12:41:d8:19:2c: 3d:b4:e2:13:29:a8:74:af:03:9d:b2:82:b6:5f:a3: da:d8:ea:42:cd:7a:74:74:e9:f9:51:3c:a9:5a:e5: 3d:8a:d6:dd:c9:39:06:36:e7:b2:22:2c:91:cf:39: 96:e0:12:3f:02:a6:52:42:80:b1:56:ff:a0:a6:0a: 47:c9:b3:c9:a0:05:9a:41:e9:72:dc:2e:05:ed:6f: e9:ec:b9:99:c1:7b:cc:d6:06:73:8c:fb:fe:d3:18: 4c:eb:65:fd:bf:94:4e:f7:2d:b7:c3:06:6a:40:a6: 75:af:c7:71:3d:19:d1:9c:34:a9:a0:d7:4c:9b:76: 60:a6:b9:6c:fd:03:0b:e4:5f:bc:7b:73:dd:4a:dc: 32:ea:1a:0d:e4:d8:89:ed:b3:f7:fe:bd:08:7c:d8: df:85:b0:cb:cf:e6:87:27:34:a9:69:da:16:3d:5d: f8:b0:a2:5a:44:9c:c2:62:11:80:c9:67:25:a8:ba: 05:db:bb:37:b2:21:bf:d5:06:1e:d5:2e:76:dd:cc: ff:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F4:66:15:E8:3E:CF:B1:00:43:ED:95:28:A9:C2:CC:A1:8C:11:7D X509v3 Authority Key Identifier: keyid:D2:F7:00:BE:CA:42:65:3E:64:AB:43:5A:2F:0A:4F:3D:9A:50:14:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vcAvspCZT5kq0NaLwpPPZpQFLA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:0b:f9:09:d8:3b:12:24:90:24:a6:4b:b1:6c:36:53:60:b4: 39:29:22:b0:51:15:91:c9:74:da:9a:54:b4:d4:c1:9f:d0:e1: 5e:7e:98:dd:d5:60:b2:43:1b:ed:d5:97:5c:ea:e1:0d:cb:23: a8:5c:33:1a:80:50:54:d6:b6:76:db:f5:be:fe:82:2e:e2:2b: c5:f6:34:b4:3f:5d:c6:ad:13:3d:a4:a7:a1:d3:1d:36:b2:c9: fb:5c:10:bc:12:1f:11:31:ac:1f:e2:b9:70:88:ba:b8:53:d6: e9:ff:e0:92:88:df:27:70:2d:fd:9b:f4:25:5a:22:e3:d1:19: 7c:4c:ca:c0:b2:6c:08:15:d9:9f:4b:b6:96:5a:63:fa:b9:d9: 48:72:d3:ed:56:4f:9c:73:e4:5d:2f:e5:2b:90:ce:b1:cb:6b: 91:89:2a:16:38:b1:49:56:81:9c:30:9d:0d:76:c0:3a:29:5b: 51:5a:5a:40:5f:67:42:3d:34:d2:af:ee:14:90:72:00:b0:8e: 7c:95:f6:b1:64:0f:12:ff:f0:21:67:02:09:97:f8:3e:1b:b0: 8e:d9:6f:7f:68:f0:e4:37:91:de:d0:45:2b:22:99:fc:9b:4a: 71:e8:70:92:81:17:46:62:81:cc:6f:92:e9:dc:4e:12:82:8b: fe:d8:ae:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPn+idxT66tytnhFXXfOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZjcwMGJlY2E0MjY1M2U2NGFiNDM1YTJmMGE0ZjNkOWE1 MDE0YjAwHhcNMjUxMjA2MDEwMDQ3WhcNMjUxMjA3MDEwMDQ3WjAzMTEwLwYDVQQD EyhlOWY0NjYxNWU4M2VjZmIxMDA0M2VkOTUyOGE5YzJjY2ExOGMxMTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bTQDItwkmFHRwI40aOQRaGqEk89 x9fOApKBY5rKoZ2C7eAuEPvuDYYIyMbHYrleb9whRJ1sEkHYGSw9tOITKah0rwOd soK2X6Pa2OpCzXp0dOn5UTypWuU9itbdyTkGNueyIiyRzzmW4BI/AqZSQoCxVv+g pgpHybPJoAWaQely3C4F7W/p7LmZwXvM1gZzjPv+0xhM62X9v5RO9y23wwZqQKZ1 r8dxPRnRnDSpoNdMm3Zgprls/QML5F+8e3PdStwy6hoN5NiJ7bP3/r0IfNjfhbDL z+aHJzSpadoWPV34sKJaRJzCYhGAyWclqLoF27s3siG/1QYe1S523cz/RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOn0ZhXoPs+xAEPtlSipwsyhjBF9MB8GA1UdIwQY MBaAFNL3AL7KQmU+ZKtDWi8KTz2aUBSwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHZjQXZzcENaVDVrcTBOYUx3cFBQWnBRRkxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wNzUxMmEtMTJjOC00ODk1LWIzMmYt NzVjN2JhMWMwNzNmLzEvMHZjQXZzcENaVDVrcTBOYUx3cFBQWnBRRkxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8wNzUxMmEtMTJjOC00ODk1LWIzMmYtNzVjN2JhMWMwNzNm LzEvMHZjQXZzcENaVDVrcTBOYUx3cFBQWnBRRkxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQv5Cdg7 EiSQJKZLsWw2U2C0OSkisFEVkcl02ppUtNTBn9DhXn6Y3dVgskMb7dWXXOrhDcsj qFwzGoBQVNa2dtv1vv6CLuIrxfY0tD9dxq0TPaSnodMdNrLJ+1wQvBIfETGsH+K5 cIi6uFPW6f/gkojfJ3At/Zv0JVoi49EZfEzKwLJsCBXZn0u2llpj+rnZSHLT7VZP nHPkXS/lK5DOsctrkYkqFjixSVaBnDCdDXbAOilbUVpaQF9nQj000q/uFJByALCO fJX2sWQPEv/wIWcCCZf4Phuwjtlvf2jw5DeR3tBFKyKZ/JtKcehwkoEXRmKBzG+S 6dxOEoKL/tiuhw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:04 2025 by rpki-client