This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft File: V0zsR2DtovCf62939yFCvmmbuMM.mft (raw, json) Hash identifier: PTIGxxyPHbaST99868cB224WP2r/k+d34aQRdMstYnU= Subject key identifier: 75:AB:1E:AA:E1:47:CD:50:78:DB:29:52:19:E9:09:4B:64:2B:2F:29 Authority key identifier: 57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3 Certificate issuer: /CN=574cec4760eda2f09feb6f77f72142be699bb8c3 Certificate serial: 019AF3F7B3BDBE06401B72604FD0A5D1BE75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft Manifest number: 11EC Signing time: Sat 06 Dec 2025 14:01:28 +0000 Manifest this update: Sat 06 Dec 2025 14:01:28 +0000 Manifest next update: Sun 07 Dec 2025 14:01:28 +0000 Files and hashes: 1: V0zsR2DtovCf62939yFCvmmbuMM.crl (hash: xVjfJPL76PM6J+cAhUBosrIMJE2pN/psxtzJwMq3rKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:b3:bd:be:06:40:1b:72:60:4f:d0:a5:d1:be:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=574cec4760eda2f09feb6f77f72142be699bb8c3 Validity Not Before: Dec 6 14:01:28 2025 GMT Not After : Dec 7 14:01:28 2025 GMT Subject: CN=75ab1eaae147cd5078db295219e9094b642b2f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:99:29:b8:5c:4c:b3:62:03:4a:0e:84:d4:36: 6c:75:5d:89:72:99:e4:80:07:cb:ad:84:50:a5:5b: 5a:78:42:58:91:a1:22:8a:8c:22:01:78:36:a6:60: 7d:03:9c:f5:8b:cd:4a:fd:07:f5:21:20:1a:3c:03: 2f:8d:89:49:4a:74:4a:6d:d2:9a:b1:e2:eb:5e:4f: ae:3b:94:95:08:21:1e:74:9d:45:27:90:36:b5:ef: 9a:86:19:7d:36:bb:0a:7b:49:e1:b1:6d:bd:b3:5c: 15:83:59:13:b1:47:14:c9:39:7b:b4:a9:26:64:42: 0b:70:8a:db:4d:67:15:86:07:1b:fb:ee:00:92:ea: b4:ae:57:08:84:51:0e:66:e4:b9:f6:b8:85:7f:c8: 46:2b:04:24:fb:b9:eb:41:3a:be:b9:df:88:54:e2: 20:81:af:c9:04:79:2d:f7:d2:75:ef:fe:e3:4d:ab: cb:86:4d:6a:50:8e:39:b6:e6:1d:21:86:46:54:5d: e7:4e:a3:a9:c3:8d:dc:0b:a7:ae:07:ce:29:61:19: 42:1b:85:7d:8a:8f:84:e8:c0:96:97:ad:f8:67:9e: 65:c6:26:47:d4:9a:93:66:d3:37:9e:4b:aa:65:80: e4:5f:24:84:b4:0d:c8:0d:0a:4e:43:22:b0:60:93: 54:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AB:1E:AA:E1:47:CD:50:78:DB:29:52:19:E9:09:4B:64:2B:2F:29 X509v3 Authority Key Identifier: keyid:57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:40:12:34:72:14:74:85:0c:3c:08:a9:40:bb:be:1b:09:88: fa:11:d3:49:72:b1:ab:5e:22:7d:2a:f7:32:03:d2:ac:17:c9: 05:82:e5:56:3a:90:9b:b5:5d:35:82:2b:63:a7:58:56:46:57: f0:11:0e:11:e9:a2:19:f6:7e:7f:1b:a3:d1:b5:3f:c6:fa:7d: f8:c0:8a:a1:0e:a8:60:cf:2a:c9:92:8d:5a:7a:fb:a3:f5:30: de:73:e5:a1:16:2d:a3:ff:16:fc:fa:b1:b7:4b:bd:dc:53:f4: d0:fb:a0:e7:a5:41:66:14:91:97:32:a3:38:8b:6a:59:30:84: 83:86:17:76:d5:a4:f6:0d:50:84:32:3d:9a:e6:bb:09:23:91: ed:27:0d:4f:53:ef:1d:9c:b7:50:b8:7c:3e:e3:f4:d4:ef:3f: f3:23:1b:d4:1c:24:e9:78:d7:b0:40:f9:36:87:d0:28:5b:5c: 96:01:b5:f1:f7:50:6f:da:7e:fd:85:7c:14:7d:ec:d6:55:f0: 0a:7b:d2:e0:60:88:88:01:12:4e:89:2b:c9:d4:5a:ce:dd:5a: 06:0a:8f:2e:52:32:43:a5:fb:25:7b:ed:d4:a7:32:40:3f:a1: d3:29:9c:40:6b:2e:72:8b:d1:47:56:3d:6c:9f:00:e5:b1:cf: 1d:04:18:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz97O9vgZAG3JgT9Cl0b51MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NGNlYzQ3NjBlZGEyZjA5ZmViNmY3N2Y3MjE0MmJlNjk5 YmI4YzMwHhcNMjUxMjA2MTQwMTI4WhcNMjUxMjA3MTQwMTI4WjAzMTEwLwYDVQQD Eyg3NWFiMWVhYWUxNDdjZDUwNzhkYjI5NTIxOWU5MDk0YjY0MmIyZjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJkpuFxMs2IDSg6E1DZsdV2Jcpnk gAfLrYRQpVtaeEJYkaEiiowiAXg2pmB9A5z1i81K/Qf1ISAaPAMvjYlJSnRKbdKa seLrXk+uO5SVCCEedJ1FJ5A2te+ahhl9NrsKe0nhsW29s1wVg1kTsUcUyTl7tKkm ZEILcIrbTWcVhgcb++4Akuq0rlcIhFEOZuS59riFf8hGKwQk+7nrQTq+ud+IVOIg ga/JBHkt99J17/7jTavLhk1qUI45tuYdIYZGVF3nTqOpw43cC6euB84pYRlCG4V9 io+E6MCWl634Z55lxiZH1JqTZtM3nkuqZYDkXySEtA3IDQpOQyKwYJNUFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWrHqrhR81QeNspUhnpCUtkKy8pMB8GA1UdIwQY MBaAFFdM7Edg7aLwn+tvd/chQr5pm7jDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjB6c1IyRHRvdkNmNjI5Mzl5RkN2bW1idU1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85NTcxZGEtZWZjYS00MWQ2LTg1ZjMt ZDZhOTk5MzRjNDkzLzEvVjB6c1IyRHRvdkNmNjI5Mzl5RkN2bW1idU1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC85NTcxZGEtZWZjYS00MWQ2LTg1ZjMtZDZhOTk5MzRjNDkz LzEvVjB6c1IyRHRvdkNmNjI5Mzl5RkN2bW1idU1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkASNHIU dIUMPAipQLu+GwmI+hHTSXKxq14ifSr3MgPSrBfJBYLlVjqQm7VdNYIrY6dYVkZX 8BEOEemiGfZ+fxuj0bU/xvp9+MCKoQ6oYM8qyZKNWnr7o/Uw3nPloRYto/8W/Pqx t0u93FP00Pug56VBZhSRlzKjOItqWTCEg4YXdtWk9g1QhDI9mua7CSOR7ScNT1Pv HZy3ULh8PuP01O8/8yMb1Bwk6XjXsED5NofQKFtclgG18fdQb9p+/YV8FH3s1lXw CnvS4GCIiAESTokrydRazt1aBgqPLlIyQ6X7JXvt1KcyQD+h0ymcQGsucovRR1Y9 bJ8A5bHPHQQYbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:21:19 2025 by rpki-client