This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft File: V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft (raw, json) Hash identifier: 64fPA4Qvml1vVkIZFzZF01hfPyxHku8D2uKkPimWUF4= Subject key identifier: 78:92:A3:55:56:55:41:3B:7A:97:3A:A9:69:74:1A:57:23:13:4C:EB Authority key identifier: 57:49:46:70:E9:56:E3:FB:15:11:94:8C:59:56:E2:A4:26:79:33:88 Certificate issuer: /CN=57494670e956e3fb1511948c5956e2a426793388 Certificate serial: 019B2C2F6F68D17EDA6131BDE250363C442F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft Manifest number: 177D Signing time: Wed 17 Dec 2025 12:01:04 +0000 Manifest this update: Wed 17 Dec 2025 12:01:04 +0000 Manifest next update: Thu 18 Dec 2025 12:01:04 +0000 Files and hashes: 1: V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl (hash: WAdxu98eCu1MSOocNw0//ctSg6CY5xcsKZsghLwJQFU=) 2: vIhHYLmEHVa7FRdnU3kcgimxEf8.roa (hash: NCzIq7GooEeEiWcAxPp0VOLgVz/cvdDQC34wVi7kJRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 12:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:6f:68:d1:7e:da:61:31:bd:e2:50:36:3c:44:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57494670e956e3fb1511948c5956e2a426793388 Validity Not Before: Dec 17 12:01:04 2025 GMT Not After : Dec 18 12:01:04 2025 GMT Subject: CN=7892a3555655413b7a973aa969741a5723134ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2a:06:d2:e4:a4:4b:6b:e5:db:f5:7c:e5:4d: c6:86:79:30:5b:fc:fb:2b:71:4d:fc:79:2d:24:66: b1:ef:67:cb:f7:b3:80:d2:ab:1e:0a:c2:23:3d:f9: 29:9c:38:fd:9e:f0:cd:47:b1:63:30:70:86:dd:35: 7f:65:8f:05:e3:35:5e:a8:48:e8:c9:42:f1:c1:39: 6f:98:ee:99:d2:f6:0b:a3:31:ef:08:4b:42:76:31: c8:67:63:72:48:ea:71:6f:4f:ea:af:f2:f7:99:88: bb:35:a8:10:fe:0f:08:fd:a2:92:21:6d:5d:73:e8: 3e:ff:e0:d8:94:99:87:2c:2b:bb:3b:af:d1:5f:47: 44:c1:69:79:56:43:f9:de:b1:e6:14:9f:22:18:d0: ae:c9:fd:78:fe:63:16:e9:6b:9a:ee:fe:03:a2:62: bd:35:cd:c6:5a:92:c0:2e:50:18:a3:85:13:b9:6e: e5:fa:51:85:f3:86:47:ba:e9:99:4c:32:a2:4f:2f: 86:a6:60:35:5a:34:11:da:77:a8:0c:41:07:f4:d5: cd:d7:e0:c1:70:c3:cd:02:d9:8b:72:ac:2c:99:e6: 24:14:3b:ad:12:78:d6:4c:ca:1e:9e:1c:74:47:4e: c9:dc:3b:39:40:9b:62:e8:f8:e2:9c:bd:6a:8c:62: 70:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:92:A3:55:56:55:41:3B:7A:97:3A:A9:69:74:1A:57:23:13:4C:EB X509v3 Authority Key Identifier: keyid:57:49:46:70:E9:56:E3:FB:15:11:94:8C:59:56:E2:A4:26:79:33:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:99:69:bc:c3:9e:d2:f9:4b:e3:c4:cb:71:58:9b:16:0b:79: 04:c3:1b:b7:a1:68:2b:cd:7b:25:33:d8:87:96:a8:24:d9:fd: b8:80:c9:53:35:ec:00:3c:6e:00:f2:ba:18:53:9a:b7:11:d4: de:fe:e5:4c:b7:42:2a:a1:cf:ff:ee:a6:00:12:2f:20:96:0a: b3:5e:28:86:d7:a8:98:d7:d3:48:a9:65:a6:be:2a:e9:da:86: a1:24:c7:50:3d:1e:a0:16:4e:e9:19:76:a4:27:fa:d0:2e:83: 55:b6:ad:7d:f5:00:e7:2b:de:60:2d:22:7d:32:73:f6:91:b1: b7:40:65:85:5d:10:a5:0a:67:7c:5f:fc:72:c5:ca:f9:75:f1: cc:7f:dd:be:dc:23:a0:6e:e3:09:e9:69:38:f1:8a:71:e0:d4: 6e:33:46:10:a5:1f:32:3f:dd:7f:f6:40:b9:4a:83:fc:e4:5d: c4:96:4c:7e:4f:bc:46:90:9a:f6:10:d5:8e:38:2e:e3:77:72: 6a:8b:74:35:a0:ab:0c:1c:3e:0e:88:b0:96:36:49:f9:5b:b9: 12:9d:03:48:53:32:69:5e:0c:44:44:3d:22:24:86:6e:b2:89: 54:2d:74:24:fc:d6:12:d2:52:07:67:e7:14:9e:2e:52:85:c8: df:f4:fd:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL29o0X7aYTG94lA2PEQvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NDk0NjcwZTk1NmUzZmIxNTExOTQ4YzU5NTZlMmE0MjY3 OTMzODgwHhcNMjUxMjE3MTIwMTA0WhcNMjUxMjE4MTIwMTA0WjAzMTEwLwYDVQQD Eyg3ODkyYTM1NTU2NTU0MTNiN2E5NzNhYTk2OTc0MWE1NzIzMTM0Y2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSoG0uSkS2vl2/V85U3GhnkwW/z7 K3FN/HktJGax72fL97OA0qseCsIjPfkpnDj9nvDNR7FjMHCG3TV/ZY8F4zVeqEjo yULxwTlvmO6Z0vYLozHvCEtCdjHIZ2NySOpxb0/qr/L3mYi7NagQ/g8I/aKSIW1d c+g+/+DYlJmHLCu7O6/RX0dEwWl5VkP53rHmFJ8iGNCuyf14/mMW6Wua7v4DomK9 Nc3GWpLALlAYo4UTuW7l+lGF84ZHuumZTDKiTy+GpmA1WjQR2neoDEEH9NXN1+DB cMPNAtmLcqwsmeYkFDutEnjWTMoenhx0R07J3Ds5QJti6PjinL1qjGJw0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiSo1VWVUE7epc6qWl0GlcjE0zrMB8GA1UdIwQY MBaAFFdJRnDpVuP7FRGUjFlW4qQmeTOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjBsR2NPbFc0X3NWRVpTTVdWYmlwQ1o1TTRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80OTg4MWUtYjBhOS00ZDVmLWIwNzIt YTUzNzcyYjAxY2IyLzEvVjBsR2NPbFc0X3NWRVpTTVdWYmlwQ1o1TTRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80OTg4MWUtYjBhOS00ZDVmLWIwNzItYTUzNzcyYjAxY2Iy LzEvVjBsR2NPbFc0X3NWRVpTTVdWYmlwQ1o1TTRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZlpvMOe 0vlL48TLcVibFgt5BMMbt6FoK817JTPYh5aoJNn9uIDJUzXsADxuAPK6GFOatxHU 3v7lTLdCKqHP/+6mABIvIJYKs14ohteomNfTSKllpr4q6dqGoSTHUD0eoBZO6Rl2 pCf60C6DVbatffUA5yveYC0ifTJz9pGxt0BlhV0QpQpnfF/8csXK+XXxzH/dvtwj oG7jCelpOPGKceDUbjNGEKUfMj/df/ZAuUqD/ORdxJZMfk+8RpCa9hDVjjgu43dy aot0NaCrDBw+DoiwljZJ+Vu5Ep0DSFMyaV4MREQ9IiSGbrKJVC10JPzWEtJSB2fn FJ4uUoXI3/T9vQ== -----END CERTIFICATE-----Generated at Wed Dec 17 21:04:27 2025 by rpki-client