This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft File: V7DWfEnsEvT1QXA49twTwvk-p2U.mft (raw, json) Hash identifier: GOGNVVlf1uXIpv0CVAsupTmCkaY2kYE3bb6Obok/bOQ= Subject key identifier: CA:A1:D1:05:0C:4E:E0:BA:7E:0F:7A:2D:25:9B:2A:C3:1C:0C:D8:29 Authority key identifier: 57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65 Certificate issuer: /CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765 Certificate serial: 019AF1D22D4E0FAEEF5CD261C7C7ABDAE70C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft Manifest number: 0FBC Signing time: Sat 06 Dec 2025 04:01:14 +0000 Manifest this update: Sat 06 Dec 2025 04:01:14 +0000 Manifest next update: Sun 07 Dec 2025 04:01:14 +0000 Files and hashes: 1: V7DWfEnsEvT1QXA49twTwvk-p2U.crl (hash: A0ij2drv3HhtZr+AGcalXw4cbXXbu59Vn4hyum9d0Mg=) 2: aTC_FMtzHsZtI14wbnunZmi33Jw.roa (hash: wvwgvmerl+Gv6gcyDvl/OWVT3i3Y0FpbzMV8nbDfYyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:2d:4e:0f:ae:ef:5c:d2:61:c7:c7:ab:da:e7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765 Validity Not Before: Dec 6 04:01:14 2025 GMT Not After : Dec 7 04:01:14 2025 GMT Subject: CN=caa1d1050c4ee0ba7e0f7a2d259b2ac31c0cd829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:22:e1:41:1e:92:69:fb:b1:b3:79:31:60:05: 0d:35:94:3f:78:cd:be:23:c3:84:d5:77:0e:1c:45: e1:78:9c:f0:9e:7f:00:5a:04:01:c4:33:61:e5:ba: 3c:9b:15:27:49:60:a0:ad:d6:a7:62:24:5b:77:c1: 4b:10:e7:46:61:41:e7:c4:29:6f:c6:63:53:45:34: 7f:9a:8f:20:ad:e9:2c:94:a7:38:4b:37:f3:29:29: 65:f1:55:80:f7:8b:d8:6a:3d:ac:48:6a:51:c3:dc: de:09:c0:c1:36:10:9a:23:75:55:4f:c3:19:1c:a0: ff:cf:52:4b:84:ea:a9:2a:33:27:a1:72:fb:cf:3a: 6f:dd:4b:fc:5d:64:01:d7:c3:1a:16:3a:4f:2d:38: 6b:33:85:e1:8a:67:e4:b5:1b:f4:56:46:4f:76:a0: 02:73:43:41:2d:4b:c2:57:e6:ff:f7:ac:a9:83:60: 35:18:f2:73:55:4a:be:2b:be:2c:be:ed:90:b0:8b: 78:bc:b6:f1:94:ae:4c:dd:c2:d8:c0:5a:a6:e2:5e: 72:8c:57:a2:ae:c2:39:5b:c2:d5:94:5d:8b:15:77: 54:09:72:04:53:dd:ed:f1:44:86:39:35:78:b9:31: 9a:56:35:67:08:e5:9a:e1:01:90:29:2c:b0:b8:df: 3f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A1:D1:05:0C:4E:E0:BA:7E:0F:7A:2D:25:9B:2A:C3:1C:0C:D8:29 X509v3 Authority Key Identifier: keyid:57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a5:f0:0e:02:cc:29:b1:e3:52:02:98:c1:c7:18:35:d4:2e: 99:6b:80:b5:9d:b9:43:f7:af:6c:a9:c0:2b:78:28:79:09:26: 6f:58:6d:db:1e:8b:c8:1e:19:3a:1a:77:8d:7d:81:af:47:88: 64:6e:3b:a5:8d:43:be:92:89:fd:28:b5:58:35:95:05:d5:20: bd:27:68:8b:8f:45:cd:49:d9:8a:7f:f3:72:7f:b0:8b:a3:10: 4a:1e:bb:51:3b:61:39:a8:6f:1d:69:26:a3:23:f6:71:d8:49: df:cf:4b:44:56:f4:ac:49:f1:3d:94:75:9d:97:62:56:02:39: 28:35:2a:af:34:bc:3d:9e:d1:c3:3d:d1:73:e3:bc:89:ef:51: 19:2a:7d:ec:31:f9:66:67:7d:ea:96:ff:84:46:af:7e:70:14: c3:1a:e0:93:4b:b1:8f:8c:02:63:cc:da:de:77:ce:04:75:b7: c9:72:cc:1d:6c:db:12:b5:2e:29:f0:2c:b4:52:15:6b:ae:18: e1:8a:f3:01:4d:5d:00:5e:44:07:c6:63:83:1a:34:b5:ea:61: fb:78:ed:5a:10:ac:cf:e9:f9:b3:23:a7:7e:e9:da:49:b2:94: 2e:9e:f5:1e:13:50:29:19:0d:f4:ad:d9:ad:6d:50:32:85:b4: be:89:a8:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0i1OD67vXNJhx8er2ucMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YjBkNjdjNDllYzEyZjRmNTQxNzAzOGY2ZGMxM2MyZjkz ZWE3NjUwHhcNMjUxMjA2MDQwMTE0WhcNMjUxMjA3MDQwMTE0WjAzMTEwLwYDVQQD EyhjYWExZDEwNTBjNGVlMGJhN2UwZjdhMmQyNTliMmFjMzFjMGNkODI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iLhQR6Safuxs3kxYAUNNZQ/eM2+ I8OE1XcOHEXheJzwnn8AWgQBxDNh5bo8mxUnSWCgrdanYiRbd8FLEOdGYUHnxClv xmNTRTR/mo8grekslKc4SzfzKSll8VWA94vYaj2sSGpRw9zeCcDBNhCaI3VVT8MZ HKD/z1JLhOqpKjMnoXL7zzpv3Uv8XWQB18MaFjpPLThrM4XhimfktRv0VkZPdqAC c0NBLUvCV+b/96ypg2A1GPJzVUq+K74svu2QsIt4vLbxlK5M3cLYwFqm4l5yjFei rsI5W8LVlF2LFXdUCXIEU93t8USGOTV4uTGaVjVnCOWa4QGQKSywuN8/gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqh0QUMTuC6fg96LSWbKsMcDNgpMB8GA1UdIwQY MBaAFFew1nxJ7BL09UFwOPbcE8L5PqdlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjdEV2ZFbnNFdlQxUVhBNDl0d1R3dmstcDJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NTE2NTctMDQ0ZC00N2QzLWFmYzkt YzNhODM3NWY5MGY5LzEvVjdEV2ZFbnNFdlQxUVhBNDl0d1R3dmstcDJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84NTE2NTctMDQ0ZC00N2QzLWFmYzktYzNhODM3NWY5MGY5 LzEvVjdEV2ZFbnNFdlQxUVhBNDl0d1R3dmstcDJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaXwDgLM KbHjUgKYwccYNdQumWuAtZ25Q/evbKnAK3goeQkmb1ht2x6LyB4ZOhp3jX2Br0eI ZG47pY1DvpKJ/Si1WDWVBdUgvSdoi49FzUnZin/zcn+wi6MQSh67UTthOahvHWkm oyP2cdhJ389LRFb0rEnxPZR1nZdiVgI5KDUqrzS8PZ7Rwz3Rc+O8ie9RGSp97DH5 Zmd96pb/hEavfnAUwxrgk0uxj4wCY8za3nfOBHW3yXLMHWzbErUuKfAstFIVa64Y 4YrzAU1dAF5EB8Zjgxo0teph+3jtWhCsz+n5syOnfunaSbKULp71HhNQKRkN9K3Z rW1QMoW0vomo+g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:12 2025 by rpki-client