This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft File: Vz6UxDzTSjuDpL2Kp79K4yRubak.mft (raw, json) Hash identifier: O4+BSjd64RxTASP8k04Qb14rGu+q8umoW9FgyTe4q6M= Subject key identifier: 54:48:05:04:11:12:B1:E6:E3:36:05:55:70:F5:F8:F8:78:48:B8:9F Authority key identifier: 57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9 Certificate issuer: /CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9 Certificate serial: 019AF1D195997B35122B43BA99BA2CCDFDDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 04:00:35 +0000 Manifest this update: Sat 06 Dec 2025 04:00:35 +0000 Manifest next update: Sun 07 Dec 2025 04:00:35 +0000 Files and hashes: 1: Vz6UxDzTSjuDpL2Kp79K4yRubak.crl (hash: Zjg4mLoEohqbfOoYm3gcivQW5TJtA28a08JG5b3vjpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:95:99:7b:35:12:2b:43:ba:99:ba:2c:cd:fd:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9 Validity Not Before: Dec 6 04:00:35 2025 GMT Not After : Dec 7 04:00:35 2025 GMT Subject: CN=544805041112b1e6e336055570f5f8f87848b89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4d:7a:fa:04:05:84:9e:bd:ac:80:e0:fd:0b: 86:51:2a:49:c1:02:e8:88:e0:28:e7:34:cf:a6:92: d4:9d:5d:a6:2c:34:65:93:45:e1:ad:15:14:58:18: 8e:6c:b3:02:3c:b0:e4:12:27:b9:3a:d4:7c:27:8e: a5:5d:50:27:ee:bc:05:53:66:df:fa:74:34:33:2e: 0f:2f:00:43:70:66:3c:bc:4b:7e:7e:e3:a7:ad:99: d9:73:9f:0d:82:c5:3a:9a:7d:ae:17:d0:86:a4:79: df:7d:fc:79:1a:3c:25:0b:3e:4c:87:23:d0:b8:cc: 4d:c9:21:98:f9:22:d6:cf:e8:74:76:34:2b:0d:26: 3f:25:e1:68:79:b8:63:f3:fe:ee:c5:4b:4d:7e:e1: e5:56:29:9c:f6:38:73:55:60:4f:08:84:0a:c3:ae: 84:a5:c6:05:c9:2f:f2:ee:e2:c3:50:b5:3d:6a:f7: bd:c2:fb:bd:c8:10:ed:9c:ec:c2:71:c7:0c:0a:4f: 8a:ca:a2:16:90:1a:fc:a0:1b:e2:36:25:79:4a:41: 2f:78:34:e9:7c:70:16:33:fe:6e:6e:a2:59:93:c2: 03:38:e2:83:01:1b:18:78:e9:ef:d0:bf:d0:ee:6e: 2f:7b:d4:1f:e0:a0:2c:67:18:09:cd:dc:9a:4f:6f: 55:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:48:05:04:11:12:B1:E6:E3:36:05:55:70:F5:F8:F8:78:48:B8:9F X509v3 Authority Key Identifier: keyid:57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0f:8c:fa:f7:fe:e5:d2:f8:8f:e5:f9:f2:53:1d:0a:12:8b: 56:6d:c4:1b:50:d9:c7:21:17:f5:08:d2:12:33:76:46:fb:68: a0:b0:8d:0b:03:71:c1:9a:14:89:30:ae:39:d5:a3:c5:f0:41: 29:fa:1a:21:77:cc:e3:68:6b:21:4c:68:7b:51:6c:8b:3b:78: 7b:92:63:ca:80:14:0b:76:42:dc:b0:22:ae:4e:f5:0e:f3:de: 74:9b:7c:4e:32:5e:e6:23:ba:de:3f:b6:19:f6:ed:18:39:55: f7:47:7a:0d:17:34:57:58:12:25:09:58:22:0d:21:eb:69:aa: 32:65:50:b0:b2:e5:be:bb:95:df:54:5c:50:9d:7d:d3:22:4e: 45:5b:11:94:32:c0:e1:2a:2f:2a:4f:99:bd:46:ac:b8:b2:4a: f5:eb:a0:ff:d3:4e:33:57:f9:2d:5a:17:b5:54:f5:f7:1a:6d: a6:f1:55:78:06:a6:55:62:93:5e:5d:0c:c9:f5:46:d0:f6:48: e0:1b:73:75:51:57:6f:9d:61:93:ee:92:b0:4f:5e:73:d8:86: ea:50:e7:fd:1e:fb:6e:63:b4:ef:e9:1c:60:70:de:a8:a1:99: c9:f1:ef:a6:78:bd:12:da:1f:21:a9:ec:a0:f3:e4:da:fc:2f: 80:bb:fb:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZWZezUSK0O6mboszf3eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3M2U5NGM0M2NkMzRhM2I4M2E0YmQ4YWE3YmY0YWUzMjQ2 ZTZkYTkwHhcNMjUxMjA2MDQwMDM1WhcNMjUxMjA3MDQwMDM1WjAzMTEwLwYDVQQD Eyg1NDQ4MDUwNDExMTJiMWU2ZTMzNjA1NTU3MGY1ZjhmODc4NDhiODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0016+gQFhJ69rIDg/QuGUSpJwQLo iOAo5zTPppLUnV2mLDRlk0XhrRUUWBiObLMCPLDkEie5OtR8J46lXVAn7rwFU2bf +nQ0My4PLwBDcGY8vEt+fuOnrZnZc58NgsU6mn2uF9CGpHnfffx5GjwlCz5MhyPQ uMxNySGY+SLWz+h0djQrDSY/JeFoebhj8/7uxUtNfuHlVimc9jhzVWBPCIQKw66E pcYFyS/y7uLDULU9ave9wvu9yBDtnOzCcccMCk+KyqIWkBr8oBviNiV5SkEveDTp fHAWM/5ubqJZk8IDOOKDARsYeOnv0L/Q7m4ve9Qf4KAsZxgJzdyaT29VGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRIBQQRErHm4zYFVXD1+Ph4SLifMB8GA1UdIwQY MBaAFFc+lMQ800o7g6S9iqe/SuMkbm2pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVno2VXhEelRTanVEcEwyS3A3OUs0eVJ1YmFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jODViZmEtYzA3MC00ZGU4LTg0NDQt ODI5NzcwNjJiOTQ3LzEvVno2VXhEelRTanVEcEwyS3A3OUs0eVJ1YmFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9jODViZmEtYzA3MC00ZGU4LTg0NDQtODI5NzcwNjJiOTQ3 LzEvVno2VXhEelRTanVEcEwyS3A3OUs0eVJ1YmFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjw+M+vf+ 5dL4j+X58lMdChKLVm3EG1DZxyEX9QjSEjN2RvtooLCNCwNxwZoUiTCuOdWjxfBB KfoaIXfM42hrIUxoe1Fsizt4e5JjyoAUC3ZC3LAirk71DvPedJt8TjJe5iO63j+2 GfbtGDlV90d6DRc0V1gSJQlYIg0h62mqMmVQsLLlvruV31RcUJ190yJORVsRlDLA 4SovKk+ZvUasuLJK9eug/9NOM1f5LVoXtVT19xptpvFVeAamVWKTXl0MyfVG0PZI 4BtzdVFXb51hk+6SsE9ec9iG6lDn/R77bmO07+kcYHDeqKGZyfHvpni9EtofIans oPPk2vwvgLv7tg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:37:59 2025 by rpki-client