This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft File: V-HUowlen6i5N9f6pDdZNyfSOTI.mft (raw, json) Hash identifier: 5mQmckA25Vcfb7EtP6/4AYp6ayZtz3NRQAHDnZNX1Xc= Subject key identifier: 0D:0A:27:FF:37:E0:7F:CE:FF:54:9F:FB:DF:51:0B:F7:E4:0A:DD:EE Authority key identifier: 57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32 Certificate issuer: /CN=57e1d4a3095e9fa8b937d7faa437593727d23932 Certificate serial: 019AF1D256FB46FC4C79A188A9E13E624F8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft Manifest number: 06A5 Signing time: Sat 06 Dec 2025 04:01:24 +0000 Manifest this update: Sat 06 Dec 2025 04:01:24 +0000 Manifest next update: Sun 07 Dec 2025 04:01:24 +0000 Files and hashes: 1: V-HUowlen6i5N9f6pDdZNyfSOTI.crl (hash: 879ppj6oQLEiEG4t25MLN1ej3P2R6haeCLoq5Sp4qKY=) 2: bXJ4QtYhfWp1RnpTQChAp4cUwiU.roa (hash: fSbKrEDwgOdPjCAnblJniiQxtJvOzvNWIo+25OG2EEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:56:fb:46:fc:4c:79:a1:88:a9:e1:3e:62:4f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57e1d4a3095e9fa8b937d7faa437593727d23932 Validity Not Before: Dec 6 04:01:24 2025 GMT Not After : Dec 7 04:01:24 2025 GMT Subject: CN=0d0a27ff37e07fceff549ffbdf510bf7e40addee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6b:fd:bb:bf:87:87:72:8a:a3:10:fd:e9:26: 1a:14:00:f3:8e:e5:4b:09:5a:ec:86:ce:b7:e7:a6: 89:17:61:d9:41:e8:b8:e8:ed:42:c3:68:b0:16:14: c8:04:58:4c:07:8c:37:26:9c:c0:06:1d:a4:a0:69: 4c:0d:95:82:aa:94:60:a3:02:bf:4c:06:ef:0e:b1: 0e:83:6a:0c:6f:ca:9e:8c:63:0c:07:e1:8c:89:e6: 8b:58:90:7a:5b:70:a5:93:ef:3e:fd:90:c6:fb:8d: 05:f9:02:4f:9c:30:92:47:59:47:f5:1b:3f:ce:20: e1:32:d9:a8:4c:f8:bf:f6:85:a8:af:7a:c5:eb:34: 2e:d8:0f:9f:7c:a9:89:f9:5a:dd:19:e1:cc:22:8c: 88:12:23:45:2a:7b:fb:df:a3:0b:87:c3:b4:e8:57: 07:3e:cc:ac:8e:e4:52:2e:42:01:d7:96:d2:1f:ca: 6a:0f:d7:77:1e:9d:91:c6:b7:2b:b8:cb:ff:b6:c9: 6c:17:a3:60:1f:f2:14:35:a0:91:64:d7:ab:30:b9: fd:ef:82:e4:86:5f:5b:2c:0e:07:84:3f:fd:97:5a: 2e:f4:14:b5:c0:45:3b:cf:b8:02:94:51:56:44:16: 3e:5e:f9:dc:4e:9f:5d:bb:8e:9c:93:43:5f:de:f4: a5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0A:27:FF:37:E0:7F:CE:FF:54:9F:FB:DF:51:0B:F7:E4:0A:DD:EE X509v3 Authority Key Identifier: keyid:57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:3a:7a:78:9d:c3:ef:9c:b4:a4:af:2d:11:ff:4d:69:53:43: 0a:06:10:48:f6:23:60:1c:a3:b7:9b:19:1f:2a:87:34:ef:e1: ce:d6:33:82:9f:3d:61:2d:d5:1c:c7:db:82:aa:44:43:fb:06: bf:ef:8e:70:cd:ee:94:b1:f9:1f:24:28:03:7f:15:4c:78:cb: c6:75:36:21:66:6e:a9:c1:cb:a3:5c:7c:d0:9a:b2:98:61:7e: 7f:d4:d5:76:2d:2c:d9:51:f8:70:9b:a5:b9:43:55:c9:05:bf: 6f:a7:4f:5e:5c:7e:71:73:f3:57:92:ff:01:52:fa:23:bc:dd: f5:c6:6c:1d:e1:f7:c1:1d:12:e6:ed:e9:eb:be:75:be:46:8c: aa:09:d3:43:29:9b:d7:ef:a7:6a:4a:eb:49:2c:d6:18:37:0f: 4f:72:53:8b:b9:33:db:a1:78:91:67:91:a2:2b:4c:89:ef:83: 38:7d:76:ba:eb:4a:3f:29:e6:8b:9d:52:34:e8:a7:31:cd:d9: a5:ab:04:7f:2e:65:9a:62:86:aa:40:92:87:c6:24:fd:3b:56: 59:71:b5:ba:6c:0c:da:92:4c:42:74:c9:11:cd:93:48:a9:f9: c5:d9:af:1a:cf:49:bc:7f:91:27:92:81:15:23:7c:20:cd:74: a9:e4:7c:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lb7RvxMeaGIqeE+Yk+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ZTFkNGEzMDk1ZTlmYThiOTM3ZDdmYWE0Mzc1OTM3Mjdk MjM5MzIwHhcNMjUxMjA2MDQwMTI0WhcNMjUxMjA3MDQwMTI0WjAzMTEwLwYDVQQD EygwZDBhMjdmZjM3ZTA3ZmNlZmY1NDlmZmJkZjUxMGJmN2U0MGFkZGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2v9u7+Hh3KKoxD96SYaFADzjuVL CVrshs6356aJF2HZQei46O1Cw2iwFhTIBFhMB4w3JpzABh2koGlMDZWCqpRgowK/ TAbvDrEOg2oMb8qejGMMB+GMieaLWJB6W3Clk+8+/ZDG+40F+QJPnDCSR1lH9Rs/ ziDhMtmoTPi/9oWor3rF6zQu2A+ffKmJ+VrdGeHMIoyIEiNFKnv736MLh8O06FcH PsysjuRSLkIB15bSH8pqD9d3Hp2RxrcruMv/tslsF6NgH/IUNaCRZNerMLn974Lk hl9bLA4HhD/9l1ou9BS1wEU7z7gClFFWRBY+XvncTp9du46ck0Nf3vSlUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0KJ/834H/O/1Sf+99RC/fkCt3uMB8GA1UdIwQY MBaAFFfh1KMJXp+ouTfX+qQ3WTcn0jkyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVi1IVW93bGVuNmk1TjlmNnBEZFpOeWZTT1RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84NTYyNmItY2M4OC00N2MyLTgzNWUt NGQ3NTI4MmNlMmViLzEvVi1IVW93bGVuNmk1TjlmNnBEZFpOeWZTT1RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS84NTYyNmItY2M4OC00N2MyLTgzNWUtNGQ3NTI4MmNlMmVi LzEvVi1IVW93bGVuNmk1TjlmNnBEZFpOeWZTT1RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDp6eJ3D 75y0pK8tEf9NaVNDCgYQSPYjYByjt5sZHyqHNO/hztYzgp89YS3VHMfbgqpEQ/sG v++OcM3ulLH5HyQoA38VTHjLxnU2IWZuqcHLo1x80JqymGF+f9TVdi0s2VH4cJul uUNVyQW/b6dPXlx+cXPzV5L/AVL6I7zd9cZsHeH3wR0S5u3p6751vkaMqgnTQymb 1++nakrrSSzWGDcPT3JTi7kz26F4kWeRoitMie+DOH12uutKPynmi51SNOinMc3Z pasEfy5lmmKGqkCSh8Yk/TtWWXG1umwM2pJMQnTJEc2TSKn5xdmvGs9JvH+RJ5KB FSN8IM10qeR8dA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:10 2025 by rpki-client