This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft File: V3M6_ezSmOg9Af9O0hxiwaCuq90.mft (raw, json) Hash identifier: gnkqWNvhqPNjzty1cZ0mLsvB4ONlnj4hPgB6sMSU/9k= Subject key identifier: 92:84:E7:48:1B:A7:71:03:BF:45:91:2F:66:94:EC:4C:7C:15:FA:C8 Authority key identifier: 57:73:3A:FD:EC:D2:98:E8:3D:01:FF:4E:D2:1C:62:C1:A0:AE:AB:DD Certificate issuer: /CN=57733afdecd298e83d01ff4ed21c62c1a0aeabdd Certificate serial: 019B390F6959FAE71549E2D85DA2DAF8C445 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3M6_ezSmOg9Af9O0hxiwaCuq90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft Manifest number: 1784 Signing time: Sat 20 Dec 2025 00:01:09 +0000 Manifest this update: Sat 20 Dec 2025 00:01:09 +0000 Manifest next update: Sun 21 Dec 2025 00:01:09 +0000 Files and hashes: 1: V3M6_ezSmOg9Af9O0hxiwaCuq90.crl (hash: Tk2AMJgN3FA0JiS5rIJvFT1coq33Khodfb3xCn6hb7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.crl rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft rsync://rpki.ripe.net/repository/DEFAULT/V3M6_ezSmOg9Af9O0hxiwaCuq90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:69:59:fa:e7:15:49:e2:d8:5d:a2:da:f8:c4:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57733afdecd298e83d01ff4ed21c62c1a0aeabdd Validity Not Before: Dec 20 00:01:09 2025 GMT Not After : Dec 21 00:01:09 2025 GMT Subject: CN=9284e7481ba77103bf45912f6694ec4c7c15fac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5c:24:a9:f7:7b:0f:39:f8:22:60:3f:9b:a7: f3:82:7f:fe:17:22:87:cd:cd:ed:a0:85:67:41:40: 07:61:29:8f:7b:18:6b:8d:d6:62:82:74:f9:28:67: f7:00:aa:38:b8:3c:6d:f1:ed:9a:c6:b4:9c:d1:2e: ca:fc:4d:0c:b7:b1:65:60:b6:0b:f2:46:8b:a0:22: 3d:64:cb:ae:e5:04:ff:ab:3a:4c:3e:21:62:cd:48: a2:9b:cd:b8:ed:db:49:cf:ab:9c:75:6c:1f:0b:e1: c8:bc:94:fe:7e:fc:90:87:f3:41:de:9d:39:69:69: a6:03:76:cf:99:cd:46:3d:9d:45:47:81:2c:c6:10: be:41:51:76:3f:5e:4f:6e:4e:2e:77:99:2d:1e:28: 9f:39:6e:30:ee:88:bc:b9:23:58:87:55:1b:0c:ca: 21:89:58:ee:45:68:68:41:f9:14:c6:6e:70:e8:4f: 60:af:35:d2:bb:a0:9d:a7:e1:7e:a6:01:e5:a7:ad: f3:7a:33:f7:57:5a:dd:b8:00:12:d2:35:a9:3b:1d: 8f:91:bf:19:81:8c:69:14:35:f2:db:26:10:09:01: 78:32:e2:12:bc:f1:ac:14:7b:92:c3:ab:20:25:99: 0a:77:57:e1:e2:0c:28:bd:ec:0c:54:a3:04:c2:89: b3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:84:E7:48:1B:A7:71:03:BF:45:91:2F:66:94:EC:4C:7C:15:FA:C8 X509v3 Authority Key Identifier: keyid:57:73:3A:FD:EC:D2:98:E8:3D:01:FF:4E:D2:1C:62:C1:A0:AE:AB:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3M6_ezSmOg9Af9O0hxiwaCuq90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e2:28:c8:a0:8b:e8:4d:b7:f9:ac:25:94:ec:50:0f:65:72: cf:7f:8f:c6:46:05:79:0e:2b:68:83:3f:50:58:22:4f:7a:8d: 1d:c9:53:93:11:d5:1c:05:37:5f:42:ab:87:b1:c3:08:7c:99: 7a:e0:6b:af:c8:a8:50:e7:e0:3f:5a:5d:50:e0:e6:f0:dc:e0: d3:94:38:89:e9:fc:7b:bf:82:1e:45:68:1c:e4:a1:02:55:a2: b5:36:71:d0:07:19:43:c6:00:b1:cc:d9:fb:22:eb:44:38:18: c7:95:90:09:b4:11:b7:71:e6:1b:9a:7b:3c:4a:0d:73:35:70: bf:ee:89:e4:40:d0:53:bd:ab:07:99:e9:6f:ac:b8:b1:a1:27: 8e:61:13:3b:19:3c:b0:44:8e:79:f6:98:97:09:9b:c7:a6:14: d8:cc:e9:d2:1a:b2:d2:5f:5b:ee:83:93:36:6d:2a:02:f8:56: 4c:31:21:d6:ae:e6:2c:21:c5:16:a8:e1:a1:19:f6:0f:ce:1f: 34:41:56:3c:5c:82:61:65:26:12:37:9e:0f:a9:32:39:16:0d: ee:e6:f3:ee:4d:91:12:b0:20:21:3f:7a:80:d2:aa:cd:f5:a5: 07:4f:0c:bb:77:28:61:32:07:af:b2:34:75:65:56:5e:72:0c: 49:8d:df:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D2lZ+ucVSeLYXaLa+MRFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NzMzYWZkZWNkMjk4ZTgzZDAxZmY0ZWQyMWM2MmMxYTBh ZWFiZGQwHhcNMjUxMjIwMDAwMTA5WhcNMjUxMjIxMDAwMTA5WjAzMTEwLwYDVQQD Eyg5Mjg0ZTc0ODFiYTc3MTAzYmY0NTkxMmY2Njk0ZWM0YzdjMTVmYWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lwkqfd7Dzn4ImA/m6fzgn/+FyKH zc3toIVnQUAHYSmPexhrjdZignT5KGf3AKo4uDxt8e2axrSc0S7K/E0Mt7FlYLYL 8kaLoCI9ZMuu5QT/qzpMPiFizUiim8247dtJz6ucdWwfC+HIvJT+fvyQh/NB3p05 aWmmA3bPmc1GPZ1FR4EsxhC+QVF2P15Pbk4ud5ktHiifOW4w7oi8uSNYh1UbDMoh iVjuRWhoQfkUxm5w6E9grzXSu6Cdp+F+pgHlp63zejP3V1rduAAS0jWpOx2Pkb8Z gYxpFDXy2yYQCQF4MuISvPGsFHuSw6sgJZkKd1fh4gwovewMVKMEwomzHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKE50gbp3EDv0WRL2aU7Ex8FfrIMB8GA1UdIwQY MBaAFFdzOv3s0pjoPQH/TtIcYsGgrqvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjNNNl9lelNtT2c5QWY5TzBoeGl3YUN1cTkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8zZWJhN2QtZmM4Mi00YjBhLWFjM2Yt MmM0OWUxNWVmNjRiLzEvVjNNNl9lelNtT2c5QWY5TzBoeGl3YUN1cTkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8zZWJhN2QtZmM4Mi00YjBhLWFjM2YtMmM0OWUxNWVmNjRi LzEvVjNNNl9lelNtT2c5QWY5TzBoeGl3YUN1cTkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeIoyKCL 6E23+awllOxQD2Vyz3+PxkYFeQ4raIM/UFgiT3qNHclTkxHVHAU3X0Krh7HDCHyZ euBrr8ioUOfgP1pdUODm8Nzg05Q4ien8e7+CHkVoHOShAlWitTZx0AcZQ8YAsczZ +yLrRDgYx5WQCbQRt3HmG5p7PEoNczVwv+6J5EDQU72rB5npb6y4saEnjmETOxk8 sESOefaYlwmbx6YU2Mzp0hqy0l9b7oOTNm0qAvhWTDEh1q7mLCHFFqjhoRn2D84f NEFWPFyCYWUmEjeeD6kyORYN7ubz7k2RErAgIT96gNKqzfWlB08Mu3coYTIHr7I0 dWVWXnIMSY3frg== -----END CERTIFICATE-----Generated at Sat Dec 20 01:55:16 2025 by rpki-client