This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.mft File: V8SpO0nzC6dgmbvaVi1HuSBIe_Q.mft (raw, json) Hash identifier: HMsLXPxW1eZAWYytD2sldwZuKjoD0khUFtcNSjKsbyQ= Subject key identifier: 1D:C5:94:53:73:F1:5E:64:60:C6:D7:E3:80:92:A9:D8:93:0F:46:AE Authority key identifier: 57:C4:A9:3B:49:F3:0B:A7:60:99:BB:DA:56:2D:47:B9:20:48:7B:F4 Certificate issuer: /CN=57c4a93b49f30ba76099bbda562d47b920487bf4 Certificate serial: 019B5AF5FFE67464516B039393CA01973197 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.mft Manifest number: 011B Signing time: Fri 26 Dec 2025 14:00:29 +0000 Manifest this update: Fri 26 Dec 2025 14:00:29 +0000 Manifest next update: Sat 27 Dec 2025 14:00:29 +0000 Files and hashes: 1: V8SpO0nzC6dgmbvaVi1HuSBIe_Q.crl (hash: NPOgrwZsERECa3zBypcK/mjsaEVrtwcJBykT29a+Gc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f5:ff:e6:74:64:51:6b:03:93:93:ca:01:97:31:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c4a93b49f30ba76099bbda562d47b920487bf4 Validity Not Before: Dec 26 14:00:29 2025 GMT Not After : Dec 27 14:00:29 2025 GMT Subject: CN=1dc5945373f15e6460c6d7e38092a9d8930f46ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:01:70:12:e4:d4:19:4f:77:20:45:0e:d9:a7: 8b:5b:4a:39:44:83:4c:95:8e:a0:53:47:c3:51:3c: 0c:c3:fb:d7:f8:14:f7:96:76:28:9c:da:8e:5a:70: 60:c8:7b:67:44:6f:0d:23:f2:82:5a:dd:5f:c2:89: a8:f3:2d:51:24:7c:90:7a:48:d1:7d:d0:78:2d:94: 58:6d:79:dc:e5:40:ee:77:1d:eb:3c:7e:37:5f:1f: 3a:8e:a7:27:f4:42:5c:5b:c8:c6:14:aa:2a:45:f1: 17:5f:bb:ad:e9:25:58:6f:c2:5c:f6:11:3c:75:cc: 8d:25:48:8f:2e:ac:e0:37:1a:5e:0d:10:36:f9:f8: 6d:54:42:76:dd:9d:34:2a:a4:da:49:a8:51:5d:e8: 51:d0:67:de:1b:6f:ed:02:03:9c:ec:23:53:55:8c: f0:0f:1e:dc:0e:e3:86:bf:ef:c4:6f:31:90:f8:fc: c7:18:8b:66:b7:85:f8:bc:de:67:8c:5b:f7:8e:a5: 11:e1:23:07:ba:aa:bc:07:27:17:d3:c8:93:0d:1c: c0:cf:93:1d:53:12:05:a0:58:ab:02:5c:dc:21:b3: f3:7b:f2:1d:ee:d4:b8:33:06:b1:1a:be:f0:03:9b: 4a:11:f0:4c:51:3f:57:47:c2:c1:ab:a6:f0:ec:b3: db:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C5:94:53:73:F1:5E:64:60:C6:D7:E3:80:92:A9:D8:93:0F:46:AE X509v3 Authority Key Identifier: keyid:57:C4:A9:3B:49:F3:0B:A7:60:99:BB:DA:56:2D:47:B9:20:48:7B:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:06:db:6d:ef:84:e6:dd:fc:81:9f:97:38:14:13:82:d0:4c: 5c:c7:f2:38:e5:d8:c9:a0:f6:51:95:68:71:d4:37:5f:8c:a4: 2b:25:17:19:52:c2:1c:18:b5:60:16:79:d4:1b:2e:05:12:c6: da:c2:82:44:43:d5:c6:17:4b:3e:61:16:ff:d3:32:45:72:c1: 52:bd:d4:5d:76:fb:5e:9c:0c:6a:ed:2e:5a:ba:64:f2:f0:fa: 0d:b2:96:f7:48:04:09:62:d9:3f:d7:3a:7e:94:b7:cc:78:5b: 44:da:9d:0d:69:43:1f:6e:13:cc:13:f9:9d:85:43:37:16:7f: 1e:d2:16:35:68:68:3e:fa:28:52:ae:c5:db:47:99:6c:79:55: 0d:a1:0e:2c:d7:cc:50:39:16:b2:fe:2f:ae:4b:00:10:a1:28: e5:e2:12:e8:b9:5f:64:f3:f5:11:29:7d:87:06:b1:8f:36:79: 76:44:f1:6a:cb:ab:81:40:8a:56:e9:af:66:e9:b1:8b:6a:b2: 1e:48:55:e2:16:ce:1c:3f:45:b0:ac:48:70:43:f8:65:fa:21: 2b:49:cb:8d:55:76:11:ff:4a:c6:4c:52:a0:1d:97:cf:76:bc: 12:56:15:ba:29:c2:63:ad:bc:37:aa:fc:65:16:ec:45:3f:7d: ec:da:b9:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9f/mdGRRawOTk8oBlzGXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzRhOTNiNDlmMzBiYTc2MDk5YmJkYTU2MmQ0N2I5MjA0 ODdiZjQwHhcNMjUxMjI2MTQwMDI5WhcNMjUxMjI3MTQwMDI5WjAzMTEwLwYDVQQD EygxZGM1OTQ1MzczZjE1ZTY0NjBjNmQ3ZTM4MDkyYTlkODkzMGY0NmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgFwEuTUGU93IEUO2aeLW0o5RINM lY6gU0fDUTwMw/vX+BT3lnYonNqOWnBgyHtnRG8NI/KCWt1fwomo8y1RJHyQekjR fdB4LZRYbXnc5UDudx3rPH43Xx86jqcn9EJcW8jGFKoqRfEXX7ut6SVYb8Jc9hE8 dcyNJUiPLqzgNxpeDRA2+fhtVEJ23Z00KqTaSahRXehR0GfeG2/tAgOc7CNTVYzw Dx7cDuOGv+/EbzGQ+PzHGItmt4X4vN5njFv3jqUR4SMHuqq8BycX08iTDRzAz5Md UxIFoFirAlzcIbPze/Id7tS4MwaxGr7wA5tKEfBMUT9XR8LBq6bw7LPbOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3FlFNz8V5kYMbX44CSqdiTD0auMB8GA1UdIwQY MBaAFFfEqTtJ8wunYJm72lYtR7kgSHv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhTcE8wbnpDNmRnbWJ2YVZpMUh1U0JJZV9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82ZGVhZmQtZDFiYy00MTMzLWFlY2Et MTQ4NDkwMzY4YjljLzEvVjhTcE8wbnpDNmRnbWJ2YVZpMUh1U0JJZV9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS82ZGVhZmQtZDFiYy00MTMzLWFlY2EtMTQ4NDkwMzY4Yjlj LzEvVjhTcE8wbnpDNmRnbWJ2YVZpMUh1U0JJZV9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAbbbe+E 5t38gZ+XOBQTgtBMXMfyOOXYyaD2UZVocdQ3X4ykKyUXGVLCHBi1YBZ51BsuBRLG 2sKCREPVxhdLPmEW/9MyRXLBUr3UXXb7XpwMau0uWrpk8vD6DbKW90gECWLZP9c6 fpS3zHhbRNqdDWlDH24TzBP5nYVDNxZ/HtIWNWhoPvooUq7F20eZbHlVDaEOLNfM UDkWsv4vrksAEKEo5eIS6LlfZPP1ESl9hwaxjzZ5dkTxasurgUCKVumvZumxi2qy HkhV4hbOHD9FsKxIcEP4ZfohK0nLjVV2Ef9KxkxSoB2Xz3a8ElYVuinCY628N6r8 ZRbsRT997Nq5Ew== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:24 2025 by rpki-client