This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft File: 0vcAvspCZT5kq0NaLwpPPZpQFLA.mft (raw, json) Hash identifier: SndR3j3bcNdTGP76/koCqtLC0m526u7uXunYPf0zLgA= Subject key identifier: 51:EA:3D:89:AA:5C:AA:66:C7:5E:42:EE:B0:1B:1C:0A:16:FE:0A:CD Authority key identifier: D2:F7:00:BE:CA:42:65:3E:64:AB:43:5A:2F:0A:4F:3D:9A:50:14:B0 Certificate issuer: /CN=d2f700beca42653e64ab435a2f0a4f3d9a5014b0 Certificate serial: 019B5976B84E8A6B1452144B55BD16CF586C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vcAvspCZT5kq0NaLwpPPZpQFLA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft Manifest number: 1791 Signing time: Fri 26 Dec 2025 07:01:51 +0000 Manifest this update: Fri 26 Dec 2025 07:01:51 +0000 Manifest next update: Sat 27 Dec 2025 07:01:51 +0000 Files and hashes: 1: 0vcAvspCZT5kq0NaLwpPPZpQFLA.crl (hash: g8dYriU5dBVljb18KB6Ze3elnQ5geKV7TG8b1+cTLUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.crl rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft rsync://rpki.ripe.net/repository/DEFAULT/0vcAvspCZT5kq0NaLwpPPZpQFLA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:b8:4e:8a:6b:14:52:14:4b:55:bd:16:cf:58:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2f700beca42653e64ab435a2f0a4f3d9a5014b0 Validity Not Before: Dec 26 07:01:51 2025 GMT Not After : Dec 27 07:01:51 2025 GMT Subject: CN=51ea3d89aa5caa66c75e42eeb01b1c0a16fe0acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:de:2e:d4:3e:d1:8d:98:90:de:3e:0c:07:c7: f6:c4:7b:a3:5e:66:d4:6a:df:7e:80:38:b4:97:e1: 19:de:21:b2:9d:e2:4c:0c:52:60:bc:59:f7:5b:7a: 17:a1:7d:47:2f:76:dd:3f:5e:58:ac:db:98:02:8f: 11:db:04:02:2c:b5:73:82:ad:8e:1e:33:82:cd:8d: 97:ca:4a:b9:94:3f:31:bb:fd:e3:aa:3e:df:a5:1b: 66:12:ce:b9:51:45:6d:17:bb:b9:a2:7b:3d:07:8a: 40:b5:c3:f2:24:65:7d:d9:e7:c8:64:2c:16:cd:ff: 42:ad:e9:67:97:c9:fc:ca:c1:b7:d2:f3:ad:d0:6d: 80:b8:6b:f5:95:7e:de:95:dd:8b:43:4e:6b:17:e6: e7:5b:b4:80:f3:0a:f7:04:33:f5:40:71:9e:3b:bb: 80:dc:f1:77:92:9c:cc:a2:74:9f:74:e4:d1:22:6d: 7e:19:b1:c2:8e:a5:b6:3f:13:63:fe:ea:e6:0b:96: 95:a8:5f:80:42:b7:8a:cb:e5:e5:05:cd:83:85:2f: 32:e4:c4:2b:37:a8:a3:2b:09:d7:93:44:9a:82:d4: b3:7e:9e:fd:4e:7e:12:56:f2:b5:a7:be:26:e5:e8: 3c:c1:c6:d3:26:77:9d:a0:aa:87:19:16:e5:56:e8: db:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:EA:3D:89:AA:5C:AA:66:C7:5E:42:EE:B0:1B:1C:0A:16:FE:0A:CD X509v3 Authority Key Identifier: keyid:D2:F7:00:BE:CA:42:65:3E:64:AB:43:5A:2F:0A:4F:3D:9A:50:14:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vcAvspCZT5kq0NaLwpPPZpQFLA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:29:1c:94:7e:d2:80:6c:52:25:e6:a6:15:eb:0e:47:d0:1b: a0:fd:53:7e:6a:ce:72:a3:6c:04:ba:2a:56:66:38:a6:e2:a0: 08:70:f5:44:7f:22:3e:40:75:81:90:b9:00:75:f6:52:d9:9b: 79:6a:88:a6:a9:f8:ea:cd:ec:42:bb:dd:40:6a:6d:21:83:8c: b7:ff:2c:78:35:ea:9b:b8:b8:d2:00:93:fb:44:6f:1e:64:05: 2a:3d:cb:ab:87:d3:21:f6:04:5b:b7:a9:c7:cb:9d:ad:c3:34: cd:56:f0:9f:3e:9a:fb:3d:0c:e5:33:49:5e:c6:61:ba:a0:32: 31:48:e4:bf:ab:68:a9:f7:3f:38:99:5d:32:73:f6:15:29:62: 5f:3c:df:68:1a:38:6d:45:9e:55:f2:03:5d:df:b6:eb:49:f0: 5f:92:c0:cd:0e:96:6a:9e:ca:d8:da:59:2b:e7:50:7b:21:a2: 2f:31:4e:fe:c5:b0:8d:56:28:20:a5:cb:99:6b:33:f2:06:05: 99:6b:a2:82:2f:0b:9c:7c:63:08:44:65:f0:5e:cf:58:a4:45: 1b:55:8a:06:ae:0c:bd:d5:f5:ef:e7:08:bb:27:dd:50:f0:01: cb:18:47:0e:e3:62:9b:51:7f:55:08:32:34:71:87:46:eb:d3: df:cc:8d:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdrhOimsUUhRLVb0Wz1hsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZjcwMGJlY2E0MjY1M2U2NGFiNDM1YTJmMGE0ZjNkOWE1 MDE0YjAwHhcNMjUxMjI2MDcwMTUxWhcNMjUxMjI3MDcwMTUxWjAzMTEwLwYDVQQD Eyg1MWVhM2Q4OWFhNWNhYTY2Yzc1ZTQyZWViMDFiMWMwYTE2ZmUwYWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs94u1D7RjZiQ3j4MB8f2xHujXmbU at9+gDi0l+EZ3iGyneJMDFJgvFn3W3oXoX1HL3bdP15YrNuYAo8R2wQCLLVzgq2O HjOCzY2Xykq5lD8xu/3jqj7fpRtmEs65UUVtF7u5ons9B4pAtcPyJGV92efIZCwW zf9Crelnl8n8ysG30vOt0G2AuGv1lX7eld2LQ05rF+bnW7SA8wr3BDP1QHGeO7uA 3PF3kpzMonSfdOTRIm1+GbHCjqW2PxNj/urmC5aVqF+AQreKy+XlBc2DhS8y5MQr N6ijKwnXk0SagtSzfp79Tn4SVvK1p74m5eg8wcbTJnedoKqHGRblVujbywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHqPYmqXKpmx15C7rAbHAoW/grNMB8GA1UdIwQY MBaAFNL3AL7KQmU+ZKtDWi8KTz2aUBSwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHZjQXZzcENaVDVrcTBOYUx3cFBQWnBRRkxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wNzUxMmEtMTJjOC00ODk1LWIzMmYt NzVjN2JhMWMwNzNmLzEvMHZjQXZzcENaVDVrcTBOYUx3cFBQWnBRRkxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8wNzUxMmEtMTJjOC00ODk1LWIzMmYtNzVjN2JhMWMwNzNm LzEvMHZjQXZzcENaVDVrcTBOYUx3cFBQWnBRRkxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCkclH7S gGxSJeamFesOR9AboP1TfmrOcqNsBLoqVmY4puKgCHD1RH8iPkB1gZC5AHX2Utmb eWqIpqn46s3sQrvdQGptIYOMt/8seDXqm7i40gCT+0RvHmQFKj3Lq4fTIfYEW7ep x8udrcM0zVbwnz6a+z0M5TNJXsZhuqAyMUjkv6toqfc/OJldMnP2FSliXzzfaBo4 bUWeVfIDXd+260nwX5LAzQ6Wap7K2NpZK+dQeyGiLzFO/sWwjVYoIKXLmWsz8gYF mWuigi8LnHxjCERl8F7PWKRFG1WKBq4MvdX17+cIuyfdUPAByxhHDuNim1F/VQgy NHGHRuvT38yNmA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:10 2025 by rpki-client