This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft File: V0zsR2DtovCf62939yFCvmmbuMM.mft (raw, json) Hash identifier: YztJm+8Z68/Xi3rJJNcpMP3hWtOJ3VaFkk8UKUtR3BE= Subject key identifier: B5:F6:ED:DF:D1:18:07:8C:50:A6:46:16:82:A4:8A:29:92:1A:24:46 Authority key identifier: 57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3 Certificate issuer: /CN=574cec4760eda2f09feb6f77f72142be699bb8c3 Certificate serial: 019B397D9DB3A734A8E8A38E3DD548BA0F88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft Manifest number: 1210 Signing time: Sat 20 Dec 2025 02:01:32 +0000 Manifest this update: Sat 20 Dec 2025 02:01:32 +0000 Manifest next update: Sun 21 Dec 2025 02:01:32 +0000 Files and hashes: 1: V0zsR2DtovCf62939yFCvmmbuMM.crl (hash: pDZvljfPFo4LmjU/V45fERYfH2H4Mt0Vgqzjl7zKSFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:9d:b3:a7:34:a8:e8:a3:8e:3d:d5:48:ba:0f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=574cec4760eda2f09feb6f77f72142be699bb8c3 Validity Not Before: Dec 20 02:01:32 2025 GMT Not After : Dec 21 02:01:32 2025 GMT Subject: CN=b5f6eddfd118078c50a6461682a48a29921a2446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:aa:1f:b1:53:72:e0:cf:7b:26:f6:34:31:ab: d8:54:95:e1:79:a9:00:7e:1b:54:39:21:63:6a:3c: d7:7f:4c:a0:0b:d1:f4:e9:44:cd:ff:60:71:d0:8f: 5d:99:de:c9:73:5e:84:76:b1:71:6a:f6:60:d4:ba: 56:7c:06:aa:48:ef:97:79:ef:67:b2:ab:a7:bb:9a: 69:72:66:57:08:9f:14:d2:c5:9e:46:7f:0f:65:5f: 62:81:dd:2c:0b:82:13:f9:e4:ac:cb:00:0a:00:32: 1a:99:d0:df:e6:be:3d:46:a9:f6:31:f8:43:15:95: a6:2d:9e:51:6b:b4:d6:0c:ec:15:3c:ac:5c:3e:3f: b6:4d:c1:32:ab:bc:5e:52:a1:c1:0e:69:63:ff:30: 82:fe:2c:b9:49:39:56:8a:26:93:74:e2:49:77:96: f3:44:07:fb:51:c6:7f:58:fb:fe:9c:c1:a7:da:50: af:0b:99:de:40:53:0c:17:2c:b8:6a:cb:9e:71:09: 6a:16:e7:87:1c:3a:b9:9d:43:20:20:3e:5e:d8:c0: 6a:56:63:c2:5a:b8:8c:29:1c:8d:8d:08:0f:98:2d: c7:d4:e1:4f:e5:ce:43:b2:42:a8:0e:d8:ff:ff:34: e3:1d:33:d5:eb:c9:8f:50:f9:5f:d2:06:03:97:c8: 85:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F6:ED:DF:D1:18:07:8C:50:A6:46:16:82:A4:8A:29:92:1A:24:46 X509v3 Authority Key Identifier: keyid:57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:4d:fb:c0:27:c0:2d:bd:f0:60:56:19:06:d5:41:62:2e:4d: b4:ae:18:08:cc:57:f1:e7:ad:2d:3c:28:4d:1c:9f:3f:11:84: ad:2f:8f:d3:db:dc:14:8b:63:c7:d3:aa:ed:a2:7a:24:9d:cd: eb:2c:70:2f:95:83:7e:47:0a:b6:d2:03:eb:ff:a9:cd:78:d6: d7:d3:24:c3:47:9c:8c:a2:b6:ac:a0:73:fe:09:8c:40:01:ff: a3:68:bf:01:f9:56:87:75:3a:90:cc:ad:74:11:54:c2:14:58: ca:08:9a:56:69:e2:0f:2e:d8:ff:2c:fa:42:49:63:0c:c9:f8: b1:0f:8b:91:93:c7:92:7a:72:06:48:d4:be:46:3e:55:a4:d4: cd:dd:67:6e:da:42:16:5c:d9:e7:4e:ab:97:34:7e:a9:a2:a0: 29:08:a1:d7:56:b3:8b:02:32:d3:99:58:69:f3:8d:93:00:19: bd:d0:59:94:56:7b:95:69:35:69:da:26:af:21:d5:51:f5:fa: b7:66:6c:fb:cf:3a:95:90:cb:8d:8b:be:85:0e:9d:1b:a0:26: 59:c5:fd:68:13:0f:c2:bb:3d:3c:72:59:1e:cd:35:19:c6:27: 5d:af:8c:76:a9:f8:6a:ba:fc:74:50:7a:9a:7b:43:07:56:61: 7b:f6:86:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fZ2zpzSo6KOOPdVIug+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NGNlYzQ3NjBlZGEyZjA5ZmViNmY3N2Y3MjE0MmJlNjk5 YmI4YzMwHhcNMjUxMjIwMDIwMTMyWhcNMjUxMjIxMDIwMTMyWjAzMTEwLwYDVQQD EyhiNWY2ZWRkZmQxMTgwNzhjNTBhNjQ2MTY4MmE0OGEyOTkyMWEyNDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaofsVNy4M97JvY0MavYVJXheakA fhtUOSFjajzXf0ygC9H06UTN/2Bx0I9dmd7Jc16EdrFxavZg1LpWfAaqSO+Xee9n squnu5ppcmZXCJ8U0sWeRn8PZV9igd0sC4IT+eSsywAKADIamdDf5r49Rqn2MfhD FZWmLZ5Ra7TWDOwVPKxcPj+2TcEyq7xeUqHBDmlj/zCC/iy5STlWiiaTdOJJd5bz RAf7UcZ/WPv+nMGn2lCvC5neQFMMFyy4asuecQlqFueHHDq5nUMgID5e2MBqVmPC WriMKRyNjQgPmC3H1OFP5c5DskKoDtj//zTjHTPV68mPUPlf0gYDl8iFHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLX27d/RGAeMUKZGFoKkiimSGiRGMB8GA1UdIwQY MBaAFFdM7Edg7aLwn+tvd/chQr5pm7jDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjB6c1IyRHRvdkNmNjI5Mzl5RkN2bW1idU1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85NTcxZGEtZWZjYS00MWQ2LTg1ZjMt ZDZhOTk5MzRjNDkzLzEvVjB6c1IyRHRvdkNmNjI5Mzl5RkN2bW1idU1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC85NTcxZGEtZWZjYS00MWQ2LTg1ZjMtZDZhOTk5MzRjNDkz LzEvVjB6c1IyRHRvdkNmNjI5Mzl5RkN2bW1idU1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIE37wCfA Lb3wYFYZBtVBYi5NtK4YCMxX8eetLTwoTRyfPxGErS+P09vcFItjx9Oq7aJ6JJ3N 6yxwL5WDfkcKttID6/+pzXjW19Mkw0ecjKK2rKBz/gmMQAH/o2i/AflWh3U6kMyt dBFUwhRYygiaVmniDy7Y/yz6QkljDMn4sQ+LkZPHknpyBkjUvkY+VaTUzd1nbtpC FlzZ506rlzR+qaKgKQih11aziwIy05lYafONkwAZvdBZlFZ7lWk1adomryHVUfX6 t2Zs+886lZDLjYu+hQ6dG6AmWcX9aBMPwrs9PHJZHs01GcYnXa+Mdqn4arr8dFB6 mntDB1Zhe/aGjA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:17:59 2025 by rpki-client