This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft File: V7DWfEnsEvT1QXA49twTwvk-p2U.mft (raw, json) Hash identifier: YbRCCcR1dhftM9ruPn+PWcJebaH6NE4DWr5V5NtTJ1c= Subject key identifier: 56:E4:3D:DB:56:22:93:23:C5:E1:79:79:86:5E:89:4E:8B:92:18:DA Authority key identifier: 57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65 Certificate issuer: /CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765 Certificate serial: 019B1A5FC768ACFF814801484AB924AD2954 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft Manifest number: 0FD1 Signing time: Sun 14 Dec 2025 01:00:43 +0000 Manifest this update: Sun 14 Dec 2025 01:00:43 +0000 Manifest next update: Mon 15 Dec 2025 01:00:43 +0000 Files and hashes: 1: V7DWfEnsEvT1QXA49twTwvk-p2U.crl (hash: PpTqLOskyPGtE/8AkxWSULyNzYd0I2vYfNxOniVrehM=) 2: aTC_FMtzHsZtI14wbnunZmi33Jw.roa (hash: wvwgvmerl+Gv6gcyDvl/OWVT3i3Y0FpbzMV8nbDfYyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 01:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:5f:c7:68:ac:ff:81:48:01:48:4a:b9:24:ad:29:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765 Validity Not Before: Dec 14 01:00:43 2025 GMT Not After : Dec 15 01:00:43 2025 GMT Subject: CN=56e43ddb56229323c5e17979865e894e8b9218da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:de:a4:c8:a1:75:77:49:30:41:41:86:29:6c: 32:1f:6b:9d:b2:f9:c9:fe:94:28:3c:91:ae:c0:cc: d3:0d:5f:21:1a:cc:1b:56:31:b1:f3:d8:02:9b:fd: e2:d2:46:71:78:e8:97:38:ca:ad:b8:9c:30:54:09: 78:1c:fa:77:c4:48:04:0e:8b:0c:60:dc:4f:92:3e: 72:3a:67:24:2b:58:0f:d9:06:05:8c:60:08:d9:48: b7:b5:ae:29:a8:eb:d2:10:7c:68:f8:a7:ce:39:d7: 87:97:28:de:4a:1f:13:fa:40:44:54:f9:33:d2:d3: 8e:96:ef:08:67:cf:40:df:76:4d:fd:1f:eb:7a:93: 01:b0:71:0f:01:4d:aa:4b:5b:de:46:e7:9e:41:4c: 64:0f:0c:46:14:88:0e:8c:c1:f1:1e:2e:65:08:85: 3f:fc:de:4c:2e:45:fd:1d:c0:77:c4:5a:c0:1e:f3: 54:1f:69:a9:0c:e8:f9:b2:73:bb:1a:f9:cc:b3:c1: 1e:36:2c:3d:a7:4d:b9:64:2d:57:8a:b1:43:27:9c: ae:01:a8:4a:b5:8b:31:0c:f8:e7:21:da:4c:04:e3: 93:f7:5b:e0:d4:9a:07:30:d4:08:21:2b:d8:85:26: 05:07:cf:93:cc:0e:36:13:bb:f3:a3:21:8f:11:64: 2d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E4:3D:DB:56:22:93:23:C5:E1:79:79:86:5E:89:4E:8B:92:18:DA X509v3 Authority Key Identifier: keyid:57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d5:72:62:33:14:d7:f7:18:5e:b5:b4:e9:f3:9b:c4:33:0d: 0c:8b:bc:2b:31:bd:bf:f7:da:64:3d:f6:9c:13:ce:5d:6b:e5: 49:5f:d7:87:07:29:12:fa:dd:73:0a:41:4b:a6:3e:ff:bc:91: f3:25:c6:ed:65:be:34:3d:a1:bc:71:f9:33:ba:ea:b2:51:b2: dd:e3:fd:4b:cd:5e:da:f0:2f:c9:56:6c:8f:97:56:07:95:fe: a3:1b:10:cc:8f:96:e5:29:ab:cf:e1:c6:f1:78:c5:58:21:1a: 92:36:60:2b:de:6b:b3:47:e2:66:c2:65:69:5c:0b:6b:c8:d6: fa:2f:9b:52:62:c0:1d:2a:90:06:d5:a9:11:0c:5a:54:49:91: da:92:ed:70:95:4a:8a:41:8e:77:0e:92:a4:50:0a:84:71:da: 59:cc:a8:d6:86:48:95:bf:7d:da:bf:5a:c6:ef:aa:33:a3:c6: ab:3d:e3:05:28:32:6b:63:43:e2:a2:ad:2a:b3:d8:8d:70:4a: 02:a2:45:9f:2c:ee:78:de:e8:d3:a3:55:e9:2d:fd:8a:aa:1b: 1a:ef:39:ca:a0:bf:b8:55:c0:a5:ae:3c:a8:24:d7:f1:fc:17: 7d:d4:16:ea:73:9d:3b:35:1f:89:20:b7:ce:11:fa:c7:3f:b7: 45:a9:41:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaX8dorP+BSAFISrkkrSlUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YjBkNjdjNDllYzEyZjRmNTQxNzAzOGY2ZGMxM2MyZjkz ZWE3NjUwHhcNMjUxMjE0MDEwMDQzWhcNMjUxMjE1MDEwMDQzWjAzMTEwLwYDVQQD Eyg1NmU0M2RkYjU2MjI5MzIzYzVlMTc5Nzk4NjVlODk0ZThiOTIxOGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu96kyKF1d0kwQUGGKWwyH2udsvnJ /pQoPJGuwMzTDV8hGswbVjGx89gCm/3i0kZxeOiXOMqtuJwwVAl4HPp3xEgEDosM YNxPkj5yOmckK1gP2QYFjGAI2Ui3ta4pqOvSEHxo+KfOOdeHlyjeSh8T+kBEVPkz 0tOOlu8IZ89A33ZN/R/repMBsHEPAU2qS1veRueeQUxkDwxGFIgOjMHxHi5lCIU/ /N5MLkX9HcB3xFrAHvNUH2mpDOj5snO7GvnMs8EeNiw9p025ZC1XirFDJ5yuAahK tYsxDPjnIdpMBOOT91vg1JoHMNQIISvYhSYFB8+TzA42E7vzoyGPEWQtmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbkPdtWIpMjxeF5eYZeiU6LkhjaMB8GA1UdIwQY MBaAFFew1nxJ7BL09UFwOPbcE8L5PqdlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjdEV2ZFbnNFdlQxUVhBNDl0d1R3dmstcDJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NTE2NTctMDQ0ZC00N2QzLWFmYzkt YzNhODM3NWY5MGY5LzEvVjdEV2ZFbnNFdlQxUVhBNDl0d1R3dmstcDJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84NTE2NTctMDQ0ZC00N2QzLWFmYzktYzNhODM3NWY5MGY5 LzEvVjdEV2ZFbnNFdlQxUVhBNDl0d1R3dmstcDJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNVyYjMU 1/cYXrW06fObxDMNDIu8KzG9v/faZD32nBPOXWvlSV/XhwcpEvrdcwpBS6Y+/7yR 8yXG7WW+ND2hvHH5M7rqslGy3eP9S81e2vAvyVZsj5dWB5X+oxsQzI+W5Smrz+HG 8XjFWCEakjZgK95rs0fiZsJlaVwLa8jW+i+bUmLAHSqQBtWpEQxaVEmR2pLtcJVK ikGOdw6SpFAKhHHaWcyo1oZIlb992r9axu+qM6PGqz3jBSgya2ND4qKtKrPYjXBK AqJFnyzueN7o06NV6S39iqobGu85yqC/uFXApa48qCTX8fwXfdQW6nOdOzUfiSC3 zhH6xz+3RalBRg== -----END CERTIFICATE-----Generated at Sun Dec 14 07:47:41 2025 by rpki-client