This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft File: C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json) Hash identifier: QJPt9JUOiTZPo7iAUHP5NIhtLJJHUAACPNwR/xUDYP8= Subject key identifier: 6E:01:62:44:A3:E3:23:19:5A:78:2B:1B:4F:2D:85:48:F3:F1:5C:46 Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89 Certificate issuer: /CN=C8623AA6C30FA8E058243708F5672D7960E52389 Certificate serial: 552496D938E8104D0EDF72B7CA62FBA322513F Authority info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer Subject info access: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft Manifest number: 02E4 Signing time: Mon 22 Dec 2025 14:51:30 +0000 Manifest this update: Mon 22 Dec 2025 14:46:30 +0000 Manifest next update: Tue 23 Dec 2025 18:01:30 +0000 Files and hashes: 1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: TDyas8sJ+GACGqgUZ/CsK5oFLrKX+hqsNr05ecEash0=) Validation: OK Signature path: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 11:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:24:96:d9:38:e8:10:4d:0e:df:72:b7:ca:62:fb:a3:22:51:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389 Validity Not Before: Dec 22 14:46:30 2025 GMT Not After : Dec 23 18:01:30 2025 GMT Subject: CN=6E016244A3E323195A782B1B4F2D8548F3F15C46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b0:85:de:b6:db:a1:bb:5e:7a:95:b4:eb:24: 12:a6:7e:45:de:89:63:8b:a8:0a:a0:4e:14:e7:94: 27:39:6a:d4:eb:e2:97:5a:2f:b5:fa:fb:65:45:d8: ea:20:91:26:c0:f1:a5:83:ed:5c:25:c8:44:e6:4a: 79:c5:8d:e7:42:83:19:bb:50:84:b9:6c:a1:2f:3b: 39:e2:11:83:f9:be:c4:82:1a:30:99:5a:6c:89:60: 7b:84:08:a0:f7:c8:47:7d:01:ae:a8:13:aa:be:f1: 2b:27:9b:b1:86:7e:78:2e:d5:f9:bd:8a:a5:ec:ec: 40:4e:ed:2e:a0:1d:68:c2:7b:3c:a9:86:09:7d:08: 08:f8:4e:cb:6c:34:94:1d:91:1c:a8:25:7a:2d:4f: 6a:a4:45:99:f7:5a:18:21:5e:06:d7:e3:b5:09:05: 1c:e9:e2:7c:b3:43:7f:8c:27:47:b7:2b:1b:be:22: 36:cd:2b:91:d0:9f:df:f1:df:7b:e5:6c:57:48:0c: fa:08:1e:4a:f4:09:f6:79:cb:97:cf:a0:b7:28:41: 8b:d2:6d:eb:f6:e5:c5:a0:30:33:72:50:42:df:9e: 1a:e0:b4:13:0e:b4:3e:19:60:ac:fe:2e:76:b9:c3: 38:b9:a0:f5:f0:89:d7:36:42:f7:89:fd:cd:26:af: b7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:01:62:44:A3:E3:23:19:5A:78:2B:1B:4F:2D:85:48:F3:F1:5C:46 X509v3 Authority Key Identifier: keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl Authority Information Access: CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer Subject Information Access: Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:86:a5:09:79:ad:d9:3e:f5:90:85:98:25:18:6f:ba:fc:cd: 9e:ce:ec:3c:62:40:33:e9:64:de:86:71:fd:d1:28:83:11:ad: 66:c8:dc:1d:82:8c:78:75:41:0a:58:07:c5:45:f9:00:0f:42: ed:52:a6:a3:70:f0:38:45:75:84:82:f6:a9:be:ac:a7:34:35: ff:f7:1a:32:2f:c2:d8:f0:b1:6c:50:2c:ca:7c:80:c8:f0:d0: 00:ac:e9:5e:94:28:d2:4c:ad:ad:b5:62:4a:7b:3d:ae:6c:61: a2:ce:e4:a4:63:e5:6a:b2:c3:97:b1:ef:db:3e:e1:41:e9:b0: 30:0e:5f:9a:6d:de:20:31:ac:17:f6:4b:c5:02:44:40:d6:85: d8:ba:c8:ab:83:b1:e9:96:a3:0f:34:ff:3c:b7:8d:e3:90:95: 01:b6:91:79:da:23:b9:90:e9:e2:0c:77:5c:c7:bb:e3:20:a6: 32:88:1c:4c:fd:55:a1:24:08:ab:33:4f:65:ad:29:ed:31:a5: e5:21:75:63:03:cb:ad:11:8d:ae:25:cc:d1:f9:41:fd:76:38: 3a:69:44:69:c0:63:4a:8b:44:01:ad:06:43:df:15:d0:28:1f: 55:df:ff:34:29:04:4a:2e:d4:8c:3e:d3:a2:40:0a:a3:16:52: f7:aa:6b:d3 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgITVSSW2TjoEE0O33K3ymL7oyJRPzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhDODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYw RTUyMzg5MB4XDTI1MTIyMjE0NDYzMFoXDTI1MTIyMzE4MDEzMFowMzExMC8GA1UE AxMoNkUwMTYyNDRBM0UzMjMxOTVBNzgyQjFCNEYyRDg1NDhGM0YxNUM0NjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOWwhd6226G7XnqVtOskEqZ+Rd6J Y4uoCqBOFOeUJzlq1Ovil1ovtfr7ZUXY6iCRJsDxpYPtXCXIROZKecWN50KDGbtQ hLlsoS87OeIRg/m+xIIaMJlabIlge4QIoPfIR30BrqgTqr7xKyebsYZ+eC7V+b2K pezsQE7tLqAdaMJ7PKmGCX0ICPhOy2w0lB2RHKglei1PaqRFmfdaGCFeBtfjtQkF HOnifLNDf4wnR7crG74iNs0rkdCf3/Hfe+VsV0gM+ggeSvQJ9nnLl8+gtyhBi9Jt 6/blxaAwM3JQQt+eGuC0Ew60PhlgrP4udrnDOLmg9fCJ1zZC94n9zSavt3cCAwEA AaOCAiwwggIoMB0GA1UdDgQWBBRuAWJEo+MjGVp4KxtPLYVI8/FcRjAfBgNVHSME GDAWgBTIYjqmww+o4FgkNwj1Zy15YOUjiTAOBgNVHQ8BAf8EBAMCB4AwfAYDVR0f BHUwczBxoG+gbYZrcnN5bmM6Ly9yb3YtbWVhc3VyZW1lbnRzLm5sbmV0bGFicy5u ZXQvcmVwby9yb3YtbWVhc3VyZW1lbnRzLzMvQzg2MjNBQTZDMzBGQThFMDU4MjQz NzA4RjU2NzJENzk2MEU1MjM4OS5jcmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUF BzAChl5yc3luYzovL3JzeW5jLmtyaWxsLm5sbmV0bGFicy5ubC9yZXBvL25sbmV0 bGFicy8xL0M4NjIzQUE2QzMwRkE4RTA1ODI0MzcwOEY1NjcyRDc5NjBFNTIzODku Y2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYBBQUHMAuGa3JzeW5jOi8vcm92LW1l YXN1cmVtZW50cy5ubG5ldGxhYnMubmV0L3JlcG8vcm92LW1lYXN1cmVtZW50cy8z L0M4NjIzQUE2QzMwRkE4RTA1ODI0MzcwOEY1NjcyRDc5NjBFNTIzODkubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQAKhqUJea3ZPvWQhZglGG+6/M2ezuw8YkAz6WTehnH90SiDEa1myNwdgox4 dUEKWAfFRfkAD0LtUqajcPA4RXWEgvapvqynNDX/9xoyL8LY8LFsUCzKfIDI8NAA rOlelCjSTK2ttWJKez2ubGGizuSkY+VqssOXse/bPuFB6bAwDl+abd4gMawX9kvF AkRA1oXYusirg7HplqMPNP88t43jkJUBtpF52iO5kOniDHdcx7vjIKYyiBxM/VWh JAirM09lrSntMaXlIXVjA8utEY2uJczR+UH9djg6aURpwGNKi0QBrQZD3xXQKB9V 3/80KQRKLtSMPtOiQAqjFlL3qmvT -----END CERTIFICATE-----Generated at Mon Dec 22 19:08:19 2025 by rpki-client