This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft File: V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft (raw, json) Hash identifier: M4LyhdLMG7fiGfTDVveO2ZcweYVMQsQ4YKybcBYDs7Q= Subject key identifier: EB:8E:19:DB:2E:1A:DE:7D:F4:E7:CB:FC:24:CE:9D:2F:CE:EA:D8:1B Authority key identifier: 57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C Certificate issuer: /CN=576d59494a0a927f7a68f909ecef577cd503db1c Certificate serial: 019B2E8BEC944E1926D03E796815C7CFEBA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft Manifest number: 1788 Signing time: Wed 17 Dec 2025 23:01:20 +0000 Manifest this update: Wed 17 Dec 2025 23:01:20 +0000 Manifest next update: Thu 18 Dec 2025 23:01:20 +0000 Files and hashes: 1: 8Tg_w4jLr-o6paH7i7ao61nZQwM.roa (hash: BXi5IdwKZUBuQCj2qQLYriilM2He/krSkrWhx7hLw5g=) 2: V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl (hash: dE9qu8SQ9/TmSbEoIyYpey/CASUwIib+T8KboyqH6vs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:ec:94:4e:19:26:d0:3e:79:68:15:c7:cf:eb:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576d59494a0a927f7a68f909ecef577cd503db1c Validity Not Before: Dec 17 23:01:20 2025 GMT Not After : Dec 18 23:01:20 2025 GMT Subject: CN=eb8e19db2e1ade7df4e7cbfc24ce9d2fceead81b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d3:44:fd:17:2a:1f:af:20:44:d0:fe:71:90: 3d:e0:84:61:42:25:67:7e:87:58:3e:72:32:ac:c0: c1:8b:b3:43:53:47:04:b1:8a:3c:a6:9d:aa:ca:44: 7b:b0:da:be:24:e4:00:18:6b:b8:38:49:3d:8f:d5: 87:15:de:b1:d9:40:4d:78:2d:13:a5:5e:73:b8:ae: 39:45:34:ea:74:cd:d0:8e:e7:15:7e:44:a4:fd:44: 5d:ea:3e:a6:cd:1f:cd:44:d7:1e:8a:8a:e8:6b:9e: 01:5c:42:bb:49:c5:79:f7:30:50:42:39:42:fa:3c: 79:bd:22:69:2a:bf:62:91:ec:f6:d7:81:2a:6a:13: 92:f4:2f:35:e5:4f:ff:4b:b7:46:f6:c9:17:e2:95: 6c:76:da:ad:3e:fd:95:e6:ea:28:a1:64:5e:ce:61: 85:69:3a:a4:19:fa:b9:74:f3:0c:64:87:f0:e4:26: e0:4b:51:93:91:f0:ce:90:57:b5:2a:c4:8b:c8:67: 17:76:d7:64:df:3d:42:df:32:b9:ea:74:c6:71:4e: f9:ed:71:9c:49:35:f7:59:8a:96:12:d0:34:03:59: 3c:b2:9a:af:df:7c:ec:d7:8c:9e:31:83:67:5a:58: ab:eb:56:92:50:50:77:87:79:43:22:93:0f:34:9b: db:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:8E:19:DB:2E:1A:DE:7D:F4:E7:CB:FC:24:CE:9D:2F:CE:EA:D8:1B X509v3 Authority Key Identifier: keyid:57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:62:a5:61:43:ed:4e:05:d2:3d:17:60:6a:ae:bc:ab:2c:4c: 65:9d:58:d0:f9:78:21:99:80:8a:e9:93:3d:e8:39:ad:8f:b4: fd:b2:a3:e2:49:f2:01:3c:84:03:26:32:b6:7f:57:25:2c:e2: c6:0f:7a:86:bc:bf:15:3a:c5:c5:06:fc:61:e3:d1:4a:ce:95: fd:f6:8c:95:6c:ae:61:4a:66:6f:15:2c:94:1c:c7:b7:f5:83: 74:b1:44:a7:bc:28:c5:f0:af:4d:bb:82:d6:06:25:03:ae:37: 92:79:f9:c2:62:ae:70:ba:67:6c:b9:db:ad:52:ce:fd:14:38: f0:e4:76:fa:a2:40:f7:02:fa:84:af:a4:01:c1:d6:5b:0f:d4: dd:d6:2b:a3:17:7b:d4:ee:89:3f:40:de:a3:f7:6d:bf:b3:7f: 98:3e:43:d3:40:df:e3:07:57:68:32:64:70:34:1b:10:05:24: 69:37:01:03:cc:d2:64:b9:99:94:3b:dd:03:28:f0:ee:60:9a: 81:24:25:82:d9:ee:22:21:49:c0:84:84:45:ba:06:f3:92:64: ee:78:19:04:e9:3a:6b:0e:24:d7:57:58:57:1a:a5:b2:2a:0b: a7:ef:1e:44:14:69:77:0c:b7:40:9b:6a:86:78:ff:fc:55:57: 3d:a6:03:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui+yUThkm0D55aBXHz+uoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NmQ1OTQ5NGEwYTkyN2Y3YTY4ZjkwOWVjZWY1NzdjZDUw M2RiMWMwHhcNMjUxMjE3MjMwMTIwWhcNMjUxMjE4MjMwMTIwWjAzMTEwLwYDVQQD EyhlYjhlMTlkYjJlMWFkZTdkZjRlN2NiZmMyNGNlOWQyZmNlZWFkODFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9NE/RcqH68gRND+cZA94IRhQiVn fodYPnIyrMDBi7NDU0cEsYo8pp2qykR7sNq+JOQAGGu4OEk9j9WHFd6x2UBNeC0T pV5zuK45RTTqdM3QjucVfkSk/URd6j6mzR/NRNceioroa54BXEK7ScV59zBQQjlC +jx5vSJpKr9ikez214EqahOS9C815U//S7dG9skX4pVsdtqtPv2V5uoooWRezmGF aTqkGfq5dPMMZIfw5CbgS1GTkfDOkFe1KsSLyGcXdtdk3z1C3zK56nTGcU757XGc STX3WYqWEtA0A1k8spqv33zs14yeMYNnWlir61aSUFB3h3lDIpMPNJvbDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuOGdsuGt599OfL/CTOnS/O6tgbMB8GA1UdIwQY MBaAFFdtWUlKCpJ/emj5CezvV3zVA9scMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjIxWlNVb0trbjk2YVBrSjdPOVhmTlVEMnh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hODk2NDQtOTMxNi00ZThiLTgxYTQt MWYxOWE4YmRhM2VkLzEvVjIxWlNVb0trbjk2YVBrSjdPOVhmTlVEMnh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9hODk2NDQtOTMxNi00ZThiLTgxYTQtMWYxOWE4YmRhM2Vk LzEvVjIxWlNVb0trbjk2YVBrSjdPOVhmTlVEMnh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGKlYUPt TgXSPRdgaq68qyxMZZ1Y0Pl4IZmAiumTPeg5rY+0/bKj4knyATyEAyYytn9XJSzi xg96hry/FTrFxQb8YePRSs6V/faMlWyuYUpmbxUslBzHt/WDdLFEp7woxfCvTbuC 1gYlA643knn5wmKucLpnbLnbrVLO/RQ48OR2+qJA9wL6hK+kAcHWWw/U3dYroxd7 1O6JP0Deo/dtv7N/mD5D00Df4wdXaDJkcDQbEAUkaTcBA8zSZLmZlDvdAyjw7mCa gSQlgtnuIiFJwISERboG85Jk7ngZBOk6aw4k11dYVxqlsioLp+8eRBRpdwy3QJtq hnj//FVXPaYDng== -----END CERTIFICATE-----Generated at Thu Dec 18 07:15:33 2025 by rpki-client