This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft File: Vz6UxDzTSjuDpL2Kp79K4yRubak.mft (raw, json) Hash identifier: 3FXJg1VrlGxt/Hv09yrXmqk/jysyRnE38vYthSJ/rMk= Subject key identifier: 6A:0F:2B:B6:CB:2A:8A:B2:AE:25:4A:73:35:8F:E5:43:91:0C:8A:65 Authority key identifier: 57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9 Certificate issuer: /CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9 Certificate serial: 019B337B39BBC150BB0ECC7673D330CDBB42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 22:01:12 +0000 Manifest this update: Thu 18 Dec 2025 22:01:12 +0000 Manifest next update: Fri 19 Dec 2025 22:01:12 +0000 Files and hashes: 1: Vz6UxDzTSjuDpL2Kp79K4yRubak.crl (hash: 2QtB/KB6126mi4jDPnWdnhNkDLLbNiXsaVIGv9XeBG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:39:bb:c1:50:bb:0e:cc:76:73:d3:30:cd:bb:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9 Validity Not Before: Dec 18 22:01:12 2025 GMT Not After : Dec 19 22:01:12 2025 GMT Subject: CN=6a0f2bb6cb2a8ab2ae254a73358fe543910c8a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:68:1e:1a:40:6b:ab:d7:82:a3:69:73:3e:7f: ac:00:75:2e:7c:6d:50:6d:26:aa:10:e4:8d:3b:d7: 97:5e:2c:ea:b4:a5:46:d9:26:4a:e9:f8:38:81:eb: 4a:1b:89:7b:07:16:a0:7b:c8:fb:ff:ac:e5:09:6a: 5d:90:9b:41:af:5b:f6:88:17:7a:59:f2:e3:81:99: 73:d1:eb:2e:49:c5:ae:ef:9f:80:44:ca:33:1c:f7: 46:1e:37:99:73:5d:19:f9:a0:fd:a1:1f:b3:a4:3d: 87:aa:9f:a7:0c:6f:a4:4d:19:f4:e8:34:50:22:9e: ec:b2:af:79:a7:07:f5:70:a8:dd:36:ab:e9:f8:6f: f3:e6:32:7d:48:9b:cc:d7:02:f0:91:bd:ae:f6:58: f7:6a:36:d4:55:37:78:9e:b8:db:a4:da:0b:d1:1a: a3:bd:01:d6:97:a5:a0:f9:a8:64:f2:ae:84:66:9e: 85:bc:03:0c:89:e0:e3:21:b6:3e:56:e7:b4:0a:32: aa:d6:7a:40:a3:76:ff:a1:5c:f0:58:bb:4c:ec:5c: 6f:5a:21:ee:4b:06:43:9b:8b:42:76:64:37:f8:40: 9b:9e:3c:c8:05:f0:df:bd:aa:0b:54:de:66:3b:d8: 5b:c5:83:ae:cb:2c:27:43:2d:e9:94:f7:62:8c:1b: 28:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0F:2B:B6:CB:2A:8A:B2:AE:25:4A:73:35:8F:E5:43:91:0C:8A:65 X509v3 Authority Key Identifier: keyid:57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:01:4d:cc:6f:5e:9a:b7:3b:08:08:a6:91:09:51:d3:4d:ba: 7d:9b:e2:11:81:71:01:5a:e6:f9:f7:2f:8c:ec:b5:ad:b3:e8: 18:65:a2:0c:de:e3:bb:f2:03:c0:cc:bf:91:26:b9:e1:02:15: 24:d4:9e:30:d6:34:1f:68:72:8d:e4:bd:df:fb:e3:53:27:2b: 42:b7:27:3d:2c:b7:04:90:3b:0b:ab:2a:a0:2d:5f:ec:50:75: 8a:56:04:a7:b1:f6:ee:c5:dd:49:0d:f2:64:70:6e:d3:b2:ee: aa:54:59:98:e0:de:13:f7:05:60:61:26:e7:a1:97:4f:75:49: fe:25:1a:21:08:63:75:d1:a1:be:d6:ae:47:a8:93:04:db:29: 6d:89:0c:00:92:d7:7e:59:dc:88:20:f4:1a:56:8e:d4:1e:0d: 3a:85:50:4e:16:59:bd:3e:15:a3:32:f1:04:5b:5c:6f:99:1f: 59:80:bb:ba:a2:e2:44:3d:9c:0d:4d:69:07:8f:29:f4:4c:21: 00:6b:45:3b:3e:22:1c:c8:52:70:8b:dc:55:c5:de:e8:45:e4: 8b:4e:72:90:fe:df:90:3c:91:bd:c8:c0:bc:61:6d:70:fe:c8: 25:81:fb:68:b7:81:32:eb:3c:87:b8:e4:fe:d1:26:1a:9c:1a: ec:22:05:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszezm7wVC7Dsx2c9MwzbtCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3M2U5NGM0M2NkMzRhM2I4M2E0YmQ4YWE3YmY0YWUzMjQ2 ZTZkYTkwHhcNMjUxMjE4MjIwMTEyWhcNMjUxMjE5MjIwMTEyWjAzMTEwLwYDVQQD Eyg2YTBmMmJiNmNiMmE4YWIyYWUyNTRhNzMzNThmZTU0MzkxMGM4YTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmgeGkBrq9eCo2lzPn+sAHUufG1Q bSaqEOSNO9eXXizqtKVG2SZK6fg4getKG4l7Bxage8j7/6zlCWpdkJtBr1v2iBd6 WfLjgZlz0esuScWu75+ARMozHPdGHjeZc10Z+aD9oR+zpD2Hqp+nDG+kTRn06DRQ Ip7ssq95pwf1cKjdNqvp+G/z5jJ9SJvM1wLwkb2u9lj3ajbUVTd4nrjbpNoL0Rqj vQHWl6Wg+ahk8q6EZp6FvAMMieDjIbY+Vue0CjKq1npAo3b/oVzwWLtM7FxvWiHu SwZDm4tCdmQ3+ECbnjzIBfDfvaoLVN5mO9hbxYOuyywnQy3plPdijBsoTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoPK7bLKoqyriVKczWP5UORDIplMB8GA1UdIwQY MBaAFFc+lMQ800o7g6S9iqe/SuMkbm2pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVno2VXhEelRTanVEcEwyS3A3OUs0eVJ1YmFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jODViZmEtYzA3MC00ZGU4LTg0NDQt ODI5NzcwNjJiOTQ3LzEvVno2VXhEelRTanVEcEwyS3A3OUs0eVJ1YmFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9jODViZmEtYzA3MC00ZGU4LTg0NDQtODI5NzcwNjJiOTQ3 LzEvVno2VXhEelRTanVEcEwyS3A3OUs0eVJ1YmFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwFNzG9e mrc7CAimkQlR0026fZviEYFxAVrm+fcvjOy1rbPoGGWiDN7ju/IDwMy/kSa54QIV JNSeMNY0H2hyjeS93/vjUycrQrcnPSy3BJA7C6sqoC1f7FB1ilYEp7H27sXdSQ3y ZHBu07LuqlRZmODeE/cFYGEm56GXT3VJ/iUaIQhjddGhvtauR6iTBNspbYkMAJLX flnciCD0GlaO1B4NOoVQThZZvT4VozLxBFtcb5kfWYC7uqLiRD2cDU1pB48p9Ewh AGtFOz4iHMhScIvcVcXe6EXki05ykP7fkDyRvcjAvGFtcP7IJYH7aLeBMus8h7jk /tEmGpwa7CIFaw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:15:59 2025 by rpki-client