This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft File: gVeAUy7Smj-A57pBTvyzednsl8k.mft (raw, json) Hash identifier: JQCg5+llV3IyhHDW17bkisoY1n2jxmUv277GrW+r67s= Subject key identifier: B5:ED:2E:C5:12:91:19:06:0D:FE:9F:98:52:D6:9F:B0:62:5F:D4:A9 Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9 Certificate issuer: /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9 Certificate serial: 019B63F9F16DAA4CA503548BD9C1B604EDFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft Manifest number: 0A59 Signing time: Sun 28 Dec 2025 08:01:23 +0000 Manifest this update: Sun 28 Dec 2025 08:01:23 +0000 Manifest next update: Mon 29 Dec 2025 08:01:23 +0000 Files and hashes: 1: 8830yksUtOARQk3UFlh-4PNgBiA.roa (hash: EmMvReS/jq/SYrfMRIBrAHCck7YrsLYqaTcJWkpKgFg=) 2: EFk_WP_A_QvGCbPv627jqVmsHfg.roa (hash: k68DoPvpgB6wKb8qFWWLmBs9+urZUeVvssLhdMSBf6k=) 3: Qoyp_KSFKsVEEg02fUYTNo7SRXs.roa (hash: mLCh1eZnjR+MrenmFjvdAR50ujw/VIYVRd5MKC5x8OQ=) 4: ZE3Pd2Bv3QzdWxKRnPV6C_9jTsQ.roa (hash: ULlmWYQOwziva5U7xH3+US8Vy16wr3u3qWj4qpwczMo=) 5: c3zA2IV4VwS8jnesB0LpZBsDyEU.roa (hash: hofK+2Uxhr/bTuv6Zx9VkqisU5DNhllbJwm0jIPd9ao=) 6: gVeAUy7Smj-A57pBTvyzednsl8k.crl (hash: 1IAfCUkfDNfzNoX4dIAd4kcAIBqIls26Rp8kVBcM1EI=) 7: xufGdiw8vu26zsmML7UeTUou5hA.roa (hash: FPD/rr/c4+/3+ME4ysyP2eNMHG6cFBZQMwG4yZOWY+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:f9:f1:6d:aa:4c:a5:03:54:8b:d9:c1:b6:04:ed:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9 Validity Not Before: Dec 28 08:01:23 2025 GMT Not After : Dec 29 08:01:23 2025 GMT Subject: CN=b5ed2ec5129119060dfe9f9852d69fb0625fd4a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dd:49:07:16:ed:06:c8:fe:0f:81:87:5d:2f: 5b:29:16:a3:62:8c:62:93:e5:25:15:38:39:be:8a: 70:31:c2:5a:3c:34:5a:ad:b0:dc:72:90:bc:d1:7f: a5:9a:ec:14:b8:9a:7f:16:cf:b6:2c:c7:b1:f7:22: 76:dc:9f:d3:d3:2f:f4:8b:d4:af:4f:a3:ed:44:66: 83:fa:4b:9c:15:f6:d7:52:02:52:4a:77:e6:9d:40: a7:db:f9:73:5d:f6:93:ca:d8:77:a8:94:09:5e:76: e9:e5:72:d0:b8:cc:8c:17:36:b6:9a:bc:7b:17:ce: e6:b7:86:7c:9e:bd:01:4d:4f:31:bc:8c:83:5a:84: 46:72:6a:a8:1d:4b:ed:06:b4:99:00:95:9c:cd:a6: 37:ce:10:e7:08:a5:1e:13:f6:36:a1:13:25:fb:3e: be:27:9e:3f:6e:e9:83:7b:76:d8:28:bd:cb:c2:6d: d2:b3:d3:f9:af:80:7e:34:35:e9:ef:c0:95:fd:4a: 1e:0e:94:52:9d:81:2b:22:a9:e7:26:bf:8b:00:1d: cd:1f:e7:75:3b:0c:7b:9f:12:b4:32:f4:45:c0:3c: 5b:2c:da:ba:56:68:1c:d4:d5:30:9c:54:9b:da:94: 58:0e:66:cb:ce:cf:97:41:ff:34:c1:aa:b7:61:64: 97:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:ED:2E:C5:12:91:19:06:0D:FE:9F:98:52:D6:9F:B0:62:5F:D4:A9 X509v3 Authority Key Identifier: keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:a4:c1:a6:b6:fa:4d:c5:bd:62:e4:75:8f:39:a9:fd:64:ef: a7:52:91:47:e0:41:ac:59:d3:f9:1d:23:3f:bb:bd:f9:1a:9a: 5b:1a:6a:f7:a3:e8:e9:a4:91:43:80:29:a5:1f:2c:a2:3d:22: 3d:fa:56:88:28:ce:86:29:d5:6d:10:6f:f5:67:34:24:40:d6: da:52:42:db:8b:ab:6c:14:c1:58:33:21:54:00:68:ba:dd:b4: 2f:d6:86:c0:d5:3a:5d:75:5b:04:0c:23:ab:f1:de:bf:df:71: b3:7a:ec:06:a4:1b:8d:e2:54:92:47:fd:40:fb:ee:07:f7:3b: f4:b8:5d:8b:52:05:db:5e:9e:a1:40:5b:0c:8e:b1:96:d5:d0: ce:1d:75:a4:2c:9c:83:32:d6:40:9e:d5:8e:10:93:ff:75:f6: c9:99:38:7a:ed:9a:bd:ce:85:62:4d:d4:d1:7d:48:93:4f:b8: 54:1e:6b:ea:64:a8:6b:a9:41:c8:8f:d2:cf:b2:bb:59:92:c9: 55:c7:d6:21:f2:8c:8c:03:b1:06:ff:95:64:2f:db:1c:60:17: 72:72:96:d8:0f:59:ad:bf:10:74:f9:51:2b:92:c8:16:dc:3b: 33:60:a5:74:b6:c7:4d:23:41:21:cd:e3:94:7b:64:5a:c8:14: 1a:10:d8:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtj+fFtqkylA1SL2cG2BO3/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNTc4MDUzMmVkMjlhM2Y4MGU3YmE0MTRlZmNiMzc5ZDll Yzk3YzkwHhcNMjUxMjI4MDgwMTIzWhcNMjUxMjI5MDgwMTIzWjAzMTEwLwYDVQQD EyhiNWVkMmVjNTEyOTExOTA2MGRmZTlmOTg1MmQ2OWZiMDYyNWZkNGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd1JBxbtBsj+D4GHXS9bKRajYoxi k+UlFTg5vopwMcJaPDRarbDccpC80X+lmuwUuJp/Fs+2LMex9yJ23J/T0y/0i9Sv T6PtRGaD+kucFfbXUgJSSnfmnUCn2/lzXfaTyth3qJQJXnbp5XLQuMyMFza2mrx7 F87mt4Z8nr0BTU8xvIyDWoRGcmqoHUvtBrSZAJWczaY3zhDnCKUeE/Y2oRMl+z6+ J54/bumDe3bYKL3Lwm3Ss9P5r4B+NDXp78CV/UoeDpRSnYErIqnnJr+LAB3NH+d1 Owx7nxK0MvRFwDxbLNq6Vmgc1NUwnFSb2pRYDmbLzs+XQf80waq3YWSXgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXtLsUSkRkGDf6fmFLWn7BiX9SpMB8GA1UdIwQY MBaAFIFXgFMu0po/gOe6QU78s3nZ7JfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kZTMxYTYtYWFhMy00MDlkLThkNGYt ZjYxNTU0YzZjMTQ1LzEvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9kZTMxYTYtYWFhMy00MDlkLThkNGYtZjYxNTU0YzZjMTQ1 LzEvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvKTBprb6 TcW9YuR1jzmp/WTvp1KRR+BBrFnT+R0jP7u9+RqaWxpq96Po6aSRQ4AppR8soj0i PfpWiCjOhinVbRBv9Wc0JEDW2lJC24urbBTBWDMhVABout20L9aGwNU6XXVbBAwj q/Hev99xs3rsBqQbjeJUkkf9QPvuB/c79Lhdi1IF216eoUBbDI6xltXQzh11pCyc gzLWQJ7VjhCT/3X2yZk4eu2avc6FYk3U0X1Ik0+4VB5r6mSoa6lByI/Sz7K7WZLJ VcfWIfKMjAOxBv+VZC/bHGAXcnKW2A9Zrb8QdPlRK5LIFtw7M2CldLbHTSNBIc3j lHtkWsgUGhDYRw== -----END CERTIFICATE-----Generated at Sun Dec 28 09:45:00 2025 by rpki-client