This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft File: dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json) Hash identifier: uTZlBGfVSQHGzM5LiQJUQosxumb+6ImYCFVqnrUKg7E= Subject key identifier: F6:17:76:76:63:8B:A9:09:47:F2:86:29:1B:DB:5F:23:10:AB:3B:24 Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA Certificate issuer: /CN=76fe3055e87290000e3287f7ab5883802a5aa6da Certificate serial: 019B53AB828220E70025148A3EE7E2ECB786 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft Manifest number: 0ABB Signing time: Thu 25 Dec 2025 04:01:47 +0000 Manifest this update: Thu 25 Dec 2025 04:01:47 +0000 Manifest next update: Fri 26 Dec 2025 04:01:47 +0000 Files and hashes: 1: 8nt8dsbMeiqtSt6KoDNGgs5pyTM.roa (hash: RvFtibhd8tSawl3iSjZ76rX4z9HhG8SM7MwleTD5nY0=) 2: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: UlR4ucuLw+n7lZTW6Vlm1omUXTr1fh4zJnvRsXwxrRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:82:82:20:e7:00:25:14:8a:3e:e7:e2:ec:b7:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da Validity Not Before: Dec 25 04:01:47 2025 GMT Not After : Dec 26 04:01:47 2025 GMT Subject: CN=f6177676638ba90947f286291bdb5f2310ab3b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:45:02:a7:8f:3d:9b:9c:4b:62:44:e2:f6:d3: 6d:37:ad:0e:9d:6b:0a:62:28:23:1f:64:a2:ac:46: 1a:ff:eb:51:12:43:ab:c2:da:19:14:09:ca:2b:75: bd:34:c2:aa:bc:7b:19:e8:fa:8f:01:1b:f8:28:af: bf:87:5d:14:83:e2:74:76:9b:76:28:a9:42:37:ff: f8:25:9e:84:c5:e9:39:81:f9:ea:f5:28:66:89:2c: cf:2b:b8:92:64:d2:2f:d6:58:b7:04:ea:67:b7:23: 11:86:ab:17:67:97:11:45:1c:b9:84:99:f8:3b:46: 1f:64:f9:a5:1b:2a:c5:23:39:44:70:e1:97:68:30: 88:0c:b5:28:71:bd:51:81:a2:7b:17:cc:05:de:e6: 51:92:c4:13:cb:ec:39:5b:4f:8d:41:9d:35:11:49: 2d:d2:bf:38:ff:0f:3d:f7:14:47:5a:2a:e7:5b:3c: 30:5f:da:46:13:78:6c:a9:01:b0:a1:b5:f4:75:1f: a2:86:5a:8b:8e:2c:a1:d8:8c:52:23:76:21:7c:d8: 09:38:56:26:13:5f:ca:b7:4c:d0:b7:bc:4b:ee:96: 5e:1c:4c:d6:39:45:e5:24:74:8e:3c:d2:97:92:44: 4e:96:d2:db:26:a9:a8:1f:2f:55:3e:2d:bf:71:46: bc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:17:76:76:63:8B:A9:09:47:F2:86:29:1B:DB:5F:23:10:AB:3B:24 X509v3 Authority Key Identifier: keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:39:ce:ba:46:a9:1b:e3:ae:ff:f3:a5:8a:22:1e:d4:07:ed: 3d:f7:37:6f:c2:41:86:4f:f6:92:f8:65:f1:b5:e9:2f:b7:38: 88:31:25:24:7e:d2:39:2f:97:0b:38:e9:61:b6:4e:12:79:ee: d4:12:35:c0:a6:61:72:e2:0f:b5:4b:8f:c5:13:e3:41:f4:2c: f9:b9:b4:27:91:ec:ed:d4:d6:79:27:51:25:b7:53:01:11:c0: 11:38:27:78:5e:dd:11:b0:6b:19:92:46:5e:9a:4b:53:69:bd: ad:dc:b8:37:3a:3d:31:fa:03:10:94:1d:30:fe:38:29:69:61: 0b:3f:71:3c:01:c0:eb:10:3d:a8:82:0d:c2:21:6c:41:98:59: d6:38:32:ad:00:db:01:40:43:9c:96:5a:b8:21:60:c3:dd:4e: 60:a0:c8:ef:53:c1:f7:ce:3c:9a:b8:33:b1:7f:e0:75:f7:20: 96:25:be:fd:6f:2c:37:bc:b5:5c:5c:c0:41:65:7c:48:dc:ae: 9d:c9:c6:24:79:59:f3:4b:ea:ca:23:69:d1:47:71:23:74:8e: fb:41:66:ae:d3:28:ed:b4:d6:46:78:bc:9f:67:8e:5b:55:f4: ea:f1:66:b8:fa:6f:70:ca:b9:b5:fb:dd:32:1b:01:f8:21:d2: f8:ae:5c:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq4KCIOcAJRSKPufi7LeGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZmUzMDU1ZTg3MjkwMDAwZTMyODdmN2FiNTg4MzgwMmE1 YWE2ZGEwHhcNMjUxMjI1MDQwMTQ3WhcNMjUxMjI2MDQwMTQ3WjAzMTEwLwYDVQQD EyhmNjE3NzY3NjYzOGJhOTA5NDdmMjg2MjkxYmRiNWYyMzEwYWIzYjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kUCp489m5xLYkTi9tNtN60OnWsK YigjH2SirEYa/+tREkOrwtoZFAnKK3W9NMKqvHsZ6PqPARv4KK+/h10Ug+J0dpt2 KKlCN//4JZ6Exek5gfnq9ShmiSzPK7iSZNIv1li3BOpntyMRhqsXZ5cRRRy5hJn4 O0YfZPmlGyrFIzlEcOGXaDCIDLUocb1RgaJ7F8wF3uZRksQTy+w5W0+NQZ01EUkt 0r84/w899xRHWirnWzwwX9pGE3hsqQGwobX0dR+ihlqLjiyh2IxSI3YhfNgJOFYm E1/Kt0zQt7xL7pZeHEzWOUXlJHSOPNKXkkROltLbJqmoHy9VPi2/cUa8EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYXdnZji6kJR/KGKRvbXyMQqzskMB8GA1UdIwQY MBaAFHb+MFXocpAADjKH96tYg4AqWqbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHY0d1ZlaHlrQUFPTW9mM3ExaURnQ3BhcHRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iY2UxNDEtZTljMi00YTVkLThlMTYt ODRiNTE3NmEyYTRjLzEvZHY0d1ZlaHlrQUFPTW9mM3ExaURnQ3BhcHRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iY2UxNDEtZTljMi00YTVkLThlMTYtODRiNTE3NmEyYTRj LzEvZHY0d1ZlaHlrQUFPTW9mM3ExaURnQ3BhcHRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDnOukap G+Ou//OliiIe1AftPfc3b8JBhk/2kvhl8bXpL7c4iDElJH7SOS+XCzjpYbZOEnnu 1BI1wKZhcuIPtUuPxRPjQfQs+bm0J5Hs7dTWeSdRJbdTARHAETgneF7dEbBrGZJG XppLU2m9rdy4Nzo9MfoDEJQdMP44KWlhCz9xPAHA6xA9qIINwiFsQZhZ1jgyrQDb AUBDnJZauCFgw91OYKDI71PB9848mrgzsX/gdfcgliW+/W8sN7y1XFzAQWV8SNyu ncnGJHlZ80vqyiNp0UdxI3SO+0FmrtMo7bTWRni8n2eOW1X06vFmuPpvcMq5tfvd MhsB+CHS+K5cMw== -----END CERTIFICATE-----Generated at Thu Dec 25 07:12:44 2025 by rpki-client