This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft File: vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft (raw, json) Hash identifier: oYlc2cyiLQF1gty4U2OqDWZfxERGsB0LctNqeHWZWf8= Subject key identifier: F7:45:AC:D7:C3:74:14:77:E6:79:CF:C4:33:53:00:C4:A0:57:30:B8 Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F Certificate issuer: /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f Certificate serial: 019B3EA31FCF3F990154D7D9676341CF6BF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 02:00:36 +0000 Manifest this update: Sun 21 Dec 2025 02:00:36 +0000 Manifest next update: Mon 22 Dec 2025 02:00:36 +0000 Files and hashes: 1: 9VNbjYPZNCWhcZlYCO8YbXFUdTs.roa (hash: DW1s4poaFcxeoMfxfTTf75NS52EQcgEZYuwjPKvajE0=) 2: TbgjMEdQ0rbdH1wsIeqh_-bYUgk.roa (hash: GE4J211d6K3inNZ5KwcVMOOJlKd9Y0lNHq1APwdB4fA=) 3: g1mm45j_OkLlur_SqI7WDyJYFdM.roa (hash: RaLkgB3O9bQ5zciuBh3cX5AYs1JmNx5tm4PsA2iWmaQ=) 4: vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl (hash: iUjxOTj5Xe1cmu3HC29ZO3h2QSGqdbEdmiG4mCSeG3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:1f:cf:3f:99:01:54:d7:d9:67:63:41:cf:6b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f Validity Not Before: Dec 21 02:00:36 2025 GMT Not After : Dec 22 02:00:36 2025 GMT Subject: CN=f745acd7c3741477e679cfc4335300c4a05730b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:67:61:53:fa:77:6c:af:ab:7f:e1:a9:ee:b2: 18:65:88:88:2e:75:47:ba:72:90:6d:40:5f:1c:da: 6c:c5:11:bc:a8:60:b9:b4:d6:79:b7:f7:f6:a6:ea: bd:9e:84:df:de:f7:d3:ad:94:9c:15:9c:70:e7:f1: d9:91:55:48:10:ac:c7:5c:a6:7e:15:13:f6:d7:6d: e3:f2:24:09:20:f0:a9:ec:51:ac:5d:c1:72:72:b7: a9:75:8b:ea:e2:eb:d2:23:1b:18:2d:b3:97:a1:c5: 93:b8:6b:6d:b2:e1:07:45:e5:66:d6:15:19:10:87: 88:2c:1a:97:87:98:d1:8c:74:09:58:cc:e7:b7:06: 63:48:a4:36:c2:7c:bb:11:4f:5b:ce:28:9e:9e:d3: 79:ae:e4:01:42:b9:a3:5a:3b:61:d8:52:87:2c:24: 4c:a7:8c:1b:a4:ef:6d:36:30:e1:7e:55:44:41:e4: 37:7d:3e:f7:cf:82:0d:b3:df:cd:47:01:e4:de:44: 00:60:18:05:09:21:0a:ea:79:27:09:9b:75:7a:1e: 30:93:fa:9f:e7:23:a0:e6:f5:24:45:b0:4a:0c:b8: a3:27:9b:b4:c0:5e:71:84:79:ba:25:32:36:bd:8a: 3c:f9:b5:21:08:5a:e0:9a:4f:16:0b:7e:67:5f:42: 22:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:45:AC:D7:C3:74:14:77:E6:79:CF:C4:33:53:00:C4:A0:57:30:B8 X509v3 Authority Key Identifier: keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:85:99:43:b0:f6:85:88:12:ab:d2:75:55:08:f2:2c:e2:44: 6a:48:d0:9b:d2:f4:02:d1:33:9f:28:cf:df:6c:ab:e8:40:ad: 1a:ef:22:6d:20:6f:03:a7:cf:9f:24:f3:d4:bb:a7:46:bf:15: 8e:16:ea:9f:dc:cc:f8:ec:54:08:0b:35:44:09:18:60:a3:74: 5e:7e:1c:88:e6:23:9a:85:b8:1f:c3:8d:a2:44:a5:e7:e1:fe: 3a:e1:e6:d3:0e:90:91:90:d8:19:1e:fb:ad:18:f0:df:d4:03: ba:a7:5a:0c:68:b1:fa:cf:8d:7f:4e:1a:0d:39:6e:07:60:c0: f2:91:d4:f3:3d:86:fe:9a:82:0d:b6:73:d9:ec:4b:41:d2:7e: 05:f6:49:e3:3f:4a:d6:27:79:9d:3f:82:7f:42:33:42:c2:ab: 97:64:ba:fe:c7:bc:58:d0:ce:94:45:db:36:07:f7:e1:c5:2d: 81:df:08:79:17:28:73:15:9f:ec:8f:a5:39:d8:47:95:02:05: b4:67:fe:d1:dc:be:75:0e:e8:9b:64:b6:bb:80:54:3d:e4:bd: 7a:13:90:a8:63:4d:36:64:eb:ce:0c:16:2f:99:d3:a1:fa:60: 31:03:6b:13:57:ab:cb:d6:16:ae:9b:1b:b9:f8:c5:c9:90:03: 8a:f9:89:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+ox/PP5kBVNfZZ2NBz2v5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjODdiOWNmYzNlZTBjNDQ5NjVlYTIwOWMwNGZkOGU4ZjQ4 ZmE0MmYwHhcNMjUxMjIxMDIwMDM2WhcNMjUxMjIyMDIwMDM2WjAzMTEwLwYDVQQD EyhmNzQ1YWNkN2MzNzQxNDc3ZTY3OWNmYzQzMzUzMDBjNGEwNTczMGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42dhU/p3bK+rf+Gp7rIYZYiILnVH unKQbUBfHNpsxRG8qGC5tNZ5t/f2puq9noTf3vfTrZScFZxw5/HZkVVIEKzHXKZ+ FRP2123j8iQJIPCp7FGsXcFycrepdYvq4uvSIxsYLbOXocWTuGttsuEHReVm1hUZ EIeILBqXh5jRjHQJWMzntwZjSKQ2wny7EU9bziientN5ruQBQrmjWjth2FKHLCRM p4wbpO9tNjDhflVEQeQ3fT73z4INs9/NRwHk3kQAYBgFCSEK6nknCZt1eh4wk/qf 5yOg5vUkRbBKDLijJ5u0wF5xhHm6JTI2vYo8+bUhCFrgmk8WC35nX0IiqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdFrNfDdBR35nnPxDNTAMSgVzC4MB8GA1UdIwQY MBaAFLyHuc/D7gxEll6iCcBP2Oj0j6QvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkllNXo4UHVERVNXWHFJSndFX1k2UFNQcEM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81N2U4ZDctNDlhYi00ZDFlLWE4MDgt NDVmYWJlM2Y5ZjMzLzEvdkllNXo4UHVERVNXWHFJSndFX1k2UFNQcEM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS81N2U4ZDctNDlhYi00ZDFlLWE4MDgtNDVmYWJlM2Y5ZjMz LzEvdkllNXo4UHVERVNXWHFJSndFX1k2UFNQcEM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYWZQ7D2 hYgSq9J1VQjyLOJEakjQm9L0AtEznyjP32yr6ECtGu8ibSBvA6fPnyTz1LunRr8V jhbqn9zM+OxUCAs1RAkYYKN0Xn4ciOYjmoW4H8ONokSl5+H+OuHm0w6QkZDYGR77 rRjw39QDuqdaDGix+s+Nf04aDTluB2DA8pHU8z2G/pqCDbZz2exLQdJ+BfZJ4z9K 1id5nT+Cf0IzQsKrl2S6/se8WNDOlEXbNgf34cUtgd8IeRcocxWf7I+lOdhHlQIF tGf+0dy+dQ7om2S2u4BUPeS9ehOQqGNNNmTrzgwWL5nTofpgMQNrE1ery9YWrpsb ufjFyZADivmJqQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:18:09 2025 by rpki-client