This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft File: veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json) Hash identifier: bYyLF2njrHsUUJ718u5ARdzWtQELwne1bglbmzC0jW8= Subject key identifier: 6B:99:66:EA:44:76:00:0B:1F:DA:7E:6A:89:6E:B5:9D:6B:E0:E1:F2 Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2 Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2 Certificate serial: 019B70D983929A77BFC5C9EF17412E74FFFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft Manifest number: 0B41 Signing time: Tue 30 Dec 2025 20:01:01 +0000 Manifest this update: Tue 30 Dec 2025 20:01:01 +0000 Manifest next update: Wed 31 Dec 2025 20:01:01 +0000 Files and hashes: 1: 4NbkXu89FXOyQLhXi76KTLRS_8U.roa (hash: /R0anYXR39TgZMh7wTdh79H3PAU+bV4gIhm7ONZyMQ8=) 2: C9jlSQpiBO6Y73lSEYMO0KAZmVU.roa (hash: bHV8b0r3RZhEMBuy9WHUg2/V18JXKTeCJEmR8xzO1XQ=) 3: Sucl-ga8bKlbfGlHsxsq1Oo80t0.roa (hash: k1Htljgs56uFbBPsZWyrCnN1sbAvxLT63YyfljrMCbY=) 4: bfuZYtxjTAOdpCpRWdDszbBOycM.roa (hash: oKsbpIb+4VCZp3VPNUM0uIEJezlOZcr7unos7yGZizs=) 5: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: Em/R4yFwRneqgPMTBGmt1h5L3e8NkZ6XuXCNa36ssJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:d9:83:92:9a:77:bf:c5:c9:ef:17:41:2e:74:ff:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2 Validity Not Before: Dec 30 20:01:01 2025 GMT Not After : Dec 31 20:01:01 2025 GMT Subject: CN=6b9966ea4476000b1fda7e6a896eb59d6be0e1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e2:af:7e:e8:70:e7:3e:01:82:fa:5c:0f:3d: 16:99:84:03:1b:a4:7d:9a:b6:49:15:5c:92:f3:c1: 93:d5:61:ff:8c:fa:34:48:c0:d4:73:cd:f6:6f:a8: 23:1f:81:11:fd:96:81:ed:e2:95:41:19:4d:de:41: 2f:7f:df:0b:ca:ee:26:da:ba:f6:f6:86:9f:66:fc: 11:92:7a:ec:33:f7:c3:3c:5e:91:72:5a:99:2b:1a: fc:d8:f9:0f:08:cb:6a:cf:1e:1f:3d:84:31:99:6d: 0e:c4:0f:f0:9c:b2:b4:83:f8:7a:23:7a:02:14:3e: 08:92:35:a9:57:09:49:24:d0:86:eb:99:86:4c:44: 7e:9c:85:05:3c:39:eb:bd:38:85:9a:d7:85:c1:94: 57:5a:84:01:d0:99:fd:d9:c8:34:60:d3:5d:96:60: 64:5a:04:f4:4e:3c:b2:cc:6c:4e:b6:c3:54:66:31: 8c:a0:7d:d0:a5:84:77:bc:88:3e:4e:1f:94:b7:72: 53:12:c5:f4:73:7f:04:34:a9:8f:48:5d:23:87:1d: bf:93:a4:5f:40:9a:18:52:b3:a3:5a:e7:6f:43:b7: 11:c1:4a:5e:98:f8:f9:9a:c2:9c:cd:64:e9:72:55: 72:ab:25:cf:1e:31:ce:dd:57:d2:3d:3c:80:30:a9: ec:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:99:66:EA:44:76:00:0B:1F:DA:7E:6A:89:6E:B5:9D:6B:E0:E1:F2 X509v3 Authority Key Identifier: keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8f:14:17:43:4e:7c:af:cb:27:aa:c8:f7:09:aa:ba:35:03: cf:07:8e:cf:f9:8f:4a:7b:db:bb:16:3c:98:48:44:8f:e9:5e: 97:e6:2f:9c:e1:86:e1:7e:2b:44:c5:0e:e7:b4:bc:40:c0:2d: cc:2b:bb:d7:f5:aa:a5:30:50:ea:ff:f0:74:bb:5e:9e:73:81: 54:2b:e7:2f:29:57:ac:a4:11:8f:95:31:6e:cd:3b:27:64:e5: 89:bf:fe:69:c8:63:d1:f6:68:3e:4c:49:2c:0c:64:98:bb:a6: 89:50:0a:2a:30:e7:7c:2f:f9:a3:ff:81:6f:32:d8:63:a7:09: 0c:49:81:6b:27:6a:e8:5c:21:f4:87:6a:0a:69:d8:b5:9e:f2: 67:39:33:67:18:e2:06:ef:7c:82:f3:b6:4a:4a:b7:81:75:86: 57:26:0a:69:1e:56:a5:5b:1c:9e:16:85:44:db:ee:8d:ae:53: 75:ce:dc:ee:d5:11:0c:1d:ef:9a:1a:ef:53:d1:7e:25:61:f8: b4:1e:27:d6:dd:ef:9e:1d:2f:33:ac:0e:45:35:54:6d:6f:86: 5e:48:31:3d:45:a4:02:9f:ef:0b:48:c6:20:94:ab:29:48:0e: 0b:0b:00:43:46:81:74:8e:f3:a3:26:ce:15:fd:c9:64:89:46: 0a:66:01:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtw2YOSmne/xcnvF0EudP/+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTYzNmZmNTIzZTVmMzczNDIyN2YzM2M0NGMyZTUwZmY4 ZDFlZTIwHhcNMjUxMjMwMjAwMTAxWhcNMjUxMjMxMjAwMTAxWjAzMTEwLwYDVQQD Eyg2Yjk5NjZlYTQ0NzYwMDBiMWZkYTdlNmE4OTZlYjU5ZDZiZTBlMWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+Kvfuhw5z4BgvpcDz0WmYQDG6R9 mrZJFVyS88GT1WH/jPo0SMDUc832b6gjH4ER/ZaB7eKVQRlN3kEvf98Lyu4m2rr2 9oafZvwRknrsM/fDPF6RclqZKxr82PkPCMtqzx4fPYQxmW0OxA/wnLK0g/h6I3oC FD4IkjWpVwlJJNCG65mGTER+nIUFPDnrvTiFmteFwZRXWoQB0Jn92cg0YNNdlmBk WgT0TjyyzGxOtsNUZjGMoH3QpYR3vIg+Th+Ut3JTEsX0c38ENKmPSF0jhx2/k6Rf QJoYUrOjWudvQ7cRwUpemPj5msKczWTpclVyqyXPHjHO3VfSPTyAMKnszwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuZZupEdgALH9p+aolutZ1r4OHyMB8GA1UdIwQY MBaAFL3mNv9SPl83NCJ/M8RMLlD/jR7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYt N2JmYjQzODFhYjU0LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYtN2JmYjQzODFhYjU0 LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPI8UF0NO fK/LJ6rI9wmqujUDzweOz/mPSnvbuxY8mEhEj+lel+YvnOGG4X4rRMUO57S8QMAt zCu71/WqpTBQ6v/wdLtennOBVCvnLylXrKQRj5Uxbs07J2Tlib/+achj0fZoPkxJ LAxkmLumiVAKKjDnfC/5o/+BbzLYY6cJDEmBaydq6Fwh9IdqCmnYtZ7yZzkzZxji Bu98gvO2Skq3gXWGVyYKaR5WpVscnhaFRNvuja5Tdc7c7tURDB3vmhrvU9F+JWH4 tB4n1t3vnh0vM6wORTVUbW+GXkgxPUWkAp/vC0jGIJSrKUgOCwsAQ0aBdI7zoybO Ff3JZIlGCmYBjA== -----END CERTIFICATE-----Generated at Wed Dec 31 00:21:51 2025 by rpki-client