This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft File: veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json) Hash identifier: H6PS/acGMUM6ZR7+e9zYKEzhLP0ij1akIulvFybJPfc= Subject key identifier: 58:34:52:FA:E2:69:33:57:70:7B:CE:CB:83:23:C9:22:6E:E0:70:AB Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2 Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2 Certificate serial: 019B3EA3AD51018FAB7CBC2ACD155AE19547 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft Manifest number: 0B27 Signing time: Sun 21 Dec 2025 02:01:12 +0000 Manifest this update: Sun 21 Dec 2025 02:01:12 +0000 Manifest next update: Mon 22 Dec 2025 02:01:12 +0000 Files and hashes: 1: 4NbkXu89FXOyQLhXi76KTLRS_8U.roa (hash: /R0anYXR39TgZMh7wTdh79H3PAU+bV4gIhm7ONZyMQ8=) 2: C9jlSQpiBO6Y73lSEYMO0KAZmVU.roa (hash: bHV8b0r3RZhEMBuy9WHUg2/V18JXKTeCJEmR8xzO1XQ=) 3: Sucl-ga8bKlbfGlHsxsq1Oo80t0.roa (hash: k1Htljgs56uFbBPsZWyrCnN1sbAvxLT63YyfljrMCbY=) 4: bfuZYtxjTAOdpCpRWdDszbBOycM.roa (hash: oKsbpIb+4VCZp3VPNUM0uIEJezlOZcr7unos7yGZizs=) 5: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: jZ+m1zj2cWse1psbv2ReST0s5fqUAzdJaOJ4t5mU3nM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:ad:51:01:8f:ab:7c:bc:2a:cd:15:5a:e1:95:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2 Validity Not Before: Dec 21 02:01:12 2025 GMT Not After : Dec 22 02:01:12 2025 GMT Subject: CN=583452fae2693357707bcecb8323c9226ee070ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:7a:41:8f:81:2f:0f:8e:79:19:a8:cd:90: 99:05:df:7b:09:96:9a:46:6f:05:23:02:70:87:40: 3a:3e:39:a1:7c:66:43:bf:d8:16:1b:ec:98:64:d8: 02:b1:82:ce:45:ea:3d:7b:52:95:2a:a7:dd:6f:9a: 50:f7:90:66:8c:0f:b3:4d:db:70:be:16:63:64:7e: 51:5e:ea:ed:57:f0:2e:37:ee:9f:ed:b5:4a:d5:d5: 55:b4:58:1e:ca:7a:aa:fa:94:a4:15:00:a9:8e:8b: 18:80:ba:2c:78:0d:32:16:36:8c:7b:e5:35:d1:74: 9e:84:d8:50:df:24:2f:19:d2:e5:10:64:d0:b4:d1: 5c:e1:3b:37:80:1a:00:d6:76:a3:16:f4:c0:e1:10: 40:b0:12:26:85:23:4e:5b:3d:4d:b6:72:66:8f:d6: 21:68:e3:ff:09:14:b7:cb:bf:6d:5f:63:b4:f2:39: ae:b5:3d:58:7a:9a:bb:29:ba:04:14:39:f0:7b:37: 0e:f0:10:14:26:fa:82:b0:42:cf:61:8d:74:e3:4b: bb:a4:63:2f:47:72:0e:94:fa:06:da:52:a7:f3:25: 3a:9b:2c:7b:8f:55:e3:27:70:51:38:dc:df:ac:6f: 50:ad:55:c5:12:de:ef:98:a5:9a:c0:1f:25:5f:d6: a2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:34:52:FA:E2:69:33:57:70:7B:CE:CB:83:23:C9:22:6E:E0:70:AB X509v3 Authority Key Identifier: keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:88:2c:c6:a9:f1:db:f9:41:45:79:1a:b5:c4:76:4b:14:c5: 51:a0:c7:57:af:c2:71:a8:07:33:c8:03:89:ff:33:31:b5:38: d7:7a:93:26:e6:6a:d7:b0:06:83:bd:c8:76:05:e8:cb:4f:02: 60:08:40:13:6f:a4:72:31:46:8d:66:f3:9b:6e:cd:a7:04:9a: 8c:df:c2:74:03:e0:d7:eb:b3:44:36:be:7f:2d:a1:f7:f8:55: 60:47:0e:54:45:da:39:f8:bd:a9:82:bf:9e:da:84:f4:31:9b: 03:69:5d:d4:be:8e:9f:b5:1e:54:11:78:e4:97:19:ba:02:a0: 95:12:ed:bb:ea:77:a0:d8:4a:81:d3:ad:08:29:dd:d3:bf:7b: c9:96:0c:e3:1e:86:5b:98:0f:38:ed:c9:d4:43:43:87:0c:90: 50:46:46:1c:bf:eb:ef:94:b7:3b:8c:72:24:72:a9:b3:99:37: 8e:12:b7:22:28:de:5e:dc:52:37:46:b6:29:87:71:ea:0b:8e: 64:33:2e:7f:dd:21:62:e2:83:9e:97:47:a8:48:73:21:1e:2b: d9:1e:65:c0:f2:7b:ec:52:75:95:52:5b:d2:59:25:56:d2:c8: b9:8f:6a:0d:f3:77:fc:a1:07:a7:cc:54:aa:27:45:36:0d:a4: 7c:8a:40:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o61RAY+rfLwqzRVa4ZVHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTYzNmZmNTIzZTVmMzczNDIyN2YzM2M0NGMyZTUwZmY4 ZDFlZTIwHhcNMjUxMjIxMDIwMTEyWhcNMjUxMjIyMDIwMTEyWjAzMTEwLwYDVQQD Eyg1ODM0NTJmYWUyNjkzMzU3NzA3YmNlY2I4MzIzYzkyMjZlZTA3MGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp816QY+BLw+OeRmozZCZBd97CZaa Rm8FIwJwh0A6PjmhfGZDv9gWG+yYZNgCsYLOReo9e1KVKqfdb5pQ95BmjA+zTdtw vhZjZH5RXurtV/AuN+6f7bVK1dVVtFgeynqq+pSkFQCpjosYgLoseA0yFjaMe+U1 0XSehNhQ3yQvGdLlEGTQtNFc4Ts3gBoA1najFvTA4RBAsBImhSNOWz1NtnJmj9Yh aOP/CRS3y79tX2O08jmutT1Yepq7KboEFDnwezcO8BAUJvqCsELPYY1040u7pGMv R3IOlPoG2lKn8yU6myx7j1XjJ3BRONzfrG9QrVXFEt7vmKWawB8lX9ai8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFg0UvriaTNXcHvOy4MjySJu4HCrMB8GA1UdIwQY MBaAFL3mNv9SPl83NCJ/M8RMLlD/jR7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYt N2JmYjQzODFhYjU0LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYtN2JmYjQzODFhYjU0 LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIgsxqnx 2/lBRXkatcR2SxTFUaDHV6/CcagHM8gDif8zMbU413qTJuZq17AGg73IdgXoy08C YAhAE2+kcjFGjWbzm27NpwSajN/CdAPg1+uzRDa+fy2h9/hVYEcOVEXaOfi9qYK/ ntqE9DGbA2ld1L6On7UeVBF45JcZugKglRLtu+p3oNhKgdOtCCnd0797yZYM4x6G W5gPOO3J1ENDhwyQUEZGHL/r75S3O4xyJHKps5k3jhK3IijeXtxSN0a2KYdx6guO ZDMuf90hYuKDnpdHqEhzIR4r2R5lwPJ77FJ1lVJb0lklVtLIuY9qDfN3/KEHp8xU qidFNg2kfIpAjQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:24:06 2025 by rpki-client