This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft File: V2VnM04DVjndfMtJdqmycPcmMh0.mft (raw, json) Hash identifier: 4f8ayElouTgD/wzlF8ZckOsYDAMfmx9B+8I+vdAN38o= Subject key identifier: D3:76:51:F5:1D:F5:29:6A:7C:68:7E:3B:B3:CE:ED:40:85:BF:98:BD Authority key identifier: 57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D Certificate issuer: /CN=576567334e035639dd7ccb4976a9b270f726321d Certificate serial: 019B34FB555CBACC5B3019C508BF64F7389C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft Manifest number: 1780 Signing time: Fri 19 Dec 2025 05:00:45 +0000 Manifest this update: Fri 19 Dec 2025 05:00:45 +0000 Manifest next update: Sat 20 Dec 2025 05:00:45 +0000 Files and hashes: 1: BF6mEEyNMbb-xRm9_vXJ4CAvddM.roa (hash: LKI2ZmXTKLgLquBH6Yp7C5JIlsxvJUmapEogTIwlb5g=) 2: V2VnM04DVjndfMtJdqmycPcmMh0.crl (hash: wARddjk1iIqBNa2757isGCdmfVvDoon/SO+RuvycMGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:55:5c:ba:cc:5b:30:19:c5:08:bf:64:f7:38:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576567334e035639dd7ccb4976a9b270f726321d Validity Not Before: Dec 19 05:00:45 2025 GMT Not After : Dec 20 05:00:45 2025 GMT Subject: CN=d37651f51df5296a7c687e3bb3ceed4085bf98bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:57:ff:7d:15:64:5b:54:ca:b9:2e:56:3a:85: 27:b8:95:c2:4a:8c:46:01:b1:1b:e7:54:7d:73:8e: cc:64:dd:95:06:08:1b:f7:8d:f6:6e:84:90:dc:bf: 15:9f:8c:fa:93:4f:28:3d:70:94:14:86:23:a0:f1: 90:ae:88:12:0a:27:ef:4d:1f:d5:13:85:a9:66:03: 29:ec:d2:71:a1:79:de:85:bb:7c:16:c0:4a:2d:c5: af:54:8a:45:33:d5:4e:47:cc:1a:f3:b6:75:b5:9e: 26:f5:b4:2d:0a:be:70:78:d2:f0:dc:36:d3:19:a0: 08:37:37:98:bb:b3:57:9b:9d:69:99:e4:2a:ad:b9: 90:91:af:3a:64:24:ed:68:5a:03:97:1d:a2:92:e4: 36:78:12:91:3a:95:bd:b9:02:93:5d:b2:e2:d9:49: 92:3a:d6:89:8d:53:c7:5f:4c:75:35:ad:c9:44:d1: 22:8f:a7:5d:39:d4:31:e6:9b:47:78:fa:2f:b5:9d: 19:6e:60:c0:5f:16:37:08:95:a1:3e:29:35:38:d8: 2f:23:76:d1:38:ad:49:be:6e:20:a0:a3:73:75:d1: 61:73:e6:65:06:95:b7:58:f3:05:d3:c0:26:ea:bd: 1d:0a:d4:58:1d:10:8a:b9:7c:55:f8:28:e1:15:13: 82:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:76:51:F5:1D:F5:29:6A:7C:68:7E:3B:B3:CE:ED:40:85:BF:98:BD X509v3 Authority Key Identifier: keyid:57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:9d:ce:0b:41:5c:a8:bd:45:c7:12:7a:37:48:fc:50:dc:25: 9c:46:d4:b8:55:2a:7a:91:56:01:3f:4c:5d:00:b5:02:c2:ea: 95:77:b3:8a:8a:c9:01:d2:07:c2:96:61:17:77:4a:e5:95:18: 23:a7:79:1a:3d:09:88:fa:2f:27:ae:85:fb:d0:e0:f8:df:31: cb:04:dc:d3:2d:4f:df:9c:a2:ab:4f:78:df:f2:2e:86:ee:24: d3:c0:a9:48:9e:89:ed:b4:ef:28:4a:d4:08:5b:e4:1b:6e:01: 4b:0c:ca:20:07:7c:cc:94:58:a4:cb:52:78:3b:95:3e:a0:61: 57:fb:6c:24:a5:76:a6:0c:4c:ce:7e:46:e8:3f:68:88:83:a3: a1:99:8e:82:6a:70:05:e3:11:bc:ec:81:fb:67:da:5f:52:1a: a5:91:49:e1:fa:58:80:01:c2:5c:0c:72:8d:6d:76:22:82:58: ec:fb:89:1b:e5:21:de:99:2c:92:5a:dd:f7:93:9b:02:bd:93: a9:74:73:4f:fa:e5:46:10:b5:3e:4f:c4:c9:1b:1b:81:f1:41: b0:64:72:37:8a:2b:9c:75:eb:71:4b:7b:fb:c6:37:10:40:28: 53:44:10:2a:89:ec:56:3d:93:57:17:1a:89:9c:9b:29:0f:4b: c3:2a:65:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+1VcusxbMBnFCL9k9zicMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NjU2NzMzNGUwMzU2MzlkZDdjY2I0OTc2YTliMjcwZjcy NjMyMWQwHhcNMjUxMjE5MDUwMDQ1WhcNMjUxMjIwMDUwMDQ1WjAzMTEwLwYDVQQD EyhkMzc2NTFmNTFkZjUyOTZhN2M2ODdlM2JiM2NlZWQ0MDg1YmY5OGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVf/fRVkW1TKuS5WOoUnuJXCSoxG AbEb51R9c47MZN2VBggb9432boSQ3L8Vn4z6k08oPXCUFIYjoPGQrogSCifvTR/V E4WpZgMp7NJxoXnehbt8FsBKLcWvVIpFM9VOR8wa87Z1tZ4m9bQtCr5weNLw3DbT GaAINzeYu7NXm51pmeQqrbmQka86ZCTtaFoDlx2ikuQ2eBKROpW9uQKTXbLi2UmS OtaJjVPHX0x1Na3JRNEij6ddOdQx5ptHePovtZ0ZbmDAXxY3CJWhPik1ONgvI3bR OK1Jvm4goKNzddFhc+ZlBpW3WPMF08Am6r0dCtRYHRCKuXxV+CjhFROCSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNN2UfUd9SlqfGh+O7PO7UCFv5i9MB8GA1UdIwQY MBaAFFdlZzNOA1Y53XzLSXapsnD3JjIdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjJWbk0wNERWam5kZk10SmRxbXljUGNtTWgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83ZTk4NjctYzUzNC00NjhjLThkNWUt ZTRmNjRiMGRlMzZhLzEvVjJWbk0wNERWam5kZk10SmRxbXljUGNtTWgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC83ZTk4NjctYzUzNC00NjhjLThkNWUtZTRmNjRiMGRlMzZh LzEvVjJWbk0wNERWam5kZk10SmRxbXljUGNtTWgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJ3OC0Fc qL1FxxJ6N0j8UNwlnEbUuFUqepFWAT9MXQC1AsLqlXeziorJAdIHwpZhF3dK5ZUY I6d5Gj0JiPovJ66F+9Dg+N8xywTc0y1P35yiq0943/Iuhu4k08CpSJ6J7bTvKErU CFvkG24BSwzKIAd8zJRYpMtSeDuVPqBhV/tsJKV2pgxMzn5G6D9oiIOjoZmOgmpw BeMRvOyB+2faX1IapZFJ4fpYgAHCXAxyjW12IoJY7PuJG+Uh3pksklrd95ObAr2T qXRzT/rlRhC1Pk/EyRsbgfFBsGRyN4ornHXrcUt7+8Y3EEAoU0QQKonsVj2TVxca iZybKQ9Lwypl4Q== -----END CERTIFICATE-----Generated at Fri Dec 19 14:29:39 2025 by rpki-client