This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft File: vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft (raw, json) Hash identifier: r1yCLcps+bjD03iTNjXwS03kFAika1LuLKvdt//INOg= Subject key identifier: 99:AC:D3:C5:99:9B:91:EF:F8:FC:55:E9:DE:3B:1D:89:7D:E1:01:64 Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a Certificate serial: 019AF19B92F9C378015EAB1AC7C767732601 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft Manifest number: 0D71 Signing time: Sat 06 Dec 2025 03:01:36 +0000 Manifest this update: Sat 06 Dec 2025 03:01:36 +0000 Manifest next update: Sun 07 Dec 2025 03:01:36 +0000 Files and hashes: 1: 0Jn8rw6IOKtmo3dh-wHpzJRAjY8.roa (hash: N7l+NKKsVk4YN5XAlCqWcpG/YCWJkdcD2E3VToSb87g=) 2: 15i89b2ooCC5Wqcsjg2SBUg3A40.roa (hash: lZ5oTep+frYUK0lIlk9v0/P+KqGOWHdfH+9b58myH+w=) 3: I7bRp2vZ3RbrhhKUKOmFr8bTJzo.roa (hash: AZx1yPV7v0204nnrhDxa3tWJoguxJZGcuqHPYDdtiSU=) 4: IncQidH1EmOM3JDy5YVCBk0c4NE.roa (hash: nhq9/WaK4JTE9KAnd8mPqXQNZIF7TP9W57FIRXqjj1I=) 5: kMQGr9JvSdf0YWyn95oAWrgW1pM.roa (hash: MFKvDOkMYqx88W0zwkPF8EbtQvbV0tupci16xZ+ClUg=) 6: vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl (hash: eZq/wE1KUZQ56wbhM9Ohs7mnyUDK7JTSneKekSGY0vE=) 7: wmgMC-Q6JuN93VgNPFr0Kgc7Ccw.roa (hash: f3Jy9HVFL90ndYeuF9Ld4iOUbDw2OjbP9NnJ95IlJxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:92:f9:c3:78:01:5e:ab:1a:c7:c7:67:73:26:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a Validity Not Before: Dec 6 03:01:36 2025 GMT Not After : Dec 7 03:01:36 2025 GMT Subject: CN=99acd3c5999b91eff8fc55e9de3b1d897de10164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:49:71:c2:5b:8f:93:88:32:03:13:31:2d:00: f9:0c:2a:16:13:bf:2f:0f:4b:31:6a:c9:67:0d:03: 0a:42:fa:b4:b1:0d:0e:5b:51:f9:ad:ab:d1:c8:bb: af:6e:c3:c7:fe:2b:15:2d:86:48:41:d5:59:23:2f: 38:dd:d0:7d:30:0d:fb:07:4b:cb:3d:51:04:f3:db: d3:61:0d:c7:65:27:56:88:60:f1:02:30:8e:4b:9d: f7:98:8a:54:90:38:b4:3d:fb:a2:79:29:e1:37:1d: fe:df:59:b7:4e:62:b8:7a:07:f0:ee:8a:4e:c0:9d: 6a:19:2d:65:75:27:f2:2b:47:72:f4:29:f5:be:eb: bf:da:f3:3f:e3:41:b8:d3:bb:d9:df:71:ce:d9:f5: ec:16:35:5a:8a:01:bd:16:44:29:6d:a6:85:c4:a9: e8:0f:a7:b5:e5:b6:84:8b:0e:c5:f0:34:12:a1:be: b5:d1:4f:f0:1e:ca:41:88:fe:7c:f1:3a:d1:fc:50: c8:94:95:a4:50:93:c9:ff:41:83:2d:a2:ec:25:5f: bc:d1:77:ff:aa:2a:3d:e1:de:16:3e:ba:e1:53:26: 99:2a:41:4b:73:96:af:50:5f:01:af:6f:6f:84:61: b7:ec:49:94:8f:ab:31:f0:56:6f:50:71:c7:43:c9: ef:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AC:D3:C5:99:9B:91:EF:F8:FC:55:E9:DE:3B:1D:89:7D:E1:01:64 X509v3 Authority Key Identifier: keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:54:f4:d8:38:88:04:c6:fe:53:2c:53:5f:e0:e8:ae:a1:3f: 1d:f3:e1:ef:36:a3:d3:60:ef:4b:68:1b:13:0e:79:3c:df:d2: 8a:bb:c3:5a:af:b7:a7:20:90:c6:92:e1:b9:41:65:20:43:c0: b2:9d:41:a2:f6:0c:14:6e:1b:39:0b:45:86:23:3a:92:17:4c: e1:cc:3b:23:a4:33:33:2f:49:70:12:d3:74:a5:71:18:65:ae: 73:9b:e3:3d:8f:f9:80:ac:24:9f:fb:de:28:0a:29:c9:c2:c9: f8:f5:19:28:b9:c4:ea:4b:98:c3:36:e9:c2:68:ac:17:52:f4: 86:c7:56:e9:95:d1:67:0c:1a:fc:00:88:00:a0:bf:1e:5a:d1: 33:69:5b:a5:a7:2d:9c:f0:2d:c2:26:c7:95:5a:e0:9f:90:72: fb:63:a8:c1:08:99:74:79:3b:91:a9:b9:d6:c0:99:12:3b:51: 38:89:5d:14:53:5a:ab:35:89:7b:67:27:23:27:ac:23:7d:8c: 12:3e:04:da:c3:e8:c7:8d:a4:55:a9:71:b9:34:c9:9a:fb:0a: c1:17:b5:cf:fa:0e:01:74:60:99:8a:39:d4:c6:0b:9d:90:4e: f6:64:91:a2:13:b9:27:49:58:60:01:3c:d4:5d:e6:83:3f:90: 9c:c2:20:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5L5w3gBXqsax8dncyYBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMTlkNDUzNWM3ZTYyYjkyMWU4NTllNjU1N2I4MjFmMjc4 ZTcxNmEwHhcNMjUxMjA2MDMwMTM2WhcNMjUxMjA3MDMwMTM2WjAzMTEwLwYDVQQD Eyg5OWFjZDNjNTk5OWI5MWVmZjhmYzU1ZTlkZTNiMWQ4OTdkZTEwMTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArklxwluPk4gyAxMxLQD5DCoWE78v D0sxaslnDQMKQvq0sQ0OW1H5ravRyLuvbsPH/isVLYZIQdVZIy843dB9MA37B0vL PVEE89vTYQ3HZSdWiGDxAjCOS533mIpUkDi0PfuieSnhNx3+31m3TmK4egfw7opO wJ1qGS1ldSfyK0dy9Cn1vuu/2vM/40G407vZ33HO2fXsFjVaigG9FkQpbaaFxKno D6e15baEiw7F8DQSob610U/wHspBiP588TrR/FDIlJWkUJPJ/0GDLaLsJV+80Xf/ qio94d4WPrrhUyaZKkFLc5avUF8Br29vhGG37EmUj6sx8FZvUHHHQ8nvSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJms08WZm5Hv+PxV6d47HYl94QFkMB8GA1UdIwQY MBaAFL0Z1FNcfmK5IehZ5lV7gh8njnFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTct YzEzMzFmNDlmYzA5LzEvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTctYzEzMzFmNDlmYzA5 LzEvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVT02DiI BMb+UyxTX+DorqE/HfPh7zaj02DvS2gbEw55PN/SirvDWq+3pyCQxpLhuUFlIEPA sp1BovYMFG4bOQtFhiM6khdM4cw7I6QzMy9JcBLTdKVxGGWuc5vjPY/5gKwkn/ve KAopycLJ+PUZKLnE6kuYwzbpwmisF1L0hsdW6ZXRZwwa/ACIAKC/HlrRM2lbpact nPAtwibHlVrgn5By+2OowQiZdHk7kam51sCZEjtROIldFFNaqzWJe2cnIyesI32M Ej4E2sPox42kValxuTTJmvsKwRe1z/oOAXRgmYo51MYLnZBO9mSRohO5J0lYYAE8 1F3mgz+QnMIgRw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:52 2025 by rpki-client