This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft File: vE8eawEfTWMxoSeVWlSPpQUlgKU.mft (raw, json) Hash identifier: G7wvGa7SytSbQqeBfuFUjlnt7/RDSz67M/Z/gs8XHOo= Subject key identifier: 87:89:6A:7F:9F:DC:15:84:79:FC:8B:4A:3B:A0:08:27:E5:19:38:EE Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5 Certificate issuer: /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5 Certificate serial: 019AF1D23D05FCDBA9EEE982B1177C6ED95D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 04:01:18 +0000 Manifest this update: Sat 06 Dec 2025 04:01:18 +0000 Manifest next update: Sun 07 Dec 2025 04:01:18 +0000 Files and hashes: 1: BNqfmpLmjYM_hMvzjjiD1hvhjAw.roa (hash: i4CNGeJ+mFFlH8LiDeZQtBRRw7N8oDxdjkoS0v+qObY=) 2: aSjaEPJVPJX67mv2fHsiGHa_Pjs.roa (hash: ZEy+TRl03r70LlIyNTMVcl1yqBTFe/vMwXgXOHeWwSU=) 3: boEHtK6TX4b8tA4ZE52KAM2BJmo.roa (hash: +7NNF3zI76oRfEmOt6I7AY03Pn8U8YF2KqGhoMWLwNw=) 4: uV1M3fky2AaC8kOeiqG8vtH6340.roa (hash: 1utJq4cOepQgwTmFBjPYmXLoibI08Xbs4pkw4aA8F7w=) 5: vE8eawEfTWMxoSeVWlSPpQUlgKU.crl (hash: OkpFJnyWk8q1DaivB1IsOLw3FU1owWR5y2I/VqhM+WY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3d:05:fc:db:a9:ee:e9:82:b1:17:7c:6e:d9:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5 Validity Not Before: Dec 6 04:01:18 2025 GMT Not After : Dec 7 04:01:18 2025 GMT Subject: CN=87896a7f9fdc158479fc8b4a3ba00827e51938ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:8a:8d:52:ab:04:38:7a:84:b1:d5:ac:5d:8b: 45:42:1e:3e:2f:99:76:e0:15:34:ae:07:fd:52:0a: 22:fd:51:88:dc:cf:ae:8d:59:d7:f3:eb:a0:25:63: 4a:4f:a4:49:a7:5f:89:2f:8e:50:ea:52:c6:49:65: ce:b6:9a:be:dd:7c:f1:ed:e7:69:28:7a:ab:71:29: 98:9b:87:55:34:41:c2:cb:23:7a:93:76:70:b3:7a: 13:d3:84:7c:07:52:76:71:13:c2:79:bc:aa:0f:b7: 7f:67:f6:81:e9:e6:be:44:cd:83:84:52:6a:87:e4: d4:89:ab:5c:77:f0:da:41:2f:29:74:9e:6b:2f:e4: fe:3c:2a:7f:75:d7:1d:46:fe:62:95:69:a0:b9:97: c1:84:f6:f9:30:ce:fb:47:3a:25:0c:02:1d:bd:37: 19:87:a4:7c:6c:34:cb:1f:2f:47:ef:19:53:e2:47: c2:d3:63:9f:02:6e:a7:0d:bf:1c:37:f5:6c:67:4b: 62:e7:74:09:dc:7b:29:2b:d1:94:df:f6:6e:b9:0f: 78:aa:cd:16:01:cf:76:91:dc:4d:8f:c4:b1:52:e6: 78:bb:4d:bd:a3:3e:b9:c8:f5:80:79:08:73:87:45: e1:e7:2d:14:6a:38:7c:85:58:52:1a:bf:1d:40:e4: 72:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:89:6A:7F:9F:DC:15:84:79:FC:8B:4A:3B:A0:08:27:E5:19:38:EE X509v3 Authority Key Identifier: keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:84:69:84:bc:ce:f7:bc:6b:f7:15:0b:db:c4:d3:84:12:bd: 9b:13:2a:6d:9d:c1:d2:79:06:de:77:a1:32:b6:2f:6d:44:8e: 3d:75:fc:a1:66:dd:a2:f4:8d:88:be:66:89:59:7f:82:18:d4: 85:5b:25:98:17:b4:95:0d:a6:2c:6b:b7:98:79:58:39:e2:20: ef:bb:f4:36:88:ba:35:51:e0:03:76:01:62:96:a2:0e:23:d4: c4:db:b2:22:5c:47:2f:3f:dc:1f:d6:31:62:b0:2e:ec:b9:b6: 37:e6:40:00:ac:b6:45:2a:6c:25:62:55:a3:fe:ed:58:cd:c4: 0a:f9:cd:62:ea:53:40:8a:7c:9e:3d:9c:29:86:4e:61:a8:b2: f0:9b:63:e4:e8:e0:bf:0c:70:26:42:93:50:36:55:5c:6a:a1: c6:1c:6a:9e:cb:7f:25:a2:8b:50:9d:5e:5a:2b:24:ac:19:f1: 09:17:ea:9d:27:d7:42:85:af:83:59:49:a4:cf:dd:89:47:9e: af:b8:93:26:93:4b:1b:7b:89:04:1c:fc:c6:88:83:69:ff:d7: 60:3a:1c:22:0e:a2:db:d1:ad:75:8c:ed:40:89:21:38:00:ed: 71:8d:e3:be:f3:c0:74:37:f0:37:8d:31:51:a8:e2:af:ca:10: d5:6a:51:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0j0F/Nup7umCsRd8btldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNGYxZTZiMDExZjRkNjMzMWExMjc5NTVhNTQ4ZmE1MDUy NTgwYTUwHhcNMjUxMjA2MDQwMTE4WhcNMjUxMjA3MDQwMTE4WjAzMTEwLwYDVQQD Eyg4Nzg5NmE3ZjlmZGMxNTg0NzlmYzhiNGEzYmEwMDgyN2U1MTkzOGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oqNUqsEOHqEsdWsXYtFQh4+L5l2 4BU0rgf9Ugoi/VGI3M+ujVnX8+ugJWNKT6RJp1+JL45Q6lLGSWXOtpq+3Xzx7edp KHqrcSmYm4dVNEHCyyN6k3Zws3oT04R8B1J2cRPCebyqD7d/Z/aB6ea+RM2DhFJq h+TUiatcd/DaQS8pdJ5rL+T+PCp/ddcdRv5ilWmguZfBhPb5MM77RzolDAIdvTcZ h6R8bDTLHy9H7xlT4kfC02OfAm6nDb8cN/VsZ0ti53QJ3HspK9GU3/ZuuQ94qs0W Ac92kdxNj8SxUuZ4u029oz65yPWAeQhzh0Xh5y0Uajh8hVhSGr8dQORykQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIeJan+f3BWEefyLSjugCCflGTjuMB8GA1UdIwQY MBaAFLxPHmsBH01jMaEnlVpUj6UFJYClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkU4ZWF3RWZUV014b1NlVldsU1BwUVVsZ0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82NmEyMzctOWJjNS00YWJkLTliOGIt YzU1NDc2NzU5ZDBjLzEvdkU4ZWF3RWZUV014b1NlVldsU1BwUVVsZ0tVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi82NmEyMzctOWJjNS00YWJkLTliOGItYzU1NDc2NzU5ZDBj LzEvdkU4ZWF3RWZUV014b1NlVldsU1BwUVVsZ0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4RphLzO 97xr9xUL28TThBK9mxMqbZ3B0nkG3nehMrYvbUSOPXX8oWbdovSNiL5miVl/ghjU hVslmBe0lQ2mLGu3mHlYOeIg77v0Noi6NVHgA3YBYpaiDiPUxNuyIlxHLz/cH9Yx YrAu7Lm2N+ZAAKy2RSpsJWJVo/7tWM3ECvnNYupTQIp8nj2cKYZOYaiy8Jtj5Ojg vwxwJkKTUDZVXGqhxhxqnst/JaKLUJ1eWiskrBnxCRfqnSfXQoWvg1lJpM/diUee r7iTJpNLG3uJBBz8xoiDaf/XYDocIg6i29GtdYztQIkhOADtcY3jvvPAdDfwN40x Uajir8oQ1WpRSg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:34 2025 by rpki-client