This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft File: vR211yi9J2tMdS4SWlCP-HhK0oU.mft (raw, json) Hash identifier: ZWWLnGJ0RCqS6kVeLBE28iy6tGUR0e1EmOXjuOONdA0= Subject key identifier: A4:AE:BA:88:0C:77:FB:07:31:93:99:42:54:AB:AD:55:82:44:13:39 Authority key identifier: BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85 Certificate issuer: /CN=bd1db5d728bd276b4c752e125a508ff8784ad285 Certificate serial: 019AF6F9B641E6DAC126470B2D71EB716EBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft Manifest number: 130A Signing time: Sun 07 Dec 2025 04:02:31 +0000 Manifest this update: Sun 07 Dec 2025 04:02:31 +0000 Manifest next update: Mon 08 Dec 2025 04:02:31 +0000 Files and hashes: 1: 7IfWcJSratNnlfLMrnbIuQWgR8I.roa (hash: S2czlmmJLkq2AObWA1vCv3NtLmwVMJ2FnTs6ITj1XcQ=) 2: vR211yi9J2tMdS4SWlCP-HhK0oU.crl (hash: ZWbwZ71V5Go5gDhAxsvludA8KxzR3j27lIpsv1OYZnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:b6:41:e6:da:c1:26:47:0b:2d:71:eb:71:6e:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd1db5d728bd276b4c752e125a508ff8784ad285 Validity Not Before: Dec 7 04:02:31 2025 GMT Not After : Dec 8 04:02:31 2025 GMT Subject: CN=a4aeba880c77fb073193994254abad5582441339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b5:9a:5d:a4:da:36:27:60:d1:71:f9:0c:e7: 7a:69:4e:41:c1:da:8c:99:5e:ce:11:12:8f:79:fa: 8e:2c:13:0c:95:a9:e8:d7:bd:99:5e:80:0b:e7:d5: 9e:b4:e7:28:0e:dc:b8:31:17:6b:3a:84:53:c2:e5: b0:46:23:98:ed:4c:a3:66:65:f7:7a:04:55:a1:13: 5e:8a:1c:ac:53:8e:47:04:bf:a0:be:37:4a:76:1a: 42:e5:0d:c1:0f:55:44:af:b3:ac:2f:8d:b7:91:d6: 35:c7:84:1c:64:ba:2a:8f:88:68:c6:f5:2b:05:01: f0:36:6a:92:c2:1e:24:8c:7f:d4:56:ca:e1:6b:9e: 07:a3:40:76:48:97:ee:42:e0:c9:4c:53:ee:d0:fa: 1f:44:db:6e:f9:eb:fb:c4:c9:85:6c:29:d9:ac:69: 09:7e:5c:7d:bf:91:43:b0:6f:65:17:67:bf:ec:d3: 62:d6:9c:67:d1:67:d3:31:94:a0:68:5d:9f:63:1f: 5b:04:49:cd:03:3e:f6:ac:8a:db:0f:c0:48:d4:0b: 08:93:26:29:ff:b1:85:20:78:81:6d:ac:0d:59:e5: 87:73:7d:ff:0c:fd:35:32:37:28:59:1a:a1:52:33: 87:94:b6:8f:58:74:e8:16:4d:01:e2:80:3b:7f:93: d8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AE:BA:88:0C:77:FB:07:31:93:99:42:54:AB:AD:55:82:44:13:39 X509v3 Authority Key Identifier: keyid:BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a8:d5:24:d2:f7:aa:c3:f5:75:8a:03:ea:d0:59:58:17:8a: 6c:5b:08:7d:8b:d2:9a:61:9e:7e:a8:cb:52:73:cf:e8:83:89: 6c:a9:8e:01:fc:db:c9:bf:43:16:7d:17:7e:6c:c1:ab:64:31: b1:85:f3:70:6e:41:35:60:23:a6:90:1b:39:73:e7:c7:75:18: d5:1b:26:63:5d:82:60:fc:00:4d:dc:98:d7:c5:9a:04:f5:8d: a8:c9:7d:8e:08:ba:32:19:f1:4b:33:11:80:16:c4:55:36:78: 4a:fb:4f:7f:7f:d2:a4:f9:d1:ca:b7:71:ef:41:99:ca:32:26: b0:52:11:3e:f4:05:84:e0:c8:9e:45:96:29:bc:88:55:5a:a7: 65:8a:1a:75:68:1e:2f:cd:91:c9:80:66:c4:8c:84:cf:49:76: 3f:37:ad:8c:52:2b:db:03:21:4f:80:e9:7d:5a:0a:53:37:56: 82:7e:15:46:83:4c:bc:b2:02:42:06:2d:d0:34:a3:27:09:87: 78:3a:89:fa:6d:3f:d8:33:69:25:c0:3f:72:62:eb:07:40:2b: b5:11:a5:3e:2a:28:1f:2f:10:f2:12:dd:64:45:86:c7:99:8f: df:9e:2d:7f:bc:6e:d4:48:ae:2f:63:b7:76:51:6a:2b:7a:04: 0e:f6:1c:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+bZB5trBJkcLLXHrcW6+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMWRiNWQ3MjhiZDI3NmI0Yzc1MmUxMjVhNTA4ZmY4Nzg0 YWQyODUwHhcNMjUxMjA3MDQwMjMxWhcNMjUxMjA4MDQwMjMxWjAzMTEwLwYDVQQD EyhhNGFlYmE4ODBjNzdmYjA3MzE5Mzk5NDI1NGFiYWQ1NTgyNDQxMzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7WaXaTaNidg0XH5DOd6aU5BwdqM mV7OERKPefqOLBMMlano172ZXoAL59WetOcoDty4MRdrOoRTwuWwRiOY7UyjZmX3 egRVoRNeihysU45HBL+gvjdKdhpC5Q3BD1VEr7OsL423kdY1x4QcZLoqj4hoxvUr BQHwNmqSwh4kjH/UVsrha54Ho0B2SJfuQuDJTFPu0PofRNtu+ev7xMmFbCnZrGkJ flx9v5FDsG9lF2e/7NNi1pxn0WfTMZSgaF2fYx9bBEnNAz72rIrbD8BI1AsIkyYp /7GFIHiBbawNWeWHc33/DP01MjcoWRqhUjOHlLaPWHToFk0B4oA7f5PYXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSuuogMd/sHMZOZQlSrrVWCRBM5MB8GA1UdIwQY MBaAFL0dtdcovSdrTHUuElpQj/h4StKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlIyMTF5aTlKMnRNZFM0U1dsQ1AtSGhLMG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jYTMxZGYtN2M5Yy00NGVmLTlkZGMt Nzc2OTE1NDg4MjI1LzEvdlIyMTF5aTlKMnRNZFM0U1dsQ1AtSGhLMG9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9jYTMxZGYtN2M5Yy00NGVmLTlkZGMtNzc2OTE1NDg4MjI1 LzEvdlIyMTF5aTlKMnRNZFM0U1dsQ1AtSGhLMG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqjVJNL3 qsP1dYoD6tBZWBeKbFsIfYvSmmGefqjLUnPP6IOJbKmOAfzbyb9DFn0XfmzBq2Qx sYXzcG5BNWAjppAbOXPnx3UY1RsmY12CYPwATdyY18WaBPWNqMl9jgi6MhnxSzMR gBbEVTZ4SvtPf3/SpPnRyrdx70GZyjImsFIRPvQFhODInkWWKbyIVVqnZYoadWge L82RyYBmxIyEz0l2PzetjFIr2wMhT4DpfVoKUzdWgn4VRoNMvLICQgYt0DSjJwmH eDqJ+m0/2DNpJcA/cmLrB0ArtRGlPiooHy8Q8hLdZEWGx5mP354tf7xu1EiuL2O3 dlFqK3oEDvYcaQ== -----END CERTIFICATE-----Generated at Sun Dec 7 06:09:36 2025 by rpki-client