This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft File: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json) Hash identifier: 9RYJGoM/NdYK5+gNbVuOG+19visDjsdDLs/OnJp09Sw= Subject key identifier: C7:EC:00:1E:41:33:41:61:61:E1:C4:05:67:B8:3E:BE:3C:F6:E2:60 Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49 Certificate issuer: /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149 Certificate serial: 019AF2AD998C112D2B21CA3A264793907898 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 08:00:54 +0000 Manifest this update: Sat 06 Dec 2025 08:00:54 +0000 Manifest next update: Sun 07 Dec 2025 08:00:54 +0000 Files and hashes: 1: 1-MOd61mqzzUd3k7RQR0FdOI1Nn0.roa (hash: Ney+qmboFEb3EnQIoVOu45+2AwAnlZ+xcFMz6UpUYIw=) 2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: fJ4UR/DQM2/WGSlJfuzAO/f2T5pO6rSZ3HgvZQguhfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:99:8c:11:2d:2b:21:ca:3a:26:47:93:90:78:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149 Validity Not Before: Dec 6 08:00:54 2025 GMT Not After : Dec 7 08:00:54 2025 GMT Subject: CN=c7ec001e4133416161e1c40567b83ebe3cf6e260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9e:9f:30:cb:94:48:d0:66:2a:8a:13:9f:2e: ba:6c:e0:b7:c3:5b:be:15:48:86:7b:da:49:af:11: 89:71:6d:1f:23:cc:01:9c:c5:3f:a1:ec:e5:14:a2: b8:5b:fc:43:a0:20:39:71:1f:bc:82:d3:ea:a2:3f: 93:47:a2:3a:ec:fb:90:46:4b:13:a9:91:78:4d:5e: c1:15:8b:fe:f9:15:ce:64:3c:4e:2b:fe:94:39:81: b9:a3:b8:65:bf:04:65:67:b1:5b:56:e1:ee:2f:41: 42:86:4f:b9:86:ad:bc:5a:b6:5d:ce:6f:d3:2e:e4: 9e:0e:98:01:56:2b:8a:54:bd:40:18:c6:35:b3:fb: ed:a0:d5:65:a2:f1:3e:8f:53:e4:6f:77:fe:3c:aa: db:b4:ce:0a:9d:28:df:f5:a0:32:53:60:d4:4a:53: 2a:45:14:e8:79:94:73:e2:e9:6c:9e:33:57:c4:a6: d7:38:22:27:52:c3:be:57:fb:c0:4c:cb:c9:62:ea: ba:26:cb:dd:99:d3:f6:48:44:bf:82:44:59:d2:98: 74:70:d9:0b:23:fc:a2:9a:06:c1:6c:0b:22:37:b6: 07:94:b0:e2:fc:56:bc:da:bf:a7:6d:3c:7e:b4:ac: 3c:d4:9e:a3:49:58:0d:92:62:30:a8:2d:f1:99:b7: 8f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EC:00:1E:41:33:41:61:61:E1:C4:05:67:B8:3E:BE:3C:F6:E2:60 X509v3 Authority Key Identifier: keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:af:60:69:70:da:b4:66:68:e7:b6:52:0b:1e:24:e3:da:01: 31:2c:0e:b6:53:ea:e2:54:68:1d:23:3e:43:af:41:f4:65:0b: eb:42:e3:93:79:59:57:6f:5b:66:a3:2b:83:40:80:6c:35:f8: 4a:ec:f7:e5:5f:87:ac:42:74:42:d3:af:0a:9c:c5:e8:a2:3c: 32:84:9c:74:29:65:cb:6e:3c:6a:49:44:4d:d1:5d:a0:79:7b: 0c:f5:a0:43:37:08:6b:b0:02:62:92:b0:c8:79:19:d9:27:a0: 6c:f0:ac:bb:2f:d8:88:66:c0:02:84:e2:f7:59:f8:17:4e:78: 06:00:a6:31:d8:74:82:4f:2d:a5:2b:a8:3b:7d:ce:26:13:ea: 39:9c:55:b3:77:cf:28:5c:82:c1:9a:1d:79:4a:8c:a1:53:f3: b5:14:b3:01:bd:e5:ea:45:6e:76:45:9d:b3:50:84:73:0f:35: a7:81:e3:56:65:f5:08:70:e3:98:3d:93:16:a5:b4:a7:19:65: 95:ca:81:82:51:d2:1b:40:c1:85:b4:de:bf:50:04:74:7d:2d: 9a:49:c1:9a:d2:88:2d:9b:d5:a3:8e:54:2b:fa:38:37:20:a8: 8c:79:c3:bc:81:1f:81:33:31:f5:da:7d:1c:75:a7:7b:b7:28: 52:35:af:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZmMES0rIco6JkeTkHiYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNGI1MWIwYmFjNDVmYTIyNmJkMmRjZmYxMTczMGVkNDBl YzIxNDkwHhcNMjUxMjA2MDgwMDU0WhcNMjUxMjA3MDgwMDU0WjAzMTEwLwYDVQQD EyhjN2VjMDAxZTQxMzM0MTYxNjFlMWM0MDU2N2I4M2ViZTNjZjZlMjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA256fMMuUSNBmKooTny66bOC3w1u+ FUiGe9pJrxGJcW0fI8wBnMU/oezlFKK4W/xDoCA5cR+8gtPqoj+TR6I67PuQRksT qZF4TV7BFYv++RXOZDxOK/6UOYG5o7hlvwRlZ7FbVuHuL0FChk+5hq28WrZdzm/T LuSeDpgBViuKVL1AGMY1s/vtoNVlovE+j1Pkb3f+PKrbtM4KnSjf9aAyU2DUSlMq RRToeZRz4ulsnjNXxKbXOCInUsO+V/vATMvJYuq6JsvdmdP2SES/gkRZ0ph0cNkL I/yimgbBbAsiN7YHlLDi/Fa82r+nbTx+tKw81J6jSVgNkmIwqC3xmbeP1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfsAB5BM0FhYeHEBWe4Pr489uJgMB8GA1UdIwQY MBaAFL9LUbC6xF+iJr0tz/EXMO1A7CFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2Et ZTQzNTIzOTgzNzkzLzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2EtZTQzNTIzOTgzNzkz LzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO69gaXDa tGZo57ZSCx4k49oBMSwOtlPq4lRoHSM+Q69B9GUL60Ljk3lZV29bZqMrg0CAbDX4 Suz35V+HrEJ0QtOvCpzF6KI8MoScdClly248aklETdFdoHl7DPWgQzcIa7ACYpKw yHkZ2SegbPCsuy/YiGbAAoTi91n4F054BgCmMdh0gk8tpSuoO33OJhPqOZxVs3fP KFyCwZodeUqMoVPztRSzAb3l6kVudkWds1CEcw81p4HjVmX1CHDjmD2TFqW0pxll lcqBglHSG0DBhbTev1AEdH0tmknBmtKILZvVo45UK/o4NyCojHnDvIEfgTMx9dp9 HHWne7coUjWvEA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:04 2025 by rpki-client