This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft File: dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json) Hash identifier: 66y5SEZz6h7AN6pSaMXtYyu/hGP1X1UdkedU0GjGX9U= Subject key identifier: 2E:E4:04:42:7F:49:2A:47:20:46:37:38:27:A5:47:42:4D:4D:78:37 Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA Certificate issuer: /CN=76fe3055e87290000e3287f7ab5883802a5aa6da Certificate serial: 019AF12CB6BA6944ECD7CB9C03377B4048BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft Manifest number: 0A88 Signing time: Sat 06 Dec 2025 01:00:30 +0000 Manifest this update: Sat 06 Dec 2025 01:00:30 +0000 Manifest next update: Sun 07 Dec 2025 01:00:30 +0000 Files and hashes: 1: 8nt8dsbMeiqtSt6KoDNGgs5pyTM.roa (hash: RvFtibhd8tSawl3iSjZ76rX4z9HhG8SM7MwleTD5nY0=) 2: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: kxcvi/8MVDZkcesQkKRu6X6CfqY0FZHL8SZPLW5Y+dg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:b6:ba:69:44:ec:d7:cb:9c:03:37:7b:40:48:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da Validity Not Before: Dec 6 01:00:30 2025 GMT Not After : Dec 7 01:00:30 2025 GMT Subject: CN=2ee404427f492a472046373827a547424d4d7837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:28:8e:fe:e5:99:db:0b:7c:ef:04:58:02: f5:20:b2:55:4b:85:a0:74:f8:c4:1a:a7:e4:75:c4: a1:1e:5b:21:58:ec:94:30:5d:26:c9:34:39:05:b4: a4:4d:0d:46:54:5e:43:92:e4:7d:fe:38:5d:b2:01: c2:e4:0e:2f:cd:79:ef:27:55:2d:05:b9:3f:e7:4b: 86:c3:a5:b4:65:00:c0:67:81:9e:9b:c4:6c:e2:24: f4:f7:6d:26:eb:bd:f4:d3:b6:3d:e6:0c:e5:c2:37: b2:bf:26:3a:48:6b:dc:e9:40:2c:3e:73:5a:20:44: 54:4c:2f:c8:d2:16:2f:c7:2d:01:92:98:79:6c:98: b3:25:23:f1:9b:da:13:1a:4c:d8:97:74:a6:0a:00: 57:af:8c:ae:77:c5:72:e3:bd:db:54:2b:b2:89:5d: 4c:e9:23:ea:ed:ca:51:4e:4d:78:57:8b:02:5d:68: e2:94:2f:14:7d:ac:71:f1:f3:d2:a2:cc:75:e5:c7: db:4d:0a:0d:ca:55:93:d6:e3:70:19:fe:b6:07:05: 2c:16:56:49:4d:f1:6b:d2:b1:7c:24:c3:9a:20:37: f3:81:de:18:ab:94:67:3f:a7:ea:6b:ce:d8:1e:ab: 57:e8:80:e4:e3:3d:d1:2c:f1:e8:a8:75:25:d0:f8: e1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E4:04:42:7F:49:2A:47:20:46:37:38:27:A5:47:42:4D:4D:78:37 X509v3 Authority Key Identifier: keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ba:0f:2d:5b:05:4f:25:23:04:34:cd:e8:73:b2:42:f4:60: f8:a1:45:84:1c:f4:a0:80:b6:1a:7f:86:48:30:4b:77:ad:02: bf:3f:9c:d7:7e:1b:3f:e7:a2:2f:19:3f:cb:09:99:f1:a0:9f: c2:a2:f5:26:f0:9a:87:bf:3f:60:61:85:09:d3:c5:cc:ba:73: f9:49:ea:09:2a:13:3f:98:8b:6b:c6:87:63:5d:8f:b3:cb:52: 2b:bc:69:64:44:07:4e:17:1f:8b:20:a8:87:16:67:74:9c:9c: 8b:01:39:e1:ac:d4:e6:7e:90:04:05:dd:fb:89:57:c5:c1:53: 4a:ae:fa:c7:48:5b:6a:52:98:40:cc:71:ec:9e:6d:da:0f:df: 98:b6:3c:68:f4:5b:af:85:cb:f4:42:7e:2a:1b:26:65:cc:27: 33:2c:1c:58:76:a1:40:d2:14:d7:e5:37:a8:c5:af:82:84:fe: 73:a5:13:29:b8:05:e8:88:43:47:1b:5b:4c:51:ad:cd:97:9a: f9:43:0f:80:6f:27:7e:14:f6:ed:ef:2d:60:b4:7a:25:e6:a3: 2d:e5:5c:b4:ad:4e:e8:6a:2c:fc:66:b4:bd:ec:f9:d6:27:22: 63:38:bb:a1:7d:1b:a5:e4:69:78:ed:fb:a8:f0:8a:03:36:c7: 71:11:63:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLa6aUTs18ucAzd7QEi/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZmUzMDU1ZTg3MjkwMDAwZTMyODdmN2FiNTg4MzgwMmE1 YWE2ZGEwHhcNMjUxMjA2MDEwMDMwWhcNMjUxMjA3MDEwMDMwWjAzMTEwLwYDVQQD EygyZWU0MDQ0MjdmNDkyYTQ3MjA0NjM3MzgyN2E1NDc0MjRkNGQ3ODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh4ojv7lmdsLfO8EWAL1ILJVS4Wg dPjEGqfkdcShHlshWOyUMF0myTQ5BbSkTQ1GVF5DkuR9/jhdsgHC5A4vzXnvJ1Ut Bbk/50uGw6W0ZQDAZ4Gem8Rs4iT0920m673007Y95gzlwjeyvyY6SGvc6UAsPnNa IERUTC/I0hYvxy0Bkph5bJizJSPxm9oTGkzYl3SmCgBXr4yud8Vy473bVCuyiV1M 6SPq7cpRTk14V4sCXWjilC8Ufaxx8fPSosx15cfbTQoNylWT1uNwGf62BwUsFlZJ TfFr0rF8JMOaIDfzgd4Yq5RnP6fqa87YHqtX6IDk4z3RLPHoqHUl0PjhOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7kBEJ/SSpHIEY3OCelR0JNTXg3MB8GA1UdIwQY MBaAFHb+MFXocpAADjKH96tYg4AqWqbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHY0d1ZlaHlrQUFPTW9mM3ExaURnQ3BhcHRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iY2UxNDEtZTljMi00YTVkLThlMTYt ODRiNTE3NmEyYTRjLzEvZHY0d1ZlaHlrQUFPTW9mM3ExaURnQ3BhcHRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iY2UxNDEtZTljMi00YTVkLThlMTYtODRiNTE3NmEyYTRj LzEvZHY0d1ZlaHlrQUFPTW9mM3ExaURnQ3BhcHRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7oPLVsF TyUjBDTN6HOyQvRg+KFFhBz0oIC2Gn+GSDBLd60Cvz+c134bP+eiLxk/ywmZ8aCf wqL1JvCah78/YGGFCdPFzLpz+UnqCSoTP5iLa8aHY12Ps8tSK7xpZEQHThcfiyCo hxZndJyciwE54azU5n6QBAXd+4lXxcFTSq76x0hbalKYQMxx7J5t2g/fmLY8aPRb r4XL9EJ+KhsmZcwnMywcWHahQNIU1+U3qMWvgoT+c6UTKbgF6IhDRxtbTFGtzZea +UMPgG8nfhT27e8tYLR6JeajLeVctK1O6Gos/Ga0vez51iciYzi7oX0bpeRpeO37 qPCKAzbHcRFjdg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:11 2025 by rpki-client