This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft File: veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json) Hash identifier: Gr5TFuC/FUxjT0Iyx4BTv/hswqDseFt1T20XjY1nN/U= Subject key identifier: FA:30:9E:8E:A1:7F:BA:7D:B7:B5:61:49:66:4F:A3:33:5B:EB:EB:F2 Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2 Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2 Certificate serial: 019AF1640C9DE5E17F22D9DD92FDBCD4A104 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft Manifest number: 0AFF Signing time: Sat 06 Dec 2025 02:00:57 +0000 Manifest this update: Sat 06 Dec 2025 02:00:57 +0000 Manifest next update: Sun 07 Dec 2025 02:00:57 +0000 Files and hashes: 1: 4NbkXu89FXOyQLhXi76KTLRS_8U.roa (hash: /R0anYXR39TgZMh7wTdh79H3PAU+bV4gIhm7ONZyMQ8=) 2: C9jlSQpiBO6Y73lSEYMO0KAZmVU.roa (hash: bHV8b0r3RZhEMBuy9WHUg2/V18JXKTeCJEmR8xzO1XQ=) 3: Sucl-ga8bKlbfGlHsxsq1Oo80t0.roa (hash: k1Htljgs56uFbBPsZWyrCnN1sbAvxLT63YyfljrMCbY=) 4: bfuZYtxjTAOdpCpRWdDszbBOycM.roa (hash: oKsbpIb+4VCZp3VPNUM0uIEJezlOZcr7unos7yGZizs=) 5: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: m6+AtKMYAFt2j3CksrWztyVGa+WLWNZ3M09N0vUDoQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:0c:9d:e5:e1:7f:22:d9:dd:92:fd:bc:d4:a1:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2 Validity Not Before: Dec 6 02:00:57 2025 GMT Not After : Dec 7 02:00:57 2025 GMT Subject: CN=fa309e8ea17fba7db7b56149664fa3335bebebf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:e1:2a:68:7f:ea:d0:6f:5c:9c:54:b8:f4: b9:cf:f9:67:79:03:e5:d8:d7:99:75:32:d6:aa:83: 1d:f0:47:18:75:7b:29:0d:c8:5e:40:2a:99:8d:4a: 7d:44:d6:ff:cd:0b:1f:e0:9f:d3:18:19:2b:13:8c: f3:03:ab:01:e1:75:b6:ad:85:3a:46:68:9a:a6:95: f3:6c:c5:89:1f:b5:9c:b4:1b:ec:24:cd:57:58:80: 46:3e:6e:71:eb:48:ac:b3:60:66:d7:d0:2b:b6:93: 0e:5b:18:5b:fd:0b:d5:af:f9:58:5f:09:0a:ef:a3: 88:6b:f6:02:53:1b:6c:67:cd:14:56:ee:ca:2a:65: 95:39:1e:40:b6:b5:56:eb:5c:72:0b:b9:59:db:94: 42:e4:92:b8:77:ba:ab:5e:3e:a6:f6:66:bf:e5:31: 32:fa:42:47:6f:bf:ef:ac:a0:51:54:63:83:a6:c2: fc:45:d3:1d:77:1f:40:b3:7e:09:77:5c:a2:7a:94: ad:c1:5f:30:38:9b:e2:c1:d3:73:61:88:0a:c9:bc: aa:f2:ca:aa:0e:d0:6c:a7:69:11:bd:62:6b:77:7d: a4:58:03:0a:e1:88:32:0a:d9:6b:1a:cf:be:c8:b5: 7d:dc:ee:c0:14:08:7a:e0:97:b2:db:f6:80:51:f4: e1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:30:9E:8E:A1:7F:BA:7D:B7:B5:61:49:66:4F:A3:33:5B:EB:EB:F2 X509v3 Authority Key Identifier: keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d5:26:52:88:14:7e:13:b4:dc:fa:12:fb:25:4c:54:0a:cd: 35:59:d6:d1:84:1a:4b:03:3a:05:67:60:95:d2:5b:a2:fb:4e: de:c8:cb:af:8b:fc:13:f3:c9:a0:1b:f8:35:be:dd:b7:bc:ee: 6f:40:72:1d:8d:05:a8:ff:89:42:8d:83:28:d6:37:ec:41:d6: 4d:67:1d:18:3a:17:a5:b7:48:5c:ef:53:b1:87:8e:9d:f4:40: 9b:97:2e:df:25:12:63:59:cd:dd:ac:75:09:e6:ce:8c:e2:57: ce:ad:99:50:1f:85:63:c6:7b:67:da:f7:db:dc:68:6f:71:42: ad:26:55:95:e3:44:07:7b:ea:87:0f:31:01:bc:b4:a3:71:38: 8f:ac:fa:24:e8:ea:e7:e5:4c:d3:5f:bd:ea:16:af:5d:f4:ca: 2d:b7:00:15:cf:8b:3c:45:82:75:39:69:cc:6f:c6:a3:fa:d3: b5:fc:c7:a1:08:22:88:1d:5c:dc:c5:17:df:1f:46:23:5c:c3: 00:c1:97:18:df:45:e3:fc:9f:fd:83:30:45:97:c2:8a:76:61: 4d:fe:fb:ae:b4:d2:22:b1:fa:44:f8:f1:5a:b8:0b:d4:41:39: 60:21:db:4c:43:76:8a:25:92:87:0d:65:8c:e0:a0:d7:b9:53: dd:3e:03:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAyd5eF/Itndkv281KEEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTYzNmZmNTIzZTVmMzczNDIyN2YzM2M0NGMyZTUwZmY4 ZDFlZTIwHhcNMjUxMjA2MDIwMDU3WhcNMjUxMjA3MDIwMDU3WjAzMTEwLwYDVQQD EyhmYTMwOWU4ZWExN2ZiYTdkYjdiNTYxNDk2NjRmYTMzMzViZWJlYmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgrhKmh/6tBvXJxUuPS5z/lneQPl 2NeZdTLWqoMd8EcYdXspDcheQCqZjUp9RNb/zQsf4J/TGBkrE4zzA6sB4XW2rYU6 RmiappXzbMWJH7WctBvsJM1XWIBGPm5x60iss2Bm19ArtpMOWxhb/QvVr/lYXwkK 76OIa/YCUxtsZ80UVu7KKmWVOR5AtrVW61xyC7lZ25RC5JK4d7qrXj6m9ma/5TEy +kJHb7/vrKBRVGODpsL8RdMddx9As34Jd1yiepStwV8wOJviwdNzYYgKybyq8sqq DtBsp2kRvWJrd32kWAMK4YgyCtlrGs++yLV93O7AFAh64Jey2/aAUfThiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPowno6hf7p9t7VhSWZPozNb6+vyMB8GA1UdIwQY MBaAFL3mNv9SPl83NCJ/M8RMLlD/jR7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYt N2JmYjQzODFhYjU0LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYtN2JmYjQzODFhYjU0 LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdUmUogU fhO03PoS+yVMVArNNVnW0YQaSwM6BWdgldJbovtO3sjLr4v8E/PJoBv4Nb7dt7zu b0ByHY0FqP+JQo2DKNY37EHWTWcdGDoXpbdIXO9TsYeOnfRAm5cu3yUSY1nN3ax1 CebOjOJXzq2ZUB+FY8Z7Z9r329xob3FCrSZVleNEB3vqhw8xAby0o3E4j6z6JOjq 5+VM01+96havXfTKLbcAFc+LPEWCdTlpzG/Go/rTtfzHoQgiiB1c3MUX3x9GI1zD AMGXGN9F4/yf/YMwRZfCinZhTf77rrTSIrH6RPjxWrgL1EE5YCHbTEN2iiWShw1l jOCg17lT3T4DIA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:11 2025 by rpki-client