This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft File: 1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft (raw, json) Hash identifier: z5jLd8Ok/2M51ijevmQLhVcBFtGVArno7C3h4h5vy4k= Subject key identifier: 81:1C:88:AB:80:7C:F3:49:0B:6F:9F:DC:FF:66:3A:BC:86:7A:17:8B Authority key identifier: F9:5A:C4:B2:47:27:48:CE:B2:7B:F8:C5:43:E1:6D:B7:BB:36:95:86 Certificate issuer: /CN=f95ac4b2472748ceb27bf8c543e16db7bb369586 Certificate serial: 019AF50A89734EE5DDF2D9D0347B412D02FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft Manifest number: 073D Signing time: Sat 06 Dec 2025 19:01:39 +0000 Manifest this update: Sat 06 Dec 2025 19:01:39 +0000 Manifest next update: Sun 07 Dec 2025 19:01:39 +0000 Files and hashes: 1: 0_5G3WRzshlLEZ0xV-9i-mzzvJU.roa (hash: lKrDP0bITSxhK9qROQpQt1df+rqNUNqNFLiSE61PZ7c=) 2: 1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.crl (hash: +ijaK2fBmYUe2CWJce+kWwnWOLUJD90vhGeiShNcYcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.crl rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:89:73:4e:e5:dd:f2:d9:d0:34:7b:41:2d:02:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f95ac4b2472748ceb27bf8c543e16db7bb369586 Validity Not Before: Dec 6 19:01:39 2025 GMT Not After : Dec 7 19:01:39 2025 GMT Subject: CN=811c88ab807cf3490b6f9fdcff663abc867a178b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c7:ed:1d:c4:6c:c1:63:f2:3c:10:14:88:3c: 75:4e:09:8f:28:dd:5c:4a:e7:bf:d4:68:12:fa:60: bc:e3:d0:8e:81:64:85:9b:f6:6b:93:7b:8f:df:3b: 80:2c:e3:4e:6b:c3:75:b7:44:08:5d:bf:62:cf:92: 79:9c:2a:fb:07:33:cf:2f:ea:cc:7d:9c:a8:55:ff: aa:ed:b7:fd:93:27:37:09:16:36:cf:dc:ac:63:82: c2:14:ef:2f:d3:27:c5:58:c6:f1:bb:c0:a8:74:5b: 8d:1a:b9:c4:34:82:c6:ee:00:c0:d5:1c:63:02:84: 24:e6:1b:9c:79:c7:ea:c9:d5:7c:e6:d1:20:91:16: 89:78:1a:f1:eb:be:72:06:7c:87:ab:6b:67:91:a4: e4:fb:33:37:8c:cf:e7:cc:eb:ef:41:5c:56:27:3a: 2a:ba:62:c6:53:0a:c7:fc:11:95:2f:ef:c0:2d:17: bb:51:1c:d4:f0:e2:a5:71:f9:c7:08:a4:c9:ea:27: 92:cc:87:81:b9:3f:90:b4:ed:e4:95:34:1f:73:cd: f0:c2:d6:96:bb:73:70:23:83:68:1b:f7:c7:83:a2: c6:73:0f:de:6c:51:8f:a3:72:12:ac:fa:f8:77:9e: e7:3c:8e:80:56:0b:7f:80:b8:a2:2c:4d:a8:5e:f1: 2f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1C:88:AB:80:7C:F3:49:0B:6F:9F:DC:FF:66:3A:BC:86:7A:17:8B X509v3 Authority Key Identifier: keyid:F9:5A:C4:B2:47:27:48:CE:B2:7B:F8:C5:43:E1:6D:B7:BB:36:95:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:5d:fe:09:67:28:3a:7e:42:74:f2:39:27:43:19:70:d7:88: 9a:d9:51:16:0d:2e:f2:bf:9d:84:43:93:bf:62:19:43:1c:ac: 58:1c:5b:9e:87:66:f4:1f:46:80:c1:88:22:59:f1:b8:eb:a6: 08:b5:a9:32:9f:f1:75:06:d2:ae:7c:a7:7a:5a:a2:89:9a:72: 78:a3:3c:77:36:73:51:47:41:b9:8e:7b:fd:6b:49:71:89:96: d1:fb:96:49:14:fe:88:de:68:aa:d9:51:93:92:34:7d:c8:13: f7:fe:89:20:85:d5:52:8a:d1:d3:bc:73:d3:9a:f6:c7:79:3d: 29:e1:82:9e:d8:65:6c:86:5f:53:02:5a:b4:9f:30:7c:87:b9: 39:a6:98:90:5b:0a:7a:ea:09:f4:d6:a3:95:10:e4:75:51:5c: 02:b5:9a:bb:ab:25:d6:6e:63:f9:cd:55:f6:2c:ee:09:6e:1e: fb:26:e8:5d:d8:12:3f:77:1d:a5:38:e6:41:3d:c6:df:f0:55: 6f:ca:a4:fa:3c:12:c0:55:c8:88:ab:2e:9e:5a:75:86:b6:d4: 26:cf:2f:82:f4:7e:75:b3:d5:84:86:80:37:bb:df:ef:84:87: 7f:d9:37:fd:07:fe:a7:9d:de:47:73:b9:fc:e7:86:a5:cb:43: 39:d2:0b:0c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr1ColzTuXd8tnQNHtBLQL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NWFjNGIyNDcyNzQ4Y2ViMjdiZjhjNTQzZTE2ZGI3YmIz Njk1ODYwHhcNMjUxMjA2MTkwMTM5WhcNMjUxMjA3MTkwMTM5WjAzMTEwLwYDVQQD Eyg4MTFjODhhYjgwN2NmMzQ5MGI2ZjlmZGNmZjY2M2FiYzg2N2ExNzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8ftHcRswWPyPBAUiDx1TgmPKN1c Sue/1GgS+mC849COgWSFm/Zrk3uP3zuALONOa8N1t0QIXb9iz5J5nCr7BzPPL+rM fZyoVf+q7bf9kyc3CRY2z9ysY4LCFO8v0yfFWMbxu8CodFuNGrnENILG7gDA1Rxj AoQk5hucecfqydV85tEgkRaJeBrx675yBnyHq2tnkaTk+zM3jM/nzOvvQVxWJzoq umLGUwrH/BGVL+/ALRe7URzU8OKlcfnHCKTJ6ieSzIeBuT+QtO3klTQfc83wwtaW u3NwI4NoG/fHg6LGcw/ebFGPo3ISrPr4d57nPI6AVgt/gLiiLE2oXvEv4wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIEciKuAfPNJC2+f3P9mOryGeheLMB8GA1UdIwQY MBaAFPlaxLJHJ0jOsnv4xUPhbbe7NpWGMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1WckVza2NuU002eWVfakZRLUZ0dDdzMmxZWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvNTNkMGY1LTdjMTYtNDAwZi04ZTJl LTUyMDE4YjQ1ZmFkMS8xLzEtVnJFc2tjblNNNnllX2pGUS1GdHQ3czJsWVkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzY2LzUzZDBmNS03YzE2LTQwMGYtOGUyZS01MjAxOGI0NWZh ZDEvMS8xLVZyRXNrY25TTTZ5ZV9qRlEtRnR0N3MybFlZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ13+ CWcoOn5CdPI5J0MZcNeImtlRFg0u8r+dhEOTv2IZQxysWBxbnodm9B9GgMGIIlnx uOumCLWpMp/xdQbSrnynelqiiZpyeKM8dzZzUUdBuY57/WtJcYmW0fuWSRT+iN5o qtlRk5I0fcgT9/6JIIXVUorR07xz05r2x3k9KeGCnthlbIZfUwJatJ8wfIe5OaaY kFsKeuoJ9NajlRDkdVFcArWau6sl1m5j+c1V9izuCW4e+yboXdgSP3cdpTjmQT3G 3/BVb8qk+jwSwFXIiKsunlp1hrbUJs8vgvR+dbPVhIaAN7vf74SHf9k3/Qf+p53e R3O5/OeGpctDOdILDA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:45 2025 by rpki-client