This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft File: riVa_-CEMRtuoC--Roa3lFNZhhw.mft (raw, json) Hash identifier: yFAIi2h7mm3tIFB0SGcR4SiG+mKf+2uqxv6mF1gvDWE= Subject key identifier: 33:00:EB:6D:12:7E:68:45:E3:76:E2:84:2C:6A:4F:B0:0B:29:D2:9D Authority key identifier: AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C Certificate issuer: /CN=ae255affe084311b6ea02fbe4686b7945359861c Certificate serial: 019AF50AA83304046ABD78F4505E089FB013 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft Manifest number: 0560 Signing time: Sat 06 Dec 2025 19:01:47 +0000 Manifest this update: Sat 06 Dec 2025 19:01:47 +0000 Manifest next update: Sun 07 Dec 2025 19:01:47 +0000 Files and hashes: 1: YLMlluYLr6JfK-y1U7Gu2bMProM.roa (hash: dLTxCUQo6hqFLyHwLbKwrnQtAYSoW8dcHWFQbKuVfyk=) 2: riVa_-CEMRtuoC--Roa3lFNZhhw.crl (hash: VGVKbo6nY0S6ttbaGFEcFyX5UYyQaoPKsaKuChLrNEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:a8:33:04:04:6a:bd:78:f4:50:5e:08:9f:b0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae255affe084311b6ea02fbe4686b7945359861c Validity Not Before: Dec 6 19:01:47 2025 GMT Not After : Dec 7 19:01:47 2025 GMT Subject: CN=3300eb6d127e6845e376e2842c6a4fb00b29d29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:39:88:06:05:8d:ec:76:7a:96:94:bc:12:ef: 8b:df:5f:e3:b5:1c:ad:ce:ec:ad:f8:20:d7:84:5a: a2:15:e3:45:c3:ef:4d:54:1b:4b:68:16:01:7b:84: ec:a4:54:55:fe:58:e1:6d:50:ce:71:2a:5b:ab:14: 72:48:1f:a8:eb:fa:6f:69:a8:37:70:79:c2:cf:f0: f3:67:b6:66:a5:20:9c:05:b5:fa:97:c0:cb:fb:02: 16:47:29:68:2a:95:28:31:46:7c:98:8a:75:51:8c: 26:a7:5c:ee:5e:b5:81:e6:3a:e3:37:f4:75:15:83: 92:1f:c7:7f:67:d2:da:f6:35:71:e3:50:ca:5d:36: 87:cb:05:d9:7e:50:63:82:95:b4:40:dd:b4:28:a7: 75:5b:9d:68:2e:94:14:b9:0a:d9:2f:ef:2b:fa:9b: fa:8b:f7:d2:63:64:82:1d:8e:b7:c6:36:68:08:fa: 03:22:bc:8c:33:7f:fc:26:73:39:38:a4:10:00:0d: 35:da:80:12:42:dd:08:4f:a6:68:ea:94:1d:7b:dc: 24:2c:23:e6:a2:0e:13:c7:ef:fd:5d:87:85:c8:91: 91:d3:0d:30:11:69:6d:8c:bf:98:12:c9:f4:5c:8b: 0c:11:1b:b4:cd:03:ad:c2:a2:d2:3d:e2:2f:1c:9c: 18:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:00:EB:6D:12:7E:68:45:E3:76:E2:84:2C:6A:4F:B0:0B:29:D2:9D X509v3 Authority Key Identifier: keyid:AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e1:54:9b:4f:dc:a9:ce:31:94:80:86:8a:e1:69:03:df:d4: bc:d8:f1:f6:11:e9:cf:48:f2:ec:e1:48:c3:6b:b2:72:7e:80: d4:f2:9b:e7:4f:98:9e:38:3e:eb:06:83:58:0d:5b:0e:59:11: 90:4d:6e:2c:4a:66:8e:d9:83:84:f2:1e:e5:c0:c2:1b:9a:37: dc:13:c5:f1:7b:80:aa:bf:08:99:1c:89:83:4d:91:51:b4:b5: cf:e0:94:9f:89:7d:4f:7a:7e:2f:bc:1f:32:fe:e4:79:71:af: 0b:7b:74:5a:e8:8d:3e:92:53:50:ef:06:79:89:db:ab:bc:07: a9:c8:ad:d3:a7:2e:af:a7:76:12:46:a0:f5:35:9b:90:83:1f: 56:56:45:49:36:b8:12:f3:20:fe:4c:0b:93:8b:9c:7a:c8:dd: 6f:f1:b8:6e:f2:ea:f9:f8:f5:ae:8c:3b:03:62:4d:67:03:fe: 34:44:6d:ff:53:a3:b7:0f:67:9f:4b:f8:f6:1a:fe:01:f7:dc: 7b:48:96:99:c6:ac:38:5c:d4:75:5c:c9:45:f1:ff:d8:a0:af: 85:1a:a5:44:5d:dc:34:73:0a:4b:6c:9e:0a:4f:41:12:c6:17: 2c:55:7d:2f:6c:9b:77:46:c7:7f:74:ed:9f:52:da:21:84:be: 0b:b5:66:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CqgzBARqvXj0UF4In7ATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMjU1YWZmZTA4NDMxMWI2ZWEwMmZiZTQ2ODZiNzk0NTM1 OTg2MWMwHhcNMjUxMjA2MTkwMTQ3WhcNMjUxMjA3MTkwMTQ3WjAzMTEwLwYDVQQD EygzMzAwZWI2ZDEyN2U2ODQ1ZTM3NmUyODQyYzZhNGZiMDBiMjlkMjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDmIBgWN7HZ6lpS8Eu+L31/jtRyt zuyt+CDXhFqiFeNFw+9NVBtLaBYBe4TspFRV/ljhbVDOcSpbqxRySB+o6/pvaag3 cHnCz/DzZ7ZmpSCcBbX6l8DL+wIWRyloKpUoMUZ8mIp1UYwmp1zuXrWB5jrjN/R1 FYOSH8d/Z9La9jVx41DKXTaHywXZflBjgpW0QN20KKd1W51oLpQUuQrZL+8r+pv6 i/fSY2SCHY63xjZoCPoDIryMM3/8JnM5OKQQAA012oASQt0IT6Zo6pQde9wkLCPm og4Tx+/9XYeFyJGR0w0wEWltjL+YEsn0XIsMERu0zQOtwqLSPeIvHJwYvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMA620SfmhF43bihCxqT7ALKdKdMB8GA1UdIwQY MBaAFK4lWv/ghDEbbqAvvkaGt5RTWYYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmlWYV8tQ0VNUnR1b0MtLVJvYTNsRk5aaGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jM2ZmZGQtYjM3Ni00ZGNiLTk4NDEt MTQxNWY4YzcwMzhlLzEvcmlWYV8tQ0VNUnR1b0MtLVJvYTNsRk5aaGh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9jM2ZmZGQtYjM3Ni00ZGNiLTk4NDEtMTQxNWY4YzcwMzhl LzEvcmlWYV8tQ0VNUnR1b0MtLVJvYTNsRk5aaGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeFUm0/c qc4xlICGiuFpA9/UvNjx9hHpz0jy7OFIw2uycn6A1PKb50+Ynjg+6waDWA1bDlkR kE1uLEpmjtmDhPIe5cDCG5o33BPF8XuAqr8ImRyJg02RUbS1z+CUn4l9T3p+L7wf Mv7keXGvC3t0WuiNPpJTUO8GeYnbq7wHqcit06cur6d2Ekag9TWbkIMfVlZFSTa4 EvMg/kwLk4ucesjdb/G4bvLq+fj1row7A2JNZwP+NERt/1Ojtw9nn0v49hr+Affc e0iWmcasOFzUdVzJRfH/2KCvhRqlRF3cNHMKS2yeCk9BEsYXLFV9L2ybd0bHf3Tt n1LaIYS+C7Vm4g== -----END CERTIFICATE-----Generated at Sun Dec 7 03:01:34 2025 by rpki-client