This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft File: vr8Jwvj_-X74rsL4FzV40KOnTIE.mft (raw, json) Hash identifier: wXq1gWjMcP6gDYv6gJXHJdw6cKCSaF7zmUQMBGo4oVo= Subject key identifier: 7B:94:23:39:C6:6B:CF:9E:DF:91:B5:01:F2:B7:01:4D:86:44:60:1F Authority key identifier: BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81 Certificate issuer: /CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81 Certificate serial: 019AF5783D28CD48229F182C1BACDB24C23C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft Manifest number: 1471 Signing time: Sat 06 Dec 2025 21:01:28 +0000 Manifest this update: Sat 06 Dec 2025 21:01:28 +0000 Manifest next update: Sun 07 Dec 2025 21:01:28 +0000 Files and hashes: 1: cn8udPBTEEt-C91LbDNfkmvEIY8.roa (hash: qd0d0GALCyhOr1vz+5VbFHCBAqP5I2yIxXIsY00d+3A=) 2: vr8Jwvj_-X74rsL4FzV40KOnTIE.crl (hash: WK1ngl1onLwDg6eV/c23f7MGLXWEXZ1wXgPA4d7ugm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.crl rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:3d:28:cd:48:22:9f:18:2c:1b:ac:db:24:c2:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81 Validity Not Before: Dec 6 21:01:28 2025 GMT Not After : Dec 7 21:01:28 2025 GMT Subject: CN=7b942339c66bcf9edf91b501f2b7014d8644601f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4e:0b:5a:82:59:a6:47:0b:bb:3e:d0:1c:30: d2:4b:c1:6d:72:ee:10:2a:7c:0b:3b:d9:c3:68:9f: 61:5f:ac:9c:37:2a:24:4b:cc:02:a3:d4:4e:ba:a6: 72:9d:e2:19:88:20:d6:e8:d4:31:f2:20:e3:5d:41: c2:ea:02:69:13:db:ec:51:bf:bd:56:5b:4d:f7:ef: 8a:19:d6:0a:99:a7:80:d1:72:94:e0:cd:d5:fe:49: 85:d7:a2:53:e2:21:0c:86:44:dd:70:3c:33:0a:7b: 01:f1:79:09:80:e5:43:82:15:25:ff:36:75:9a:df: 09:19:36:24:78:86:9c:56:60:df:b0:0c:93:95:1b: f2:a3:d8:9a:b0:61:8e:7d:dc:3d:ca:cf:55:f1:51: 3a:3c:4f:1b:0c:34:71:08:76:69:b4:ab:8e:67:b7: 17:b6:6f:bb:a5:a5:61:8e:eb:d9:be:e4:d8:76:2a: 95:f8:78:92:f2:4e:f9:2b:75:54:10:d6:42:7b:52: 26:a2:a2:73:a1:86:0f:e8:79:82:b9:2a:c9:f4:6b: 8d:3e:f4:a6:ef:23:85:ed:ac:0f:1d:ce:60:6a:dd: e9:40:61:77:2d:14:03:ec:1d:38:af:a0:e5:76:22: 13:99:e8:de:19:5c:59:5a:79:15:94:e4:ef:a6:3e: 31:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:94:23:39:C6:6B:CF:9E:DF:91:B5:01:F2:B7:01:4D:86:44:60:1F X509v3 Authority Key Identifier: keyid:BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:28:b8:d6:45:e0:77:0f:0b:34:15:85:59:96:26:91:b5:af: 5b:09:f7:89:60:ad:f3:86:a1:f3:08:3e:c2:c0:62:3a:6e:d7: 3e:ce:b7:ed:6d:f2:71:2f:2e:24:ff:a9:a2:cc:7e:a1:df:16: b9:f2:10:24:12:a9:ec:4e:b5:d9:79:08:65:4e:dd:6c:d0:22: 2c:19:48:8a:45:93:00:ad:9e:64:3b:bb:23:d7:85:63:46:5c: f0:fe:ae:69:74:7d:d9:83:84:0b:78:ad:c2:a0:a7:01:30:3e: ef:ac:72:a9:de:44:d1:fc:26:e3:fa:16:5a:8c:e8:b2:1d:fb: ef:9e:6c:37:c6:26:f0:f7:69:86:15:6d:ba:54:3f:63:8b:7a: 48:04:8e:b4:60:35:53:ee:db:36:e2:5f:76:83:98:49:a2:ac: 5c:00:d2:67:e1:e1:8a:2d:9a:e9:59:9a:6d:c8:23:d0:ef:ac: 81:96:6c:a8:38:af:18:cb:9b:59:ae:81:c2:f1:28:b9:0c:16: 54:2c:05:d7:c8:62:36:d0:c3:c9:96:03:8e:35:67:fa:d3:a6: a8:e7:92:f2:f0:21:bd:2e:f1:82:af:c3:b6:36:3d:fb:da:7d: cf:ae:d8:6b:e4:eb:af:ca:db:3a:01:17:5a:0b:e1:57:83:17: 91:ee:4b:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eD0ozUginxgsG6zbJMI8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYmYwOWMyZjhmZmY5N2VmOGFlYzJmODE3MzU3OGQwYTNh NzRjODEwHhcNMjUxMjA2MjEwMTI4WhcNMjUxMjA3MjEwMTI4WjAzMTEwLwYDVQQD Eyg3Yjk0MjMzOWM2NmJjZjllZGY5MWI1MDFmMmI3MDE0ZDg2NDQ2MDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU4LWoJZpkcLuz7QHDDSS8Ftcu4Q KnwLO9nDaJ9hX6ycNyokS8wCo9ROuqZyneIZiCDW6NQx8iDjXUHC6gJpE9vsUb+9 VltN9++KGdYKmaeA0XKU4M3V/kmF16JT4iEMhkTdcDwzCnsB8XkJgOVDghUl/zZ1 mt8JGTYkeIacVmDfsAyTlRvyo9iasGGOfdw9ys9V8VE6PE8bDDRxCHZptKuOZ7cX tm+7paVhjuvZvuTYdiqV+HiS8k75K3VUENZCe1ImoqJzoYYP6HmCuSrJ9GuNPvSm 7yOF7awPHc5gat3pQGF3LRQD7B04r6DldiITmejeGVxZWnkVlOTvpj4x+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuUIznGa8+e35G1AfK3AU2GRGAfMB8GA1UdIwQY MBaAFL6/CcL4//l++K7C+Bc1eNCjp0yBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnI4Snd2al8tWDc0cnNMNEZ6VjQwS09uVElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9kYzFjNTAtNjUwZC00M2M0LTllNzYt Y2NkNGZhZDk1MGVkLzEvdnI4Snd2al8tWDc0cnNMNEZ6VjQwS09uVElFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9kYzFjNTAtNjUwZC00M2M0LTllNzYtY2NkNGZhZDk1MGVk LzEvdnI4Snd2al8tWDc0cnNMNEZ6VjQwS09uVElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhii41kXg dw8LNBWFWZYmkbWvWwn3iWCt84ah8wg+wsBiOm7XPs637W3ycS8uJP+posx+od8W ufIQJBKp7E612XkIZU7dbNAiLBlIikWTAK2eZDu7I9eFY0Zc8P6uaXR92YOEC3it wqCnATA+76xyqd5E0fwm4/oWWozosh37755sN8Ym8PdphhVtulQ/Y4t6SASOtGA1 U+7bNuJfdoOYSaKsXADSZ+Hhii2a6Vmabcgj0O+sgZZsqDivGMubWa6BwvEouQwW VCwF18hiNtDDyZYDjjVn+tOmqOeS8vAhvS7xgq/DtjY9+9p9z67Ya+Trr8rbOgEX WgvhV4MXke5L0w== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:28 2025 by rpki-client