This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft File: VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft (raw, json) Hash identifier: GzP3Yim/3CGMNvYwtNqte5TynZ4s63fCzvoVh53yOuw= Subject key identifier: DA:7A:A5:4B:A1:31:19:F1:9A:04:D9:F1:36:C3:5A:24:AE:D4:1F:F3 Authority key identifier: 54:48:A5:C5:C5:77:B5:3C:C2:98:AF:04:43:ED:D4:35:2E:1B:13:00 Certificate issuer: /CN=5448a5c5c577b53cc298af0443edd4352e1b1300 Certificate serial: 019AF1D1D991784394E34982679238A7C9C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEilxcV3tTzCmK8EQ-3UNS4bEwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft Manifest number: 0274 Signing time: Sat 06 Dec 2025 04:00:52 +0000 Manifest this update: Sat 06 Dec 2025 04:00:52 +0000 Manifest next update: Sun 07 Dec 2025 04:00:52 +0000 Files and hashes: 1: VEilxcV3tTzCmK8EQ-3UNS4bEwA.crl (hash: sGyBvk9+CXL8OGn59hazZll9PkZ7UuCSQZZ0leXGLxs=) 2: z7A1F9yPjL55IibPa20Kjx9HdWo.roa (hash: n2Ln9x6dFYLELeltpBs/l+euwSQGs6r6YausDD8SqV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.crl rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft rsync://rpki.ripe.net/repository/DEFAULT/VEilxcV3tTzCmK8EQ-3UNS4bEwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d9:91:78:43:94:e3:49:82:67:92:38:a7:c9:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5448a5c5c577b53cc298af0443edd4352e1b1300 Validity Not Before: Dec 6 04:00:52 2025 GMT Not After : Dec 7 04:00:52 2025 GMT Subject: CN=da7aa54ba13119f19a04d9f136c35a24aed41ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:21:52:18:28:14:fc:a7:06:d9:5b:74:e1:21: 81:f7:5e:f9:e4:da:11:c7:50:08:29:30:57:3e:3d: da:75:5c:c4:73:d1:bb:7d:e6:93:f6:28:a9:84:43: a8:0e:75:6e:5b:8c:2a:c2:5f:da:2b:42:9e:98:e8: 35:bb:db:8d:29:0d:3f:e1:75:ba:25:84:f3:6d:13: 24:cb:21:4c:20:37:37:73:2a:3b:23:39:67:f4:67: c1:80:37:7e:d2:9a:05:71:56:25:57:90:7f:d1:26: cf:9c:a9:b3:87:3d:af:20:02:64:82:16:8a:cf:e4: b0:20:24:b7:56:85:9f:49:3a:28:d6:26:77:2b:90: e7:9a:86:be:69:a8:01:e1:6a:92:18:12:d5:7f:9d: f0:e1:54:6d:77:8e:f8:31:88:7f:ad:2f:15:2f:d9: 84:2c:fa:23:1a:4e:98:33:8b:d6:60:73:d2:d9:09: c3:ba:7d:f7:b5:f1:36:a5:1f:22:71:60:e4:5a:3c: 54:25:ed:62:bd:fc:b9:18:93:42:4f:f6:b1:22:4e: cf:92:71:75:f4:8e:cc:8d:7a:ee:f4:8e:ee:6c:0b: 2d:e5:22:9b:b7:be:2e:55:76:5e:8f:b4:88:c7:9b: 79:4e:43:8d:1b:08:35:65:fa:0a:44:b1:41:b9:1f: 6e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7A:A5:4B:A1:31:19:F1:9A:04:D9:F1:36:C3:5A:24:AE:D4:1F:F3 X509v3 Authority Key Identifier: keyid:54:48:A5:C5:C5:77:B5:3C:C2:98:AF:04:43:ED:D4:35:2E:1B:13:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEilxcV3tTzCmK8EQ-3UNS4bEwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:f2:69:49:85:82:70:25:3c:18:2c:bf:b7:18:b2:63:8b:62: 97:d2:1d:3b:a2:8f:de:04:e6:4d:1a:a8:02:c4:97:dd:9d:54: 6b:71:02:df:3e:4a:ab:d5:da:cc:54:55:cf:d7:7d:d0:b6:1e: a9:fa:1b:c2:42:39:a4:aa:1f:40:f5:3c:a4:c2:53:aa:2b:74: 5b:3c:f9:a4:31:e1:a5:9b:a4:eb:1e:98:77:d1:09:b6:89:72: 05:2b:04:02:cb:7b:4d:2e:77:bb:3d:f4:33:d8:f3:60:4c:26: 31:b3:39:dc:38:2a:1a:3d:8f:02:6e:ec:a6:f7:2d:ac:60:b6: 84:8c:19:c0:a1:e4:2b:a9:36:fc:ad:18:e8:47:49:7c:9d:4f: 04:22:b3:af:50:16:1a:02:05:6a:f2:6f:f0:36:eb:5c:af:5a: 7e:0e:d8:9a:2a:40:aa:de:92:57:6d:c6:5e:38:b6:26:56:26: 3a:34:73:fa:9f:61:e8:ad:97:c8:8d:fc:2a:0b:47:22:0a:f3: 35:1d:a4:04:f9:22:76:03:07:f6:29:7c:cf:74:c3:49:1d:35: 8a:7a:d2:c6:5b:fe:80:ce:e8:cb:1c:fa:bc:1f:57:b4:de:52: b6:9b:02:f7:d6:f3:6e:f2:5b:6e:d4:f0:d8:cb:35:00:69:de: 74:de:96:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dmReEOU40mCZ5I4p8nGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NDhhNWM1YzU3N2I1M2NjMjk4YWYwNDQzZWRkNDM1MmUx YjEzMDAwHhcNMjUxMjA2MDQwMDUyWhcNMjUxMjA3MDQwMDUyWjAzMTEwLwYDVQQD EyhkYTdhYTU0YmExMzExOWYxOWEwNGQ5ZjEzNmMzNWEyNGFlZDQxZmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyFSGCgU/KcG2Vt04SGB91755NoR x1AIKTBXPj3adVzEc9G7feaT9iiphEOoDnVuW4wqwl/aK0KemOg1u9uNKQ0/4XW6 JYTzbRMkyyFMIDc3cyo7Izln9GfBgDd+0poFcVYlV5B/0SbPnKmzhz2vIAJkghaK z+SwICS3VoWfSToo1iZ3K5Dnmoa+aagB4WqSGBLVf53w4VRtd474MYh/rS8VL9mE LPojGk6YM4vWYHPS2QnDun33tfE2pR8icWDkWjxUJe1ivfy5GJNCT/axIk7PknF1 9I7MjXru9I7ubAst5SKbt74uVXZej7SIx5t5TkONGwg1ZfoKRLFBuR9u1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNp6pUuhMRnxmgTZ8TbDWiSu1B/zMB8GA1UdIwQY MBaAFFRIpcXFd7U8wpivBEPt1DUuGxMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkVpbHhjVjN0VHpDbUs4RVEtM1VOUzRiRXdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9kYWM1ZmUtYjkxNC00YWVmLWI3Y2Et M2QwYzY4M2ZhOWM5LzEvVkVpbHhjVjN0VHpDbUs4RVEtM1VOUzRiRXdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9kYWM1ZmUtYjkxNC00YWVmLWI3Y2EtM2QwYzY4M2ZhOWM5 LzEvVkVpbHhjVjN0VHpDbUs4RVEtM1VOUzRiRXdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfJpSYWC cCU8GCy/txiyY4til9IdO6KP3gTmTRqoAsSX3Z1Ua3EC3z5Kq9XazFRVz9d90LYe qfobwkI5pKofQPU8pMJTqit0Wzz5pDHhpZuk6x6Yd9EJtolyBSsEAst7TS53uz30 M9jzYEwmMbM53DgqGj2PAm7spvctrGC2hIwZwKHkK6k2/K0Y6EdJfJ1PBCKzr1AW GgIFavJv8DbrXK9afg7YmipAqt6SV23GXji2JlYmOjRz+p9h6K2XyI38KgtHIgrz NR2kBPkidgMH9il8z3TDSR01inrSxlv+gM7oyxz6vB9XtN5StpsC99bzbvJbbtTw 2Ms1AGnedN6WZg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:50 2025 by rpki-client