This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft File: rvHu-qdX046xBPpMuk2WK3LlK1I.mft (raw, json) Hash identifier: aN4D9Dmcw8ABefOP8kts7iQscnFlnotYkHt5tAN3yEU= Subject key identifier: BC:23:2A:81:08:F8:15:55:9A:83:9C:20:3E:BC:0F:EC:90:AF:D2:2E Authority key identifier: AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52 Certificate issuer: /CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52 Certificate serial: 019AF12F397B057FA49DC88B4A191E35F5DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 01:03:15 +0000 Manifest this update: Sat 06 Dec 2025 01:03:15 +0000 Manifest next update: Sun 07 Dec 2025 01:03:15 +0000 Files and hashes: 1: jtrE-ZquFgpFsUyQd2ruDZJ4V1Y.roa (hash: DLSZmdArA6I562nrgAPaSvfYMqezrmvR6p+K4KjZ8d8=) 2: rvHu-qdX046xBPpMuk2WK3LlK1I.crl (hash: L2DG2aCf2gq2TmHUJHLQP5eHxVtCdsrAb+IlCtwKTuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:39:7b:05:7f:a4:9d:c8:8b:4a:19:1e:35:f5:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52 Validity Not Before: Dec 6 01:03:15 2025 GMT Not After : Dec 7 01:03:15 2025 GMT Subject: CN=bc232a8108f815559a839c203ebc0fec90afd22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:32:aa:83:f9:c8:ac:1e:66:05:1a:f0:19:ed: 4a:fd:67:11:43:a0:b3:d5:2e:59:6d:15:39:7e:c3: 32:d8:d2:91:51:bb:73:17:83:20:c7:65:4e:46:34: c7:02:97:50:17:68:db:5c:4b:50:56:a6:a0:79:29: 25:99:11:4c:f0:88:f8:3a:be:d1:d8:96:1a:83:14: f9:1b:88:2c:e4:53:0a:af:fd:74:20:8b:17:04:a8: 2b:c7:29:c8:8d:7c:3e:99:5f:7b:4d:80:84:b2:4b: 72:d6:a6:f7:fa:a9:72:ac:09:19:6c:10:dd:09:82: 79:21:12:a4:bf:0e:a3:06:48:27:20:66:9a:28:90: e9:7d:63:0c:f9:75:06:e4:e4:59:77:5b:06:36:90: da:70:07:b5:26:41:f0:f7:2d:ee:03:f7:db:77:e0: e7:80:ba:76:f0:d1:eb:a1:8f:3d:ae:35:53:34:7a: 85:44:8a:8c:e3:60:e7:19:dc:95:db:d4:b2:d9:64: 68:8a:f5:c0:b5:78:13:9c:c7:96:2c:10:3f:51:9d: e0:23:bb:b8:08:5f:d5:91:13:a6:dc:bf:00:b0:4a: 1d:f5:ef:28:60:f7:7b:5c:0e:bf:f6:c2:5c:a3:4a: cf:52:0e:55:26:23:18:d7:30:d6:c0:6c:a2:3f:38: d0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:23:2A:81:08:F8:15:55:9A:83:9C:20:3E:BC:0F:EC:90:AF:D2:2E X509v3 Authority Key Identifier: keyid:AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ba:d7:d6:e4:e1:4e:60:e7:06:33:41:c7:aa:73:f4:40:30: 7e:f9:41:08:01:a5:71:15:a1:50:90:61:d2:c2:c1:3d:ef:13: 8a:1c:31:64:78:07:b4:c0:25:4a:e4:c1:17:45:ae:51:e0:2e: f1:88:da:8e:5d:30:46:87:25:1e:8d:1b:b6:4a:45:7e:9c:4f: 49:b0:b3:59:93:dc:8c:47:9b:39:d7:00:79:c4:4f:e7:1d:8c: d2:d3:bc:74:8f:9d:f5:17:0e:5c:a9:88:f3:e0:03:0c:06:85: 3f:3a:11:37:fc:f8:89:b1:16:1d:8a:ab:61:9b:61:e8:bb:f3: b2:29:89:f2:31:30:d7:55:da:f4:47:75:d1:3e:91:29:f3:df: 5c:e4:32:41:c2:32:fb:8a:29:73:4f:58:6e:1d:c4:ef:99:1b: b3:f0:60:b7:0f:27:2b:82:8a:86:ea:51:b0:24:c3:a5:6b:c0: ba:fb:62:a0:30:07:a4:24:ca:68:4f:42:a7:08:02:05:f5:01: e4:b2:d7:83:d7:a8:1f:92:84:62:12:6f:f4:a7:0e:61:ec:6b: bc:99:b6:81:a8:4d:e7:86:35:79:2f:7f:54:2b:71:53:d5:f4: 9f:ee:35:32:39:9f:c6:a4:8d:56:e8:fb:4c:28:3d:c5:e8:b4: 3f:57:bd:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLzl7BX+knciLShkeNfXcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZjFlZWZhYTc1N2QzOGViMTA0ZmE0Y2JhNGQ5NjJiNzJl NTJiNTIwHhcNMjUxMjA2MDEwMzE1WhcNMjUxMjA3MDEwMzE1WjAzMTEwLwYDVQQD EyhiYzIzMmE4MTA4ZjgxNTU1OWE4MzljMjAzZWJjMGZlYzkwYWZkMjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jKqg/nIrB5mBRrwGe1K/WcRQ6Cz 1S5ZbRU5fsMy2NKRUbtzF4Mgx2VORjTHApdQF2jbXEtQVqageSklmRFM8Ij4Or7R 2JYagxT5G4gs5FMKr/10IIsXBKgrxynIjXw+mV97TYCEskty1qb3+qlyrAkZbBDd CYJ5IRKkvw6jBkgnIGaaKJDpfWMM+XUG5ORZd1sGNpDacAe1JkHw9y3uA/fbd+Dn gLp28NHroY89rjVTNHqFRIqM42DnGdyV29Sy2WRoivXAtXgTnMeWLBA/UZ3gI7u4 CF/VkROm3L8AsEod9e8oYPd7XA6/9sJco0rPUg5VJiMY1zDWwGyiPzjQMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwjKoEI+BVVmoOcID68D+yQr9IuMB8GA1UdIwQY MBaAFK7x7vqnV9OOsQT6TLpNlity5StSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnZIdS1xZFgwNDZ4QlBwTXVrMldLM0xsSzFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jOWYzM2ItMmYxYi00YTExLWEyMWQt OWE2YmQwMTFmOGY2LzEvcnZIdS1xZFgwNDZ4QlBwTXVrMldLM0xsSzFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9jOWYzM2ItMmYxYi00YTExLWEyMWQtOWE2YmQwMTFmOGY2 LzEvcnZIdS1xZFgwNDZ4QlBwTXVrMldLM0xsSzFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7rX1uTh TmDnBjNBx6pz9EAwfvlBCAGlcRWhUJBh0sLBPe8TihwxZHgHtMAlSuTBF0WuUeAu 8Yjajl0wRoclHo0btkpFfpxPSbCzWZPcjEebOdcAecRP5x2M0tO8dI+d9RcOXKmI 8+ADDAaFPzoRN/z4ibEWHYqrYZth6LvzsimJ8jEw11Xa9Ed10T6RKfPfXOQyQcIy +4opc09Ybh3E75kbs/Bgtw8nK4KKhupRsCTDpWvAuvtioDAHpCTKaE9CpwgCBfUB 5LLXg9eoH5KEYhJv9KcOYexrvJm2gahN54Y1eS9/VCtxU9X0n+41MjmfxqSNVuj7 TCg9xei0P1e9oQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:09 2025 by rpki-client