This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft File: vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft (raw, json) Hash identifier: yS7VM7VuSdv7xNmuln9CHwUDuqCH1ZFbTffn/Xf7mWc= Subject key identifier: 01:7D:A4:70:C1:B1:FD:75:BB:25:DA:EE:EA:46:9B:35:B0:D4:7C:E7 Authority key identifier: BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34 Certificate issuer: /CN=bd60edf96266b7c0d43836c854ab472cb74db034 Certificate serial: 019AF19B22B3E20E001617AE6D3C3DD66878 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft Manifest number: 0162 Signing time: Sat 06 Dec 2025 03:01:07 +0000 Manifest this update: Sat 06 Dec 2025 03:01:07 +0000 Manifest next update: Sun 07 Dec 2025 03:01:07 +0000 Files and hashes: 1: NjeNoaMkokSwdxi651vJsIPZGPI.roa (hash: WuO4Ddldp2DFr/NBzaE03YGgYfOWTLEgomsbtANaXbM=) 2: dH1EdCv4F3zFBiGZJ_XAaJoKuB8.roa (hash: uO4JYjbK0aD9KVhI/8JLgIx8rPTIvs6HrJy/vrwJ/Vc=) 3: dpMRXq6ywyTgHrIH5zbYgzRL198.roa (hash: aTBcNVIvwowBJeKwi3Yf02sPJ620zjhuLByuimPY8vQ=) 4: gQgIF6hIvUfhurtQ198iONedcik.roa (hash: mEQuGKFly8SftvXJQdCvoLlNzQ9krMcgDUnKbr3nnLo=) 5: siIZExuS_GeAC_7yAg0fTn4ysPQ.roa (hash: YHIFiD7L5rHkCWAOSvuE1uPY3FwCVAc7u7VpZj5jlLg=) 6: vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl (hash: p1lWRQq99R83pB+6Di5xzpCYsoRUvMjA27nUlFp+n50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:22:b3:e2:0e:00:16:17:ae:6d:3c:3d:d6:68:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd60edf96266b7c0d43836c854ab472cb74db034 Validity Not Before: Dec 6 03:01:07 2025 GMT Not After : Dec 7 03:01:07 2025 GMT Subject: CN=017da470c1b1fd75bb25daeeea469b35b0d47ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:30:e2:60:16:ff:81:8f:cc:7b:33:97:bc:fc: 98:6d:03:ce:71:31:1a:69:eb:f0:13:42:14:9d:1c: e2:54:4b:cf:cc:35:d9:bb:a0:3c:93:bf:31:21:96: 79:42:33:4b:12:4c:03:b3:10:17:32:2e:ea:97:71: 54:e0:9e:fb:8c:b0:49:2d:bf:7a:ee:1c:06:9f:1f: de:33:2b:f0:01:60:7f:5a:bf:a9:86:15:46:a8:eb: c4:4c:af:06:cd:90:6b:1e:af:fc:29:b1:c0:2d:4a: 8d:53:f5:d6:e6:8c:f6:35:5b:22:a7:5f:e4:91:0e: 8d:21:bc:11:26:ac:97:26:32:da:ea:5c:65:a4:92: a6:01:07:e7:36:c1:ec:64:e1:88:86:79:7e:ad:33: dd:39:32:28:92:7b:ae:26:1e:32:2d:52:d4:ea:e9: dd:ee:f5:e4:4b:ca:07:79:66:e4:47:5a:40:49:69: 89:44:9b:1d:14:17:e2:61:37:8a:f5:8a:4b:3c:1d: 04:12:21:2c:3b:c1:5a:35:9a:5c:82:d7:b1:0f:10: 09:0a:ae:5b:2a:73:5f:6b:dc:f9:9c:53:f6:83:e5: d9:bf:49:fd:33:53:74:1e:ff:65:15:fd:e5:39:d3: 82:93:82:a9:d6:e3:55:2a:40:4a:c4:95:1a:79:22: 00:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7D:A4:70:C1:B1:FD:75:BB:25:DA:EE:EA:46:9B:35:B0:D4:7C:E7 X509v3 Authority Key Identifier: keyid:BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:53:19:e3:c5:ec:3d:b2:30:cf:fa:c9:86:c0:9b:00:2b:fc: fe:99:90:75:63:bf:75:86:00:ef:9e:8c:7f:0b:6d:fa:d7:17: 2b:79:1e:6a:ed:7a:97:b2:c2:8f:33:7d:09:d0:ef:1f:a4:11: 98:b3:c0:bd:9d:09:40:9f:65:9c:a3:cd:96:05:f8:80:5d:e8: f6:ea:45:41:68:86:0a:3a:2b:6d:82:cc:30:ce:3d:b8:56:be: 3e:35:59:2d:34:ee:3f:e3:a7:3d:44:e8:20:67:f9:aa:51:86: e7:5e:fe:74:c3:da:68:5b:2a:f3:57:9a:aa:ee:93:cb:c6:4d: 33:4d:59:fd:65:3c:c9:ac:5b:3e:38:fe:be:e1:67:94:6d:7c: 9d:fc:c9:de:97:3f:50:37:93:c1:4c:45:1a:1c:7f:b8:ca:39: 28:81:54:7b:de:35:65:9a:ad:a6:01:5b:ea:59:3e:3e:72:8c: 68:b8:e3:f6:44:a5:18:1d:16:a2:fd:a2:50:43:00:6b:8a:1a: cb:8f:c2:97:6c:f6:4e:4f:13:7f:6b:07:51:d6:fb:e7:64:01: 1a:3b:9d:ab:67:f8:60:ad:f9:ae:37:a1:b2:f7:01:d4:be:5e: a6:e3:fd:c6:b6:cd:35:57:01:11:1e:b3:d5:e5:50:e6:a5:42: 6c:1f:08:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyKz4g4AFheubTw91mh4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNjBlZGY5NjI2NmI3YzBkNDM4MzZjODU0YWI0NzJjYjc0 ZGIwMzQwHhcNMjUxMjA2MDMwMTA3WhcNMjUxMjA3MDMwMTA3WjAzMTEwLwYDVQQD EygwMTdkYTQ3MGMxYjFmZDc1YmIyNWRhZWVlYTQ2OWIzNWIwZDQ3Y2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzDiYBb/gY/MezOXvPyYbQPOcTEa aevwE0IUnRziVEvPzDXZu6A8k78xIZZ5QjNLEkwDsxAXMi7ql3FU4J77jLBJLb96 7hwGnx/eMyvwAWB/Wr+phhVGqOvETK8GzZBrHq/8KbHALUqNU/XW5oz2NVsip1/k kQ6NIbwRJqyXJjLa6lxlpJKmAQfnNsHsZOGIhnl+rTPdOTIoknuuJh4yLVLU6und 7vXkS8oHeWbkR1pASWmJRJsdFBfiYTeK9YpLPB0EEiEsO8FaNZpcgtexDxAJCq5b KnNfa9z5nFP2g+XZv0n9M1N0Hv9lFf3lOdOCk4Kp1uNVKkBKxJUaeSIAtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAF9pHDBsf11uyXa7upGmzWw1HznMB8GA1UdIwQY MBaAFL1g7fliZrfA1Dg2yFSrRyy3TbA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9iNWQ1YmItMjNjNi00YjNkLTk0Yzgt NDJiYmYxYTZhNjViLzEvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9iNWQ1YmItMjNjNi00YjNkLTk0YzgtNDJiYmYxYTZhNjVi LzEvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlMZ48Xs PbIwz/rJhsCbACv8/pmQdWO/dYYA756Mfwtt+tcXK3keau16l7LCjzN9CdDvH6QR mLPAvZ0JQJ9lnKPNlgX4gF3o9upFQWiGCjorbYLMMM49uFa+PjVZLTTuP+OnPUTo IGf5qlGG517+dMPaaFsq81eaqu6Ty8ZNM01Z/WU8yaxbPjj+vuFnlG18nfzJ3pc/ UDeTwUxFGhx/uMo5KIFUe941ZZqtpgFb6lk+PnKMaLjj9kSlGB0Wov2iUEMAa4oa y4/Cl2z2Tk8Tf2sHUdb752QBGjudq2f4YK35rjehsvcB1L5epuP9xrbNNVcBER6z 1eVQ5qVCbB8IbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:18 2025 by rpki-client