This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft File: vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft (raw, json) Hash identifier: 3nZlJlZzrxdUxPed508FGJLlbZbfMEM6tesURnNZL40= Subject key identifier: 30:23:C6:C2:F3:B6:BD:0E:91:B9:F4:3D:66:61:01:64:EA:34:3A:15 Authority key identifier: BD:4A:BD:78:4B:F0:C0:24:9C:01:39:D6:10:FF:90:A9:AE:0B:71:24 Certificate issuer: /CN=bd4abd784bf0c0249c0139d610ff90a9ae0b7124 Certificate serial: 019AF23FA72C014A4F2740FBA7AC512B0808 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft Manifest number: 10CF Signing time: Sat 06 Dec 2025 06:00:48 +0000 Manifest this update: Sat 06 Dec 2025 06:00:48 +0000 Manifest next update: Sun 07 Dec 2025 06:00:48 +0000 Files and hashes: 1: Mx70hNJU_cRg_ARtxD9n_NQR79Y.roa (hash: VUy0r7IF46Fy+JwVkckIUB1U8NWR6ieGTg4RW1Lrvrc=) 2: vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl (hash: /wQ5K6FSFFp+te+hGJN4OHbqw5pQ0qlbHd6IJcOklKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a7:2c:01:4a:4f:27:40:fb:a7:ac:51:2b:08:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd4abd784bf0c0249c0139d610ff90a9ae0b7124 Validity Not Before: Dec 6 06:00:48 2025 GMT Not After : Dec 7 06:00:48 2025 GMT Subject: CN=3023c6c2f3b6bd0e91b9f43d66610164ea343a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:ce:23:07:2b:e7:11:fd:04:97:6a:09:fb: b3:bc:e0:5b:e1:4d:ef:a3:4c:cb:97:1a:15:de:47: aa:33:fe:ff:d7:5a:c1:f6:b3:6e:dd:d6:68:f9:17: 8f:bf:be:8c:90:d7:f2:a3:90:38:f0:f9:5d:c4:63: 8e:e9:69:c8:ba:8f:83:70:94:f0:cc:57:15:6c:17: 1e:02:6a:4d:7b:bd:64:03:59:ff:63:8e:c2:82:24: 3a:23:fb:a6:43:11:86:1e:8b:bf:36:47:b1:89:e6: 5c:b3:e8:0e:b2:e7:8a:eb:fc:38:5e:8b:19:01:e1: 8c:90:a9:17:95:a8:9c:7d:fe:e7:af:8c:34:95:ec: 78:6b:78:23:f6:ea:40:d5:5b:5d:d9:c0:02:5c:b9: 6d:1a:d7:6a:c7:3b:01:3f:d7:da:03:2b:75:25:27: 61:7a:c2:26:b0:8f:bd:4f:85:7f:6c:00:bf:73:72: 99:04:42:ae:91:ff:47:81:5d:d1:5d:7a:23:91:6f: 16:8d:46:33:cf:92:ed:b5:b5:eb:71:ca:9f:b1:c3: 85:54:72:41:65:d0:fd:2a:a1:c7:c1:99:18:cc:5d: 1f:6c:b0:fe:bb:22:38:f8:46:1a:36:75:0f:32:a4: 1c:d7:95:49:51:56:ce:95:d6:48:49:af:ca:a2:ab: d1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:23:C6:C2:F3:B6:BD:0E:91:B9:F4:3D:66:61:01:64:EA:34:3A:15 X509v3 Authority Key Identifier: keyid:BD:4A:BD:78:4B:F0:C0:24:9C:01:39:D6:10:FF:90:A9:AE:0B:71:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:94:de:b6:fb:ef:9f:c6:18:1e:65:78:56:73:23:9e:0b:ff: 9a:b3:79:e3:d7:b2:df:d4:40:a1:4e:80:9a:27:9f:06:02:84: c3:68:d5:eb:8e:19:83:13:8b:56:d7:7b:f1:df:65:db:51:4e: ec:a2:f5:67:03:a6:f8:c9:a7:3c:f4:fa:a5:19:61:44:70:6d: ab:51:e3:eb:00:13:89:07:e8:f0:51:fd:3b:2e:73:a4:c0:2d: 19:0f:9f:c6:97:2f:b3:03:25:f0:19:d8:df:74:76:51:a9:eb: dd:88:65:44:ce:23:55:90:92:29:db:5e:47:ae:ab:56:09:13: 8a:47:5b:08:bc:d9:af:8c:67:a3:9a:64:c8:99:9e:52:11:e3: 1d:dd:8d:44:23:20:b9:83:e0:63:e8:70:2e:74:19:b6:22:73: 26:3f:7c:97:8e:5c:7b:a6:f3:a3:48:dd:02:5a:1f:99:4e:f0: 86:94:7d:9e:29:96:42:4d:3f:b5:05:2d:0c:5c:58:39:1e:0f: 90:cd:97:2e:c1:af:b7:65:3e:ae:6c:f6:c8:1a:f6:b3:0c:19: d7:17:11:90:f6:4a:08:4e:6b:7b:6d:cf:12:83:0f:85:c3:1c: 84:de:09:ac:2f:58:83:f4:af:1b:a1:97:3a:0c:f1:d6:f7:c6: 67:e5:b0:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6csAUpPJ0D7p6xRKwgIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNGFiZDc4NGJmMGMwMjQ5YzAxMzlkNjEwZmY5MGE5YWUw YjcxMjQwHhcNMjUxMjA2MDYwMDQ4WhcNMjUxMjA3MDYwMDQ4WjAzMTEwLwYDVQQD EygzMDIzYzZjMmYzYjZiZDBlOTFiOWY0M2Q2NjYxMDE2NGVhMzQzYTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3fOIwcr5xH9BJdqCfuzvOBb4U3v o0zLlxoV3keqM/7/11rB9rNu3dZo+RePv76MkNfyo5A48PldxGOO6WnIuo+DcJTw zFcVbBceAmpNe71kA1n/Y47CgiQ6I/umQxGGHou/NkexieZcs+gOsueK6/w4XosZ AeGMkKkXlaicff7nr4w0lex4a3gj9upA1Vtd2cACXLltGtdqxzsBP9faAyt1JSdh esImsI+9T4V/bAC/c3KZBEKukf9HgV3RXXojkW8WjUYzz5LttbXrccqfscOFVHJB ZdD9KqHHwZkYzF0fbLD+uyI4+EYaNnUPMqQc15VJUVbOldZISa/KoqvR5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAjxsLztr0Okbn0PWZhAWTqNDoVMB8GA1UdIwQY MBaAFL1KvXhL8MAknAE51hD/kKmuC3EkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlVxOWVFdnd3Q1NjQVRuV0VQLVFxYTRMY1NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9lMTA0M2MtN2M3NS00ZmZjLWI0OTQt YmI1ZjhiODA5YjBjLzEvdlVxOWVFdnd3Q1NjQVRuV0VQLVFxYTRMY1NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9lMTA0M2MtN2M3NS00ZmZjLWI0OTQtYmI1ZjhiODA5YjBj LzEvdlVxOWVFdnd3Q1NjQVRuV0VQLVFxYTRMY1NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5Tetvvv n8YYHmV4VnMjngv/mrN549ey39RAoU6AmiefBgKEw2jV644ZgxOLVtd78d9l21FO 7KL1ZwOm+MmnPPT6pRlhRHBtq1Hj6wATiQfo8FH9Oy5zpMAtGQ+fxpcvswMl8BnY 33R2Uanr3YhlRM4jVZCSKdteR66rVgkTikdbCLzZr4xno5pkyJmeUhHjHd2NRCMg uYPgY+hwLnQZtiJzJj98l45ce6bzo0jdAlofmU7whpR9nimWQk0/tQUtDFxYOR4P kM2XLsGvt2U+rmz2yBr2swwZ1xcRkPZKCE5re23PEoMPhcMchN4JrC9Yg/SvG6GX Ogzx1vfGZ+WwGw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:34 2025 by rpki-client