This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft File: RVffPlRtVtu10jD2EcckxZmnIlE.mft (raw, json) Hash identifier: f/mTyokCgDKPwfhqRLfe+MdedgI0jNqRULsvROar9Ng= Subject key identifier: 97:CC:6F:B3:80:9C:FB:DF:66:E8:0B:13:73:57:6B:50:46:16:25:F7 Authority key identifier: 45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51 Certificate issuer: /CN=4557df3e546d56dbb5d230f611c724c599a72251 Certificate serial: 019AF509BED6E5BF49183DE33380C7F08B8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft Manifest number: 084A Signing time: Sat 06 Dec 2025 19:00:47 +0000 Manifest this update: Sat 06 Dec 2025 19:00:47 +0000 Manifest next update: Sun 07 Dec 2025 19:00:47 +0000 Files and hashes: 1: 8bsQRC6tEXl8CBwmVFzVd76zzgI.roa (hash: C8qiZHuVAIBOKIv/baZ/CLEIEY2S6o8WOpdp6qtA5us=) 2: RVffPlRtVtu10jD2EcckxZmnIlE.crl (hash: bWXrnAoTL7JLfAtI+m9Cm7P5eIdtGdZysXckxnY9Rqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:be:d6:e5:bf:49:18:3d:e3:33:80:c7:f0:8b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4557df3e546d56dbb5d230f611c724c599a72251 Validity Not Before: Dec 6 19:00:47 2025 GMT Not After : Dec 7 19:00:47 2025 GMT Subject: CN=97cc6fb3809cfbdf66e80b1373576b50461625f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:20:fd:bf:41:ed:d1:1e:c9:0e:a2:92:ff:6e: c1:68:2c:e9:1a:e5:b3:7c:32:ea:8a:26:f1:f3:f8: c6:b2:e9:06:5d:22:83:df:ff:13:b6:01:85:7c:f6: eb:15:0a:84:48:31:73:93:9f:59:65:4c:8b:f5:a9: b8:b1:20:38:36:8c:30:c5:99:1d:ef:5e:38:55:ae: 99:31:98:60:65:79:94:89:5f:22:92:14:67:75:5c: 84:62:d1:60:35:7f:4a:74:83:b4:59:3f:20:e6:ba: e2:d0:dd:0e:6a:6a:70:14:bd:78:d6:73:81:f6:63: 00:5c:7c:6a:3b:13:8a:18:c0:46:1e:e3:e4:3c:13: 68:dc:e1:46:8f:02:2f:de:4f:c9:5f:c0:f7:fa:a9: 07:b4:de:56:6b:99:14:e5:f4:ef:ba:eb:99:c8:6c: 56:f7:2b:e3:ef:50:f2:9f:8c:74:d8:a5:85:43:07: 1d:79:7f:a1:95:fa:96:5e:a8:92:7c:a0:6b:cd:ad: 18:92:a7:f3:a9:60:03:51:b8:ea:aa:22:f2:42:46: 2f:ea:a9:ba:42:07:5d:fe:7b:a4:cb:48:2d:30:55: 3e:9b:c7:c6:07:fa:c4:3a:39:ac:b3:e6:2f:14:d4: 2c:9e:61:87:fe:24:dd:6e:1b:eb:72:6a:b8:10:21: 74:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CC:6F:B3:80:9C:FB:DF:66:E8:0B:13:73:57:6B:50:46:16:25:F7 X509v3 Authority Key Identifier: keyid:45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d2:16:8c:b3:fd:3f:2e:41:2d:3a:c1:09:d8:69:b5:25:19: 7b:e1:d5:17:13:2b:b0:6d:d9:b4:25:34:ff:d1:d6:f1:5c:1f: 11:77:0a:63:c9:c2:3e:4b:0c:90:20:35:04:55:4b:b7:41:8b: 2a:46:14:98:77:38:e2:04:70:03:b5:b6:28:cf:c3:2b:5f:02: 95:5c:8b:87:9a:8b:59:d3:b6:e6:14:79:3c:d4:b7:e8:f7:5d: 23:ed:fc:10:e9:ce:96:99:9d:df:1b:9a:63:6b:5e:fb:8f:b1: 7d:60:2f:67:ba:4b:2e:63:3b:64:65:f8:ec:91:51:c9:63:f6: 81:9e:d6:c5:2b:93:09:31:90:b3:68:67:a9:4e:9f:1c:b6:cf: 2b:f9:6a:3b:94:f9:d0:ff:34:e6:1c:18:98:9f:93:25:70:36: ec:32:c1:07:f4:82:0b:64:e6:0e:61:b4:6d:01:d6:3f:f4:c0: 62:e9:18:2d:95:37:8e:34:fd:66:c0:7e:34:5e:e2:fc:7b:3a: cb:ff:f8:05:6c:6e:b6:35:d9:f2:92:1d:cc:5d:d8:4f:07:bc: 0c:6e:2b:71:3d:d7:5a:04:a1:cb:d6:39:d9:38:06:b7:76:86: 26:26:ad:71:ca:91:af:bc:62:0a:b1:5e:56:ac:9c:8b:85:4c: bd:2a:74:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cb7W5b9JGD3jM4DH8IuMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NTdkZjNlNTQ2ZDU2ZGJiNWQyMzBmNjExYzcyNGM1OTlh NzIyNTEwHhcNMjUxMjA2MTkwMDQ3WhcNMjUxMjA3MTkwMDQ3WjAzMTEwLwYDVQQD Eyg5N2NjNmZiMzgwOWNmYmRmNjZlODBiMTM3MzU3NmI1MDQ2MTYyNWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiD9v0Ht0R7JDqKS/27BaCzpGuWz fDLqiibx8/jGsukGXSKD3/8TtgGFfPbrFQqESDFzk59ZZUyL9am4sSA4NowwxZkd 7144Va6ZMZhgZXmUiV8ikhRndVyEYtFgNX9KdIO0WT8g5rri0N0OampwFL141nOB 9mMAXHxqOxOKGMBGHuPkPBNo3OFGjwIv3k/JX8D3+qkHtN5Wa5kU5fTvuuuZyGxW 9yvj71Dyn4x02KWFQwcdeX+hlfqWXqiSfKBrza0YkqfzqWADUbjqqiLyQkYv6qm6 Qgdd/nuky0gtMFU+m8fGB/rEOjmss+YvFNQsnmGH/iTdbhvrcmq4ECF02QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfMb7OAnPvfZugLE3NXa1BGFiX3MB8GA1UdIwQY MBaAFEVX3z5UbVbbtdIw9hHHJMWZpyJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jYWM1OTMtNjA3NC00MjIxLWJlZmQt MGE4OTJhYjQ3ZGIzLzEvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jYWM1OTMtNjA3NC00MjIxLWJlZmQtMGE4OTJhYjQ3ZGIz LzEvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9IWjLP9 Py5BLTrBCdhptSUZe+HVFxMrsG3ZtCU0/9HW8VwfEXcKY8nCPksMkCA1BFVLt0GL KkYUmHc44gRwA7W2KM/DK18ClVyLh5qLWdO25hR5PNS36PddI+38EOnOlpmd3xua Y2te+4+xfWAvZ7pLLmM7ZGX47JFRyWP2gZ7WxSuTCTGQs2hnqU6fHLbPK/lqO5T5 0P805hwYmJ+TJXA27DLBB/SCC2TmDmG0bQHWP/TAYukYLZU3jjT9ZsB+NF7i/Hs6 y//4BWxutjXZ8pIdzF3YTwe8DG4rcT3XWgShy9Y52TgGt3aGJiatccqRr7xiCrFe Vqyci4VMvSp0Pw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:43:53 2025 by rpki-client