This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft File: vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft (raw, json) Hash identifier: ES1KtC6bWU+WYUSLpHRpNkTX9l/feuq8NHFbtpCBPNg= Subject key identifier: 3E:EA:A4:F6:48:ED:78:9E:99:39:37:6A:B7:E0:15:BF:AC:61:01:AE Authority key identifier: BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE Certificate issuer: /CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce Certificate serial: 019AF61CBAC938DCBE1365E54645CFD8D9E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft Manifest number: 0A2E Signing time: Sun 07 Dec 2025 00:01:09 +0000 Manifest this update: Sun 07 Dec 2025 00:01:09 +0000 Manifest next update: Mon 08 Dec 2025 00:01:09 +0000 Files and hashes: 1: sxWKrzqIBBqkeo4-v2Jw2EzqS3k.roa (hash: DWZadMWJyiM8F0IG02kO3n/vWw1f6vECk5IkRqLr9qY=) 2: vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl (hash: /4y9ZSrOPA1WlrvrgKSXPULW68iaVlY7JnigWK+Dceg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:ba:c9:38:dc:be:13:65:e5:46:45:cf:d8:d9:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce Validity Not Before: Dec 7 00:01:09 2025 GMT Not After : Dec 8 00:01:09 2025 GMT Subject: CN=3eeaa4f648ed789e9939376ab7e015bfac6101ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5f:18:61:49:99:97:d6:1c:df:85:5e:c1:44: 69:e4:90:ea:a3:7c:c7:46:06:80:06:44:f4:0a:3f: 5d:c0:dc:d4:da:7e:ab:6c:7c:54:12:51:63:fe:9c: f9:c7:3c:f9:eb:93:44:34:f0:93:b1:82:ef:d1:88: b2:fc:46:a6:1d:55:4e:bd:36:ae:54:6e:a5:3b:02: 0b:50:82:14:43:b3:8b:93:f5:fe:13:63:0c:20:fd: f3:11:01:c2:73:eb:65:6d:59:30:aa:14:a4:7a:24: ec:bc:0e:28:60:3d:bc:14:b9:8c:d3:44:d7:02:cd: 59:dd:68:88:e4:93:fc:a7:7b:5c:a0:03:fe:e9:70: 45:a6:3d:18:a9:12:3c:df:95:d8:50:77:7b:2b:96: 07:d7:01:fe:5a:d0:db:49:0e:e6:e9:00:77:89:47: ff:7e:67:1e:d9:6d:83:58:ad:9d:0a:73:5d:a5:fb: 90:3f:6c:cc:aa:67:20:4f:0b:fb:c8:e3:fa:b1:51: db:77:22:8d:1e:f7:00:d3:27:c2:ae:48:7b:de:99: d2:98:b5:02:a0:a4:28:cf:eb:4f:bd:5d:01:fe:c7: a8:d3:9e:23:a1:d6:e4:15:9f:8f:98:0a:53:83:34: 8c:c1:a0:0a:75:91:bb:7f:32:ac:ca:ed:26:d1:f7: 7c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EA:A4:F6:48:ED:78:9E:99:39:37:6A:B7:E0:15:BF:AC:61:01:AE X509v3 Authority Key Identifier: keyid:BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:41:87:04:f3:a7:ce:2e:e5:cf:9f:b3:21:d4:18:f7:77:22: cc:4b:0e:26:91:ad:34:fe:6b:6e:fb:b3:af:91:2a:e7:18:e6: f3:bd:da:fe:88:c8:04:ad:a6:0f:f7:89:d4:4b:85:5b:58:dc: 36:65:e4:29:40:43:09:e9:9c:58:ff:5b:1c:20:34:d2:04:9d: 3e:96:7c:4f:e6:63:60:cd:f2:ae:1e:25:d3:0c:93:5f:c6:0d: f1:8f:5a:f3:37:32:8e:f6:78:10:42:99:09:8c:7a:0c:3a:e2: 49:61:8e:77:83:dd:d5:66:66:61:50:2c:ee:a3:26:c8:ff:fe: e9:69:e3:59:11:ab:0e:0b:10:69:cb:0b:e9:da:9d:f5:0b:fa: 6b:ce:7e:62:a4:ff:3f:59:54:a2:8e:cb:fe:99:47:e5:40:cb: 68:cd:bf:72:13:22:83:02:ad:5e:67:39:24:7f:80:9d:ae:d4: ed:65:f5:9d:f8:81:8c:b7:34:19:cd:a1:0d:ea:90:af:c5:6f: 8d:7d:92:e5:94:3d:6a:5d:61:77:8b:2c:58:3a:05:cc:e7:c6: 73:a2:95:86:b4:a7:9e:90:96:6d:ce:64:69:3f:de:7a:de:dd: 78:72:42:79:7d:f2:9e:e5:c7:ed:94:a5:ff:01:60:fa:a8:44: 01:64:3e:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HLrJONy+E2XlRkXP2NnoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNGFkMjFhMGE2OWRjMDQxYzRlMTc3MGViMThiYTQzYjZk YjI5Y2UwHhcNMjUxMjA3MDAwMTA5WhcNMjUxMjA4MDAwMTA5WjAzMTEwLwYDVQQD EygzZWVhYTRmNjQ4ZWQ3ODllOTkzOTM3NmFiN2UwMTViZmFjNjEwMWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV8YYUmZl9Yc34VewURp5JDqo3zH RgaABkT0Cj9dwNzU2n6rbHxUElFj/pz5xzz565NENPCTsYLv0Yiy/EamHVVOvTau VG6lOwILUIIUQ7OLk/X+E2MMIP3zEQHCc+tlbVkwqhSkeiTsvA4oYD28FLmM00TX As1Z3WiI5JP8p3tcoAP+6XBFpj0YqRI835XYUHd7K5YH1wH+WtDbSQ7m6QB3iUf/ fmce2W2DWK2dCnNdpfuQP2zMqmcgTwv7yOP6sVHbdyKNHvcA0yfCrkh73pnSmLUC oKQoz+tPvV0B/seo054jodbkFZ+PmApTgzSMwaAKdZG7fzKsyu0m0fd8+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7qpPZI7XiemTk3arfgFb+sYQGuMB8GA1UdIwQY MBaAFL1K0hoKadwEHE4XcOsYukO22ynOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlVyU0dncHAzQVFjVGhkdzZ4aTZRN2JiS2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82N2Y3MDctMDAwNi00NjlkLWIzMTEt Y2RkNGQ4ZjhkMGQ5LzEvdlVyU0dncHAzQVFjVGhkdzZ4aTZRN2JiS2M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC82N2Y3MDctMDAwNi00NjlkLWIzMTEtY2RkNGQ4ZjhkMGQ5 LzEvdlVyU0dncHAzQVFjVGhkdzZ4aTZRN2JiS2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPkGHBPOn zi7lz5+zIdQY93cizEsOJpGtNP5rbvuzr5Eq5xjm873a/ojIBK2mD/eJ1EuFW1jc NmXkKUBDCemcWP9bHCA00gSdPpZ8T+ZjYM3yrh4l0wyTX8YN8Y9a8zcyjvZ4EEKZ CYx6DDriSWGOd4Pd1WZmYVAs7qMmyP/+6WnjWRGrDgsQacsL6dqd9Qv6a85+YqT/ P1lUoo7L/plH5UDLaM2/chMigwKtXmc5JH+Ana7U7WX1nfiBjLc0Gc2hDeqQr8Vv jX2S5ZQ9al1hd4ssWDoFzOfGc6KVhrSnnpCWbc5kaT/eet7deHJCeX3ynuXH7ZSl /wFg+qhEAWQ+mw== -----END CERTIFICATE-----Generated at Sun Dec 7 05:53:20 2025 by rpki-client