This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json) Hash identifier: /va0Y/O+CdZcOP3yRUYR2EaxnOiB0+bNCWeQ8PcQ1Og= Subject key identifier: 51:ED:FC:CF:E4:E1:24:A5:37:77:09:DD:D7:F5:C1:EF:9E:26:92:8C Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78 Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78 Certificate serial: 019AF19A98EF94D7376CBB703BF99C71F92A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:00:31 +0000 Manifest this update: Sat 06 Dec 2025 03:00:31 +0000 Manifest next update: Sun 07 Dec 2025 03:00:31 +0000 Files and hashes: 1: OTqu6ofFTyzK0xc5jrx6KgXbQ7M.roa (hash: McteydyUGW+LpPCexm+O1QefOp1oYc2XsREa8UjCVIA=) 2: dKgonROO4xpKslqbxO1osnY3m3M.roa (hash: Hl3GLighJnfdP7Jed7jsC0ysJmCVrDY4pvlKDvOdEYc=) 3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: 1Y+bnH5cRQNgDgu1yKUL/Ry3teAPVA1DJ4VSbbfzBuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:98:ef:94:d7:37:6c:bb:70:3b:f9:9c:71:f9:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78 Validity Not Before: Dec 6 03:00:31 2025 GMT Not After : Dec 7 03:00:31 2025 GMT Subject: CN=51edfccfe4e124a5377709ddd7f5c1ef9e26928c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c8:f5:50:cd:72:13:43:4d:bb:1b:bf:01:17: eb:29:08:16:9a:35:01:fa:ff:e0:01:ee:c4:8d:69: ce:63:dd:a4:bf:d9:6f:e6:d9:2e:15:b6:0d:a2:cc: bd:2e:74:7f:8b:ba:cd:16:bf:45:ca:ed:d5:4a:8e: c0:5f:fa:32:96:28:f4:02:01:29:04:b9:c0:06:54: d3:bb:3a:b8:7d:80:dc:8b:2a:25:b1:3d:9d:22:33: 45:e1:33:7d:a6:63:e5:ee:4a:c2:fd:86:ad:dc:38: 5e:03:30:4a:df:11:20:10:e2:60:02:45:fb:a7:b3: 22:32:d5:e6:8e:fe:5b:f6:7a:e1:d7:bc:3e:10:18: a5:4b:02:f7:77:c2:f3:e4:70:84:11:45:55:52:97: 4d:60:6e:46:e0:f2:70:10:c5:cd:7d:e8:2c:61:f3: 48:3f:eb:20:20:ab:f2:5a:41:c4:a5:51:49:2e:4b: 06:02:78:cf:29:a5:87:79:d5:5a:5a:de:4a:8c:d5: b1:7d:a0:3a:10:7e:4b:cd:00:20:70:af:c3:e5:6f: 2e:a4:5e:f9:60:95:72:d6:6c:b8:26:ea:f9:95:83: 7b:48:95:a4:90:ad:c5:23:84:10:a2:eb:8d:06:40: f9:d8:7f:20:a0:f5:45:90:22:cb:b5:94:50:ee:b9: cf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:ED:FC:CF:E4:E1:24:A5:37:77:09:DD:D7:F5:C1:EF:9E:26:92:8C X509v3 Authority Key Identifier: keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:45:3e:88:ec:4f:5d:48:2e:60:52:fe:4e:08:49:01:10:c9: b1:d6:4d:1a:22:4d:9a:fd:d9:83:f0:05:09:4b:96:25:36:b0: c7:3a:fa:bc:67:ba:f8:3a:b4:c2:e0:67:4b:16:46:6f:2c:ed: 4a:22:82:a7:2c:4a:09:47:32:23:b4:b5:7a:2b:17:e1:b8:c3: b7:fb:a0:d8:63:4f:13:da:0c:c0:a3:b7:0e:c3:78:e9:84:3a: 4f:6d:93:7e:45:62:54:70:64:78:c7:e0:1a:43:af:3d:12:7d: 49:70:44:cd:13:c9:70:7e:76:bb:7d:02:5d:04:57:04:ae:49: 16:72:2b:ec:65:29:b2:52:21:c2:fa:92:3e:af:74:37:37:fa: c1:4d:10:d3:ad:c9:63:e9:6f:31:2d:45:b6:f1:94:d3:ff:52: 41:a5:aa:a0:a7:d4:0a:96:bf:8a:4c:5d:3a:e2:f6:af:ce:3e: 14:00:a2:ff:8e:2c:ce:99:92:82:4a:73:93:cd:a0:18:5f:ca: 13:60:b8:d3:e3:6b:09:f6:d9:62:10:61:06:bb:33:dc:9c:db: 59:05:f1:0c:81:93:1e:12:87:0b:44:21:2d:83:c2:5a:89:3f: 7d:43:d8:d7:c2:68:9c:4d:f7:27:a3:57:c3:8c:d8:f4:14:db: 7b:b9:35:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpjvlNc3bLtwO/mccfkqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMzEyNDdmMzU5YTZkNDkyZGM5OTQzYWUwZjAwZmM4YmUy MTZjNzgwHhcNMjUxMjA2MDMwMDMxWhcNMjUxMjA3MDMwMDMxWjAzMTEwLwYDVQQD Eyg1MWVkZmNjZmU0ZTEyNGE1Mzc3NzA5ZGRkN2Y1YzFlZjllMjY5MjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMj1UM1yE0NNuxu/ARfrKQgWmjUB +v/gAe7EjWnOY92kv9lv5tkuFbYNosy9LnR/i7rNFr9Fyu3VSo7AX/oylij0AgEp BLnABlTTuzq4fYDciyolsT2dIjNF4TN9pmPl7krC/Yat3DheAzBK3xEgEOJgAkX7 p7MiMtXmjv5b9nrh17w+EBilSwL3d8Lz5HCEEUVVUpdNYG5G4PJwEMXNfegsYfNI P+sgIKvyWkHEpVFJLksGAnjPKaWHedVaWt5KjNWxfaA6EH5LzQAgcK/D5W8upF75 YJVy1my4Jur5lYN7SJWkkK3FI4QQouuNBkD52H8goPVFkCLLtZRQ7rnP1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHt/M/k4SSlN3cJ3df1we+eJpKMMB8GA1UdIwQY MBaAFLwxJH81mm1JLcmUOuDwD8i+IWx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zNDZiZWYtMGE1ZS00NDAwLTlmODQt NTY4MDVjYTExYzMzLzEvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zNDZiZWYtMGE1ZS00NDAwLTlmODQtNTY4MDVjYTExYzMz LzEvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUU+iOxP XUguYFL+TghJARDJsdZNGiJNmv3Zg/AFCUuWJTawxzr6vGe6+Dq0wuBnSxZGbyzt SiKCpyxKCUcyI7S1eisX4bjDt/ug2GNPE9oMwKO3DsN46YQ6T22TfkViVHBkeMfg GkOvPRJ9SXBEzRPJcH52u30CXQRXBK5JFnIr7GUpslIhwvqSPq90Nzf6wU0Q063J Y+lvMS1FtvGU0/9SQaWqoKfUCpa/ikxdOuL2r84+FACi/44szpmSgkpzk82gGF/K E2C40+NrCfbZYhBhBrsz3JzbWQXxDIGTHhKHC0QhLYPCWok/fUPY18JonE33J6NX w4zY9BTbe7k1uQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:23 2025 by rpki-client