This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft File: v66jWK7ut9C54Pk9I_Z9KafsYsg.mft (raw, json) Hash identifier: etiKEMJaj2Fnl43Kz70sYRzVhN2pyE5nCAB4a2nooB8= Subject key identifier: 80:72:C2:3E:7E:F3:B1:15:9E:04:12:9E:FA:8A:E4:E9:DD:A3:FB:23 Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8 Certificate issuer: /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8 Certificate serial: 019AF08809235EAB795738002B2F3D18EDB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft Manifest number: 1034 Signing time: Fri 05 Dec 2025 22:00:38 +0000 Manifest this update: Fri 05 Dec 2025 22:00:38 +0000 Manifest next update: Sat 06 Dec 2025 22:00:38 +0000 Files and hashes: 1: Bx14mrPyOkGCiRnCoQiK8xyZi2Q.roa (hash: C2g4als5ZUHI2t4/02+/9yFNtLBjw/6au4Fyo7199Fw=) 2: FL4VCP2ebS0KpzdEEjgpeOZ0WHU.roa (hash: a8hxfR30jfZG7itjDgkJbvAUR1rTEz6wQmvQZHvY+Vg=) 3: LWIsGZerMX3p84vU2rGIj-HLsj4.roa (hash: V653yeNd9OWwSecStXWVbNQrGBjKZX6SHpE0zx75CIQ=) 4: NXFNvPreWKmytgudduJxNubp9ag.roa (hash: x5KCpK9l6cPAujJ1sPogi+1hAmWtq6th1heWKUVMPlY=) 5: kbTOh855t8tddDIlGKiPIgCKjmo.roa (hash: O0yoE+XLznGQKt8h9/FERhJPYLw6A2Fz2mE/56qBkRw=) 6: v66jWK7ut9C54Pk9I_Z9KafsYsg.crl (hash: d0Wk47AnaTpg/fnCJtjFI4BAJeC90qDpOTyQxUaKhTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:09:23:5e:ab:79:57:38:00:2b:2f:3d:18:ed:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8 Validity Not Before: Dec 5 22:00:38 2025 GMT Not After : Dec 6 22:00:38 2025 GMT Subject: CN=8072c23e7ef3b1159e04129efa8ae4e9dda3fb23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:93:94:f4:3a:ca:97:70:5a:b8:fa:d2:40:a7: 2a:f5:9e:66:56:d8:6e:92:39:60:4d:94:0e:a5:40: 50:88:fd:d4:4f:a8:6c:ad:5d:b9:53:f6:b7:eb:68: 3c:85:f6:29:07:53:0b:c9:af:74:81:6d:9b:b4:b3: 86:8c:8e:07:97:56:cf:97:f4:bf:8d:76:07:f6:c3: 90:93:a6:5e:02:95:a6:1c:79:f5:49:b3:95:cb:36: ca:66:a7:0d:7c:0f:0c:1a:27:b3:26:29:b3:96:57: 85:5e:92:b7:0d:1d:8f:71:9b:1f:c8:52:9f:7d:85: e9:08:a2:5f:a0:cf:22:51:b5:21:34:10:6e:94:0b: 54:53:87:e3:d1:e0:4f:95:64:ff:52:b6:22:bf:bb: f8:c2:ac:8b:91:c6:0e:2e:0e:62:98:80:20:de:03: 39:40:6e:42:3e:e3:53:87:24:34:bd:33:fc:0f:f7: d0:e0:3e:d6:e2:2c:0a:d5:79:98:b6:2e:69:f2:3e: 76:5b:70:19:6f:74:84:1f:58:58:7f:4e:19:59:a7: c0:a7:44:a3:28:23:7a:82:5a:fa:83:9a:fa:42:e8: 56:d5:ba:30:14:d7:fd:9c:4f:22:c2:f9:31:4f:f7: db:e6:e6:69:ce:d5:4e:a4:11:ed:d0:b7:32:eb:0c: a7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:72:C2:3E:7E:F3:B1:15:9E:04:12:9E:FA:8A:E4:E9:DD:A3:FB:23 X509v3 Authority Key Identifier: keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:8f:c8:ed:15:02:ea:7a:00:b5:da:d9:d6:34:2f:26:85:e3: 4d:4d:01:3e:1e:0c:d2:0d:67:a5:f6:64:00:b6:9b:73:b2:ee: a9:64:d2:07:47:3e:3c:78:fd:1a:b1:45:ac:08:31:df:ed:c2: 94:f0:f6:9f:f9:a3:b2:3b:ac:6d:02:d3:e0:0d:f1:a7:3c:b0: 5a:aa:06:f8:29:7d:bd:f7:29:9d:f1:d9:d5:78:a1:2c:2e:46: b9:c5:ef:2e:2d:3e:a1:23:ad:af:7d:43:35:2e:e5:47:a1:e7: 41:b0:b4:80:fe:7c:3f:04:56:20:ab:c5:9f:80:3d:f9:3f:89: 5e:99:9c:a6:19:bf:df:ab:b0:be:ca:4e:0b:0d:aa:1c:4c:ce: 4b:0d:1f:50:ad:14:1d:11:29:8e:d7:1f:50:d9:a5:ae:81:26: bf:8a:d7:b6:3d:05:69:73:23:57:2b:b4:71:ba:ef:9a:f2:79: 66:8d:a7:b8:8b:1e:8c:57:1b:dc:d0:b6:0f:36:5d:a0:1e:16: e5:1d:e9:db:f2:15:fb:df:96:8c:a8:80:23:27:a1:21:a7:ed: 8a:d3:35:61:91:85:78:09:48:de:d3:23:52:f9:71:97:cd:f6: e5:56:51:50:94:8a:d2:8e:ae:47:68:f3:ca:71:2a:54:05:53: a6:88:20:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiAkjXqt5VzgAKy89GO25MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYWVhMzU4YWVlZWI3ZDBiOWUwZjkzZDIzZjY3ZDI5YTdl YzYyYzgwHhcNMjUxMjA1MjIwMDM4WhcNMjUxMjA2MjIwMDM4WjAzMTEwLwYDVQQD Eyg4MDcyYzIzZTdlZjNiMTE1OWUwNDEyOWVmYThhZTRlOWRkYTNmYjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpOU9DrKl3BauPrSQKcq9Z5mVthu kjlgTZQOpUBQiP3UT6hsrV25U/a362g8hfYpB1MLya90gW2btLOGjI4Hl1bPl/S/ jXYH9sOQk6ZeApWmHHn1SbOVyzbKZqcNfA8MGiezJimzlleFXpK3DR2PcZsfyFKf fYXpCKJfoM8iUbUhNBBulAtUU4fj0eBPlWT/UrYiv7v4wqyLkcYOLg5imIAg3gM5 QG5CPuNThyQ0vTP8D/fQ4D7W4iwK1XmYti5p8j52W3AZb3SEH1hYf04ZWafAp0Sj KCN6glr6g5r6QuhW1bowFNf9nE8iwvkxT/fb5uZpztVOpBHt0Lcy6wynbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBywj5+87EVngQSnvqK5Ondo/sjMB8GA1UdIwQY MBaAFL+uo1iu7rfQueD5PSP2fSmn7GLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjY2aldLN3V0OUM1NFBrOUlfWjlLYWZzWXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yODg0MTYtYTQ2ZS00OWMzLTkzMzct MjQ5Y2UwYzMxMmIzLzEvdjY2aldLN3V0OUM1NFBrOUlfWjlLYWZzWXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8yODg0MTYtYTQ2ZS00OWMzLTkzMzctMjQ5Y2UwYzMxMmIz LzEvdjY2aldLN3V0OUM1NFBrOUlfWjlLYWZzWXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4/I7RUC 6noAtdrZ1jQvJoXjTU0BPh4M0g1npfZkALabc7LuqWTSB0c+PHj9GrFFrAgx3+3C lPD2n/mjsjusbQLT4A3xpzywWqoG+Cl9vfcpnfHZ1XihLC5GucXvLi0+oSOtr31D NS7lR6HnQbC0gP58PwRWIKvFn4A9+T+JXpmcphm/36uwvspOCw2qHEzOSw0fUK0U HREpjtcfUNmlroEmv4rXtj0FaXMjVyu0cbrvmvJ5Zo2nuIsejFcb3NC2DzZdoB4W 5R3p2/IV+9+WjKiAIyehIaftitM1YZGFeAlI3tMjUvlxl8325VZRUJSK0o6uR2jz ynEqVAVTpoggsA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:17 2025 by rpki-client