This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft File: V2cFtVe4IwhralMjJL-7o2mVyxw.mft (raw, json) Hash identifier: /BZ1BiDszuvcUD+YLnElbPh0TELPUKKRobjuZSg6Ac4= Subject key identifier: F2:D2:82:4A:F2:1D:56:EC:FE:A6:79:2F:D0:B3:3D:22:B4:BF:5A:55 Authority key identifier: 57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C Certificate issuer: /CN=576705b557b823086b6a532324bfbba36995cb1c Certificate serial: 019AF0F5CE632C6E11157613CDC70D233916 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft Manifest number: 048D Signing time: Sat 06 Dec 2025 00:00:32 +0000 Manifest this update: Sat 06 Dec 2025 00:00:32 +0000 Manifest next update: Sun 07 Dec 2025 00:00:32 +0000 Files and hashes: 1: KvGrSnuEc1cM9X2Nk9gFAk0Nuqk.roa (hash: HFWxJLi4fAw0JkNdDx7HNRCU+Sz89xJhj6dOpXyk9UI=) 2: V2cFtVe4IwhralMjJL-7o2mVyxw.crl (hash: uhXgfw2FxxiQfdfnzFZ1rVYZEeKJRglKkZQLkslSbd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:ce:63:2c:6e:11:15:76:13:cd:c7:0d:23:39:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576705b557b823086b6a532324bfbba36995cb1c Validity Not Before: Dec 6 00:00:32 2025 GMT Not After : Dec 7 00:00:32 2025 GMT Subject: CN=f2d2824af21d56ecfea6792fd0b33d22b4bf5a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:88:bf:05:39:0a:fc:85:30:39:4e:6e:91:a4: 02:5d:15:9a:eb:e9:16:b6:87:ab:2f:20:a5:94:91: af:e5:1e:c3:13:38:20:17:d2:d6:77:56:20:2a:53: a9:d3:61:fb:0c:50:c6:c3:7b:fd:f0:52:7f:d1:59: da:f3:ac:fb:e9:16:cf:8c:3a:00:82:bc:c9:96:5b: 47:35:3c:88:94:18:70:29:d3:ae:4b:b4:b1:83:52: e3:f6:1c:27:6f:63:4c:ed:ff:34:c5:77:ce:63:fa: e8:46:6a:16:a3:d7:42:9b:f3:b1:15:b3:41:65:7e: 78:5d:93:b7:86:33:c5:15:ad:e3:aa:6e:4f:cb:3a: af:b9:a4:7e:3f:cb:10:ac:8d:54:45:c3:89:0c:33: 11:5b:fb:6a:99:3d:b2:64:f3:2b:5e:4c:13:40:60: d3:12:ab:10:e5:c2:2a:87:02:23:30:21:c0:11:34: b6:2c:88:9b:8d:b5:a1:28:b6:75:a5:4d:2f:11:38: e6:45:33:cc:00:cb:20:ed:28:3d:7b:d8:3b:25:5d: d2:2d:fe:78:70:d3:ea:14:8a:78:0f:fd:21:8c:a8: bb:a0:25:64:81:96:cd:c9:d1:92:bc:d8:84:a7:6f: 9e:96:58:70:0e:97:3e:76:bc:0b:89:80:cb:ab:35: ed:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D2:82:4A:F2:1D:56:EC:FE:A6:79:2F:D0:B3:3D:22:B4:BF:5A:55 X509v3 Authority Key Identifier: keyid:57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:bb:21:83:f0:1a:67:2a:05:0b:f2:cf:76:e7:e9:d2:86:32: 6b:68:e0:ef:ee:6b:3d:3c:12:97:95:40:0e:4e:81:68:dc:34: 40:4e:2d:7d:8b:1b:79:0c:f7:2d:d3:e5:df:08:50:e3:82:96: 9c:7d:99:f7:9c:c5:7e:7f:29:22:40:b6:ab:14:c5:a1:10:56: d5:b3:70:aa:e4:45:b1:2e:9f:08:46:84:a7:21:b3:ec:20:c5: 59:64:f9:11:c3:7a:25:68:b5:34:74:c6:f0:ed:03:d1:16:f2: c2:fa:d3:d3:96:e0:03:64:5e:6d:97:6c:57:4c:28:ae:8d:45: 02:e1:2b:1b:4b:55:98:97:67:42:e6:12:9d:db:30:dd:46:ce: be:bb:12:ec:d1:b2:c0:c6:31:f5:32:ef:c4:7b:ad:ea:90:a3: 9c:6f:6d:9e:e9:9c:df:e1:9a:1f:ed:4c:42:f8:1d:7e:6c:f8: 34:85:00:fe:a1:67:55:c2:d5:13:9a:8c:82:7b:0d:71:16:c7: 80:d8:84:78:35:d7:5e:db:b2:d8:6b:48:83:9f:20:e3:fe:71: de:68:84:0b:36:fa:e1:e3:4a:53:3b:34:2c:00:50:09:29:00: 8a:e5:4e:30:2f:ce:16:bf:96:9e:5d:b3:07:61:94:7c:57:ce: 26:9d:0f:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9c5jLG4RFXYTzccNIzkWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NjcwNWI1NTdiODIzMDg2YjZhNTMyMzI0YmZiYmEzNjk5 NWNiMWMwHhcNMjUxMjA2MDAwMDMyWhcNMjUxMjA3MDAwMDMyWjAzMTEwLwYDVQQD EyhmMmQyODI0YWYyMWQ1NmVjZmVhNjc5MmZkMGIzM2QyMmI0YmY1YTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoi/BTkK/IUwOU5ukaQCXRWa6+kW toerLyCllJGv5R7DEzggF9LWd1YgKlOp02H7DFDGw3v98FJ/0Vna86z76RbPjDoA grzJlltHNTyIlBhwKdOuS7Sxg1Lj9hwnb2NM7f80xXfOY/roRmoWo9dCm/OxFbNB ZX54XZO3hjPFFa3jqm5PyzqvuaR+P8sQrI1URcOJDDMRW/tqmT2yZPMrXkwTQGDT EqsQ5cIqhwIjMCHAETS2LIibjbWhKLZ1pU0vETjmRTPMAMsg7Sg9e9g7JV3SLf54 cNPqFIp4D/0hjKi7oCVkgZbNydGSvNiEp2+ellhwDpc+drwLiYDLqzXtqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLSgkryHVbs/qZ5L9CzPSK0v1pVMB8GA1UdIwQY MBaAFFdnBbVXuCMIa2pTIyS/u6NplcscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjJjRnRWZTRJd2hyYWxNakpMLTdvMm1WeXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83ZDdlMWQtMzNjMC00MzQyLWIyNTkt YTdiZjNiZjkwMmQ4LzEvVjJjRnRWZTRJd2hyYWxNakpMLTdvMm1WeXh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC83ZDdlMWQtMzNjMC00MzQyLWIyNTktYTdiZjNiZjkwMmQ4 LzEvVjJjRnRWZTRJd2hyYWxNakpMLTdvMm1WeXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLshg/Aa ZyoFC/LPdufp0oYya2jg7+5rPTwSl5VADk6BaNw0QE4tfYsbeQz3LdPl3whQ44KW nH2Z95zFfn8pIkC2qxTFoRBW1bNwquRFsS6fCEaEpyGz7CDFWWT5EcN6JWi1NHTG 8O0D0RbywvrT05bgA2RebZdsV0woro1FAuErG0tVmJdnQuYSndsw3UbOvrsS7NGy wMYx9TLvxHut6pCjnG9tnumc3+GaH+1MQvgdfmz4NIUA/qFnVcLVE5qMgnsNcRbH gNiEeDXXXtuy2GtIg58g4/5x3miECzb64eNKUzs0LABQCSkAiuVOMC/OFr+Wnl2z B2GUfFfOJp0PJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:07 2025 by rpki-client