This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft File: r1vEnV8BojWvkonPSSav_vevkrA.mft (raw, json) Hash identifier: zDItXdwOqGi+W5FdPfGsIb8FhAcAMVdx8Mef8uCJLkg= Subject key identifier: 0C:DA:BD:4A:D0:BA:A8:A0:06:F1:CD:E5:EE:ED:6C:DB:AD:FD:9D:CE Authority key identifier: AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0 Certificate issuer: /CN=af5bc49d5f01a235af9289cf4926affef7af92b0 Certificate serial: 019AF72F7CCD51DF8BE04EAB7974C6AEAA88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft Manifest number: 1762 Signing time: Sun 07 Dec 2025 05:01:15 +0000 Manifest this update: Sun 07 Dec 2025 05:01:15 +0000 Manifest next update: Mon 08 Dec 2025 05:01:15 +0000 Files and hashes: 1: 6d-AyMF7ZaaM5Mjt7QfO5cW_2AY.roa (hash: ZUwXdaD1P85dbAvt2mEWIMU5POb+euNbtRK/RK4dLgk=) 2: r1vEnV8BojWvkonPSSav_vevkrA.crl (hash: /Ix1llZTiG8PxjvKH25M124BcaKpRBwlKLTllvd/RWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:2f:7c:cd:51:df:8b:e0:4e:ab:79:74:c6:ae:aa:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5bc49d5f01a235af9289cf4926affef7af92b0 Validity Not Before: Dec 7 05:01:15 2025 GMT Not After : Dec 8 05:01:15 2025 GMT Subject: CN=0cdabd4ad0baa8a006f1cde5eeed6cdbadfd9dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fe:5e:41:c2:fd:15:63:84:2d:de:65:bd:85: 89:dc:0c:23:43:c9:63:09:10:34:14:f2:4d:f0:9c: af:8c:55:61:13:5d:3e:db:4a:13:6a:2c:e8:e6:50: 50:3d:45:6f:35:21:23:06:e3:4f:0b:46:62:45:d0: 92:96:79:f2:32:12:4d:d9:4a:3a:af:b3:23:cc:4b: 8e:cb:2a:66:57:c8:c3:b2:62:21:38:86:db:67:91: 70:ea:a3:16:ec:03:21:6c:36:12:e6:92:85:c0:d2: 91:65:a4:5b:21:bb:6a:12:0e:86:3f:57:f6:56:ee: a5:93:47:9e:2a:1a:46:c5:c9:fe:a2:2f:2d:b8:ac: 8b:84:03:60:1e:dc:34:d0:c7:5f:0b:ec:c4:0c:e9: ad:85:1f:da:88:ba:d4:35:3f:77:7e:6f:01:90:cf: b5:14:00:d0:88:8e:b9:ef:2a:32:be:73:34:f9:b3: 61:53:a3:0d:52:77:04:b9:0a:60:75:ca:56:93:1b: 3a:9a:ac:7a:b4:27:98:43:5c:ed:0c:eb:56:b9:22: 06:8f:ef:23:59:09:8f:85:30:38:51:b8:96:29:1e: 2b:62:1a:5e:59:3b:e5:8c:52:c9:51:29:01:26:a3: db:d2:aa:25:32:85:01:f8:4f:f0:97:3f:b9:9c:4c: df:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DA:BD:4A:D0:BA:A8:A0:06:F1:CD:E5:EE:ED:6C:DB:AD:FD:9D:CE X509v3 Authority Key Identifier: keyid:AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e6:f3:0b:da:19:11:70:29:45:34:ae:53:ac:9e:16:e4:75: 71:13:d1:4f:14:ab:a7:9d:46:d3:f0:47:99:81:9d:34:5b:a7: 53:f8:ca:7d:09:64:d6:a5:a6:5e:36:d5:11:52:27:83:c1:f1: f6:2d:66:02:4e:1c:b8:c9:36:81:08:a8:e3:58:d2:ef:72:aa: 6f:98:d6:0d:4d:62:60:17:59:f1:ef:e9:3d:04:b6:b5:71:60: ed:ef:9b:9b:ee:88:71:8a:2e:ce:35:95:ae:3e:4d:5c:4b:21: 53:f6:62:ee:b3:a1:eb:9b:62:34:ca:32:89:e5:9a:1a:e7:e7: b2:2f:a6:49:95:00:f3:07:4c:cf:de:78:d3:a1:11:ee:79:26: a8:1e:fc:01:12:cc:b7:69:8a:4c:d7:4f:3e:e2:f9:64:c4:36: 0a:e2:89:47:43:64:ce:e9:af:e6:8e:fc:c9:88:e9:6e:49:38: 23:35:32:6a:44:61:ac:d6:ba:4a:1a:41:cb:ae:66:49:44:fc: 48:12:7f:37:17:00:b1:74:70:1e:13:80:48:3b:2f:37:1e:0e: 48:77:c8:f3:33:25:6e:61:7f:ee:e3:97:0d:82:18:c5:d8:73: 6f:2f:c5:47:ce:fb:43:51:17:d5:63:df:a6:4c:16:ed:73:ac: 4a:80:90:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3L3zNUd+L4E6reXTGrqqIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWJjNDlkNWYwMWEyMzVhZjkyODljZjQ5MjZhZmZlZjdh ZjkyYjAwHhcNMjUxMjA3MDUwMTE1WhcNMjUxMjA4MDUwMTE1WjAzMTEwLwYDVQQD EygwY2RhYmQ0YWQwYmFhOGEwMDZmMWNkZTVlZWVkNmNkYmFkZmQ5ZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf5eQcL9FWOELd5lvYWJ3AwjQ8lj CRA0FPJN8JyvjFVhE10+20oTaizo5lBQPUVvNSEjBuNPC0ZiRdCSlnnyMhJN2Uo6 r7MjzEuOyypmV8jDsmIhOIbbZ5Fw6qMW7AMhbDYS5pKFwNKRZaRbIbtqEg6GP1f2 Vu6lk0eeKhpGxcn+oi8tuKyLhANgHtw00MdfC+zEDOmthR/aiLrUNT93fm8BkM+1 FADQiI657yoyvnM0+bNhU6MNUncEuQpgdcpWkxs6mqx6tCeYQ1ztDOtWuSIGj+8j WQmPhTA4UbiWKR4rYhpeWTvljFLJUSkBJqPb0qolMoUB+E/wlz+5nEzfqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzavUrQuqigBvHN5e7tbNut/Z3OMB8GA1UdIwQY MBaAFK9bxJ1fAaI1r5KJz0kmr/73r5KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjF2RW5WOEJvald2a29uUFNTYXZfdmV2a3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9mMmZiZDgtZDZlMS00N2FkLWFhMjEt MTQ3ZTQ1NzI4NzNhLzEvcjF2RW5WOEJvald2a29uUFNTYXZfdmV2a3JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9mMmZiZDgtZDZlMS00N2FkLWFhMjEtMTQ3ZTQ1NzI4NzNh LzEvcjF2RW5WOEJvald2a29uUFNTYXZfdmV2a3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANubzC9oZ EXApRTSuU6yeFuR1cRPRTxSrp51G0/BHmYGdNFunU/jKfQlk1qWmXjbVEVIng8Hx 9i1mAk4cuMk2gQio41jS73Kqb5jWDU1iYBdZ8e/pPQS2tXFg7e+bm+6IcYouzjWV rj5NXEshU/Zi7rOh65tiNMoyieWaGufnsi+mSZUA8wdMz95406ER7nkmqB78ARLM t2mKTNdPPuL5ZMQ2CuKJR0Nkzumv5o78yYjpbkk4IzUyakRhrNa6ShpBy65mSUT8 SBJ/NxcAsXRwHhOASDsvNx4OSHfI8zMlbmF/7uOXDYIYxdhzby/FR877Q1EX1WPf pkwW7XOsSoCQ0w== -----END CERTIFICATE-----Generated at Sun Dec 7 08:41:26 2025 by rpki-client