This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft File: vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft (raw, json) Hash identifier: K3oKyQX8LdxEQTcL8uWCXR/u88UYOS3soTUwpGwIxuY= Subject key identifier: 74:04:33:CF:A2:C0:45:EA:4F:0A:4A:7E:BA:39:9E:A8:3B:00:7C:2F Authority key identifier: BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED Certificate issuer: /CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced Certificate serial: 019AF12CED3F1A48A88C10FE46BC125D962E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:00:44 +0000 Manifest this update: Sat 06 Dec 2025 01:00:44 +0000 Manifest next update: Sun 07 Dec 2025 01:00:44 +0000 Files and hashes: 1: 26eRBtfHaWUq94c0EN14EglvEno.roa (hash: rVQUyz2NEj2yBSOTyg+XToghqiDGJFkQfMW8NYYr5DE=) 2: vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl (hash: r+HhBuWKJt0KrHenMAqL6J3zzuaqy9b5584MTiHgzBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ed:3f:1a:48:a8:8c:10:fe:46:bc:12:5d:96:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced Validity Not Before: Dec 6 01:00:44 2025 GMT Not After : Dec 7 01:00:44 2025 GMT Subject: CN=740433cfa2c045ea4f0a4a7eba399ea83b007c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c2:72:da:ff:67:0d:a9:12:3c:3f:ff:06:c6: c9:27:58:f0:10:8b:45:e6:0a:3f:96:a5:fa:69:03: f1:e3:ec:3f:4a:04:74:fa:90:c7:c5:9a:64:1c:1a: 77:b7:4b:5e:c0:2d:9f:27:62:56:8a:dd:e0:e9:fd: f4:9f:49:f7:47:d1:36:dd:73:bc:60:21:ed:98:20: 99:81:52:4b:a1:df:60:64:98:fb:64:5b:9d:b0:17: 31:40:a6:48:54:ca:65:9f:b6:eb:83:47:70:c5:79: 82:c5:95:07:db:41:d3:ff:d7:15:4a:37:a5:72:31: 83:02:c6:6f:eb:b2:e7:82:ac:73:a7:dc:e6:36:6d: 6c:dd:a8:98:77:4f:88:93:b4:a0:60:38:2f:bf:49: 9d:5e:9c:0a:1d:56:5e:2d:0c:f8:c9:8c:5c:e2:d6: 9c:9a:df:1b:37:2b:a6:06:4c:6d:84:91:2f:a9:13: b1:8e:8a:f2:18:64:d4:30:b2:e2:4b:25:b2:35:85: 3b:fe:61:6b:2b:44:54:5a:60:3f:db:ad:6a:3d:88: ef:bb:86:ae:d6:1c:11:c3:f5:4f:29:42:d8:3b:3a: cb:82:6e:b8:3b:c6:6a:38:b5:b2:30:d5:b2:fc:7f: 82:31:82:6b:dc:a9:86:f6:0c:50:4f:dd:df:ac:b6: c1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:04:33:CF:A2:C0:45:EA:4F:0A:4A:7E:BA:39:9E:A8:3B:00:7C:2F X509v3 Authority Key Identifier: keyid:BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:22:69:ae:32:2e:16:28:2a:fd:8a:6e:12:84:fb:07:31:b7: 36:f8:4b:97:36:23:97:86:81:66:c6:e7:ac:ab:c8:3d:2b:7e: 76:ac:25:1f:b6:46:d1:54:75:5c:41:a6:71:5c:50:cb:06:1c: f5:6c:e0:75:ab:f6:f6:9b:ac:6c:27:41:57:b2:ac:8d:00:63: 1c:3e:f2:c4:d0:1f:53:50:b0:71:bd:03:0c:c3:ab:43:ae:22: 3e:a2:0f:79:66:30:18:47:eb:7b:d8:94:30:b7:6b:7a:b1:e9: 82:09:fc:02:2f:13:4e:98:b9:64:e0:da:23:06:59:6a:7a:1a: 22:c9:ad:b9:01:75:aa:61:fe:f6:2e:06:77:8a:62:f9:fb:85: 08:7a:8b:54:4e:ab:28:e7:55:96:84:02:c1:0f:47:23:a6:e0: 01:d7:c9:e4:91:06:52:e1:81:8a:3d:a6:83:d9:a5:99:48:42: b4:f1:10:56:0b:e2:82:d2:0d:74:05:a9:f5:37:5a:42:f2:8f: ab:2f:ab:ad:32:05:c6:d5:b6:e7:f5:6c:1b:98:75:4d:6d:7f: 2c:ac:61:a7:c2:b7:ea:fa:5b:ca:0f:d1:cf:22:6f:76:9c:fb: ac:4c:d3:fa:26:fe:3a:92:8e:2b:31:1b:9a:fd:83:14:1c:1d: 67:da:f9:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLO0/GkiojBD+RrwSXZYuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYjRlNjI5NGU3ZmU0NjczZjdiYzZmNTdmNDgxMzhlOTU4 ZmNjZWQwHhcNMjUxMjA2MDEwMDQ0WhcNMjUxMjA3MDEwMDQ0WjAzMTEwLwYDVQQD Eyg3NDA0MzNjZmEyYzA0NWVhNGYwYTRhN2ViYTM5OWVhODNiMDA3YzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcJy2v9nDakSPD//BsbJJ1jwEItF 5go/lqX6aQPx4+w/SgR0+pDHxZpkHBp3t0tewC2fJ2JWit3g6f30n0n3R9E23XO8 YCHtmCCZgVJLod9gZJj7ZFudsBcxQKZIVMpln7brg0dwxXmCxZUH20HT/9cVSjel cjGDAsZv67Lngqxzp9zmNm1s3aiYd0+Ik7SgYDgvv0mdXpwKHVZeLQz4yYxc4tac mt8bNyumBkxthJEvqROxjoryGGTUMLLiSyWyNYU7/mFrK0RUWmA/261qPYjvu4au 1hwRw/VPKULYOzrLgm64O8ZqOLWyMNWy/H+CMYJr3KmG9gxQT93frLbBsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQEM8+iwEXqTwpKfro5nqg7AHwvMB8GA1UdIwQY MBaAFLy05ilOf+RnP3vG9X9IE46Vj8ztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkxUbUtVNV81R2NfZThiMWYwZ1RqcFdQek8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9hZDRmNTItOWMyOC00NTEyLThjMWEt MGQ1OTdjN2RhOWM4LzEvdkxUbUtVNV81R2NfZThiMWYwZ1RqcFdQek8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9hZDRmNTItOWMyOC00NTEyLThjMWEtMGQ1OTdjN2RhOWM4 LzEvdkxUbUtVNV81R2NfZThiMWYwZ1RqcFdQek8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASJprjIu Figq/YpuEoT7BzG3NvhLlzYjl4aBZsbnrKvIPSt+dqwlH7ZG0VR1XEGmcVxQywYc 9Wzgdav29pusbCdBV7KsjQBjHD7yxNAfU1Cwcb0DDMOrQ64iPqIPeWYwGEfre9iU MLdrerHpggn8Ai8TTpi5ZODaIwZZanoaIsmtuQF1qmH+9i4Gd4pi+fuFCHqLVE6r KOdVloQCwQ9HI6bgAdfJ5JEGUuGBij2mg9mlmUhCtPEQVgvigtINdAWp9TdaQvKP qy+rrTIFxtW25/VsG5h1TW1/LKxhp8K36vpbyg/RzyJvdpz7rEzT+ib+OpKOKzEb mv2DFBwdZ9r5Fg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:18 2025 by rpki-client