This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.mft File: hVvB1897acjrUdDG1U9_-t94DKc.mft (raw, json) Hash identifier: OzUq6++NAEmj44Sf7q30B5+N9bNFfOHpTXXnjg5FLMI= Subject key identifier: 64:73:0B:8C:01:72:FA:A2:9C:E5:54:F2:A8:C9:72:08:5A:A1:7E:AA Authority key identifier: 85:5B:C1:D7:CF:7B:69:C8:EB:51:D0:C6:D5:4F:7F:FA:DF:78:0C:A7 Certificate issuer: /CN=855bc1d7cf7b69c8eb51d0c6d54f7ffadf780ca7 Certificate serial: 019AF1D1DF2C1D34CBD32BED4A54B7260317 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvB1897acjrUdDG1U9_-t94DKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.mft Manifest number: 43 Signing time: Sat 06 Dec 2025 04:00:54 +0000 Manifest this update: Sat 06 Dec 2025 04:00:54 +0000 Manifest next update: Sun 07 Dec 2025 04:00:54 +0000 Files and hashes: 1: Rw8RywHbsa_p7g8zsXuVy9RBQFI.roa (hash: jD0IyjbZPbmU1TJt+Q9T2QY51OqVD1cOWjM2usjzUl4=) 2: hVvB1897acjrUdDG1U9_-t94DKc.crl (hash: FzZJ4vbu7tW/cA1DpieNXPO/DEQ3ll1J6bA5N3CPnFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.crl rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.mft rsync://rpki.ripe.net/repository/DEFAULT/hVvB1897acjrUdDG1U9_-t94DKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:df:2c:1d:34:cb:d3:2b:ed:4a:54:b7:26:03:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855bc1d7cf7b69c8eb51d0c6d54f7ffadf780ca7 Validity Not Before: Dec 6 04:00:54 2025 GMT Not After : Dec 7 04:00:54 2025 GMT Subject: CN=64730b8c0172faa29ce554f2a8c972085aa17eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:94:0a:63:91:0c:6e:26:31:49:54:47:4d:b2: e9:70:c1:89:ed:64:f8:67:2a:df:c3:cf:c9:5c:c4: c5:1f:fd:56:c0:95:5d:58:7f:9e:9c:05:2f:c9:5b: ab:13:85:b7:92:1e:81:a4:5a:1b:ce:ed:68:96:ad: f3:9b:07:4c:c9:b5:5d:8c:eb:18:9b:9c:8f:e9:2d: 0d:60:73:b1:91:ed:41:0e:cc:28:e7:af:6e:60:d0: 93:90:bf:00:6d:5d:17:31:4b:92:b3:e2:d0:81:52: ae:af:ca:33:22:27:96:a7:ae:a5:fa:3a:c8:9e:f2: 41:ec:d2:a6:4e:c0:ef:44:b9:b1:ea:2f:7f:c4:8a: 26:34:a9:91:2e:f0:ff:e6:a7:48:36:ce:08:c5:c2: 9e:a0:61:3b:11:f3:71:1d:59:58:4e:71:02:17:fd: 05:5e:20:02:2a:22:9a:3d:82:59:08:fc:ef:52:01: eb:21:8d:5c:92:5a:e1:c9:5b:c5:66:8b:cf:7e:2d: 55:72:44:0f:04:0e:9f:fd:bc:25:df:ef:b2:ef:38: 13:24:fa:9e:aa:87:f9:8b:e7:2c:4b:0a:fb:cd:83: 8e:42:01:f6:95:09:20:8b:09:9d:33:1a:52:05:9d: d0:11:61:aa:d5:9d:7f:33:c9:ba:c3:2f:23:98:6a: 78:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:73:0B:8C:01:72:FA:A2:9C:E5:54:F2:A8:C9:72:08:5A:A1:7E:AA X509v3 Authority Key Identifier: keyid:85:5B:C1:D7:CF:7B:69:C8:EB:51:D0:C6:D5:4F:7F:FA:DF:78:0C:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvB1897acjrUdDG1U9_-t94DKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:49:6d:3e:1f:69:73:de:aa:37:b1:33:df:a9:4b:e4:a2:35: f7:f4:ee:05:10:7a:8f:fc:d8:39:01:f5:4b:ab:47:e2:c6:87: ab:af:ee:38:11:27:f6:91:22:91:ff:54:1a:77:5b:c1:3a:cd: 11:78:c7:9e:8f:06:1f:47:9f:42:f9:2d:67:65:ec:80:42:01: 7d:a5:db:b3:35:9d:30:c7:ce:48:2b:bf:d8:ea:a7:cf:09:c9: 07:1e:bd:8e:11:e1:2f:f3:48:8b:0c:6b:3b:46:8b:27:c1:d6: 26:98:1a:bb:a8:5b:39:48:33:67:79:f9:1b:ac:8e:a2:8e:fb: 06:13:dc:8c:2a:64:b6:9c:4b:22:68:e2:5a:55:a3:77:38:1c: cb:9e:89:50:24:2d:e5:83:a6:d2:85:56:0c:06:9b:8f:be:a8: 0e:8c:f5:ff:01:44:42:fd:ac:1b:98:33:82:46:f6:fb:77:f5: f6:91:6a:ba:c4:d3:a9:b3:bf:b7:19:e9:2d:e7:8f:90:af:17: 7a:68:8c:b0:0f:5c:a6:98:b7:ce:f2:87:97:a4:50:ba:5e:19: 58:c4:1f:a5:0b:c8:db:f9:a5:57:0b:43:39:cf:5b:a0:2c:87: 19:93:7c:e1:97:ab:b4:f9:49:28:e6:72:64:19:98:15:a0:6d: d4:18:f0:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0d8sHTTL0yvtSlS3JgMXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NWJjMWQ3Y2Y3YjY5YzhlYjUxZDBjNmQ1NGY3ZmZhZGY3 ODBjYTcwHhcNMjUxMjA2MDQwMDU0WhcNMjUxMjA3MDQwMDU0WjAzMTEwLwYDVQQD Eyg2NDczMGI4YzAxNzJmYWEyOWNlNTU0ZjJhOGM5NzIwODVhYTE3ZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZQKY5EMbiYxSVRHTbLpcMGJ7WT4 Zyrfw8/JXMTFH/1WwJVdWH+enAUvyVurE4W3kh6BpFobzu1olq3zmwdMybVdjOsY m5yP6S0NYHOxke1BDswo569uYNCTkL8AbV0XMUuSs+LQgVKur8ozIieWp66l+jrI nvJB7NKmTsDvRLmx6i9/xIomNKmRLvD/5qdINs4IxcKeoGE7EfNxHVlYTnECF/0F XiACKiKaPYJZCPzvUgHrIY1cklrhyVvFZovPfi1VckQPBA6f/bwl3++y7zgTJPqe qof5i+csSwr7zYOOQgH2lQkgiwmdMxpSBZ3QEWGq1Z1/M8m6wy8jmGp49QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRzC4wBcvqinOVU8qjJcghaoX6qMB8GA1UdIwQY MBaAFIVbwdfPe2nI61HQxtVPf/rfeAynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFZ2QjE4OTdhY2pyVWRERzFVOV8tdDk0REtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lM2Q2ZmYtOGZmYi00NzQxLThmYTQt MGNjNGQyZDI2ZjA2LzEvaFZ2QjE4OTdhY2pyVWRERzFVOV8tdDk0REtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lM2Q2ZmYtOGZmYi00NzQxLThmYTQtMGNjNGQyZDI2ZjA2 LzEvaFZ2QjE4OTdhY2pyVWRERzFVOV8tdDk0REtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqkltPh9p c96qN7Ez36lL5KI19/TuBRB6j/zYOQH1S6tH4saHq6/uOBEn9pEikf9UGndbwTrN EXjHno8GH0efQvktZ2XsgEIBfaXbszWdMMfOSCu/2OqnzwnJBx69jhHhL/NIiwxr O0aLJ8HWJpgau6hbOUgzZ3n5G6yOoo77BhPcjCpktpxLImjiWlWjdzgcy56JUCQt 5YOm0oVWDAabj76oDoz1/wFEQv2sG5gzgkb2+3f19pFqusTTqbO/txnpLeePkK8X emiMsA9cppi3zvKHl6RQul4ZWMQfpQvI2/mlVwtDOc9boCyHGZN84ZertPlJKOZy ZBmYFaBt1BjwEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:43 2025 by rpki-client