This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft File: vOLbTWWaY-QstUTFf5mjNvfZjtA.mft (raw, json) Hash identifier: HIxfDc352x3+J+Z8+u9CnNs58UcDQLw69CBoyXTzonI= Subject key identifier: 0B:C7:8F:56:4C:A4:2C:59:97:BE:20:02:FF:22:19:F0:24:17:77:D6 Authority key identifier: BC:E2:DB:4D:65:9A:63:E4:2C:B5:44:C5:7F:99:A3:36:F7:D9:8E:D0 Certificate issuer: /CN=bce2db4d659a63e42cb544c57f99a336f7d98ed0 Certificate serial: 019AF352050F84084398115989100D2DBC02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOLbTWWaY-QstUTFf5mjNvfZjtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft Manifest number: 02A5 Signing time: Sat 06 Dec 2025 11:00:29 +0000 Manifest this update: Sat 06 Dec 2025 11:00:29 +0000 Manifest next update: Sun 07 Dec 2025 11:00:29 +0000 Files and hashes: 1: Kyy8GZTzk5jbpc-sQWZN_GCAwek.roa (hash: 0Z7eyKyncAl0NjLC6raqvRk4YOeLcpvsAk5XysLATes=) 2: vOLbTWWaY-QstUTFf5mjNvfZjtA.crl (hash: AmhX6Jz9BxgDTIXIPwptY0RlqJx+vQEACxV+3Ten0is=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.crl rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft rsync://rpki.ripe.net/repository/DEFAULT/vOLbTWWaY-QstUTFf5mjNvfZjtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:05:0f:84:08:43:98:11:59:89:10:0d:2d:bc:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bce2db4d659a63e42cb544c57f99a336f7d98ed0 Validity Not Before: Dec 6 11:00:29 2025 GMT Not After : Dec 7 11:00:29 2025 GMT Subject: CN=0bc78f564ca42c5997be2002ff2219f0241777d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6a:e3:fa:c7:34:b5:e4:c1:6f:1f:a2:a5:0c: 91:42:9c:fa:3d:4b:d1:fb:a3:ca:56:9b:70:02:c7: 72:5f:23:bb:7e:cb:b0:ae:f2:ba:0f:74:2c:68:3c: b9:0d:3b:ce:a0:39:da:fa:38:e8:0d:3d:63:bf:14: 2c:9c:22:d9:fe:43:81:eb:01:73:f9:2e:ad:6f:09: a9:c9:a8:96:f1:9c:2b:74:11:9e:59:c4:08:49:81: 90:7a:18:f7:8b:a3:6a:4c:9f:d9:1e:c1:4c:a3:e3: 81:70:d0:c5:ae:20:20:61:85:8b:82:56:aa:88:f3: a0:b5:c4:3c:01:00:d0:e8:17:be:a7:36:3a:5e:81: 17:16:ce:4e:87:ba:22:0f:0a:67:2c:89:b4:d1:19: 5d:16:e5:4f:81:ba:02:d3:22:d8:4e:3b:55:fe:a0: e6:b1:a3:45:ae:e8:b2:a5:d3:67:d2:79:ac:ec:2b: a8:78:ea:35:d2:b6:67:50:aa:c0:0a:84:00:45:93: 42:02:66:40:ad:81:a5:a3:86:62:7e:f8:ab:0f:01: 3f:b4:6f:f4:d5:b9:ff:33:72:70:ea:fc:86:40:84: e6:46:32:df:84:e5:7e:f5:4d:2d:6c:51:87:81:1f: 12:b4:a2:71:4d:aa:c8:1f:be:b0:e0:8b:69:db:1b: b2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C7:8F:56:4C:A4:2C:59:97:BE:20:02:FF:22:19:F0:24:17:77:D6 X509v3 Authority Key Identifier: keyid:BC:E2:DB:4D:65:9A:63:E4:2C:B5:44:C5:7F:99:A3:36:F7:D9:8E:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOLbTWWaY-QstUTFf5mjNvfZjtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:37:e8:a0:6d:25:96:24:f8:09:f8:2d:51:11:0b:76:e2:c2: 2a:35:e0:5a:27:8b:8d:a1:1b:ec:78:da:5c:7f:09:ad:4e:67: 38:e6:9f:f3:0b:22:a2:40:c8:fe:88:c1:e6:db:44:c2:d1:72: 3a:bd:16:a9:37:5f:ef:90:63:2e:8d:c8:4b:37:ca:e6:2c:15: 79:32:3d:7b:c8:a6:62:4b:9d:f3:7f:1d:a8:9c:69:67:4e:60: 8c:04:ae:dd:a7:c4:44:cf:06:5e:85:67:1c:cb:98:80:f7:c3: 66:8a:6c:97:9e:ba:72:b8:df:89:05:7f:55:7f:2b:e1:cd:61: fc:b1:87:31:95:e1:cc:4a:5e:01:7d:88:e7:75:70:00:ed:2e: 16:1a:b3:a0:80:20:47:0a:32:24:d8:e8:fa:2b:83:2a:5d:b2: ac:df:20:d4:88:4a:3c:87:f1:93:49:df:ae:1f:58:e4:58:9f: d5:71:be:04:00:f1:08:ee:dc:2d:7c:df:92:cf:43:a3:05:4a: 2f:34:75:a7:8c:1b:d8:4f:7a:ba:f7:46:af:76:64:bc:6e:98: d9:1b:5c:d3:b1:05:d0:0e:8b:43:b6:38:82:3f:2f:ab:c8:dc: 79:58:35:f5:ef:b0:b4:1a:db:33:e7:ea:c9:f5:2c:d2:b8:fe: 6c:6d:d1:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUgUPhAhDmBFZiRANLbwCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZTJkYjRkNjU5YTYzZTQyY2I1NDRjNTdmOTlhMzM2Zjdk OThlZDAwHhcNMjUxMjA2MTEwMDI5WhcNMjUxMjA3MTEwMDI5WjAzMTEwLwYDVQQD EygwYmM3OGY1NjRjYTQyYzU5OTdiZTIwMDJmZjIyMTlmMDI0MTc3N2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2rj+sc0teTBbx+ipQyRQpz6PUvR +6PKVptwAsdyXyO7fsuwrvK6D3QsaDy5DTvOoDna+jjoDT1jvxQsnCLZ/kOB6wFz +S6tbwmpyaiW8ZwrdBGeWcQISYGQehj3i6NqTJ/ZHsFMo+OBcNDFriAgYYWLglaq iPOgtcQ8AQDQ6Be+pzY6XoEXFs5Oh7oiDwpnLIm00RldFuVPgboC0yLYTjtV/qDm saNFruiypdNn0nms7CuoeOo10rZnUKrACoQARZNCAmZArYGlo4ZifvirDwE/tG/0 1bn/M3Jw6vyGQITmRjLfhOV+9U0tbFGHgR8StKJxTarIH76w4Itp2xuy/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvHj1ZMpCxZl74gAv8iGfAkF3fWMB8GA1UdIwQY MBaAFLzi201lmmPkLLVExX+Zozb32Y7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk9MYlRXV2FZLVFzdFVURmY1bWpOdmZaanRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iNDE4NjYtMDU3OC00NTU3LTk3OGEt NzZjMjkyMGVjMzMzLzEvdk9MYlRXV2FZLVFzdFVURmY1bWpOdmZaanRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9iNDE4NjYtMDU3OC00NTU3LTk3OGEtNzZjMjkyMGVjMzMz LzEvdk9MYlRXV2FZLVFzdFVURmY1bWpOdmZaanRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATfooG0l liT4CfgtURELduLCKjXgWieLjaEb7HjaXH8JrU5nOOaf8wsiokDI/ojB5ttEwtFy Or0WqTdf75BjLo3ISzfK5iwVeTI9e8imYkud838dqJxpZ05gjASu3afERM8GXoVn HMuYgPfDZopsl566crjfiQV/VX8r4c1h/LGHMZXhzEpeAX2I53VwAO0uFhqzoIAg RwoyJNjo+iuDKl2yrN8g1IhKPIfxk0nfrh9Y5Fif1XG+BADxCO7cLXzfks9DowVK LzR1p4wb2E96uvdGr3ZkvG6Y2Rtc07EF0A6LQ7Y4gj8vq8jceVg19e+wtBrbM+fq yfUs0rj+bG3Rbw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:06:05 2025 by rpki-client