This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft File: V2VnM04DVjndfMtJdqmycPcmMh0.mft (raw, json) Hash identifier: AS/E0wCDhHzIlOB3wy/18idQDGnC2E0xKNe6LE1PC7A= Subject key identifier: BF:41:E9:6C:32:2E:40:C5:24:23:05:5E:0B:20:86:B3:2D:AF:A0:7F Authority key identifier: 57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D Certificate issuer: /CN=576567334e035639dd7ccb4976a9b270f726321d Certificate serial: 019AF163EE30C632FB7C575B13488A52076C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 02:00:49 +0000 Manifest this update: Sat 06 Dec 2025 02:00:49 +0000 Manifest next update: Sun 07 Dec 2025 02:00:49 +0000 Files and hashes: 1: BF6mEEyNMbb-xRm9_vXJ4CAvddM.roa (hash: LKI2ZmXTKLgLquBH6Yp7C5JIlsxvJUmapEogTIwlb5g=) 2: V2VnM04DVjndfMtJdqmycPcmMh0.crl (hash: 7RCnfXPwVWQmbjUjHNPIPkYOThXQozbSW8hEQGwtEFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ee:30:c6:32:fb:7c:57:5b:13:48:8a:52:07:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576567334e035639dd7ccb4976a9b270f726321d Validity Not Before: Dec 6 02:00:49 2025 GMT Not After : Dec 7 02:00:49 2025 GMT Subject: CN=bf41e96c322e40c52423055e0b2086b32dafa07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ad:09:f3:a7:d6:a8:84:55:aa:50:1a:92:0d: 28:94:71:f6:19:f0:5b:c0:e4:56:8f:92:de:f7:ee: 80:de:ca:2a:b5:08:62:48:84:4a:51:c6:61:78:48: 87:d7:67:1b:c3:b4:b9:bb:99:66:48:5b:52:b8:8f: b0:5d:3b:57:ef:22:8a:72:86:30:a1:8b:cb:2f:64: e4:a3:56:3c:49:9c:e9:74:89:77:f3:52:e2:ec:57: a2:1b:1c:0b:d7:7a:b8:ae:9c:ba:af:fc:36:3f:96: d5:4f:2c:25:34:74:b2:0d:c1:6e:ac:1a:c1:c4:06: 39:0e:ff:ff:21:76:bf:59:f6:a6:3d:7d:95:0c:ff: a9:6b:d0:d4:68:52:3d:f1:21:20:6f:6c:ff:71:e7: bf:42:75:42:38:fa:73:61:7c:45:0e:90:38:c2:9e: d0:6a:32:af:5a:d3:e9:9a:22:40:38:2f:5c:56:8e: a4:23:eb:be:8d:ee:d6:09:fc:1f:f7:0d:7e:fa:0e: 98:37:28:31:fd:ef:88:51:5f:c7:24:df:42:19:31: 10:00:20:a1:b7:be:bb:06:54:05:1d:38:3a:9c:50: 1d:13:35:fa:f3:af:02:7e:19:80:e4:82:23:5a:fd: 56:a8:bd:ef:ce:bf:60:8e:0d:d0:b9:bf:a0:a8:c1: 0b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:41:E9:6C:32:2E:40:C5:24:23:05:5E:0B:20:86:B3:2D:AF:A0:7F X509v3 Authority Key Identifier: keyid:57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:12:a7:77:2a:2d:2f:b1:69:70:6c:23:1f:41:69:d6:66:e5: 81:f2:97:b7:92:86:d8:b8:48:b8:b5:32:c6:78:a2:d6:aa:46: d0:d0:a3:79:83:b2:e4:5d:c8:5c:48:84:2d:76:fc:34:f2:4c: 5f:6b:ef:32:a1:4e:5c:d8:ad:a6:f8:fe:2c:52:ac:a6:91:c2: 4b:6c:cd:d6:95:81:f5:f7:d4:19:69:cf:9d:d8:e9:22:e2:ca: 3b:66:d1:ec:fb:fa:2d:ab:8a:4a:31:29:21:29:27:72:95:ee: 9f:d5:bb:9b:b3:1c:8f:e6:ea:b4:0e:85:f5:eb:36:84:23:fd: 55:6c:71:8b:bc:e1:75:de:d4:a4:57:08:50:af:96:ff:10:48: 2a:29:ef:96:06:00:5a:4f:03:3d:74:42:cf:a2:8c:e7:96:a1: 6d:c3:20:67:99:30:39:c1:72:4b:46:66:77:4a:e8:c1:6e:f5: ef:ed:60:6e:94:80:29:1d:e9:1c:0c:d2:45:f2:1f:1e:81:c0: f4:b3:30:92:09:b3:ef:4a:f3:c4:a1:bd:09:8b:45:d6:f9:f7: 4a:21:fe:64:64:6c:4a:48:4b:a1:25:36:a9:82:ef:6d:b2:be: 13:c4:77:2d:c6:3d:80:9a:1a:fb:64:36:bd:d9:52:9c:8c:af: ae:30:98:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+4wxjL7fFdbE0iKUgdsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NjU2NzMzNGUwMzU2MzlkZDdjY2I0OTc2YTliMjcwZjcy NjMyMWQwHhcNMjUxMjA2MDIwMDQ5WhcNMjUxMjA3MDIwMDQ5WjAzMTEwLwYDVQQD EyhiZjQxZTk2YzMyMmU0MGM1MjQyMzA1NWUwYjIwODZiMzJkYWZhMDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq0J86fWqIRVqlAakg0olHH2GfBb wORWj5Le9+6A3soqtQhiSIRKUcZheEiH12cbw7S5u5lmSFtSuI+wXTtX7yKKcoYw oYvLL2Tko1Y8SZzpdIl381Li7FeiGxwL13q4rpy6r/w2P5bVTywlNHSyDcFurBrB xAY5Dv//IXa/WfamPX2VDP+pa9DUaFI98SEgb2z/cee/QnVCOPpzYXxFDpA4wp7Q ajKvWtPpmiJAOC9cVo6kI+u+je7WCfwf9w1++g6YNygx/e+IUV/HJN9CGTEQACCh t767BlQFHTg6nFAdEzX6868CfhmA5IIjWv1WqL3vzr9gjg3Qub+gqMELaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9B6WwyLkDFJCMFXgsghrMtr6B/MB8GA1UdIwQY MBaAFFdlZzNOA1Y53XzLSXapsnD3JjIdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjJWbk0wNERWam5kZk10SmRxbXljUGNtTWgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83ZTk4NjctYzUzNC00NjhjLThkNWUt ZTRmNjRiMGRlMzZhLzEvVjJWbk0wNERWam5kZk10SmRxbXljUGNtTWgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC83ZTk4NjctYzUzNC00NjhjLThkNWUtZTRmNjRiMGRlMzZh LzEvVjJWbk0wNERWam5kZk10SmRxbXljUGNtTWgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxKndyot L7FpcGwjH0Fp1mblgfKXt5KG2LhIuLUyxnii1qpG0NCjeYOy5F3IXEiELXb8NPJM X2vvMqFOXNitpvj+LFKsppHCS2zN1pWB9ffUGWnPndjpIuLKO2bR7Pv6LauKSjEp ISkncpXun9W7m7Mcj+bqtA6F9es2hCP9VWxxi7zhdd7UpFcIUK+W/xBIKinvlgYA Wk8DPXRCz6KM55ahbcMgZ5kwOcFyS0Zmd0rowW717+1gbpSAKR3pHAzSRfIfHoHA 9LMwkgmz70rzxKG9CYtF1vn3SiH+ZGRsSkhLoSU2qYLvbbK+E8R3LcY9gJoa+2Q2 vdlSnIyvrjCYMA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:42 2025 by rpki-client