This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft File: _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json) Hash identifier: 7txB6a2HwAngmXShIJa6su9sul14V14VrcuuPi00QwQ= Subject key identifier: 9C:9D:E4:96:A1:61:EF:E1:BF:EE:F2:DF:84:98:40:04:B4:EB:AC:35 Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8 Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8 Certificate serial: 019AF50A5446232681011089B333F1C0B4D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft Manifest number: 1184 Signing time: Sat 06 Dec 2025 19:01:26 +0000 Manifest this update: Sat 06 Dec 2025 19:01:26 +0000 Manifest next update: Sun 07 Dec 2025 19:01:26 +0000 Files and hashes: 1: JlnlHDByaNUy0-f6Bk6pC1lv0dA.roa (hash: 3ZWBVVVlMIE03x5aR9QcVmTZqjLrQw0dyYbjGkJTjWk=) 2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: OkKzwvmOyebGayJs6Z4TN5k1LbhhQTYGiw0RURnDkSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:54:46:23:26:81:01:10:89:b3:33:f1:c0:b4:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8 Validity Not Before: Dec 6 19:01:26 2025 GMT Not After : Dec 7 19:01:26 2025 GMT Subject: CN=9c9de496a161efe1bfeef2df84984004b4ebac35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c0:35:a1:a2:b5:21:3b:06:b0:47:dc:af:d4: e3:58:d1:51:8d:84:26:01:7e:ff:b4:fa:fd:8d:1e: 32:d9:31:1e:22:5c:7f:0c:3d:5c:ef:a8:ff:d2:3e: 22:c4:72:c9:57:4a:0e:8b:8a:73:e8:f6:a3:3a:13: 14:45:1c:d5:47:50:d3:d0:44:42:3b:c2:38:54:98: d3:73:cc:24:f6:c4:ad:79:01:71:2d:17:8c:4c:2d: 55:79:83:8f:4a:f9:e2:e8:ca:88:1e:9a:a4:be:bb: 45:29:8e:ed:68:06:6d:a8:63:8b:d7:34:6d:7f:94: b8:18:2e:19:dd:50:ce:21:d6:e8:dd:0c:c8:99:72: 3b:5d:ce:7b:e2:98:29:98:d0:26:fa:3f:4d:10:16: 43:65:49:77:80:31:11:87:60:a9:52:f5:c2:61:71: bf:d9:44:c5:2b:15:38:89:0c:cf:9e:cf:8a:79:c7: fe:7a:83:cf:a7:de:f1:aa:d8:a2:65:37:f9:4e:1d: e0:84:f3:5c:a9:d4:19:39:0a:ab:f9:fb:58:a0:97: 0e:82:fd:3a:41:2a:20:1e:99:f5:09:18:35:45:e5: 64:8b:f7:31:4d:35:61:b9:be:f4:f1:b2:4d:5a:5a: 5d:a7:63:ff:62:ca:09:c1:d6:2a:68:aa:75:74:1d: 02:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9D:E4:96:A1:61:EF:E1:BF:EE:F2:DF:84:98:40:04:B4:EB:AC:35 X509v3 Authority Key Identifier: keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f3:30:c7:68:bc:da:03:0f:ec:fa:d5:1d:a7:90:d8:2f:c9: 8a:de:87:f5:c6:6e:91:27:54:a7:ed:ef:da:29:5d:9c:1d:2e: 9a:8f:af:cc:93:17:1b:11:e8:b6:ec:de:ee:17:d6:f9:06:ca: 6d:ba:c1:56:43:a6:aa:b5:90:72:aa:06:e0:93:67:41:9d:ea: a6:be:d4:88:c5:16:eb:f5:74:93:d0:5a:e7:d4:b7:34:89:b9: d8:83:f3:e7:3a:b3:62:c6:77:4e:a6:4c:58:0c:e2:98:29:bb: 1c:d1:b0:ef:5e:9d:37:8d:ab:8c:16:85:c6:2c:00:50:41:5b: 36:fe:95:6d:e8:50:ca:98:f7:59:17:59:ef:88:81:4b:f3:52: 12:8e:8f:f2:e8:43:d9:6a:d6:01:4c:35:a2:5f:99:4f:27:fe: 39:c8:f1:45:89:4d:f8:7e:59:2c:b1:d6:c8:05:5b:bb:00:e9: f0:ed:6d:dd:93:d1:1b:9b:09:ba:7c:9a:64:18:24:6a:ce:81: ba:93:dc:03:a8:2b:b5:6a:d1:e6:94:71:69:c5:4f:1c:2e:3f: 64:73:18:c5:85:ef:25:54:c2:e5:c4:15:9a:14:58:0d:6e:db: 2c:6d:c4:0f:74:1e:43:ee:61:5e:5e:c4:03:ba:45:96:57:1b: 64:ea:78:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ClRGIyaBARCJszPxwLTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMTU0ODJhNjU2MDA5YWExYmM4MDUxNDgzNjhkMWViZGY4 ZjYyYzgwHhcNMjUxMjA2MTkwMTI2WhcNMjUxMjA3MTkwMTI2WjAzMTEwLwYDVQQD Eyg5YzlkZTQ5NmExNjFlZmUxYmZlZWYyZGY4NDk4NDAwNGI0ZWJhYzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sA1oaK1ITsGsEfcr9TjWNFRjYQm AX7/tPr9jR4y2TEeIlx/DD1c76j/0j4ixHLJV0oOi4pz6PajOhMURRzVR1DT0ERC O8I4VJjTc8wk9sSteQFxLReMTC1VeYOPSvni6MqIHpqkvrtFKY7taAZtqGOL1zRt f5S4GC4Z3VDOIdbo3QzImXI7Xc574pgpmNAm+j9NEBZDZUl3gDERh2CpUvXCYXG/ 2UTFKxU4iQzPns+Kecf+eoPPp97xqtiiZTf5Th3ghPNcqdQZOQqr+ftYoJcOgv06 QSogHpn1CRg1ReVki/cxTTVhub708bJNWlpdp2P/YsoJwdYqaKp1dB0CUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyd5JahYe/hv+7y34SYQAS066w1MB8GA1UdIwQY MBaAFP0VSCplYAmqG8gFFINo0evfj2LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1JWSUttVmdDYW9ieUFVVWcyalI2OS1QWXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jZWU5ZGItNjQwMS00NDk3LTg1ZDEt OTE3YzgwYjE0ODYyLzEvX1JWSUttVmdDYW9ieUFVVWcyalI2OS1QWXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jZWU5ZGItNjQwMS00NDk3LTg1ZDEtOTE3YzgwYjE0ODYy LzEvX1JWSUttVmdDYW9ieUFVVWcyalI2OS1QWXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/Mwx2i8 2gMP7PrVHaeQ2C/Jit6H9cZukSdUp+3v2ildnB0umo+vzJMXGxHotuze7hfW+QbK bbrBVkOmqrWQcqoG4JNnQZ3qpr7UiMUW6/V0k9Ba59S3NIm52IPz5zqzYsZ3TqZM WAzimCm7HNGw716dN42rjBaFxiwAUEFbNv6VbehQypj3WRdZ74iBS/NSEo6P8uhD 2WrWAUw1ol+ZTyf+OcjxRYlN+H5ZLLHWyAVbuwDp8O1t3ZPRG5sJunyaZBgkas6B upPcA6grtWrR5pRxacVPHC4/ZHMYxYXvJVTC5cQVmhRYDW7bLG3ED3QeQ+5hXl7E A7pFllcbZOp4GQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:35:49 2025 by rpki-client