This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft File: veGsj467UC_MRFYtwQ2XOIRJO-U.mft (raw, json) Hash identifier: 78diPvMETt6xBmYCtLM+gVW0U3dupn0TaEDeC64fPN8= Subject key identifier: 0D:10:BA:04:7E:7A:0E:34:AA:9B:B7:B3:61:96:72:40:FC:92:48:7B Authority key identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5 Certificate issuer: /CN=bde1ac8f8ebb502fcc44562dc10d973884493be5 Certificate serial: 019AF5AE86522D70BEB88B16F6CFA6B06EFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft Manifest number: 0A96 Signing time: Sat 06 Dec 2025 22:00:46 +0000 Manifest this update: Sat 06 Dec 2025 22:00:46 +0000 Manifest next update: Sun 07 Dec 2025 22:00:46 +0000 Files and hashes: 1: BIfb7ZxJcI_z8KzHeX5n3JHCcq0.roa (hash: zQ0KDMqG7X6AzmJpBDsrH1YQkiSpOUR257iu4JXF7UQ=) 2: veGsj467UC_MRFYtwQ2XOIRJO-U.crl (hash: 0dlkKT9huvp+xyM5KpRyWxjJ2fVtP5PBrTbi1W1CxNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:86:52:2d:70:be:b8:8b:16:f6:cf:a6:b0:6e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde1ac8f8ebb502fcc44562dc10d973884493be5 Validity Not Before: Dec 6 22:00:46 2025 GMT Not After : Dec 7 22:00:46 2025 GMT Subject: CN=0d10ba047e7a0e34aa9bb7b361967240fc92487b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d2:75:07:5e:11:00:50:64:63:7e:b9:a1:ba: 4b:33:4a:2a:ea:9f:ec:00:07:2f:ef:90:34:93:ae: 50:a7:59:0a:f1:25:81:71:f2:50:7e:02:e3:86:60: 6d:ba:15:a3:48:75:64:9d:9b:31:20:16:fd:db:21: d5:c3:b0:30:50:2c:b7:cc:60:9d:43:db:b2:4a:94: 97:9c:61:e7:a8:fa:4c:1c:a5:ee:75:c2:49:2e:a8: 4a:84:88:2b:8a:72:60:5d:28:02:ff:2a:9c:63:08: 58:14:51:9f:67:e5:d4:9a:86:29:e6:5f:42:d1:c3: f1:ad:5e:ce:89:11:2f:c4:84:65:e9:11:a6:86:aa: 1c:e0:e1:fb:b3:53:d4:cd:1a:3f:e0:00:b6:81:af: 0c:7e:81:11:75:fa:17:1b:04:c8:4a:d4:07:27:31: f5:95:06:b1:f5:14:9c:85:a7:82:5b:d4:48:db:b8: e6:db:51:fe:d5:e4:53:53:7b:52:64:8d:b7:73:be: a9:54:ba:ae:56:c6:e8:a9:5a:60:e5:64:7e:5b:e1: 38:3f:cf:da:27:81:89:72:ee:87:9d:80:bb:3d:98: 52:38:0f:31:f8:9a:b6:28:80:1e:86:4c:9b:26:3e: a9:7f:fd:56:12:1a:32:14:f5:4f:99:bd:54:28:85: 4c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:10:BA:04:7E:7A:0E:34:AA:9B:B7:B3:61:96:72:40:FC:92:48:7B X509v3 Authority Key Identifier: keyid:BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:42:c2:6d:d1:84:a9:88:6e:f1:c4:13:7b:65:3a:b5:97:42: 0e:1c:d0:f8:8f:62:04:ae:45:b3:f3:fb:b9:c0:7e:09:28:69: b5:4a:9e:19:92:25:02:ad:05:8f:55:0c:b0:4f:24:cd:03:8e: 6d:2b:c3:ab:4d:b3:45:56:f1:72:bb:14:ee:c9:eb:69:fb:96: 74:27:6f:4e:60:13:5b:87:fc:2b:fc:1a:5f:79:36:2d:29:3e: 15:ba:82:d3:a9:4d:27:1d:99:62:82:fa:82:83:ba:07:47:ac: 4e:47:aa:e1:43:36:81:2c:66:ca:01:01:53:95:5b:e1:ae:75: 0d:e4:cf:34:a0:a5:b7:8c:6d:43:72:63:4e:dc:33:b0:19:51: d0:f1:37:3c:d8:5c:b8:ec:a9:2d:b7:7d:c0:ed:04:a6:2e:81: b7:21:64:8a:c0:97:0e:3f:ee:d6:84:95:a2:9c:03:52:4d:32: b4:da:88:78:b3:26:2d:4f:d8:fc:cf:48:5a:ac:66:9f:25:0f: b1:01:0c:00:5f:ae:29:22:3e:8b:b1:b5:f7:0a:cd:23:9e:37: 66:46:b4:14:2b:12:ba:73:d2:3a:17:71:93:37:95:98:b2:78: 0a:b6:69:cf:f6:4d:a1:97:af:fe:15:5d:bf:68:71:bd:59:b3: fb:70:1e:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1roZSLXC+uIsW9s+msG77MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTFhYzhmOGViYjUwMmZjYzQ0NTYyZGMxMGQ5NzM4ODQ0 OTNiZTUwHhcNMjUxMjA2MjIwMDQ2WhcNMjUxMjA3MjIwMDQ2WjAzMTEwLwYDVQQD EygwZDEwYmEwNDdlN2EwZTM0YWE5YmI3YjM2MTk2NzI0MGZjOTI0ODdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dJ1B14RAFBkY365obpLM0oq6p/s AAcv75A0k65Qp1kK8SWBcfJQfgLjhmBtuhWjSHVknZsxIBb92yHVw7AwUCy3zGCd Q9uySpSXnGHnqPpMHKXudcJJLqhKhIgrinJgXSgC/yqcYwhYFFGfZ+XUmoYp5l9C 0cPxrV7OiREvxIRl6RGmhqoc4OH7s1PUzRo/4AC2ga8MfoERdfoXGwTIStQHJzH1 lQax9RSchaeCW9RI27jm21H+1eRTU3tSZI23c76pVLquVsboqVpg5WR+W+E4P8/a J4GJcu6HnYC7PZhSOA8x+Jq2KIAehkybJj6pf/1WEhoyFPVPmb1UKIVMxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0QugR+eg40qpu3s2GWckD8kkh7MB8GA1UdIwQY MBaAFL3hrI+Ou1AvzERWLcENlziESTvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MTdlN2QtNWI4Mi00ODdhLTlkNmYt MWE1MDgwODY0ZmE3LzEvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84MTdlN2QtNWI4Mi00ODdhLTlkNmYtMWE1MDgwODY0ZmE3 LzEvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVULCbdGE qYhu8cQTe2U6tZdCDhzQ+I9iBK5Fs/P7ucB+CShptUqeGZIlAq0Fj1UMsE8kzQOO bSvDq02zRVbxcrsU7snrafuWdCdvTmATW4f8K/waX3k2LSk+FbqC06lNJx2ZYoL6 goO6B0esTkeq4UM2gSxmygEBU5Vb4a51DeTPNKClt4xtQ3JjTtwzsBlR0PE3PNhc uOypLbd9wO0Epi6BtyFkisCXDj/u1oSVopwDUk0ytNqIeLMmLU/Y/M9IWqxmnyUP sQEMAF+uKSI+i7G19wrNI543Zka0FCsSunPSOhdxkzeVmLJ4CrZpz/ZNoZev/hVd v2hxvVmz+3Ae1Q== -----END CERTIFICATE-----Generated at Sun Dec 7 02:51:07 2025 by rpki-client