This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft File: vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft (raw, json) Hash identifier: 19gellK/AGBviVRQ+n0dHY63Si9W6cxglOa6J5NSHWI= Subject key identifier: 39:C1:FC:60:B2:BC:0B:73:8D:34:41:2D:AC:26:68:15:8F:18:BD:04 Authority key identifier: BC:36:B4:CA:E0:90:D0:F4:9C:54:83:F7:B2:F9:3F:B9:2F:D0:FF:87 Certificate issuer: /CN=bc36b4cae090d0f49c5483f7b2f93fb92fd0ff87 Certificate serial: 019AF209136242602886E76155312E4FCBDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft Manifest number: 132F Signing time: Sat 06 Dec 2025 05:01:12 +0000 Manifest this update: Sat 06 Dec 2025 05:01:12 +0000 Manifest next update: Sun 07 Dec 2025 05:01:12 +0000 Files and hashes: 1: Lrevspx8pK8iAQPmN_WzVm7Uz8g.roa (hash: rJO6XBbSiJFNojO75GzhljDBEykmJAUvcojH0FS1+Mc=) 2: vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl (hash: wm0nAkAmH1dgL08MiqyQ93d59pKkG8D/vzaFrldJkws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:13:62:42:60:28:86:e7:61:55:31:2e:4f:cb:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc36b4cae090d0f49c5483f7b2f93fb92fd0ff87 Validity Not Before: Dec 6 05:01:12 2025 GMT Not After : Dec 7 05:01:12 2025 GMT Subject: CN=39c1fc60b2bc0b738d34412dac2668158f18bd04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e0:9b:c0:95:4d:0a:46:14:ff:75:ce:f6:a4: 55:ed:c4:b1:9e:fa:75:d1:40:fe:48:8a:c4:bf:7c: d4:dd:a0:af:e2:7b:64:2a:c2:f8:31:b6:d6:d0:e4: 26:9a:17:b3:f8:7f:c4:29:7c:af:17:ee:2b:99:a2: b7:3c:40:9f:03:39:f3:d5:fd:97:29:93:e3:8b:ba: 2d:48:b5:ff:d1:74:86:27:81:c7:68:d1:c7:75:ef: e0:01:9b:bb:85:7d:af:8f:c4:16:eb:ef:ec:71:7c: 86:f7:01:0d:ad:44:8e:55:43:cd:52:1b:b8:52:70: 92:45:16:54:07:5c:e0:f4:96:50:62:cc:53:5c:20: 20:d7:9b:1b:2e:4b:92:c4:c1:3a:e1:84:82:40:2e: 52:c2:62:0d:03:ad:64:0a:59:3a:3c:c1:83:5c:8b: 11:7e:4f:b4:09:13:a2:78:3c:e4:62:d0:88:12:b3: eb:2c:44:cd:d3:a0:fc:3b:50:0f:26:07:b0:60:79: 60:41:4c:4b:1f:08:93:1f:c2:74:d2:f5:11:ea:9b: 88:95:ed:74:d4:ca:4d:08:30:44:3e:97:92:8f:ff: 6c:6c:dc:45:9a:92:bc:9d:a6:dc:b8:f7:c9:79:17: 21:9f:aa:f2:b7:c2:88:95:96:dc:2e:7e:8e:86:8e: 39:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C1:FC:60:B2:BC:0B:73:8D:34:41:2D:AC:26:68:15:8F:18:BD:04 X509v3 Authority Key Identifier: keyid:BC:36:B4:CA:E0:90:D0:F4:9C:54:83:F7:B2:F9:3F:B9:2F:D0:FF:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ed:73:fd:fd:46:3e:82:3a:02:b1:47:24:a3:97:4d:93:00: d1:d5:81:9d:62:f0:e3:93:35:64:71:64:f3:00:0a:e6:78:66: 21:cc:03:31:36:eb:2a:31:c5:5a:ca:f9:26:95:8a:2d:27:6e: c1:50:0f:bb:e1:a1:6d:18:d0:8f:ff:b4:c5:4a:ec:31:f1:ea: 93:31:a4:68:61:f3:eb:90:90:6e:00:c2:b4:47:3e:05:ad:3a: 2d:46:12:19:8e:6d:e8:72:bd:94:19:1f:1e:aa:ec:50:02:25: c5:6b:e7:5a:14:ab:6f:fc:cd:1d:3b:a1:b7:a3:3a:4e:e7:5e: 9a:e1:82:d7:d1:bc:aa:b3:d7:39:fb:dc:59:e1:a4:f3:cc:04: 8c:54:e0:4d:d1:68:d8:87:a4:ca:2c:0b:db:85:d8:96:4d:7d: 4b:54:c4:3c:fe:4f:ac:16:ff:4b:01:3f:f2:d6:93:9f:9b:09: 9f:06:ad:6b:0c:d2:0d:cc:15:c6:41:07:d1:d1:84:7b:27:ab: bc:35:c1:98:73:b6:2b:5b:f0:a2:70:64:2b:5b:45:8a:f7:c0: 32:80:ff:99:d4:37:75:81:13:ab:e3:07:7c:c2:6b:e9:0e:af: 5c:f7:12:25:09:55:3f:1c:03:db:4c:54:22:33:1d:4a:67:63: 9a:95:2a:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRNiQmAohudhVTEuT8vaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMzZiNGNhZTA5MGQwZjQ5YzU0ODNmN2IyZjkzZmI5MmZk MGZmODcwHhcNMjUxMjA2MDUwMTEyWhcNMjUxMjA3MDUwMTEyWjAzMTEwLwYDVQQD EygzOWMxZmM2MGIyYmMwYjczOGQzNDQxMmRhYzI2NjgxNThmMThiZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+CbwJVNCkYU/3XO9qRV7cSxnvp1 0UD+SIrEv3zU3aCv4ntkKsL4MbbW0OQmmhez+H/EKXyvF+4rmaK3PECfAznz1f2X KZPji7otSLX/0XSGJ4HHaNHHde/gAZu7hX2vj8QW6+/scXyG9wENrUSOVUPNUhu4 UnCSRRZUB1zg9JZQYsxTXCAg15sbLkuSxME64YSCQC5SwmINA61kClk6PMGDXIsR fk+0CROieDzkYtCIErPrLETN06D8O1APJgewYHlgQUxLHwiTH8J00vUR6puIle10 1MpNCDBEPpeSj/9sbNxFmpK8nabcuPfJeRchn6ryt8KIlZbcLn6Oho45EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDnB/GCyvAtzjTRBLawmaBWPGL0EMB8GA1UdIwQY MBaAFLw2tMrgkND0nFSD97L5P7kv0P+HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkRhMHl1Q1EwUFNjVklQM3N2a191U19RXzRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mMzg5MWYtNGRjNy00ZjRjLWI1MTkt NjEwN2ViN2M0OGQyLzEvdkRhMHl1Q1EwUFNjVklQM3N2a191U19RXzRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9mMzg5MWYtNGRjNy00ZjRjLWI1MTktNjEwN2ViN2M0OGQy LzEvdkRhMHl1Q1EwUFNjVklQM3N2a191U19RXzRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn+1z/f1G PoI6ArFHJKOXTZMA0dWBnWLw45M1ZHFk8wAK5nhmIcwDMTbrKjHFWsr5JpWKLSdu wVAPu+GhbRjQj/+0xUrsMfHqkzGkaGHz65CQbgDCtEc+Ba06LUYSGY5t6HK9lBkf HqrsUAIlxWvnWhSrb/zNHTuht6M6TudemuGC19G8qrPXOfvcWeGk88wEjFTgTdFo 2IekyiwL24XYlk19S1TEPP5PrBb/SwE/8taTn5sJnwatawzSDcwVxkEH0dGEeyer vDXBmHO2K1vwonBkK1tFivfAMoD/mdQ3dYETq+MHfMJr6Q6vXPcSJQlVPxwD20xU IjMdSmdjmpUqhw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:51 2025 by rpki-client