This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft File: vGY2Z5cyOLGE2e79NrvzgQukttk.mft (raw, json) Hash identifier: QsZ37HUMemgOY2/bRnJUFS0n9Ynm5/AlicQQ5LBgXdU= Subject key identifier: E8:8D:CD:97:6B:53:82:F7:44:60:7A:06:B1:1F:CC:E3:77:2D:FD:DA Authority key identifier: BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9 Certificate issuer: /CN=bc663667973238b184d9eefd36bbf3810ba4b6d9 Certificate serial: 019AF1D1FFC2CF19603935E91FDCC721D844 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft Manifest number: 1269 Signing time: Sat 06 Dec 2025 04:01:02 +0000 Manifest this update: Sat 06 Dec 2025 04:01:02 +0000 Manifest next update: Sun 07 Dec 2025 04:01:02 +0000 Files and hashes: 1: ig3YUnf06jRQJy2W3dYiO6rsejs.roa (hash: iYGiR2ToZxGUekv5mS+Li0t2IVpNRi9TVFKQBK+2Rl8=) 2: vGY2Z5cyOLGE2e79NrvzgQukttk.crl (hash: Ag43V31pxwH77u93AYwlKOhd21jSzz4UVu5Q/gtZdBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ff:c2:cf:19:60:39:35:e9:1f:dc:c7:21:d8:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc663667973238b184d9eefd36bbf3810ba4b6d9 Validity Not Before: Dec 6 04:01:02 2025 GMT Not After : Dec 7 04:01:02 2025 GMT Subject: CN=e88dcd976b5382f744607a06b11fcce3772dfdda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:55:06:46:1b:bd:98:41:70:44:1a:ee:7c:39: 0f:d5:ed:43:bf:65:e7:34:1f:8c:fd:1c:2c:96:85: d7:86:64:fd:cb:d1:b3:54:c9:a6:17:a0:6d:d9:4e: bf:6a:7f:ee:2c:c4:a7:c8:fa:9e:b9:fa:84:15:a5: 41:a4:be:35:02:69:aa:21:03:06:69:09:33:e4:ed: 96:df:6a:8a:99:ba:1c:20:0e:8a:19:93:10:af:1d: 37:46:6d:81:4e:a5:a5:5b:67:90:d0:9b:3d:3f:c2: e0:7c:8b:12:0e:d8:a5:ed:62:bf:39:67:e2:7b:d7: 61:c4:6f:d1:68:d6:5e:4d:c1:13:dc:fb:7e:9b:60: f9:77:c9:94:ac:f7:54:27:0c:d8:5f:83:c1:ec:20: d6:6a:fb:f4:67:86:3b:ab:99:e3:5e:6b:39:ff:c2: 28:90:e8:db:b2:b3:60:27:71:68:af:31:70:8a:49: 21:f5:5b:ea:0a:1f:53:82:02:86:cc:86:e4:9a:c2: 90:ad:c4:a3:63:35:5e:b8:dc:74:f6:0c:5b:c0:b4: 4d:fc:4a:bd:ac:14:04:82:73:f1:91:57:f5:5c:8d: 8a:d0:93:34:7b:14:93:16:81:78:55:7e:ce:94:ff: 4a:4c:af:d5:17:be:61:51:2a:75:21:b4:76:b6:2b: d4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8D:CD:97:6B:53:82:F7:44:60:7A:06:B1:1F:CC:E3:77:2D:FD:DA X509v3 Authority Key Identifier: keyid:BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:56:d4:83:ff:61:c5:8f:1c:43:5f:e8:27:71:67:cd:eb:05: 55:a4:ef:ce:2e:1e:12:9d:c8:27:51:d7:48:89:29:27:cb:ce: f8:75:ab:dd:bd:ec:ba:0d:f7:bf:64:95:75:87:ff:63:28:97: 11:df:e2:37:6e:a2:7f:de:4e:c3:64:28:b3:75:74:8e:0c:9e: 07:05:16:db:af:e4:ac:d0:0c:43:e7:19:4f:b1:93:5b:47:ac: de:0e:47:eb:c8:cb:85:de:3c:1d:be:dc:68:55:ea:30:1d:aa: 62:95:e0:28:21:e6:fb:bb:c5:18:c6:d4:a0:a2:0b:00:9a:37: 39:dc:1c:b4:61:3d:6b:26:24:17:c0:cc:90:3e:78:cf:13:39: be:82:80:72:c2:35:73:7e:20:32:0c:b3:1f:67:0f:35:3d:81: c5:54:d2:a1:c3:09:7c:9b:53:c2:ad:e8:5f:dd:38:5b:a6:47: 71:c3:f8:13:a7:8f:af:64:67:82:6c:7e:f0:7a:0a:32:c9:c9: dc:dd:92:11:fa:a6:6d:48:00:8e:bd:a7:30:c0:b0:4f:d4:65: 38:f7:3d:75:da:70:c2:83:0b:c7:39:cf:9d:85:f6:0d:a4:b4: c9:21:28:10:24:d9:63:bd:ea:9f:71:14:f2:3b:80:60:e4:1c: 93:07:72:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0f/CzxlgOTXpH9zHIdhEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNjYzNjY3OTczMjM4YjE4NGQ5ZWVmZDM2YmJmMzgxMGJh NGI2ZDkwHhcNMjUxMjA2MDQwMTAyWhcNMjUxMjA3MDQwMTAyWjAzMTEwLwYDVQQD EyhlODhkY2Q5NzZiNTM4MmY3NDQ2MDdhMDZiMTFmY2NlMzc3MmRmZGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FUGRhu9mEFwRBrufDkP1e1Dv2Xn NB+M/RwsloXXhmT9y9GzVMmmF6Bt2U6/an/uLMSnyPqeufqEFaVBpL41AmmqIQMG aQkz5O2W32qKmbocIA6KGZMQrx03Rm2BTqWlW2eQ0Js9P8LgfIsSDtil7WK/OWfi e9dhxG/RaNZeTcET3Pt+m2D5d8mUrPdUJwzYX4PB7CDWavv0Z4Y7q5njXms5/8Io kOjbsrNgJ3ForzFwikkh9VvqCh9TggKGzIbkmsKQrcSjYzVeuNx09gxbwLRN/Eq9 rBQEgnPxkVf1XI2K0JM0exSTFoF4VX7OlP9KTK/VF75hUSp1IbR2tivUSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOiNzZdrU4L3RGB6BrEfzON3Lf3aMB8GA1UdIwQY MBaAFLxmNmeXMjixhNnu/Ta784ELpLbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkdZMlo1Y3lPTEdFMmU3OU5ydnpnUXVrdHRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wYjk1MWEtOGU2Yy00NDQ1LTljMmQt OWYwMGM3MjYyMGY2LzEvdkdZMlo1Y3lPTEdFMmU3OU5ydnpnUXVrdHRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8wYjk1MWEtOGU2Yy00NDQ1LTljMmQtOWYwMGM3MjYyMGY2 LzEvdkdZMlo1Y3lPTEdFMmU3OU5ydnpnUXVrdHRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFbUg/9h xY8cQ1/oJ3FnzesFVaTvzi4eEp3IJ1HXSIkpJ8vO+HWr3b3sug33v2SVdYf/YyiX Ed/iN26if95Ow2Qos3V0jgyeBwUW26/krNAMQ+cZT7GTW0es3g5H68jLhd48Hb7c aFXqMB2qYpXgKCHm+7vFGMbUoKILAJo3OdwctGE9ayYkF8DMkD54zxM5voKAcsI1 c34gMgyzH2cPNT2BxVTSocMJfJtTwq3oX904W6ZHccP4E6ePr2Rngmx+8HoKMsnJ 3N2SEfqmbUgAjr2nMMCwT9RlOPc9ddpwwoMLxznPnYX2DaS0ySEoECTZY73qn3EU 8juAYOQckwdyWA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:43:54 2025 by rpki-client