This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft File: vY-cA-dX89tRTKONFa2kUfoulhU.mft (raw, json) Hash identifier: WAIx/UQpCRIAAXFT/KOLEPpQrZtSozg4BnmGaQTYbl0= Subject key identifier: 49:AB:12:44:A2:10:10:57:66:4F:CE:B4:EA:60:28:01:5F:D4:32:F1 Authority key identifier: BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15 Certificate issuer: /CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615 Certificate serial: 019AF2ADD24B793BAD942ADDA4AD91468410 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft Manifest number: 0AD7 Signing time: Sat 06 Dec 2025 08:01:08 +0000 Manifest this update: Sat 06 Dec 2025 08:01:08 +0000 Manifest next update: Sun 07 Dec 2025 08:01:08 +0000 Files and hashes: 1: CKcxnnd19wN0dY_tJv81hrxqU-4.roa (hash: Jigb3Y01l+fMYMW0ZZB5oBdO1NKLRrYbvCaXnAo+wkY=) 2: t5V-1w-s-rvBgb3wq2ZSKMwJCs0.roa (hash: 0NfSlFcI3MTsg3tU/1EBreDuvvrgFnFan39Sv/glqLM=) 3: usukqM3IhyDYNnttlGzr4GMalbM.roa (hash: AmN91z8j0spH0QCHEMiU2dfIQz38pEXTN+9Bqls+dfE=) 4: vY-cA-dX89tRTKONFa2kUfoulhU.crl (hash: 8g9i4SFPj+rb0fq/wwy2ToK32IPAuaFHGzt79oyH3cU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:d2:4b:79:3b:ad:94:2a:dd:a4:ad:91:46:84:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615 Validity Not Before: Dec 6 08:01:08 2025 GMT Not After : Dec 7 08:01:08 2025 GMT Subject: CN=49ab1244a2101057664fceb4ea6028015fd432f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ba:07:df:aa:20:c8:72:1f:5f:87:fd:3e:e4: 69:6b:04:52:87:e7:c7:8a:8e:b2:63:96:23:81:26: 23:77:f8:0b:cd:94:9d:42:fd:67:ac:ad:d8:59:1c: b6:0b:7a:ff:f8:c4:7a:d1:02:61:60:8e:e2:9c:cf: bd:cf:ba:2a:22:42:3c:6d:b2:e4:3e:60:ea:12:f2: 92:41:e9:2c:7a:a7:1c:a1:2c:eb:39:2a:89:17:dd: 32:ed:40:13:6b:f6:52:16:b3:ad:77:f3:b6:03:11: 1a:46:62:f4:d8:8a:51:93:fe:9c:52:2b:c4:55:59: a6:11:15:97:04:2a:30:1a:f8:ae:f0:2e:4c:e7:89: 50:7b:0a:6e:64:3f:49:41:74:06:b7:9c:ca:c1:5c: 73:7c:37:8e:f0:23:c2:6f:23:07:a3:2a:f4:bd:53: 8c:a8:3b:2e:36:07:6e:83:2b:5f:91:ef:aa:2c:38: a1:bc:c4:60:2b:1d:1e:24:a9:8c:47:ac:27:b6:5b: c8:ad:96:bc:5b:44:2c:8a:74:9e:a7:39:fc:ab:54: ac:55:fd:b6:07:c9:bb:1b:8f:3c:77:5b:3a:93:5d: d0:e1:69:fb:d0:7e:96:67:df:b6:f1:f4:39:a6:c5: 2d:da:d8:4b:d8:b4:4e:03:98:fb:d0:24:90:3a:37: f7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AB:12:44:A2:10:10:57:66:4F:CE:B4:EA:60:28:01:5F:D4:32:F1 X509v3 Authority Key Identifier: keyid:BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c6:b5:29:20:87:05:03:fe:67:5f:45:ea:52:97:01:7b:8b: 70:9f:61:8c:0b:04:5c:83:f9:c7:ba:75:40:32:d5:55:5f:b0: a6:94:dd:e0:61:f1:9d:01:7f:16:ac:32:28:b0:fb:0f:e9:15: 72:f5:d8:60:3e:52:08:de:00:7a:9e:37:93:8f:bd:38:77:1a: 37:8e:f7:b5:a7:b4:ca:6b:6b:43:8d:0b:6f:d2:68:dd:c4:b5: 48:ea:e1:12:e2:4d:13:cc:2e:8f:ba:a5:2b:21:7d:d6:17:6b: 72:94:51:fc:23:90:c3:35:60:a2:59:f6:41:37:d4:2e:6a:df: 7c:46:3b:71:0a:f0:ef:e2:23:6d:ed:44:d7:4a:19:64:53:72: 8d:22:0c:09:7c:eb:0c:3f:0b:90:2f:99:58:4b:17:b6:f5:dc: c6:0a:c4:d6:1f:0f:6d:3a:43:71:c2:e8:a4:e4:2a:ce:62:48: ae:21:60:a7:62:ab:27:69:6b:7a:ac:4a:bb:c6:36:18:7b:74: 8d:44:8a:d6:a4:41:68:2e:eb:c4:0e:c7:5d:92:1d:21:40:6e: 53:c9:cf:c4:5d:25:cd:9c:e0:06:fb:03:46:39:fc:a0:ed:58: 6c:e4:66:ee:7a:65:36:50:93:01:a4:fa:95:53:72:dc:8f:b3: 07:c5:ff:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdJLeTutlCrdpK2RRoQQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOGY5YzAzZTc1N2YzZGI1MTRjYTM4ZDE1YWRhNDUxZmEy ZTk2MTUwHhcNMjUxMjA2MDgwMTA4WhcNMjUxMjA3MDgwMTA4WjAzMTEwLwYDVQQD Eyg0OWFiMTI0NGEyMTAxMDU3NjY0ZmNlYjRlYTYwMjgwMTVmZDQzMmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7oH36ogyHIfX4f9PuRpawRSh+fH io6yY5YjgSYjd/gLzZSdQv1nrK3YWRy2C3r/+MR60QJhYI7inM+9z7oqIkI8bbLk PmDqEvKSQekseqccoSzrOSqJF90y7UATa/ZSFrOtd/O2AxEaRmL02IpRk/6cUivE VVmmERWXBCowGviu8C5M54lQewpuZD9JQXQGt5zKwVxzfDeO8CPCbyMHoyr0vVOM qDsuNgdugytfke+qLDihvMRgKx0eJKmMR6wntlvIrZa8W0QsinSepzn8q1SsVf22 B8m7G488d1s6k13Q4Wn70H6WZ9+28fQ5psUt2thL2LROA5j70CSQOjf3PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmrEkSiEBBXZk/OtOpgKAFf1DLxMB8GA1UdIwQY MBaAFL2PnAPnV/PbUUyjjRWtpFH6LpYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlktY0EtZFg4OXRSVEtPTkZhMmtVZm91bGhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iODNlNDctYmMwNC00OTJkLTlhMDct ZWNkZDgxNzQwMDdhLzEvdlktY0EtZFg4OXRSVEtPTkZhMmtVZm91bGhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9iODNlNDctYmMwNC00OTJkLTlhMDctZWNkZDgxNzQwMDdh LzEvdlktY0EtZFg4OXRSVEtPTkZhMmtVZm91bGhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8a1KSCH BQP+Z19F6lKXAXuLcJ9hjAsEXIP5x7p1QDLVVV+wppTd4GHxnQF/FqwyKLD7D+kV cvXYYD5SCN4Aep43k4+9OHcaN473tae0ymtrQ40Lb9Jo3cS1SOrhEuJNE8wuj7ql KyF91hdrcpRR/COQwzVgoln2QTfULmrffEY7cQrw7+Ijbe1E10oZZFNyjSIMCXzr DD8LkC+ZWEsXtvXcxgrE1h8PbTpDccLopOQqzmJIriFgp2KrJ2lreqxKu8Y2GHt0 jUSK1qRBaC7rxA7HXZIdIUBuU8nPxF0lzZzgBvsDRjn8oO1YbORm7nplNlCTAaT6 lVNy3I+zB8X/Fg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:08 2025 by rpki-client