This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft File: vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft (raw, json) Hash identifier: qOR5jgJWNH/sh4EPfUpge+zEO65Dh1mhApdQ+ZwGl+4= Subject key identifier: 19:C3:50:18:A9:43:3D:5B:4C:A1:A4:D2:D8:82:7C:5F:87:7E:8F:5E Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC Certificate issuer: /CN=becec531e5c37756b828663f9cc20ad6217713ac Certificate serial: 019AF42DF50E15B60FB01E95520D6CF03459 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft Manifest number: 1091 Signing time: Sat 06 Dec 2025 15:00:43 +0000 Manifest this update: Sat 06 Dec 2025 15:00:43 +0000 Manifest next update: Sun 07 Dec 2025 15:00:43 +0000 Files and hashes: 1: _d2EFT-OpH3an9-ei2qvPBIPUiU.roa (hash: vjR4Zv9+5SsZfFKRbF6P42t9rz0q1nIneBSdni9L3pM=) 2: ciNzVE1_d0-QMInDSswN3EHLVNg.roa (hash: Wmjyk4Nl2dmeXznw2MTEjEcjFaiybhooG5LGrJ1VKM8=) 3: vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl (hash: vs4ONb3Xv3Qus7gOMQoyHaNIGE3mHNJ9j6WRHtIJ/x8=) 4: yAQLvR2REqCYEITifDYxhFTzX4k.roa (hash: uZgm/9JfNjYwGkoXS3hlL76KCjtvK/3swtvi79WEUbo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:f5:0e:15:b6:0f:b0:1e:95:52:0d:6c:f0:34:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac Validity Not Before: Dec 6 15:00:43 2025 GMT Not After : Dec 7 15:00:43 2025 GMT Subject: CN=19c35018a9433d5b4ca1a4d2d8827c5f877e8f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e8:b0:5e:bf:0a:38:de:e0:4a:be:80:1c:2d: f1:7d:ed:f9:23:91:8d:90:fe:8c:cd:e2:98:f7:be: 57:49:75:89:cf:72:19:ef:84:02:67:a3:46:fc:ab: 00:37:7b:1a:7f:a3:de:f5:53:fa:e7:4b:9d:7a:93: 6d:70:08:80:27:f1:31:05:d5:4d:8e:80:37:32:d1: 6d:58:9b:5b:ec:87:c6:fc:75:12:0a:17:fc:50:42: d6:b1:d4:66:f7:51:c5:47:64:e4:6e:0f:cd:0e:a4: c0:81:d5:93:35:2b:a4:17:7a:85:6a:41:c3:11:9e: e5:80:b9:e6:5d:05:62:5c:b6:e3:1b:cb:7f:43:f5: 1b:ae:dd:76:bd:38:b4:74:19:2b:a7:8c:2f:c9:87: 1a:a1:53:15:af:f4:3f:72:c8:7e:59:cf:32:c7:f0: 5c:43:43:13:7c:a3:89:3d:99:22:92:44:fc:83:c5: 10:79:10:e0:d8:ad:ce:4d:7e:2f:f3:42:56:23:9d: 83:d2:83:42:bd:bb:86:af:b5:6c:5e:e4:48:60:16: 54:c2:32:81:d1:e5:78:f8:23:e8:c8:3d:c3:86:65: 16:cd:45:bc:95:93:46:40:ed:8d:92:c6:07:eb:a3: 5b:44:07:fb:73:b6:5d:32:2e:63:f1:79:0a:0a:0a: 4f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C3:50:18:A9:43:3D:5B:4C:A1:A4:D2:D8:82:7C:5F:87:7E:8F:5E X509v3 Authority Key Identifier: keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:92:e4:eb:b5:74:8b:a9:96:ff:b0:6e:1d:b5:c9:26:88:13: 00:30:56:d3:54:86:3e:71:a1:57:86:67:f3:bc:19:b1:14:cd: 44:dc:6c:7a:22:f5:f6:0a:cf:ae:94:9c:95:21:8d:69:b1:a7: 6a:3f:41:61:f2:c4:cc:bc:2c:a5:80:71:f5:44:8a:48:93:b9: 35:9d:7c:c0:5b:4e:0e:72:78:e1:f0:ea:dd:d0:f1:ad:93:9c: 56:55:2a:4b:60:d1:21:a9:b7:09:bc:b5:ee:3b:d1:5d:a2:b6: 1d:bf:90:aa:a3:7d:2f:0c:48:68:cb:55:af:6d:50:be:ea:2f: e8:28:cc:02:aa:b9:4c:0e:a4:2b:83:46:6b:80:fd:0d:ff:f8: d2:a5:d2:8d:53:5c:d8:a6:24:36:96:bc:e1:af:52:a5:69:1b: 6c:04:b9:92:cd:94:a7:af:ef:35:a2:7c:ea:10:52:a0:34:0f: 96:76:17:04:ef:de:6e:b5:36:1a:35:97:54:df:49:c4:f5:52: 3d:0b:c0:83:5d:ce:8a:a6:2a:0e:61:7b:23:79:e7:c6:df:fb: cc:14:17:dd:4c:fc:76:cd:ce:f4:79:ad:7c:f2:d3:e0:2f:03: bc:94:2f:b1:1a:97:04:fb:e0:06:bc:f7:53:29:b5:f2:b7:82: 8f:61:c0:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LfUOFbYPsB6VUg1s8DRZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlY2VjNTMxZTVjMzc3NTZiODI4NjYzZjljYzIwYWQ2MjE3 NzEzYWMwHhcNMjUxMjA2MTUwMDQzWhcNMjUxMjA3MTUwMDQzWjAzMTEwLwYDVQQD EygxOWMzNTAxOGE5NDMzZDViNGNhMWE0ZDJkODgyN2M1Zjg3N2U4ZjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uiwXr8KON7gSr6AHC3xfe35I5GN kP6MzeKY975XSXWJz3IZ74QCZ6NG/KsAN3saf6Pe9VP650udepNtcAiAJ/ExBdVN joA3MtFtWJtb7IfG/HUSChf8UELWsdRm91HFR2Tkbg/NDqTAgdWTNSukF3qFakHD EZ7lgLnmXQViXLbjG8t/Q/Ubrt12vTi0dBkrp4wvyYcaoVMVr/Q/csh+Wc8yx/Bc Q0MTfKOJPZkikkT8g8UQeRDg2K3OTX4v80JWI52D0oNCvbuGr7VsXuRIYBZUwjKB 0eV4+CPoyD3DhmUWzUW8lZNGQO2NksYH66NbRAf7c7ZdMi5j8XkKCgpPTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnDUBipQz1bTKGk0tiCfF+Hfo9eMB8GA1UdIwQY MBaAFL7OxTHlw3dWuChmP5zCCtYhdxOsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnM3Rk1lWERkMWE0S0dZX25NSUsxaUYzRTZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xYmNiOGItYTNmOC00OGNjLThkYjkt M2RmOWUyMWY0YmNjLzEvdnM3Rk1lWERkMWE0S0dZX25NSUsxaUYzRTZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8xYmNiOGItYTNmOC00OGNjLThkYjktM2RmOWUyMWY0YmNj LzEvdnM3Rk1lWERkMWE0S0dZX25NSUsxaUYzRTZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZLk67V0 i6mW/7BuHbXJJogTADBW01SGPnGhV4Zn87wZsRTNRNxseiL19grPrpSclSGNabGn aj9BYfLEzLwspYBx9USKSJO5NZ18wFtODnJ44fDq3dDxrZOcVlUqS2DRIam3Cby1 7jvRXaK2Hb+QqqN9LwxIaMtVr21Qvuov6CjMAqq5TA6kK4NGa4D9Df/40qXSjVNc 2KYkNpa84a9SpWkbbAS5ks2Up6/vNaJ86hBSoDQPlnYXBO/ebrU2GjWXVN9JxPVS PQvAg13OiqYqDmF7I3nnxt/7zBQX3Uz8ds3O9HmtfPLT4C8DvJQvsRqXBPvgBrz3 Uym18reCj2HAug== -----END CERTIFICATE-----Generated at Sat Dec 6 20:55:13 2025 by rpki-client