This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft File: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft (raw, json) Hash identifier: 6PGxhMojBnF9jJWtkYF50RjvyYQo8xYpGAm0h1phWaA= Subject key identifier: FE:69:7D:4D:25:30:64:9E:90:73:79:7D:36:26:6E:99:C4:98:8E:5D Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB Certificate issuer: /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb Certificate serial: 019AF2AD71DC65261DC8471DCBDB7CD5B2F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 08:00:44 +0000 Manifest this update: Sat 06 Dec 2025 08:00:44 +0000 Manifest next update: Sun 07 Dec 2025 08:00:44 +0000 Files and hashes: 1: qBn6ockm6JSiEH-8udw_bpsms9g.roa (hash: nCADL7lFGk+Q6O3ajQCgcYhE2O5JRszPFiBp0Ov4f98=) 2: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl (hash: irLa7oDV18EH1qh/iUawoS+SaIjt6xOuAfN8WjuJaSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:71:dc:65:26:1d:c8:47:1d:cb:db:7c:d5:b2:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb Validity Not Before: Dec 6 08:00:44 2025 GMT Not After : Dec 7 08:00:44 2025 GMT Subject: CN=fe697d4d2530649e9073797d36266e99c4988e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8b:3d:c7:1c:6a:1b:7c:e7:67:ca:cd:70:e2: c7:93:5c:65:82:c1:22:47:ce:32:81:d0:c3:f6:25: b9:58:70:8c:43:37:9f:69:bd:5b:2f:b0:c3:00:08: 8b:27:d4:41:56:ed:d1:aa:11:36:5a:fb:ce:70:8a: 8a:f0:52:87:a3:42:84:37:0a:83:4a:52:5d:f4:0e: 68:bd:32:dc:27:ff:10:43:ce:2c:ee:b8:e2:50:32: f8:1b:44:84:29:54:2d:4e:8c:c7:3d:81:1e:64:5f: ab:b4:b5:e7:4e:fd:3e:c0:da:ef:de:6a:66:28:0b: e7:e9:4b:ab:05:95:6c:28:9c:18:01:48:ef:a0:07: d6:3f:07:98:d9:46:d9:44:a8:54:22:f9:73:e7:1a: 13:52:28:ca:86:17:47:ec:f8:36:32:f3:d2:7a:52: 73:82:63:be:eb:25:6f:4e:36:2b:8e:5f:6c:5e:eb: 0e:0d:60:cc:dc:12:98:1e:63:bd:b4:a8:8e:66:9c: e2:f4:9b:1c:cd:4b:21:ea:14:13:3c:53:2b:1a:0a: be:37:80:f0:03:ac:0d:51:b2:f2:d7:a4:97:75:2f: aa:b5:18:85:a3:b8:ee:ed:7c:1e:de:4d:40:0f:05: 5d:1f:db:27:96:4f:9e:68:fb:70:b9:da:f1:75:9e: 05:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:69:7D:4D:25:30:64:9E:90:73:79:7D:36:26:6E:99:C4:98:8E:5D X509v3 Authority Key Identifier: keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:be:f7:60:20:43:c2:20:73:d9:b9:b7:d7:3d:a5:33:e1:3d: 8e:1c:a1:53:76:84:6f:c6:c9:1f:d2:f1:fe:b4:44:d5:84:ff: 70:67:33:ed:ca:3c:15:a8:35:3e:90:db:33:e9:5c:06:36:71: a0:80:d4:11:b5:d1:ee:87:4a:21:29:bf:2e:a0:0a:b8:db:6f: 06:98:a8:f0:17:40:b7:59:3d:88:fa:d5:07:d4:9d:bd:83:7f: 9a:ab:70:47:a5:7c:ed:3c:c9:11:51:1a:25:cd:00:3b:da:d1: 9c:09:1e:21:cc:07:12:ec:24:1f:01:1c:00:94:88:f3:9f:9c: 5a:ef:59:6a:28:56:70:52:82:d4:ee:31:2d:8a:4d:b8:12:18: 49:7b:77:86:49:75:b7:30:20:9b:42:1c:28:24:23:7e:29:fc: c2:98:26:be:44:3c:8a:af:62:83:56:34:4e:de:f0:12:a4:97: 0e:82:cb:7e:60:00:99:90:dc:0e:77:7d:ff:0f:74:84:8e:60: 41:b5:7a:45:e5:9e:04:ae:7d:e0:eb:38:56:6a:f5:20:37:d3: 46:dd:cc:9d:c1:c6:fe:e0:0a:bf:ae:48:da:ef:27:f1:3e:26: d5:37:73:ef:d5:fa:5e:ec:e2:35:be:71:a4:a9:9c:35:69:20: 64:d4:b0:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXHcZSYdyEcdy9t81bLyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMmVlZmE3YzYwNDhlNmEwYTVhNjVjMDdlM2UyNTUzNDFl MTQzYmIwHhcNMjUxMjA2MDgwMDQ0WhcNMjUxMjA3MDgwMDQ0WjAzMTEwLwYDVQQD EyhmZTY5N2Q0ZDI1MzA2NDllOTA3Mzc5N2QzNjI2NmU5OWM0OTg4ZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14s9xxxqG3znZ8rNcOLHk1xlgsEi R84ygdDD9iW5WHCMQzefab1bL7DDAAiLJ9RBVu3RqhE2WvvOcIqK8FKHo0KENwqD SlJd9A5ovTLcJ/8QQ84s7rjiUDL4G0SEKVQtTozHPYEeZF+rtLXnTv0+wNrv3mpm KAvn6UurBZVsKJwYAUjvoAfWPweY2UbZRKhUIvlz5xoTUijKhhdH7Pg2MvPSelJz gmO+6yVvTjYrjl9sXusODWDM3BKYHmO9tKiOZpzi9JsczUsh6hQTPFMrGgq+N4Dw A6wNUbLy16SXdS+qtRiFo7ju7Xwe3k1ADwVdH9snlk+eaPtwudrxdZ4FPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5pfU0lMGSekHN5fTYmbpnEmI5dMB8GA1UdIwQY MBaAFL8u76fGBI5qClplwH4+JVNB4UO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgt MjFlYzY1NjVjOWJlLzEvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgtMjFlYzY1NjVjOWJl LzEvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH773YCBD wiBz2bm31z2lM+E9jhyhU3aEb8bJH9Lx/rRE1YT/cGcz7co8Fag1PpDbM+lcBjZx oIDUEbXR7odKISm/LqAKuNtvBpio8BdAt1k9iPrVB9SdvYN/mqtwR6V87TzJEVEa Jc0AO9rRnAkeIcwHEuwkHwEcAJSI85+cWu9ZaihWcFKC1O4xLYpNuBIYSXt3hkl1 tzAgm0IcKCQjfin8wpgmvkQ8iq9ig1Y0Tt7wEqSXDoLLfmAAmZDcDnd9/w90hI5g QbV6ReWeBK594Os4Vmr1IDfTRt3MncHG/uAKv65I2u8n8T4m1Tdz79X6XuziNb5x pKmcNWkgZNSwPg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:05:56 2025 by rpki-client