This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft File: fVaVeG-EUNEEHciK2JLLtXDVlys.mft (raw, json) Hash identifier: qMD+xYlvZw+nKMER3/vd0xpg5CStHKQiG8WXXThcIrE= Subject key identifier: 4D:C7:CE:F8:58:09:7E:4E:60:B8:48:E2:67:B4:2B:67:48:FE:18:3C Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b Certificate serial: 019AE604D81A78998B15CDE63D37EE10E92E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft Manifest number: 1778 Signing time: Wed 03 Dec 2025 21:01:08 +0000 Manifest this update: Wed 03 Dec 2025 21:01:08 +0000 Manifest next update: Thu 04 Dec 2025 21:01:08 +0000 Files and hashes: 1: 3rzAd226LvrMj0Cm0bg7sXb9CMo.roa (hash: n/9KaWla5IkEpIQV9qzq6meBd1c5WCnkPlwm2zCEneA=) 2: ATAXcZqjug_OpJ5XGTmLoPMGEOc.roa (hash: qD5faLkjHPVXEYY6RoVKIKOshkTkJFAi6AIDTmlkjhM=) 3: MqcJtj5YrV2deFqbcoVG32bZ2r8.roa (hash: E92Ulmv1M67QKZLv1VXUCMAlXz/Jc5TybOn0dCFrPnk=) 4: Snz83wMqCM-SKONtyGtVYyf_564.roa (hash: p8QMBaY7f26L9gcaXCq1Gvj1hb7teO/PHvsMVvNQlYA=) 5: fVaVeG-EUNEEHciK2JLLtXDVlys.crl (hash: HsXO0n11KO1wKe7sRY5zKSProufmux6HEBRNh5xezmU=) 6: o1HryCgBbs653veiR5bTMLwPhd0.roa (hash: LtY1DMpIFY18APuJfTlDp+opuoKFNGf5hxmLjfIFwOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e6:04:d8:1a:78:99:8b:15:cd:e6:3d:37:ee:10:e9:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b Validity Not Before: Dec 3 21:01:08 2025 GMT Not After : Dec 4 21:01:08 2025 GMT Subject: CN=4dc7cef858097e4e60b848e267b42b6748fe183c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1f:a9:a0:82:23:2c:16:85:de:41:4b:f6:c3: 7c:7f:df:04:ec:21:c8:9a:28:96:d2:83:7c:cd:08: 02:30:ad:91:a8:b1:b3:a2:b8:11:0e:6a:df:c9:de: a0:9e:de:70:fc:7e:a3:90:3f:21:14:6c:99:d1:9a: 6d:ec:f8:96:48:c8:eb:30:14:c9:d0:e4:9a:e6:e5: 97:91:80:09:e6:23:5f:57:85:77:94:79:e8:c3:f2: f8:77:c2:6d:cc:07:21:18:0d:1f:32:fc:a1:c9:10: 87:03:c1:54:dd:eb:92:bd:03:6f:b2:b6:23:d5:c2: d5:fa:19:8b:5c:21:20:c3:85:95:38:3e:73:b1:1d: 1b:5b:59:9a:e1:84:58:d1:8f:0f:0f:40:e6:2d:36: a0:60:82:7b:a7:fa:04:2e:cb:7e:75:0d:b5:88:a1: 61:18:cc:5f:0f:57:ca:61:3c:f1:e0:90:a2:bd:ed: 04:54:54:18:ec:c0:24:6a:ed:68:31:64:10:5b:73: eb:00:74:93:43:1c:36:0b:fe:50:ff:0b:15:82:f7: d7:4d:b9:ad:5d:ab:14:69:1b:83:a7:ab:f5:00:37: 9a:1c:46:44:bf:56:b6:0d:b0:42:c0:a8:55:21:2c: 35:fc:4c:88:e1:c5:06:b7:97:a8:52:f6:e4:37:c4: 4f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C7:CE:F8:58:09:7E:4E:60:B8:48:E2:67:B4:2B:67:48:FE:18:3C X509v3 Authority Key Identifier: keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:e0:ab:7c:23:58:65:53:9f:a4:41:18:0d:ee:ce:3a:81:6f: 80:ad:9d:ac:58:fd:31:47:37:c9:48:ca:9c:fb:b2:6b:af:ce: 6b:8c:fd:b6:00:40:e8:45:3d:25:04:a6:75:e1:4e:33:84:ce: c2:18:f5:32:ca:a0:b2:d2:07:df:2b:e6:bd:28:94:13:be:18: 35:44:38:4b:a4:a6:3e:e4:c6:91:0c:14:ab:4e:44:59:e2:b8: 69:14:1e:3d:f6:c0:fa:ef:ec:4d:b7:d8:0d:33:17:ac:29:84: 4d:c5:2d:39:55:06:c7:41:39:13:37:e3:a5:79:d9:30:6b:e6: 10:a5:2f:ee:86:4c:a9:c8:24:fb:6e:14:60:e6:01:da:78:ed: 9b:b5:1d:bf:10:44:b5:59:5f:d4:7b:08:50:ec:b1:89:89:a4: 00:77:d8:e7:b7:09:3d:9e:cb:c8:e7:53:f9:06:07:40:7d:22: 17:6a:c3:e6:dc:71:47:b6:5a:07:17:9c:4f:10:b4:90:e7:15: 91:b9:3f:c9:9d:a6:4f:0f:37:a0:c4:d3:f2:c6:7f:8b:4a:71: 6e:f1:e1:4e:71:5e:ca:25:48:03:44:0d:8c:9a:72:6c:10:4d: 73:60:49:80:95:e1:dd:1f:7f:70:0d:d3:1a:ee:0a:18:3c:01: d2:08:6f:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrmBNgaeJmLFc3mPTfuEOkuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTY5NTc4NmY4NDUwZDEwNDFkYzg4YWQ4OTJjYmI1NzBk NTk3MmIwHhcNMjUxMjAzMjEwMTA4WhcNMjUxMjA0MjEwMTA4WjAzMTEwLwYDVQQD Eyg0ZGM3Y2VmODU4MDk3ZTRlNjBiODQ4ZTI2N2I0MmI2NzQ4ZmUxODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR+poIIjLBaF3kFL9sN8f98E7CHI miiW0oN8zQgCMK2RqLGzorgRDmrfyd6gnt5w/H6jkD8hFGyZ0Zpt7PiWSMjrMBTJ 0OSa5uWXkYAJ5iNfV4V3lHnow/L4d8JtzAchGA0fMvyhyRCHA8FU3euSvQNvsrYj 1cLV+hmLXCEgw4WVOD5zsR0bW1ma4YRY0Y8PD0DmLTagYIJ7p/oELst+dQ21iKFh GMxfD1fKYTzx4JCive0EVFQY7MAkau1oMWQQW3PrAHSTQxw2C/5Q/wsVgvfXTbmt XasUaRuDp6v1ADeaHEZEv1a2DbBCwKhVISw1/EyI4cUGt5eoUvbkN8RPGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3HzvhYCX5OYLhI4me0K2dI/hg8MB8GA1UdIwQY MBaAFH1WlXhvhFDRBB3IitiSy7Vw1ZcrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMTdhYTctZTJhZC00YTg1LWIzZDIt NjNiMzM4MDhhNmE4LzEvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zMTdhYTctZTJhZC00YTg1LWIzZDItNjNiMzM4MDhhNmE4 LzEvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkuCrfCNY ZVOfpEEYDe7OOoFvgK2drFj9MUc3yUjKnPuya6/Oa4z9tgBA6EU9JQSmdeFOM4TO whj1MsqgstIH3yvmvSiUE74YNUQ4S6SmPuTGkQwUq05EWeK4aRQePfbA+u/sTbfY DTMXrCmETcUtOVUGx0E5EzfjpXnZMGvmEKUv7oZMqcgk+24UYOYB2njtm7UdvxBE tVlf1HsIUOyxiYmkAHfY57cJPZ7LyOdT+QYHQH0iF2rD5txxR7ZaBxecTxC0kOcV kbk/yZ2mTw83oMTT8sZ/i0pxbvHhTnFeyiVIA0QNjJpybBBNc2BJgJXh3R9/cA3T Gu4KGDwB0ghv4A== -----END CERTIFICATE-----Generated at Thu Dec 4 05:19:01 2025 by rpki-client