This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft File: vE8eawEfTWMxoSeVWlSPpQUlgKU.mft (raw, json) Hash identifier: s0I7X6351V4pggzu1RuhWuxS6mpQuNimjuok3Xo4X/c= Subject key identifier: 99:A4:5A:AD:47:21:12:B4:1C:D6:CE:04:3C:7D:6A:B5:6A:D6:36:F9 Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5 Certificate issuer: /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5 Certificate serial: 019B0CDBD280A3DD359D6B5790DA8294FE7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 10:01:31 +0000 Manifest this update: Thu 11 Dec 2025 10:01:31 +0000 Manifest next update: Fri 12 Dec 2025 10:01:31 +0000 Files and hashes: 1: BNqfmpLmjYM_hMvzjjiD1hvhjAw.roa (hash: i4CNGeJ+mFFlH8LiDeZQtBRRw7N8oDxdjkoS0v+qObY=) 2: aSjaEPJVPJX67mv2fHsiGHa_Pjs.roa (hash: ZEy+TRl03r70LlIyNTMVcl1yqBTFe/vMwXgXOHeWwSU=) 3: boEHtK6TX4b8tA4ZE52KAM2BJmo.roa (hash: +7NNF3zI76oRfEmOt6I7AY03Pn8U8YF2KqGhoMWLwNw=) 4: uV1M3fky2AaC8kOeiqG8vtH6340.roa (hash: 1utJq4cOepQgwTmFBjPYmXLoibI08Xbs4pkw4aA8F7w=) 5: vE8eawEfTWMxoSeVWlSPpQUlgKU.crl (hash: Yq4Tr/kR7Zoih8UMF+sX+2vs3xPgUAKIJofOjvyAULk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 10:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:db:d2:80:a3:dd:35:9d:6b:57:90:da:82:94:fe:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5 Validity Not Before: Dec 11 10:01:31 2025 GMT Not After : Dec 12 10:01:31 2025 GMT Subject: CN=99a45aad472112b41cd6ce043c7d6ab56ad636f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:76:d2:2f:b5:61:0f:ff:b2:7f:f9:c0:a9: 64:06:d5:25:f7:44:03:0c:98:4c:70:fc:99:c7:58: df:e1:38:47:10:f1:42:ca:7e:89:4c:6b:36:ae:7c: a8:46:8b:78:b8:0d:25:f1:1c:bf:b2:a1:ad:1c:db: 0d:65:51:6a:ae:58:5b:64:aa:40:c1:23:55:8b:8b: 61:75:7c:0d:02:36:62:9b:65:c7:1b:3c:4a:2f:1a: 9a:73:de:9d:4a:53:3c:ff:b0:29:b0:6f:97:58:9b: c9:e7:5e:af:3b:7f:2a:a0:e0:f9:fe:ce:73:c7:28: 2e:8b:da:fa:6a:f3:22:f0:52:1c:e2:32:dc:cf:b2: 71:70:4d:d1:09:ea:b6:5b:6a:ba:76:76:1f:02:e1: 06:bd:49:d1:59:51:37:1b:72:cf:4f:08:ce:26:43: ca:96:2f:0c:d8:d8:1a:b7:97:d6:c9:25:a6:da:ff: 73:34:d2:21:13:e7:c5:13:91:9c:d9:fc:61:e3:0b: 67:d9:92:16:04:b5:0d:86:7c:41:66:de:3e:2e:9a: b9:6d:4e:1a:68:17:35:d6:25:6f:21:68:ac:05:bf: b5:6f:9b:28:0e:84:a2:c0:f4:ca:47:32:e6:87:d9: b8:2d:ed:76:f5:03:f5:86:b0:3d:69:ab:e1:25:6c: 41:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A4:5A:AD:47:21:12:B4:1C:D6:CE:04:3C:7D:6A:B5:6A:D6:36:F9 X509v3 Authority Key Identifier: keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:54:7f:16:db:2b:3a:73:f0:12:b9:65:51:03:e9:a9:02:2a: 1a:fc:91:53:22:a9:d2:cd:f7:ff:de:a2:72:28:66:0c:5a:7e: 10:29:64:9b:ac:78:9a:8f:e4:07:39:98:ec:ce:84:7c:a7:26: 26:58:63:27:b4:9d:c8:a3:df:2d:dc:78:78:9d:6e:45:42:71: de:63:90:c9:bc:1a:0f:0f:cb:f5:a3:a0:ff:65:34:27:16:a9: bd:a1:34:a5:17:11:73:b4:43:0c:13:e4:81:ca:3a:27:ac:64: 64:f3:6f:c5:6a:a7:36:69:06:1d:0a:02:4c:e6:70:c3:65:cb: 56:8d:26:76:75:38:b8:9e:7b:33:91:92:00:37:d5:ee:a4:58: 71:72:68:45:36:23:65:ff:c0:67:8d:03:6b:80:cd:d1:07:3e: 5c:ac:11:da:14:c9:e3:f5:3d:58:91:4c:c4:a1:17:f7:8a:00: 72:18:d5:a9:b5:39:f3:1e:91:f9:0a:ce:a8:01:68:8f:c6:55: e5:fe:a0:64:87:3c:a4:f5:83:cf:8f:15:c2:34:5f:bf:65:bc: 7e:0e:ed:5e:1e:9a:28:51:1b:ca:74:58:d2:9e:d1:88:62:cd: 90:4c:7b:f9:77:2f:68:ef:a2:c7:24:f5:61:19:98:09:c3:39: 4a:66:84:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsM29KAo901nWtXkNqClP56MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNGYxZTZiMDExZjRkNjMzMWExMjc5NTVhNTQ4ZmE1MDUy NTgwYTUwHhcNMjUxMjExMTAwMTMxWhcNMjUxMjEyMTAwMTMxWjAzMTEwLwYDVQQD Eyg5OWE0NWFhZDQ3MjExMmI0MWNkNmNlMDQzYzdkNmFiNTZhZDYzNmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIZ20i+1YQ//sn/5wKlkBtUl90QD DJhMcPyZx1jf4ThHEPFCyn6JTGs2rnyoRot4uA0l8Ry/sqGtHNsNZVFqrlhbZKpA wSNVi4thdXwNAjZim2XHGzxKLxqac96dSlM8/7ApsG+XWJvJ516vO38qoOD5/s5z xygui9r6avMi8FIc4jLcz7JxcE3RCeq2W2q6dnYfAuEGvUnRWVE3G3LPTwjOJkPK li8M2Ngat5fWySWm2v9zNNIhE+fFE5Gc2fxh4wtn2ZIWBLUNhnxBZt4+Lpq5bU4a aBc11iVvIWisBb+1b5soDoSiwPTKRzLmh9m4Le129QP1hrA9aavhJWxBHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmkWq1HIRK0HNbOBDx9arVq1jb5MB8GA1UdIwQY MBaAFLxPHmsBH01jMaEnlVpUj6UFJYClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkU4ZWF3RWZUV014b1NlVldsU1BwUVVsZ0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82NmEyMzctOWJjNS00YWJkLTliOGIt YzU1NDc2NzU5ZDBjLzEvdkU4ZWF3RWZUV014b1NlVldsU1BwUVVsZ0tVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi82NmEyMzctOWJjNS00YWJkLTliOGItYzU1NDc2NzU5ZDBj LzEvdkU4ZWF3RWZUV014b1NlVldsU1BwUVVsZ0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFR/Ftsr OnPwErllUQPpqQIqGvyRUyKp0s33/96icihmDFp+EClkm6x4mo/kBzmY7M6EfKcm JlhjJ7SdyKPfLdx4eJ1uRUJx3mOQybwaDw/L9aOg/2U0JxapvaE0pRcRc7RDDBPk gco6J6xkZPNvxWqnNmkGHQoCTOZww2XLVo0mdnU4uJ57M5GSADfV7qRYcXJoRTYj Zf/AZ40Da4DN0Qc+XKwR2hTJ4/U9WJFMxKEX94oAchjVqbU58x6R+QrOqAFoj8ZV 5f6gZIc8pPWDz48VwjRfv2W8fg7tXh6aKFEbynRY0p7RiGLNkEx7+XcvaO+ixyT1 YRmYCcM5SmaEzQ== -----END CERTIFICATE-----Generated at Thu Dec 11 19:40:20 2025 by rpki-client