This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft File: pVB1uOQuRRTvSdP-ovGHJk50-y4.mft (raw, json) Hash identifier: Dhy+zbhBTFGhnlJDrCeWvroZXPaS8aFDzkFAREEHg4E= Subject key identifier: 29:8C:8E:67:7C:99:AF:A7:6C:EB:45:C8:D0:00:EF:A8:D4:9F:BB:A0 Authority key identifier: A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E Certificate issuer: /CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e Certificate serial: 019B10B81394FC9D651CA37E30A29DF6DF11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft Manifest number: 040C Signing time: Fri 12 Dec 2025 04:00:57 +0000 Manifest this update: Fri 12 Dec 2025 04:00:57 +0000 Manifest next update: Sat 13 Dec 2025 04:00:57 +0000 Files and hashes: 1: AHyerdr5uxL6xuyGfsHFNBv_XjU.roa (hash: /uUPID3475V6+DCQHcFaqhePNwogod/B8RgCIUOzHrI=) 2: pVB1uOQuRRTvSdP-ovGHJk50-y4.crl (hash: XvKmYAZa/dlD9jyfhhE8PJp5SWHyB20saG0ulqnqNSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:13:94:fc:9d:65:1c:a3:7e:30:a2:9d:f6:df:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e Validity Not Before: Dec 12 04:00:57 2025 GMT Not After : Dec 13 04:00:57 2025 GMT Subject: CN=298c8e677c99afa76ceb45c8d000efa8d49fbba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bb:55:9b:d4:f4:d0:fc:8c:fc:f7:98:65:56: f9:f4:8f:99:40:0d:c6:70:3d:be:50:ad:88:09:f0: 6c:05:bb:ac:63:7a:9f:7b:02:67:72:2a:4e:5c:a5: fa:cf:6e:56:23:69:95:44:e0:f0:e2:b0:89:c8:c6: 8b:31:4e:d1:9b:97:28:df:4d:be:8c:72:92:71:eb: 03:74:40:62:3b:3b:40:65:3d:08:56:8f:a0:ee:f3: 6b:81:ae:cc:be:96:a4:84:b4:ab:f1:ef:fe:92:9d: 07:3e:a0:c3:7e:d5:d0:ea:ef:97:7b:56:60:4f:e3: b3:33:9b:da:d8:be:5d:10:e5:71:dc:6c:52:8a:3b: 7e:6b:fe:4f:f0:74:5d:8b:9c:8c:bc:5d:b9:ef:13: 08:3c:3c:2c:c7:a6:8c:42:96:cf:84:f0:f9:38:7c: b1:a9:21:99:dc:83:8d:c5:98:75:24:5b:57:7d:e2: 33:51:be:bb:77:50:36:79:c7:65:17:e2:b7:41:5d: ea:6a:6b:0d:ba:03:cc:5f:7b:0c:f7:ab:96:bb:d2: 53:85:4b:dd:a3:0c:b5:64:41:b1:c6:90:5d:76:83: c9:6c:1b:91:d4:e9:ed:c6:81:a8:19:f9:6e:3a:77: 86:18:52:db:2e:85:73:1a:6b:18:48:de:8b:07:3f: c0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8C:8E:67:7C:99:AF:A7:6C:EB:45:C8:D0:00:EF:A8:D4:9F:BB:A0 X509v3 Authority Key Identifier: keyid:A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:52:e6:5c:7b:10:c9:03:e9:08:0d:d3:3d:e6:89:63:6d:d3: 09:83:3d:dd:24:37:07:87:cc:e8:47:2e:24:de:48:2b:85:8e: fa:4c:b2:9d:84:f4:8e:77:12:48:eb:8d:01:4a:0e:cc:78:c8: 62:5a:ea:62:dc:cb:c8:a5:cf:40:9d:57:10:3e:76:b2:be:33: d6:dd:e7:e3:6c:7e:58:6c:2c:57:05:a7:6f:2e:76:7a:45:fc: a1:28:6f:84:8a:70:e4:1c:28:66:10:cf:6f:84:a6:3c:84:6c: 28:bb:f4:5f:63:c0:51:a0:db:e0:dc:cd:74:70:34:d9:f7:ae: 8c:4a:8a:06:dd:37:c8:61:a5:8f:26:3e:c4:47:5d:db:31:f0: fd:7c:5a:72:64:7d:f8:62:f8:f2:ac:32:4b:37:96:be:b0:1b: 5e:21:5c:b4:84:43:14:eb:4c:5b:28:58:c3:73:61:d1:2e:61: cf:87:b4:11:20:63:6e:ef:c7:0c:c7:e8:35:3e:a3:6c:06:cf: 6c:f1:f7:7f:ab:41:81:58:2c:ed:d9:53:f6:58:96:25:2b:4f: 8d:c2:2f:9d:38:6a:8d:1d:59:62:1e:34:e9:ff:fb:09:86:7e: be:d2:a5:c4:89:a6:62:df:7c:ba:de:31:82:58:4a:29:18:b4: 77:a3:33:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuBOU/J1lHKN+MKKd9t8RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NTA3NWI4ZTQyZTQ1MTRlZjQ5ZDNmZWEyZjE4NzI2NGU3 NGZiMmUwHhcNMjUxMjEyMDQwMDU3WhcNMjUxMjEzMDQwMDU3WjAzMTEwLwYDVQQD EygyOThjOGU2NzdjOTlhZmE3NmNlYjQ1YzhkMDAwZWZhOGQ0OWZiYmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7tVm9T00PyM/PeYZVb59I+ZQA3G cD2+UK2ICfBsBbusY3qfewJncipOXKX6z25WI2mVRODw4rCJyMaLMU7Rm5co302+ jHKScesDdEBiOztAZT0IVo+g7vNrga7MvpakhLSr8e/+kp0HPqDDftXQ6u+Xe1Zg T+OzM5va2L5dEOVx3GxSijt+a/5P8HRdi5yMvF257xMIPDwsx6aMQpbPhPD5OHyx qSGZ3IONxZh1JFtXfeIzUb67d1A2ecdlF+K3QV3qamsNugPMX3sM96uWu9JThUvd owy1ZEGxxpBddoPJbBuR1OntxoGoGfluOneGGFLbLoVzGmsYSN6LBz/AYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmMjmd8ma+nbOtFyNAA76jUn7ugMB8GA1UdIwQY MBaAFKVQdbjkLkUU70nT/qLxhyZOdPsuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFZCMXVPUXVSUlR2U2RQLW92R0hKazUwLXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85YjFmOTUtM2IxOC00ODEyLTkyNGUt N2JmZGE2MjU0NGNlLzEvcFZCMXVPUXVSUlR2U2RQLW92R0hKazUwLXk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS85YjFmOTUtM2IxOC00ODEyLTkyNGUtN2JmZGE2MjU0NGNl LzEvcFZCMXVPUXVSUlR2U2RQLW92R0hKazUwLXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlLmXHsQ yQPpCA3TPeaJY23TCYM93SQ3B4fM6EcuJN5IK4WO+kyynYT0jncSSOuNAUoOzHjI YlrqYtzLyKXPQJ1XED52sr4z1t3n42x+WGwsVwWnby52ekX8oShvhIpw5BwoZhDP b4SmPIRsKLv0X2PAUaDb4NzNdHA02feujEqKBt03yGGljyY+xEdd2zHw/XxacmR9 +GL48qwySzeWvrAbXiFctIRDFOtMWyhYw3Nh0S5hz4e0ESBjbu/HDMfoNT6jbAbP bPH3f6tBgVgs7dlT9liWJStPjcIvnThqjR1ZYh406f/7CYZ+vtKlxImmYt98ut4x glhKKRi0d6MzrQ== -----END CERTIFICATE-----Generated at Fri Dec 12 08:42:45 2025 by rpki-client