This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft File: veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json) Hash identifier: wN+2lf7IC3UooiYjQpNafD+ucDfeBhx9BNVzLq0tjJo= Subject key identifier: 59:80:6A:E5:FC:D5:91:21:B4:90:61:A6:CF:11:27:1D:7C:B4:0E:A8 Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2 Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2 Certificate serial: 019B428077C5BF44C03EBBEE0E9E5B6B2D12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft Manifest number: 0B29 Signing time: Sun 21 Dec 2025 20:01:14 +0000 Manifest this update: Sun 21 Dec 2025 20:01:14 +0000 Manifest next update: Mon 22 Dec 2025 20:01:14 +0000 Files and hashes: 1: 4NbkXu89FXOyQLhXi76KTLRS_8U.roa (hash: /R0anYXR39TgZMh7wTdh79H3PAU+bV4gIhm7ONZyMQ8=) 2: C9jlSQpiBO6Y73lSEYMO0KAZmVU.roa (hash: bHV8b0r3RZhEMBuy9WHUg2/V18JXKTeCJEmR8xzO1XQ=) 3: Sucl-ga8bKlbfGlHsxsq1Oo80t0.roa (hash: k1Htljgs56uFbBPsZWyrCnN1sbAvxLT63YyfljrMCbY=) 4: bfuZYtxjTAOdpCpRWdDszbBOycM.roa (hash: oKsbpIb+4VCZp3VPNUM0uIEJezlOZcr7unos7yGZizs=) 5: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: X/uvuu83B1X1LYZgCT9oMnbgE0co9iEL/PVJ937SfEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:77:c5:bf:44:c0:3e:bb:ee:0e:9e:5b:6b:2d:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2 Validity Not Before: Dec 21 20:01:14 2025 GMT Not After : Dec 22 20:01:14 2025 GMT Subject: CN=59806ae5fcd59121b49061a6cf11271d7cb40ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:54:6d:28:68:25:63:fe:a1:ed:f8:6e:b7:94: 9a:db:66:d4:e7:9b:e9:e5:84:4b:94:cd:00:63:25: 25:bf:33:7a:d4:56:a3:18:2f:e7:41:d2:d0:08:d3: 12:57:cf:b2:d0:f9:b5:9e:fb:8e:45:c4:12:5d:7f: b7:4a:07:3e:4e:b7:b2:71:bd:68:2a:fb:fd:a2:2c: 9e:53:57:1a:30:3a:60:82:dc:8e:21:dc:8a:25:4e: 27:50:9f:f6:e8:65:f7:93:9f:8c:7b:9e:40:06:f6: 8a:9a:26:46:04:b2:42:6e:21:71:94:b9:31:c4:dd: 05:21:78:f8:0c:2c:7f:79:17:a2:8e:2e:89:7a:47: 5d:3c:bf:2c:95:c2:43:eb:21:60:66:d8:da:da:fa: 5e:01:36:a2:69:8e:02:4e:62:63:57:f1:a5:0e:96: aa:7b:56:7c:d1:2f:f5:d5:f3:70:00:4e:53:d6:b1: ca:0d:0c:17:ee:33:54:9f:ac:c7:12:6f:ae:46:93: f1:c5:69:df:82:d4:5b:7c:e9:c3:c3:5d:86:0a:bf: b7:13:22:df:b6:7f:44:c2:67:e4:35:4f:1b:aa:12: 22:6b:c6:b7:d7:dc:4d:7a:dd:cf:a4:79:38:c8:c6: b2:d7:1b:d5:c7:15:3e:13:59:c1:8d:3c:6b:60:73: 80:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:80:6A:E5:FC:D5:91:21:B4:90:61:A6:CF:11:27:1D:7C:B4:0E:A8 X509v3 Authority Key Identifier: keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:75:a9:c5:11:4b:1c:66:05:f6:24:cd:d4:df:85:c9:9d:ce: e2:dc:c9:74:cb:4b:6f:58:fa:d5:c8:44:46:08:ab:97:d5:1f: 75:77:cc:f8:f7:1d:5a:c4:f8:b7:70:ea:b0:5e:ea:73:ce:b7: e6:f7:8d:15:65:e9:c1:64:dc:ef:87:94:c2:75:06:4e:ac:a1: dd:89:73:68:f9:d4:3f:39:d6:20:86:fc:ee:0d:49:f9:7f:35: e6:71:80:e2:56:da:10:0b:42:78:a0:01:17:e3:c1:9b:c2:e8: b5:66:84:18:32:fc:d3:1a:94:0f:22:c1:08:29:f3:5a:77:9c: 47:e2:b2:07:a7:7d:8a:b8:ba:bc:e8:b2:97:c7:00:d6:b3:a7: 9e:ef:65:b1:cf:d9:80:32:ab:16:de:b7:86:d7:f0:36:54:29: 97:0c:e9:b5:3f:d3:b7:20:cc:de:87:da:23:0c:7d:68:52:0a: 97:f2:20:7a:ee:4b:8c:8e:44:1d:43:5f:15:9f:0f:4b:b1:a3: 56:27:4b:aa:7d:f7:4a:15:f6:8a:7d:0f:b9:5c:65:fc:fb:f1: 55:a2:71:0d:d6:36:35:05:4f:19:08:ca:aa:8a:48:79:4d:b5: 59:56:7e:7a:e0:75:11:74:32:a0:51:61:5b:18:ff:af:94:0b: f9:97:4e:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgHfFv0TAPrvuDp5bay0SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTYzNmZmNTIzZTVmMzczNDIyN2YzM2M0NGMyZTUwZmY4 ZDFlZTIwHhcNMjUxMjIxMjAwMTE0WhcNMjUxMjIyMjAwMTE0WjAzMTEwLwYDVQQD Eyg1OTgwNmFlNWZjZDU5MTIxYjQ5MDYxYTZjZjExMjcxZDdjYjQwZWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1RtKGglY/6h7fhut5Sa22bU55vp 5YRLlM0AYyUlvzN61FajGC/nQdLQCNMSV8+y0Pm1nvuORcQSXX+3Sgc+Treycb1o Kvv9oiyeU1caMDpggtyOIdyKJU4nUJ/26GX3k5+Me55ABvaKmiZGBLJCbiFxlLkx xN0FIXj4DCx/eReiji6JekddPL8slcJD6yFgZtja2vpeATaiaY4CTmJjV/GlDpaq e1Z80S/11fNwAE5T1rHKDQwX7jNUn6zHEm+uRpPxxWnfgtRbfOnDw12GCr+3EyLf tn9EwmfkNU8bqhIia8a319xNet3PpHk4yMay1xvVxxU+E1nBjTxrYHOAUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmAauX81ZEhtJBhps8RJx18tA6oMB8GA1UdIwQY MBaAFL3mNv9SPl83NCJ/M8RMLlD/jR7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYt N2JmYjQzODFhYjU0LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYtN2JmYjQzODFhYjU0 LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnWpxRFL HGYF9iTN1N+FyZ3O4tzJdMtLb1j61chERgirl9UfdXfM+PcdWsT4t3DqsF7qc863 5veNFWXpwWTc74eUwnUGTqyh3YlzaPnUPznWIIb87g1J+X815nGA4lbaEAtCeKAB F+PBm8LotWaEGDL80xqUDyLBCCnzWnecR+KyB6d9iri6vOiyl8cA1rOnnu9lsc/Z gDKrFt63htfwNlQplwzptT/TtyDM3ofaIwx9aFIKl/Igeu5LjI5EHUNfFZ8PS7Gj VidLqn33ShX2in0PuVxl/PvxVaJxDdY2NQVPGQjKqopIeU21WVZ+euB1EXQyoFFh Wxj/r5QL+ZdOog== -----END CERTIFICATE-----Generated at Mon Dec 22 05:31:09 2025 by rpki-client