This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft File: veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json) Hash identifier: RHdkOsxR6Y6WPkLEHi0mWzbspE3R3gTMcp/vzo8a97g= Subject key identifier: A7:47:28:8C:CB:44:31:60:E0:92:A1:2A:7E:9F:1A:11:B1:72:91:A1 Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2 Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2 Certificate serial: 019B0E5BB43AAA1F925EE8C7E815B3D330EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft Manifest number: 0B0E Signing time: Thu 11 Dec 2025 17:00:49 +0000 Manifest this update: Thu 11 Dec 2025 17:00:49 +0000 Manifest next update: Fri 12 Dec 2025 17:00:49 +0000 Files and hashes: 1: 4NbkXu89FXOyQLhXi76KTLRS_8U.roa (hash: /R0anYXR39TgZMh7wTdh79H3PAU+bV4gIhm7ONZyMQ8=) 2: C9jlSQpiBO6Y73lSEYMO0KAZmVU.roa (hash: bHV8b0r3RZhEMBuy9WHUg2/V18JXKTeCJEmR8xzO1XQ=) 3: Sucl-ga8bKlbfGlHsxsq1Oo80t0.roa (hash: k1Htljgs56uFbBPsZWyrCnN1sbAvxLT63YyfljrMCbY=) 4: bfuZYtxjTAOdpCpRWdDszbBOycM.roa (hash: oKsbpIb+4VCZp3VPNUM0uIEJezlOZcr7unos7yGZizs=) 5: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: S59mEBqiXzZKeOlLR8lKbxCVyny2BeLEVUZRClYT+MY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:b4:3a:aa:1f:92:5e:e8:c7:e8:15:b3:d3:30:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2 Validity Not Before: Dec 11 17:00:49 2025 GMT Not After : Dec 12 17:00:49 2025 GMT Subject: CN=a747288ccb443160e092a12a7e9f1a11b17291a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:81:0c:33:07:12:da:37:2c:a8:36:72:cf:cf: 22:c5:33:92:96:5e:da:52:0c:32:fa:53:99:92:ae: be:04:97:b4:74:ec:f8:24:be:b1:8b:69:ad:f7:e9: be:9d:19:ab:26:78:cc:9b:8c:a7:d5:3b:09:c6:78: 03:9c:75:07:21:e1:44:c4:00:48:57:04:12:e9:9d: 70:bd:e0:47:20:b4:9e:4c:b6:a0:2f:12:9d:8f:ca: 65:66:0c:08:86:a2:f1:84:45:88:26:dc:74:1b:a8: ed:03:35:3e:18:69:20:f9:26:04:3e:63:d1:dd:57: 1c:c6:8b:d6:d6:08:4d:79:52:60:26:47:5e:dc:44: b8:d1:17:24:c7:bd:71:08:93:43:f4:fd:57:22:c1: 80:e5:b1:9d:c8:ae:94:23:f6:8e:6d:85:f2:bb:84: 37:0e:de:ec:d5:9a:12:0a:32:44:09:60:9a:27:44: a2:54:16:fe:c5:5a:9b:c1:1d:ab:70:f0:ba:4c:42: ed:76:df:a2:26:12:8a:e4:7b:22:62:d6:37:89:8f: f9:8d:52:c0:f3:50:a3:d6:77:31:56:f7:f6:f6:17: ae:78:e9:f6:05:a3:ec:97:ae:e7:ec:96:58:d9:43: b1:09:ca:7c:d0:82:99:45:ef:f6:9d:29:2b:f6:20: 95:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:47:28:8C:CB:44:31:60:E0:92:A1:2A:7E:9F:1A:11:B1:72:91:A1 X509v3 Authority Key Identifier: keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:5d:8a:0a:ed:44:4b:db:94:f9:18:ba:0e:37:63:72:a1:b6: 3b:23:e7:bf:0e:f3:05:78:19:d2:7a:9d:19:15:35:6c:91:48: 38:48:cd:1e:83:f0:8b:b0:54:c5:fa:7e:ef:6b:23:7a:e9:3a: 44:a5:71:0e:55:f5:b3:e3:95:f1:96:2a:36:20:f4:a0:ba:0f: f4:2d:39:cb:72:e9:a2:f8:28:ad:c5:c9:20:0a:d9:98:a0:7e: 06:3a:18:04:9d:f4:60:1c:d5:bb:b9:6c:7c:09:ad:c3:29:f6: b8:1e:75:c9:17:82:ae:35:eb:85:cf:f8:a2:62:5e:90:ea:b9: 23:bf:1c:13:5a:d8:eb:10:98:a3:43:de:eb:63:58:2f:2f:84: 4c:ba:7b:cd:89:f9:c5:ae:fe:a9:fa:2c:93:c5:6c:39:2c:87: 2b:89:02:23:42:eb:9e:1b:33:79:34:49:9d:31:26:f8:bf:c1: 91:14:7a:07:5d:1b:a0:38:bf:98:2e:02:02:2a:c2:ad:bb:b9: c5:73:89:22:f1:7b:3d:76:dc:ee:08:9a:9e:77:c9:b2:20:68: 8a:bf:53:ba:84:d0:04:5a:d3:ad:88:89:69:50:45:5f:05:03: 2c:93:14:25:0a:1c:91:74:a5:4c:e3:43:d1:e6:9d:c0:e3:c2: 5d:c7:6c:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW7Q6qh+SXujH6BWz0zDuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTYzNmZmNTIzZTVmMzczNDIyN2YzM2M0NGMyZTUwZmY4 ZDFlZTIwHhcNMjUxMjExMTcwMDQ5WhcNMjUxMjEyMTcwMDQ5WjAzMTEwLwYDVQQD EyhhNzQ3Mjg4Y2NiNDQzMTYwZTA5MmExMmE3ZTlmMWExMWIxNzI5MWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YEMMwcS2jcsqDZyz88ixTOSll7a Ugwy+lOZkq6+BJe0dOz4JL6xi2mt9+m+nRmrJnjMm4yn1TsJxngDnHUHIeFExABI VwQS6Z1wveBHILSeTLagLxKdj8plZgwIhqLxhEWIJtx0G6jtAzU+GGkg+SYEPmPR 3VccxovW1ghNeVJgJkde3ES40Rckx71xCJND9P1XIsGA5bGdyK6UI/aObYXyu4Q3 Dt7s1ZoSCjJECWCaJ0SiVBb+xVqbwR2rcPC6TELtdt+iJhKK5HsiYtY3iY/5jVLA 81Cj1ncxVvf29heueOn2BaPsl67n7JZY2UOxCcp80IKZRe/2nSkr9iCV6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdHKIzLRDFg4JKhKn6fGhGxcpGhMB8GA1UdIwQY MBaAFL3mNv9SPl83NCJ/M8RMLlD/jR7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYt N2JmYjQzODFhYjU0LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYtN2JmYjQzODFhYjU0 LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlF2KCu1E S9uU+Ri6DjdjcqG2OyPnvw7zBXgZ0nqdGRU1bJFIOEjNHoPwi7BUxfp+72sjeuk6 RKVxDlX1s+OV8ZYqNiD0oLoP9C05y3LpovgorcXJIArZmKB+BjoYBJ30YBzVu7ls fAmtwyn2uB51yReCrjXrhc/4omJekOq5I78cE1rY6xCYo0Pe62NYLy+ETLp7zYn5 xa7+qfosk8VsOSyHK4kCI0LrnhszeTRJnTEm+L/BkRR6B10boDi/mC4CAirCrbu5 xXOJIvF7PXbc7giannfJsiBoir9TuoTQBFrTrYiJaVBFXwUDLJMUJQockXSlTOND 0eadwOPCXcdsqQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:40 2025 by rpki-client