This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft File: v-NULdY_7SUN5ctl9uykh-f0eEc.mft (raw, json) Hash identifier: lcXLg6yOZwCdP1hODStUtQBuHYDuSXUoW4tBufkNDDY= Subject key identifier: 28:79:08:A6:9A:40:1F:0B:A6:16:B3:BA:DD:26:8F:2F:B9:85:D4:75 Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47 Certificate issuer: /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847 Certificate serial: 019B0EC99062103F2E5D156AFE24D3834011 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 19:00:49 +0000 Manifest this update: Thu 11 Dec 2025 19:00:49 +0000 Manifest next update: Fri 12 Dec 2025 19:00:49 +0000 Files and hashes: 1: 7_ycmg0-2tzp7CIdo8gplL9a278.roa (hash: XEoDI5Kr97fRLNGyRswSpfdzIPuYNKJgNWwTLw/sOpg=) 2: u42E-rWAmQgBLYpngQke_W6nUiE.roa (hash: skcKb420yoQzvUX8+CNyJl60MwIyb91kXhUGkdXKV9A=) 3: v-NULdY_7SUN5ctl9uykh-f0eEc.crl (hash: amnOMv+3Nlw/t0HGiGtwgWNFDVnru7wx80+x+i07Zqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:90:62:10:3f:2e:5d:15:6a:fe:24:d3:83:40:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847 Validity Not Before: Dec 11 19:00:49 2025 GMT Not After : Dec 12 19:00:49 2025 GMT Subject: CN=287908a69a401f0ba616b3badd268f2fb985d475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1e:52:b9:ee:da:82:f8:db:55:af:ac:5a:85: 60:2d:dd:6b:fd:46:1b:c9:89:59:3c:15:8b:25:f9: 61:b3:cf:b0:4a:08:eb:75:3d:fe:1c:43:b1:00:ab: 8c:27:e1:15:81:81:f6:ff:88:bd:82:24:60:75:00: b7:12:77:39:34:04:da:45:8e:18:c2:ae:b2:36:63: b5:cd:8b:42:1a:b4:58:c9:61:8b:2e:23:1f:0e:26: 99:27:9d:78:14:d8:4b:52:4f:ab:e8:77:6a:89:ba: 6c:e3:0e:64:5b:0d:52:70:10:50:f7:d8:6d:6b:47: ff:4e:4a:0d:5b:96:df:67:c6:c5:57:71:8b:2c:8a: 25:ce:b7:af:50:cd:69:74:94:ab:f3:28:44:75:f0: 17:f4:67:d1:13:2f:60:2a:83:99:00:85:08:d3:da: 4d:72:55:f0:47:85:e1:2d:fd:de:fa:c7:4f:11:cc: a9:94:c0:81:cb:47:d1:20:b3:88:c7:7a:9a:0a:22: 95:6c:f1:80:f6:ec:8a:63:87:dd:0a:20:e5:8c:3e: 82:a1:3c:ee:55:79:e1:06:77:d1:c4:52:d5:63:a9: cd:5a:81:b4:e1:9a:ef:19:df:e4:d4:c8:d4:32:ab: b8:01:57:4e:79:1d:11:b5:9e:9c:fb:a7:0a:05:45: 1a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:79:08:A6:9A:40:1F:0B:A6:16:B3:BA:DD:26:8F:2F:B9:85:D4:75 X509v3 Authority Key Identifier: keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:32:e6:a1:d5:83:98:4c:b0:c1:56:7b:7d:2a:e4:96:9d:fb: 13:1b:9b:67:c9:79:46:9e:57:00:ef:8a:c5:dd:05:59:01:bd: d2:ad:8c:68:21:e8:2c:df:52:ba:ac:85:8b:1f:eb:9d:86:3d: 35:36:b8:57:87:40:56:e5:cd:13:c5:a6:93:73:f1:39:61:4d: 7b:a0:fd:16:e7:97:40:a0:31:2d:38:c9:2c:90:3d:5f:5e:73: 35:62:df:d1:22:d4:b1:1a:69:30:c4:70:ee:d3:16:c1:24:4c: cc:04:b2:3b:d1:71:05:73:aa:68:c0:b6:f0:02:89:69:7c:62: c9:85:e7:48:e7:83:53:3c:18:69:5d:9c:51:75:b5:45:11:4a: 1e:b2:99:9f:d8:a6:01:29:a9:f7:e2:2a:42:fd:e4:91:e1:68: a6:d8:7b:0c:12:24:c7:7b:6e:b3:07:5f:30:02:97:5a:d0:22: e4:55:cb:aa:38:c8:f7:33:4c:2e:7f:be:72:06:ee:e9:70:6f: b5:6d:2c:9e:62:8f:7c:26:d5:07:50:83:37:75:7b:37:8a:2d: 82:90:e6:7c:f4:39:44:0f:c8:d8:63:d0:10:13:8e:ae:50:ef: bd:24:28:2c:0c:67:47:be:c2:dc:e7:a7:83:2d:7f:f0:ea:8f: 2b:51:79:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyZBiED8uXRVq/iTTg0ARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZTM1NDJkZDYzZmVkMjUwZGU1Y2I2NWY2ZWNhNDg3ZTdm NDc4NDcwHhcNMjUxMjExMTkwMDQ5WhcNMjUxMjEyMTkwMDQ5WjAzMTEwLwYDVQQD EygyODc5MDhhNjlhNDAxZjBiYTYxNmIzYmFkZDI2OGYyZmI5ODVkNDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx5Sue7agvjbVa+sWoVgLd1r/UYb yYlZPBWLJflhs8+wSgjrdT3+HEOxAKuMJ+EVgYH2/4i9giRgdQC3Enc5NATaRY4Y wq6yNmO1zYtCGrRYyWGLLiMfDiaZJ514FNhLUk+r6Hdqibps4w5kWw1ScBBQ99ht a0f/TkoNW5bfZ8bFV3GLLIolzrevUM1pdJSr8yhEdfAX9GfREy9gKoOZAIUI09pN clXwR4XhLf3e+sdPEcyplMCBy0fRILOIx3qaCiKVbPGA9uyKY4fdCiDljD6CoTzu VXnhBnfRxFLVY6nNWoG04ZrvGd/k1MjUMqu4AVdOeR0RtZ6c+6cKBUUasQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCh5CKaaQB8Lphazut0mjy+5hdR1MB8GA1UdIwQY MBaAFL/jVC3WP+0lDeXLZfbspIfn9HhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdi1OVUxkWV83U1VONWN0bDl1eWtoLWYwZUVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iMTU2NTgtMTBiNi00MDQxLWEzZGEt OGQzYTZkMTY1ZGEzLzEvdi1OVUxkWV83U1VONWN0bDl1eWtoLWYwZUVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9iMTU2NTgtMTBiNi00MDQxLWEzZGEtOGQzYTZkMTY1ZGEz LzEvdi1OVUxkWV83U1VONWN0bDl1eWtoLWYwZUVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDLmodWD mEywwVZ7fSrklp37ExubZ8l5Rp5XAO+Kxd0FWQG90q2MaCHoLN9SuqyFix/rnYY9 NTa4V4dAVuXNE8Wmk3PxOWFNe6D9FueXQKAxLTjJLJA9X15zNWLf0SLUsRppMMRw 7tMWwSRMzASyO9FxBXOqaMC28AKJaXxiyYXnSOeDUzwYaV2cUXW1RRFKHrKZn9im ASmp9+IqQv3kkeFopth7DBIkx3tuswdfMAKXWtAi5FXLqjjI9zNMLn++cgbu6XBv tW0snmKPfCbVB1CDN3V7N4otgpDmfPQ5RA/I2GPQEBOOrlDvvSQoLAxnR77C3Oen gy1/8OqPK1F5ng== -----END CERTIFICATE-----Generated at Fri Dec 12 02:56:30 2025 by rpki-client