This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft File: rvHu-qdX046xBPpMuk2WK3LlK1I.mft (raw, json) Hash identifier: TpKrSClw4hZSw4TlhGBZsu783y9hFxllvsS7m2IQU9k= Subject key identifier: 6D:F3:A0:FB:8E:EA:F3:6B:06:41:6D:32:4D:F0:4A:5F:AE:54:32:52 Authority key identifier: AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52 Certificate issuer: /CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52 Certificate serial: 019B217616845B49B0173972BB2F80F7037C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft Manifest number: 1780 Signing time: Mon 15 Dec 2025 10:02:25 +0000 Manifest this update: Mon 15 Dec 2025 10:02:25 +0000 Manifest next update: Tue 16 Dec 2025 10:02:25 +0000 Files and hashes: 1: jtrE-ZquFgpFsUyQd2ruDZJ4V1Y.roa (hash: DLSZmdArA6I562nrgAPaSvfYMqezrmvR6p+K4KjZ8d8=) 2: rvHu-qdX046xBPpMuk2WK3LlK1I.crl (hash: x+CBiMWzlJYhNdSwO1tMx7QUy0qAsqYYcPcA4ohfvXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:16:84:5b:49:b0:17:39:72:bb:2f:80:f7:03:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52 Validity Not Before: Dec 15 10:02:25 2025 GMT Not After : Dec 16 10:02:25 2025 GMT Subject: CN=6df3a0fb8eeaf36b06416d324df04a5fae543252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:57:bd:f4:b9:fc:2a:57:a0:80:cf:01:a5:1a: a9:50:0f:bb:e1:dc:3e:2f:ee:07:cf:c5:41:7a:c7: 23:80:fb:13:81:dd:c2:c4:6f:0d:ba:8c:d3:c6:e3: 22:e5:2c:bc:8c:c9:77:cc:4f:ef:9e:b9:f4:f4:f4: 9b:a0:e4:c4:df:3c:3c:a6:35:58:ff:87:ce:18:58: 85:37:e9:90:2d:0a:42:82:c7:42:e4:5e:e8:ce:4d: ab:e9:47:a7:b9:39:5b:4c:41:16:ea:6c:ce:b2:c5: 53:59:f7:a1:67:84:fb:71:d5:17:1b:d1:d2:5d:03: 57:3f:ea:33:70:b5:5d:70:5d:a6:27:8d:37:ab:23: 55:1a:bb:b3:05:e9:4a:65:6a:a2:12:d8:cf:b8:be: 33:f0:69:ef:02:cf:02:17:e0:e9:65:5e:91:d0:3f: 12:e4:c2:c0:55:86:36:2f:08:5d:b8:a7:b7:9e:bb: 61:1f:5f:08:39:49:99:d1:75:17:91:7a:9c:76:e5: fa:86:f7:61:d0:07:45:b4:85:17:f3:dc:4b:e5:78: 3f:82:cb:52:b3:cf:74:ac:78:2f:be:a3:0e:b9:a7: e3:f1:10:ad:21:8a:99:a1:65:8a:f7:2d:60:2d:93: 42:fd:f1:6c:eb:2c:51:24:17:43:2e:dd:4f:b3:bd: d4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F3:A0:FB:8E:EA:F3:6B:06:41:6D:32:4D:F0:4A:5F:AE:54:32:52 X509v3 Authority Key Identifier: keyid:AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:a6:f1:75:97:de:78:51:08:1e:e2:6a:df:32:be:e9:1b:82: 02:94:13:93:a8:17:24:d2:68:9a:7a:c3:8d:f5:b4:27:59:26: 1a:f2:9e:1d:e3:e1:2e:cd:73:cf:b9:9e:e1:a3:7f:27:51:0c: c0:22:fe:95:a6:ef:9d:7d:a8:8a:97:7a:a6:6c:a9:6e:ac:f4: 5d:08:ce:73:ad:95:b2:86:a7:11:34:e8:22:17:64:05:94:56: d1:e0:d7:42:c5:69:4e:8e:fd:7d:14:dc:01:48:0f:ef:e2:3b: 22:e7:59:3a:b9:a8:88:20:05:fa:11:30:fa:66:22:1e:a6:07: b0:ec:a8:52:b0:10:f1:fa:ef:82:34:a5:78:71:f8:6f:91:82: 54:98:ea:63:0a:3e:a5:4c:ba:88:26:4b:35:a4:25:ea:3e:76: c3:92:cc:ed:25:5b:33:94:b3:ef:4d:c0:3a:df:b5:e5:79:ae: 76:a6:cd:43:fd:d0:99:74:ed:58:e4:94:80:b6:49:a5:06:b2: 78:0a:1b:71:90:57:a3:2c:77:5a:a7:9f:8e:b4:1a:03:d3:59: 2b:f6:7a:e1:bb:1b:e9:23:24:52:53:0e:95:34:55:5f:f3:15: e3:5c:3d:42:16:b9:5f:ef:b5:20:e8:4e:81:4d:f5:af:85:d8: 54:cb:8f:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdhaEW0mwFzlyuy+A9wN8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZjFlZWZhYTc1N2QzOGViMTA0ZmE0Y2JhNGQ5NjJiNzJl NTJiNTIwHhcNMjUxMjE1MTAwMjI1WhcNMjUxMjE2MTAwMjI1WjAzMTEwLwYDVQQD Eyg2ZGYzYTBmYjhlZWFmMzZiMDY0MTZkMzI0ZGYwNGE1ZmFlNTQzMjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1e99Ln8KleggM8BpRqpUA+74dw+ L+4Hz8VBescjgPsTgd3CxG8NuozTxuMi5Sy8jMl3zE/vnrn09PSboOTE3zw8pjVY /4fOGFiFN+mQLQpCgsdC5F7ozk2r6UenuTlbTEEW6mzOssVTWfehZ4T7cdUXG9HS XQNXP+ozcLVdcF2mJ403qyNVGruzBelKZWqiEtjPuL4z8GnvAs8CF+DpZV6R0D8S 5MLAVYY2LwhduKe3nrthH18IOUmZ0XUXkXqcduX6hvdh0AdFtIUX89xL5Xg/gstS s890rHgvvqMOuafj8RCtIYqZoWWK9y1gLZNC/fFs6yxRJBdDLt1Ps73UrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3zoPuO6vNrBkFtMk3wSl+uVDJSMB8GA1UdIwQY MBaAFK7x7vqnV9OOsQT6TLpNlity5StSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnZIdS1xZFgwNDZ4QlBwTXVrMldLM0xsSzFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jOWYzM2ItMmYxYi00YTExLWEyMWQt OWE2YmQwMTFmOGY2LzEvcnZIdS1xZFgwNDZ4QlBwTXVrMldLM0xsSzFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9jOWYzM2ItMmYxYi00YTExLWEyMWQtOWE2YmQwMTFmOGY2 LzEvcnZIdS1xZFgwNDZ4QlBwTXVrMldLM0xsSzFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACabxdZfe eFEIHuJq3zK+6RuCApQTk6gXJNJomnrDjfW0J1kmGvKeHePhLs1zz7me4aN/J1EM wCL+labvnX2oipd6pmypbqz0XQjOc62VsoanETToIhdkBZRW0eDXQsVpTo79fRTc AUgP7+I7IudZOrmoiCAF+hEw+mYiHqYHsOyoUrAQ8frvgjSleHH4b5GCVJjqYwo+ pUy6iCZLNaQl6j52w5LM7SVbM5Sz703AOt+15XmudqbNQ/3QmXTtWOSUgLZJpQay eAobcZBXoyx3WqefjrQaA9NZK/Z64bsb6SMkUlMOlTRVX/MV41w9Qha5X++1IOhO gU31r4XYVMuPZA== -----END CERTIFICATE-----Generated at Mon Dec 15 13:17:03 2025 by rpki-client