This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json) Hash identifier: 49FdhJ/15mBsOudp1JwUy6YhDafW4nJpuzuOSIKQeX8= Subject key identifier: 89:B0:55:03:24:5C:EC:01:81:11:57:78:E0:22:F3:B6:24:56:D6:8D Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78 Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78 Certificate serial: 019AF76618656D44831E8F4E377FDA95D037 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft Manifest number: 1766 Signing time: Sun 07 Dec 2025 06:00:54 +0000 Manifest this update: Sun 07 Dec 2025 06:00:54 +0000 Manifest next update: Mon 08 Dec 2025 06:00:54 +0000 Files and hashes: 1: OTqu6ofFTyzK0xc5jrx6KgXbQ7M.roa (hash: McteydyUGW+LpPCexm+O1QefOp1oYc2XsREa8UjCVIA=) 2: dKgonROO4xpKslqbxO1osnY3m3M.roa (hash: Hl3GLighJnfdP7Jed7jsC0ysJmCVrDY4pvlKDvOdEYc=) 3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: y930bPFkRjtkjEiaDv+DRsaNCNXao4TJXLnsc6H2tnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:66:18:65:6d:44:83:1e:8f:4e:37:7f:da:95:d0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78 Validity Not Before: Dec 7 06:00:54 2025 GMT Not After : Dec 8 06:00:54 2025 GMT Subject: CN=89b05503245cec0181115778e022f3b62456d68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:58:2d:13:8f:1d:39:3d:5b:4e:75:fe:a3:e5: 7b:b2:80:72:98:bb:24:ea:35:09:f3:c1:45:14:45: 70:8b:12:ab:05:d8:2c:15:05:11:52:5c:25:53:15: ad:92:aa:a6:20:a9:f5:77:eb:71:24:a9:86:98:45: 90:75:9e:98:9f:e4:25:e5:42:74:d8:58:fa:62:fd: e9:2b:54:c1:ed:c2:5b:0a:bc:2e:8d:13:1e:4c:28: 47:d4:3f:d2:cb:6c:3f:c1:6b:7c:17:3e:a8:5c:94: ed:c6:93:78:25:73:97:25:40:f7:fa:b3:cd:0e:d8: 26:7d:ec:39:7e:ee:22:bb:b9:ba:f7:31:ec:43:0f: 01:ee:60:f8:9e:52:27:94:82:53:4d:09:d6:00:f9: a3:ce:ec:20:75:f8:43:81:a5:a3:77:c6:6e:17:05: e8:03:cf:e3:ae:25:94:97:d8:87:e1:fa:ba:51:2b: e4:6c:c2:3f:bc:64:2e:93:3b:74:2b:a8:3f:5f:de: da:b1:14:f5:d4:5b:24:d0:7c:ed:9c:bc:56:6a:a7: e2:5e:52:5a:b2:d6:f2:61:31:46:2f:25:ca:15:13: 7b:f3:cc:cc:63:0d:46:3b:18:bd:de:c9:1e:b7:18: 48:bf:8e:53:ce:1d:89:51:20:5b:62:f4:d3:08:ea: 87:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B0:55:03:24:5C:EC:01:81:11:57:78:E0:22:F3:B6:24:56:D6:8D X509v3 Authority Key Identifier: keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:30:2a:43:ca:8c:d0:77:3a:eb:77:f4:07:d3:65:19:18:54: a2:7d:b4:29:97:56:ad:a5:f4:1e:d1:db:67:a0:2e:ff:a9:aa: c2:b3:df:98:f0:a1:8d:73:ff:4b:93:13:92:f1:3d:ef:0d:61: f7:36:9a:38:69:d9:78:38:91:e6:64:9f:cc:cc:4c:a9:94:14: a8:88:98:f4:7b:a0:3b:db:1f:6c:bc:8f:82:e9:9e:2a:34:8b: 53:5e:74:e9:dc:27:7e:aa:f0:a4:a0:37:8d:4f:b1:6c:5e:72: 99:aa:ec:a2:0a:2d:62:c3:55:dd:42:68:56:4d:56:08:ad:d1: 65:fa:fc:1c:fd:3e:a2:ec:34:b2:d6:fd:b9:be:98:e3:9a:72: ac:03:3f:f5:9e:d1:33:dd:a0:6b:dd:3c:60:f9:50:f4:ca:89: 31:b9:12:aa:7c:d7:18:a8:f3:0a:14:51:17:42:fa:da:d6:39: 91:de:34:83:06:f1:bc:13:c3:e2:b3:ac:a1:40:7f:a7:47:c2: 11:be:a7:98:2b:61:c4:1e:b8:55:68:6f:ec:84:50:02:94:f3: bb:0b:97:81:ed:2a:5f:5b:03:7f:53:c8:7b:39:f9:bf:84:89: d1:12:eb:c4:f8:b4:ec:76:3d:d0:46:1e:d2:6a:07:95:c7:86: fe:7d:0e:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3ZhhlbUSDHo9ON3/aldA3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMzEyNDdmMzU5YTZkNDkyZGM5OTQzYWUwZjAwZmM4YmUy MTZjNzgwHhcNMjUxMjA3MDYwMDU0WhcNMjUxMjA4MDYwMDU0WjAzMTEwLwYDVQQD Eyg4OWIwNTUwMzI0NWNlYzAxODExMTU3NzhlMDIyZjNiNjI0NTZkNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFgtE48dOT1bTnX+o+V7soBymLsk 6jUJ88FFFEVwixKrBdgsFQURUlwlUxWtkqqmIKn1d+txJKmGmEWQdZ6Yn+Ql5UJ0 2Fj6Yv3pK1TB7cJbCrwujRMeTChH1D/Sy2w/wWt8Fz6oXJTtxpN4JXOXJUD3+rPN Dtgmfew5fu4iu7m69zHsQw8B7mD4nlInlIJTTQnWAPmjzuwgdfhDgaWjd8ZuFwXo A8/jriWUl9iH4fq6USvkbMI/vGQukzt0K6g/X97asRT11Fsk0HztnLxWaqfiXlJa stbyYTFGLyXKFRN788zMYw1GOxi93sketxhIv45Tzh2JUSBbYvTTCOqH4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImwVQMkXOwBgRFXeOAi87YkVtaNMB8GA1UdIwQY MBaAFLwxJH81mm1JLcmUOuDwD8i+IWx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zNDZiZWYtMGE1ZS00NDAwLTlmODQt NTY4MDVjYTExYzMzLzEvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zNDZiZWYtMGE1ZS00NDAwLTlmODQtNTY4MDVjYTExYzMz LzEvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDAqQ8qM 0Hc663f0B9NlGRhUon20KZdWraX0HtHbZ6Au/6mqwrPfmPChjXP/S5MTkvE97w1h 9zaaOGnZeDiR5mSfzMxMqZQUqIiY9HugO9sfbLyPgumeKjSLU1506dwnfqrwpKA3 jU+xbF5ymarsogotYsNV3UJoVk1WCK3RZfr8HP0+ouw0stb9ub6Y45pyrAM/9Z7R M92ga908YPlQ9MqJMbkSqnzXGKjzChRRF0L62tY5kd40gwbxvBPD4rOsoUB/p0fC Eb6nmCthxB64VWhv7IRQApTzuwuXge0qX1sDf1PIezn5v4SJ0RLrxPi07HY90EYe 0moHlceG/n0OXA== -----END CERTIFICATE-----Generated at Sun Dec 7 12:22:15 2025 by rpki-client