This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft File: _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json) Hash identifier: UcvLz0EZ8hAKfYBbrvAni5lxGYbbOeRL+EykiEfQrYM= Subject key identifier: 78:58:DE:02:F4:DE:A7:79:01:A6:F4:5D:F9:42:91:18:EC:90:D5:3E Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8 Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8 Certificate serial: 019B0E25195FC7FF7D8DEAFE02791BA04A36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft Manifest number: 1191 Signing time: Thu 11 Dec 2025 16:01:10 +0000 Manifest this update: Thu 11 Dec 2025 16:01:10 +0000 Manifest next update: Fri 12 Dec 2025 16:01:10 +0000 Files and hashes: 1: JlnlHDByaNUy0-f6Bk6pC1lv0dA.roa (hash: 3ZWBVVVlMIE03x5aR9QcVmTZqjLrQw0dyYbjGkJTjWk=) 2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: ujYq4TEhmCf41xwPHKfiMLFxsNsumzS+c/yAO7P7DaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:19:5f:c7:ff:7d:8d:ea:fe:02:79:1b:a0:4a:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8 Validity Not Before: Dec 11 16:01:10 2025 GMT Not After : Dec 12 16:01:10 2025 GMT Subject: CN=7858de02f4dea77901a6f45df9429118ec90d53e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1e:64:d6:4a:35:8e:3f:21:1c:f5:83:5e:30: ad:32:12:9d:2a:6f:91:6a:c8:7b:58:33:88:b9:a5: 6b:34:53:b3:8d:4c:60:8d:2d:45:a7:ba:d6:2e:7a: d9:70:06:86:b7:79:5a:c3:d9:ac:64:59:f0:67:1f: 7e:36:d4:75:bb:7e:cf:66:23:3a:20:c0:d6:ff:32: b0:41:08:ec:7f:5a:a8:75:11:73:3f:3c:ca:12:12: 75:96:4d:df:22:9a:ba:2a:21:48:37:73:61:16:6d: 59:8e:4c:f9:ac:14:b8:01:02:aa:3d:75:52:d6:40: 3c:94:fa:68:b6:57:22:6c:43:7c:a7:3b:00:40:68: 8d:9f:08:52:9b:da:56:2a:ab:9e:35:dd:b9:65:ec: db:99:79:14:29:7b:dd:f2:cf:4c:f8:77:6c:85:c3: 42:51:43:e8:2b:95:24:d5:bd:a7:79:45:ad:3b:50: 71:40:a3:23:79:64:ba:5e:bb:c9:b2:d6:66:99:72: 81:e5:4f:d8:8e:11:bb:48:97:76:8d:76:40:f3:cb: ac:e2:df:69:66:63:1e:39:7a:bc:65:8e:35:87:14: 14:7b:fb:4e:8e:25:8b:c4:5e:57:d8:de:4f:ea:a0: 36:02:f0:4b:dd:b7:cf:e1:92:a4:7a:f8:ad:66:25: 9c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:58:DE:02:F4:DE:A7:79:01:A6:F4:5D:F9:42:91:18:EC:90:D5:3E X509v3 Authority Key Identifier: keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:66:03:c1:da:11:e9:0f:13:84:33:41:96:a2:73:e3:ab:2b: bc:91:2f:dc:c2:6c:ee:79:f9:23:a3:ea:f4:cc:88:62:ee:87: 66:16:42:98:a0:69:a5:7c:df:11:16:cb:d4:53:d8:51:2c:14: b6:8f:1d:39:ed:f7:43:d9:e4:dc:5a:2b:51:3e:05:94:f6:54: 31:07:47:b6:cf:a6:fb:75:fe:03:33:37:73:58:68:4b:34:31: 65:0a:b1:3a:ad:fa:ed:58:90:0e:66:c7:08:d9:b4:18:e5:5c: 2e:68:59:18:1a:db:a7:e3:32:55:4a:a8:87:aa:89:21:ee:4f: 65:4e:e3:c1:46:f1:46:80:bc:ce:31:2e:7e:88:d9:22:0b:95: 16:6b:7a:64:b1:2c:c0:44:c8:27:9b:75:21:5a:ae:7b:c5:f4: 19:40:fc:69:3e:65:8d:8c:79:00:08:5b:b1:d7:d5:d0:71:39: 2e:57:ae:4b:f6:20:7f:00:2e:b9:44:ac:03:38:7f:e7:1d:43: 2e:c0:66:f6:88:47:f3:22:9e:d1:83:67:1a:14:7c:87:e6:db: 1f:dd:ec:65:78:d8:0f:d8:27:f6:09:17:0b:3f:5e:d6:4d:7e: b0:f2:2b:df:42:a4:e6:0b:71:a9:3f:ee:69:a6:a4:09:e4:39: bb:91:fd:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJRlfx/99jer+AnkboEo2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMTU0ODJhNjU2MDA5YWExYmM4MDUxNDgzNjhkMWViZGY4 ZjYyYzgwHhcNMjUxMjExMTYwMTEwWhcNMjUxMjEyMTYwMTEwWjAzMTEwLwYDVQQD Eyg3ODU4ZGUwMmY0ZGVhNzc5MDFhNmY0NWRmOTQyOTExOGVjOTBkNTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh5k1ko1jj8hHPWDXjCtMhKdKm+R ash7WDOIuaVrNFOzjUxgjS1Fp7rWLnrZcAaGt3law9msZFnwZx9+NtR1u37PZiM6 IMDW/zKwQQjsf1qodRFzPzzKEhJ1lk3fIpq6KiFIN3NhFm1Zjkz5rBS4AQKqPXVS 1kA8lPpotlcibEN8pzsAQGiNnwhSm9pWKqueNd25ZezbmXkUKXvd8s9M+HdshcNC UUPoK5Uk1b2neUWtO1BxQKMjeWS6XrvJstZmmXKB5U/YjhG7SJd2jXZA88us4t9p ZmMeOXq8ZY41hxQUe/tOjiWLxF5X2N5P6qA2AvBL3bfP4ZKkevitZiWcuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhY3gL03qd5Aab0XflCkRjskNU+MB8GA1UdIwQY MBaAFP0VSCplYAmqG8gFFINo0evfj2LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1JWSUttVmdDYW9ieUFVVWcyalI2OS1QWXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jZWU5ZGItNjQwMS00NDk3LTg1ZDEt OTE3YzgwYjE0ODYyLzEvX1JWSUttVmdDYW9ieUFVVWcyalI2OS1QWXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jZWU5ZGItNjQwMS00NDk3LTg1ZDEtOTE3YzgwYjE0ODYy LzEvX1JWSUttVmdDYW9ieUFVVWcyalI2OS1QWXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWYDwdoR 6Q8ThDNBlqJz46srvJEv3MJs7nn5I6Pq9MyIYu6HZhZCmKBppXzfERbL1FPYUSwU to8dOe33Q9nk3ForUT4FlPZUMQdHts+m+3X+AzM3c1hoSzQxZQqxOq367ViQDmbH CNm0GOVcLmhZGBrbp+MyVUqoh6qJIe5PZU7jwUbxRoC8zjEufojZIguVFmt6ZLEs wETIJ5t1IVque8X0GUD8aT5ljYx5AAhbsdfV0HE5LleuS/YgfwAuuUSsAzh/5x1D LsBm9ohH8yKe0YNnGhR8h+bbH93sZXjYD9gn9gkXCz9e1k1+sPIr30Kk5gtxqT/u aaakCeQ5u5H9ww== -----END CERTIFICATE-----Generated at Fri Dec 12 01:20:49 2025 by rpki-client