This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft File: veGsj467UC_MRFYtwQ2XOIRJO-U.mft (raw, json) Hash identifier: K9bfwKnWr5cm9W/ZmFqVziZ1nbeDUnLTuet9odWXbTY= Subject key identifier: FB:5C:0B:D1:19:40:EC:01:BA:81:BD:F2:EC:F1:91:6B:63:78:C3:BF Authority key identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5 Certificate issuer: /CN=bde1ac8f8ebb502fcc44562dc10d973884493be5 Certificate serial: 019B2219F8A06B9556F0AD5276E2D855CA24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft Manifest number: 0AAD Signing time: Mon 15 Dec 2025 13:01:25 +0000 Manifest this update: Mon 15 Dec 2025 13:01:25 +0000 Manifest next update: Tue 16 Dec 2025 13:01:25 +0000 Files and hashes: 1: BIfb7ZxJcI_z8KzHeX5n3JHCcq0.roa (hash: zQ0KDMqG7X6AzmJpBDsrH1YQkiSpOUR257iu4JXF7UQ=) 2: veGsj467UC_MRFYtwQ2XOIRJO-U.crl (hash: PHxaJdQ4l2s0skOgQAHJ+iuy7gndLgSQ+yIDNwi/+Yw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:f8:a0:6b:95:56:f0:ad:52:76:e2:d8:55:ca:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde1ac8f8ebb502fcc44562dc10d973884493be5 Validity Not Before: Dec 15 13:01:25 2025 GMT Not After : Dec 16 13:01:25 2025 GMT Subject: CN=fb5c0bd11940ec01ba81bdf2ecf1916b6378c3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ea:60:f5:68:55:d8:1b:42:00:2f:32:0c:bc: 2f:17:18:73:66:7b:22:80:15:ef:bb:3f:92:dc:9e: 1d:ea:54:b2:bd:79:74:8a:6b:62:dd:7d:08:2e:d6: c7:98:3f:8b:83:fd:79:78:94:79:8c:a8:0a:89:ec: c1:0c:62:b1:5a:88:e0:3c:ae:f4:56:a0:30:34:b7: 30:07:b0:99:3c:01:5d:3a:57:be:e9:b1:3e:c7:ec: dd:4b:ae:e8:c8:29:36:17:44:d0:23:fd:ce:ee:0d: 2a:5b:04:94:fd:e2:e9:32:75:93:43:fc:e5:f4:4a: 7c:f5:14:63:65:f1:9b:c9:67:3d:3b:41:6c:83:f9: 86:70:85:4b:1a:e1:ec:16:e2:54:d8:cd:0a:36:83: 4b:7b:7e:68:74:7b:0c:43:77:5d:9d:fd:a2:69:84: 17:ca:e5:8c:94:ff:42:0a:04:70:1b:7e:4a:a4:07: 0c:aa:cd:ac:39:6a:71:7d:12:94:b2:c2:ae:f8:3f: 38:90:27:2f:28:2e:bf:6b:3e:aa:b4:4b:da:b0:7a: 40:d8:61:48:8f:9d:c4:27:c4:70:6f:12:cd:f6:a0: 09:d1:17:9c:d1:87:dc:6e:42:36:98:f3:13:4f:68: 99:db:25:8d:85:17:ef:48:6f:d4:ab:77:72:db:7f: 6e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5C:0B:D1:19:40:EC:01:BA:81:BD:F2:EC:F1:91:6B:63:78:C3:BF X509v3 Authority Key Identifier: keyid:BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a6:95:20:5d:6a:b9:cd:e7:6a:01:05:aa:3e:c9:50:77:46: 14:43:2b:c0:fc:53:f8:3b:45:f7:3b:5c:56:5b:04:70:b6:85: 6b:1b:ef:3a:ee:68:38:8f:83:7e:f0:d9:37:96:44:6d:96:e3: f3:0d:20:92:b9:b1:7e:14:b6:4b:30:62:d5:02:29:79:d9:8e: 2b:e9:ce:d1:8a:fe:95:93:d7:17:b2:52:b8:f1:be:2c:e4:35: c6:0b:65:85:fc:02:fc:2f:7c:c1:a1:ac:79:eb:42:d4:28:ea: 57:61:fc:8d:b3:c6:7d:05:cf:3e:33:aa:d0:c1:54:2f:c7:ce: 4f:33:59:e3:b7:6f:a8:0f:b1:7a:0e:e9:2a:f5:26:54:0a:00: 8d:f7:e9:00:40:a2:94:1e:79:7a:bf:b7:89:1c:c7:80:45:33: 54:59:40:80:f1:dc:bf:8f:29:8c:dd:c8:f9:ba:40:78:dd:3e: ec:73:b7:d9:5f:cb:a5:0f:f4:0c:62:96:c6:09:eb:8f:c0:92: 94:60:1e:a5:f7:9b:da:9a:df:d5:8b:c5:21:18:88:bf:08:3c: 4f:87:ae:f1:76:a4:0f:f7:6a:16:4a:73:b6:a2:8f:9b:bb:69: 27:06:e4:26:97:39:d7:35:bb:5c:c8:56:29:75:aa:d1:87:79: 27:19:f2:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGfiga5VW8K1SduLYVcokMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTFhYzhmOGViYjUwMmZjYzQ0NTYyZGMxMGQ5NzM4ODQ0 OTNiZTUwHhcNMjUxMjE1MTMwMTI1WhcNMjUxMjE2MTMwMTI1WjAzMTEwLwYDVQQD EyhmYjVjMGJkMTE5NDBlYzAxYmE4MWJkZjJlY2YxOTE2YjYzNzhjM2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3epg9WhV2BtCAC8yDLwvFxhzZnsi gBXvuz+S3J4d6lSyvXl0imti3X0ILtbHmD+Lg/15eJR5jKgKiezBDGKxWojgPK70 VqAwNLcwB7CZPAFdOle+6bE+x+zdS67oyCk2F0TQI/3O7g0qWwSU/eLpMnWTQ/zl 9Ep89RRjZfGbyWc9O0Fsg/mGcIVLGuHsFuJU2M0KNoNLe35odHsMQ3ddnf2iaYQX yuWMlP9CCgRwG35KpAcMqs2sOWpxfRKUssKu+D84kCcvKC6/az6qtEvasHpA2GFI j53EJ8RwbxLN9qAJ0Rec0YfcbkI2mPMTT2iZ2yWNhRfvSG/Uq3dy239ukQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtcC9EZQOwBuoG98uzxkWtjeMO/MB8GA1UdIwQY MBaAFL3hrI+Ou1AvzERWLcENlziESTvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MTdlN2QtNWI4Mi00ODdhLTlkNmYt MWE1MDgwODY0ZmE3LzEvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84MTdlN2QtNWI4Mi00ODdhLTlkNmYtMWE1MDgwODY0ZmE3 LzEvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaaVIF1q uc3nagEFqj7JUHdGFEMrwPxT+DtF9ztcVlsEcLaFaxvvOu5oOI+DfvDZN5ZEbZbj 8w0gkrmxfhS2SzBi1QIpedmOK+nO0Yr+lZPXF7JSuPG+LOQ1xgtlhfwC/C98waGs eetC1CjqV2H8jbPGfQXPPjOq0MFUL8fOTzNZ47dvqA+xeg7pKvUmVAoAjffpAECi lB55er+3iRzHgEUzVFlAgPHcv48pjN3I+bpAeN0+7HO32V/LpQ/0DGKWxgnrj8CS lGAepfeb2prf1YvFIRiIvwg8T4eu8XakD/dqFkpztqKPm7tpJwbkJpc51zW7XMhW KXWq0Yd5JxnyZw== -----END CERTIFICATE-----Generated at Tue Dec 16 00:20:51 2025 by rpki-client