This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft File: vY-cA-dX89tRTKONFa2kUfoulhU.mft (raw, json) Hash identifier: c0iW/L0aAvBryCNIDGKInBP8x3oQCmflnxIf94RUz9Q= Subject key identifier: 6D:E0:1A:34:FF:1B:A6:16:51:57:EF:AC:06:C0:7E:19:39:53:77:F2 Authority key identifier: BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15 Certificate issuer: /CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615 Certificate serial: 019AAD279FE027C23F6AF45F85E4C8B8CE9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft Manifest number: 0AB3 Signing time: Sat 22 Nov 2025 20:00:46 +0000 Manifest this update: Sat 22 Nov 2025 20:00:46 +0000 Manifest next update: Sun 23 Nov 2025 20:00:46 +0000 Files and hashes: 1: CKcxnnd19wN0dY_tJv81hrxqU-4.roa (hash: Jigb3Y01l+fMYMW0ZZB5oBdO1NKLRrYbvCaXnAo+wkY=) 2: t5V-1w-s-rvBgb3wq2ZSKMwJCs0.roa (hash: 0NfSlFcI3MTsg3tU/1EBreDuvvrgFnFan39Sv/glqLM=) 3: usukqM3IhyDYNnttlGzr4GMalbM.roa (hash: AmN91z8j0spH0QCHEMiU2dfIQz38pEXTN+9Bqls+dfE=) 4: vY-cA-dX89tRTKONFa2kUfoulhU.crl (hash: 2DO18SYE9NuqP0jWogBreekqoovWSSIIVpbStee35Pw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ad:27:9f:e0:27:c2:3f:6a:f4:5f:85:e4:c8:b8:ce:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615 Validity Not Before: Nov 22 20:00:46 2025 GMT Not After : Nov 23 20:00:46 2025 GMT Subject: CN=6de01a34ff1ba6165157efac06c07e19395377f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:36:d6:b1:4a:bb:85:7c:b8:0e:00:f3:05:9e: e6:b6:74:b0:bd:0b:da:25:60:16:8c:c2:d3:2f:9c: 46:76:c0:5b:76:3a:07:2c:b2:82:fb:16:91:78:a7: 75:e2:b2:ed:75:58:73:1c:67:17:4d:ed:f1:12:63: 3a:03:ea:1b:95:b6:9c:41:91:25:55:77:34:58:d6: b8:3d:ac:49:61:c6:f5:9c:a3:94:c9:f0:53:e2:c8: e1:28:fe:68:b7:f7:19:11:71:52:2d:8d:0a:98:4f: 3c:14:dd:25:b7:f8:ce:e8:7f:5a:cb:65:3c:bc:69: c1:df:c2:ee:38:7a:bf:6e:bd:aa:5d:fa:2f:b9:8d: 65:c2:0d:03:c1:4c:a9:1a:f3:65:ac:21:8b:87:34: 3c:76:49:89:0d:ea:4b:0e:42:fa:ef:1c:c8:22:fc: 27:a0:e9:c2:d5:35:87:95:6b:b0:f9:45:9d:9e:f3: 86:01:81:2b:8c:8d:46:3c:60:95:54:fb:33:59:11: 9c:99:1d:04:57:2e:cf:e4:d0:dc:8a:1a:cf:4f:d8: 83:92:e8:f3:84:a4:6a:94:57:87:e9:6d:21:6e:c2: de:9f:a8:dd:32:9a:78:8b:c8:81:39:fd:33:42:b7: 62:dd:37:ec:7f:30:c5:16:0a:70:fc:56:63:da:02: ed:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E0:1A:34:FF:1B:A6:16:51:57:EF:AC:06:C0:7E:19:39:53:77:F2 X509v3 Authority Key Identifier: keyid:BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:fc:7c:35:2c:72:ca:90:69:0c:ac:aa:70:cb:ae:40:63:35: d1:c1:ec:d4:8f:18:b8:4a:d9:8e:5b:48:e3:b5:72:9d:22:4c: ab:dd:b4:8c:94:8d:cb:09:9b:b8:e9:85:56:c7:06:da:31:a6: 62:57:4d:94:53:69:5c:82:8c:6d:f6:a4:a7:6b:95:78:cd:d8: 06:6d:58:dd:48:82:92:90:b1:e2:00:80:3a:87:46:fe:ce:30: 90:6a:d7:73:94:78:d5:74:73:9d:6e:6d:73:0e:16:65:62:50: 2b:55:ae:4a:4c:23:d7:d6:69:aa:57:cf:4d:a5:f4:93:d1:7f: 42:7c:32:a8:94:99:b1:12:e1:c8:c4:5c:b5:a6:f5:d0:04:d1: ab:e6:1d:29:8a:7f:67:a8:c9:b7:6d:25:95:1c:81:f8:94:04: ad:64:9b:bb:d3:bd:43:20:6e:e1:c5:47:71:05:ea:76:02:40: 7e:75:c2:7e:bd:5d:97:1a:ee:34:0c:71:f9:29:7c:31:52:f1: 6d:06:e0:2d:ce:b9:8a:9d:ad:3d:b3:a1:b4:18:92:dc:e4:ab: 3d:ec:55:9b:ce:71:87:a8:f2:40:d0:33:06:78:c9:11:cf:89: 05:69:ae:d4:c9:d0:ad:29:09:2a:2a:21:8e:1a:81:d4:a3:5b: c4:32:12:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqtJ5/gJ8I/avRfheTIuM6bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOGY5YzAzZTc1N2YzZGI1MTRjYTM4ZDE1YWRhNDUxZmEy ZTk2MTUwHhcNMjUxMTIyMjAwMDQ2WhcNMjUxMTIzMjAwMDQ2WjAzMTEwLwYDVQQD Eyg2ZGUwMWEzNGZmMWJhNjE2NTE1N2VmYWMwNmMwN2UxOTM5NTM3N2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTbWsUq7hXy4DgDzBZ7mtnSwvQva JWAWjMLTL5xGdsBbdjoHLLKC+xaReKd14rLtdVhzHGcXTe3xEmM6A+oblbacQZEl VXc0WNa4PaxJYcb1nKOUyfBT4sjhKP5ot/cZEXFSLY0KmE88FN0lt/jO6H9ay2U8 vGnB38LuOHq/br2qXfovuY1lwg0DwUypGvNlrCGLhzQ8dkmJDepLDkL67xzIIvwn oOnC1TWHlWuw+UWdnvOGAYErjI1GPGCVVPszWRGcmR0EVy7P5NDcihrPT9iDkujz hKRqlFeH6W0hbsLen6jdMpp4i8iBOf0zQrdi3TfsfzDFFgpw/FZj2gLtKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3gGjT/G6YWUVfvrAbAfhk5U3fyMB8GA1UdIwQY MBaAFL2PnAPnV/PbUUyjjRWtpFH6LpYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlktY0EtZFg4OXRSVEtPTkZhMmtVZm91bGhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iODNlNDctYmMwNC00OTJkLTlhMDct ZWNkZDgxNzQwMDdhLzEvdlktY0EtZFg4OXRSVEtPTkZhMmtVZm91bGhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9iODNlNDctYmMwNC00OTJkLTlhMDctZWNkZDgxNzQwMDdh LzEvdlktY0EtZFg4OXRSVEtPTkZhMmtVZm91bGhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvx8NSxy ypBpDKyqcMuuQGM10cHs1I8YuErZjltI47VynSJMq920jJSNywmbuOmFVscG2jGm YldNlFNpXIKMbfakp2uVeM3YBm1Y3UiCkpCx4gCAOodG/s4wkGrXc5R41XRznW5t cw4WZWJQK1WuSkwj19ZpqlfPTaX0k9F/QnwyqJSZsRLhyMRctab10ATRq+YdKYp/ Z6jJt20llRyB+JQErWSbu9O9QyBu4cVHcQXqdgJAfnXCfr1dlxruNAxx+Sl8MVLx bQbgLc65ip2tPbOhtBiS3OSrPexVm85xh6jyQNAzBnjJEc+JBWmu1MnQrSkJKioh jhqB1KNbxDISiQ== -----END CERTIFICATE-----Generated at Sat Nov 22 21:42:34 2025 by rpki-client