This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft File: 71VFlkWXnEE9C8b3RU8NNuQOmfk.mft (raw, json) Hash identifier: NDKrR4ByCwPtHoBxqXTbhnVxluBLlDIxX2UVbJ87nPE= Subject key identifier: A8:89:E9:83:B7:BA:59:D6:FA:62:9B:CC:11:77:FD:07:46:3E:F6:42 Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9 Certificate issuer: /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9 Certificate serial: 019B3D9118B9A5CE96D0B5E6586CA6B8E631 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft Manifest number: 0471 Signing time: Sat 20 Dec 2025 21:01:17 +0000 Manifest this update: Sat 20 Dec 2025 21:01:17 +0000 Manifest next update: Sun 21 Dec 2025 21:01:17 +0000 Files and hashes: 1: 71VFlkWXnEE9C8b3RU8NNuQOmfk.crl (hash: zvg624Dne1CDsdH5xB/a3tR8G3d9On3KqsubePPCRPc=) 2: ANJPzCxK_HnMEX4DpZted-gFbKc.roa (hash: u7oq/DdEoSmnGW4xIokmlTuk13k00LAjUJfdE5RPRJY=) 3: hT7unl9ZuxZPAjHhi1yxgaF0b84.roa (hash: v8cgVoUrK7g8xYPzYyvvJU+HdpGiFjC2QbRLHwLNvNg=) 4: uWpNCPTv1fX6SmxhkKVSdngegu4.roa (hash: kLvGX1zZO1OaTg+o6DjuOwMKQv+Bs3Dx3ldycWfaKag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:18:b9:a5:ce:96:d0:b5:e6:58:6c:a6:b8:e6:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9 Validity Not Before: Dec 20 21:01:17 2025 GMT Not After : Dec 21 21:01:17 2025 GMT Subject: CN=a889e983b7ba59d6fa629bcc1177fd07463ef642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:02:34:68:44:dd:18:65:ae:c7:15:a4:66:5d: b1:ec:46:66:34:4d:77:35:ac:57:7c:c5:ce:16:f1: ed:b8:c0:51:2b:f3:d6:2e:fc:1c:1f:a7:ee:40:46: 1b:0a:fb:63:16:43:f0:57:47:54:89:48:1b:15:dc: 97:b2:ed:33:1a:f1:25:e3:7a:eb:c0:32:99:cc:8e: 6f:9b:32:97:90:5c:07:1f:8f:94:3f:09:fb:68:57: c8:5f:dd:49:6f:80:c3:f3:91:b7:4e:24:8e:22:3a: e2:18:d6:1b:20:3b:19:ab:69:c3:c7:97:0c:4c:1a: 02:e1:b6:cc:0a:85:19:17:47:94:48:0a:b3:fc:31: b7:8f:48:3e:81:21:8d:b3:ad:99:7a:cb:5c:72:34: f8:dc:b0:7a:b4:8a:d3:77:6d:e3:57:e4:ca:5d:cb: 52:86:86:4b:71:45:26:8f:2c:f1:e3:76:c0:8f:cd: 2d:85:4a:8c:2d:cf:c9:38:46:e7:1d:d0:97:bd:96: a2:ae:18:f5:43:a2:c7:61:bb:8c:5c:31:d4:ce:76: 59:2d:a7:fe:61:9a:49:9a:28:ae:68:e7:5b:61:79: d5:d2:d2:40:c5:3b:81:72:1c:a5:6f:32:44:45:72: c7:df:ab:e2:4a:51:dc:b7:c9:0c:a1:e9:3f:6d:41: a7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:89:E9:83:B7:BA:59:D6:FA:62:9B:CC:11:77:FD:07:46:3E:F6:42 X509v3 Authority Key Identifier: keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:e5:0b:6f:f9:b0:b4:e7:44:6a:4c:29:3e:02:c9:38:1c:fc: 5e:5b:2a:a6:3e:df:19:08:5c:2e:96:24:fd:28:ce:85:43:4c: 5d:75:78:74:64:b5:eb:04:d8:e3:f9:bb:a4:10:4c:72:90:19: f1:53:04:44:5e:ce:42:dd:41:04:3d:f4:d5:16:76:c1:d9:0a: dc:d2:3d:99:d5:0a:e6:98:4f:f7:17:48:93:c4:a2:8e:15:2b: 1c:91:3f:7f:3a:74:e0:3e:82:ea:7e:8c:5f:76:5b:a7:58:60: 7f:f5:a2:d0:97:1a:5e:56:18:36:dd:7a:c9:40:30:94:23:6d: 6e:bf:a5:c4:66:ff:dc:22:d2:fa:bf:0d:92:1d:af:16:0b:ac: 7c:24:28:53:54:c6:b0:c2:25:3a:e8:b3:9e:76:48:7a:f6:93: f7:5c:57:5d:ca:bd:90:53:dc:f9:60:d0:69:f9:9e:4f:cb:b7: 3b:f0:07:39:de:99:8f:26:90:f2:24:4e:e3:c0:8e:82:f0:e6: f8:cc:1e:13:f9:b8:92:df:bc:0b:fe:e3:eb:66:49:2e:74:54: 58:3c:b0:89:5a:fc:00:7c:d0:23:6c:72:59:1c:74:63:9a:6e: 62:15:d7:44:31:79:df:30:24:44:12:c1:a8:9d:84:b1:33:bc: f2:7b:23:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kRi5pc6W0LXmWGymuOYxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTU0NTk2NDU5NzljNDEzZDBiYzZmNzQ1NGYwZDM2ZTQw ZTk5ZjkwHhcNMjUxMjIwMjEwMTE3WhcNMjUxMjIxMjEwMTE3WjAzMTEwLwYDVQQD EyhhODg5ZTk4M2I3YmE1OWQ2ZmE2MjliY2MxMTc3ZmQwNzQ2M2VmNjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wI0aETdGGWuxxWkZl2x7EZmNE13 NaxXfMXOFvHtuMBRK/PWLvwcH6fuQEYbCvtjFkPwV0dUiUgbFdyXsu0zGvEl43rr wDKZzI5vmzKXkFwHH4+UPwn7aFfIX91Jb4DD85G3TiSOIjriGNYbIDsZq2nDx5cM TBoC4bbMCoUZF0eUSAqz/DG3j0g+gSGNs62ZestccjT43LB6tIrTd23jV+TKXctS hoZLcUUmjyzx43bAj80thUqMLc/JOEbnHdCXvZairhj1Q6LHYbuMXDHUznZZLaf+ YZpJmiiuaOdbYXnV0tJAxTuBchylbzJERXLH36viSlHct8kMoek/bUGnuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiJ6YO3ulnW+mKbzBF3/QdGPvZCMB8GA1UdIwQY MBaAFO9VRZZFl5xBPQvG90VPDTbkDpn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFWRmxrV1huRUU5QzhiM1JVOE5OdVFPbWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wNTEyZGYtN2QwYy00NjNiLTg3MjQt ODI1MzFlOWM3ODA0LzEvNzFWRmxrV1huRUU5QzhiM1JVOE5OdVFPbWZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8wNTEyZGYtN2QwYy00NjNiLTg3MjQtODI1MzFlOWM3ODA0 LzEvNzFWRmxrV1huRUU5QzhiM1JVOE5OdVFPbWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAueULb/mw tOdEakwpPgLJOBz8Xlsqpj7fGQhcLpYk/SjOhUNMXXV4dGS16wTY4/m7pBBMcpAZ 8VMERF7OQt1BBD301RZ2wdkK3NI9mdUK5phP9xdIk8SijhUrHJE/fzp04D6C6n6M X3Zbp1hgf/Wi0JcaXlYYNt16yUAwlCNtbr+lxGb/3CLS+r8Nkh2vFgusfCQoU1TG sMIlOuiznnZIevaT91xXXcq9kFPc+WDQafmeT8u3O/AHOd6ZjyaQ8iRO48COgvDm +MweE/m4kt+8C/7j62ZJLnRUWDywiVr8AHzQI2xyWRx0Y5puYhXXRDF53zAkRBLB qJ2EsTO88nsj0g== -----END CERTIFICATE-----Generated at Sun Dec 21 03:26:28 2025 by rpki-client