This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft File: 71VFlkWXnEE9C8b3RU8NNuQOmfk.mft (raw, json) Hash identifier: D0XziNf8k2pN0h5pMzfAU0HaWQg7vZmPqLGDNzjN58A= Subject key identifier: 38:F1:D6:05:7F:38:A9:7A:3C:98:85:C5:EF:61:D6:E1:8B:1B:AE:C8 Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9 Certificate issuer: /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9 Certificate serial: 019B52CF0659597DF707FD115E1AC6CEB623 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft Manifest number: 047C Signing time: Thu 25 Dec 2025 00:00:57 +0000 Manifest this update: Thu 25 Dec 2025 00:00:57 +0000 Manifest next update: Fri 26 Dec 2025 00:00:57 +0000 Files and hashes: 1: 71VFlkWXnEE9C8b3RU8NNuQOmfk.crl (hash: Gm9hOnYLLXd1UL3MIgBYUvnNSaXZPp6AycUsn3uva6s=) 2: ANJPzCxK_HnMEX4DpZted-gFbKc.roa (hash: u7oq/DdEoSmnGW4xIokmlTuk13k00LAjUJfdE5RPRJY=) 3: hT7unl9ZuxZPAjHhi1yxgaF0b84.roa (hash: v8cgVoUrK7g8xYPzYyvvJU+HdpGiFjC2QbRLHwLNvNg=) 4: uWpNCPTv1fX6SmxhkKVSdngegu4.roa (hash: kLvGX1zZO1OaTg+o6DjuOwMKQv+Bs3Dx3ldycWfaKag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:cf:06:59:59:7d:f7:07:fd:11:5e:1a:c6:ce:b6:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9 Validity Not Before: Dec 25 00:00:57 2025 GMT Not After : Dec 26 00:00:57 2025 GMT Subject: CN=38f1d6057f38a97a3c9885c5ef61d6e18b1baec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:7e:f2:7f:03:f5:49:b9:f3:92:ff:b6:d6:b7: 45:a0:d1:8b:d2:47:5a:97:a3:95:46:68:80:ab:94: 91:94:3f:eb:94:0c:c1:a5:a2:5a:ac:f2:1b:8d:74: 6f:bd:f1:be:19:c1:de:dc:7a:c3:16:e9:d1:4f:5e: 3e:b0:60:7f:47:66:e9:40:48:06:c7:93:7f:e6:c8: 81:d9:df:b4:fa:31:5f:06:c4:9e:e0:69:d7:94:18: 24:1e:80:b4:1b:42:db:ca:b1:bf:1e:7e:7f:27:2f: fa:ec:23:2f:55:d3:b0:a0:24:ed:bd:f0:92:d3:f7: 3b:7c:f2:35:c6:40:60:70:e9:07:52:38:6c:a3:78: df:93:a8:c4:ed:de:06:d5:f0:57:27:a0:dc:cd:2e: 16:95:db:c7:60:c8:13:1c:0b:95:bf:4f:40:49:b9: 1d:57:c7:38:64:f0:35:c0:b6:10:32:e4:1a:de:17: de:20:fc:0d:e6:df:9c:c9:b7:ec:73:81:7a:e7:92: fd:56:e6:ba:88:d2:e6:7c:40:c4:11:e0:bb:6b:02: 76:1c:8e:8f:f5:7b:d1:12:90:56:05:e8:e8:85:9c: c9:69:ae:0f:3a:06:2a:f9:54:25:9c:c5:cf:5b:35: d0:c0:c4:0c:db:12:66:a8:96:78:fd:80:a7:e4:9a: dc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F1:D6:05:7F:38:A9:7A:3C:98:85:C5:EF:61:D6:E1:8B:1B:AE:C8 X509v3 Authority Key Identifier: keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:fb:3e:f5:63:5f:16:ce:70:f2:b7:a0:85:7d:45:a7:89:94: 50:c3:63:1d:0c:7b:a7:14:2f:42:4c:9a:fd:a3:14:4c:55:be: 8f:7d:d3:f5:10:3a:26:b4:fc:23:9c:3f:f1:88:40:d8:c6:bd: 74:52:95:33:76:3e:35:cf:72:9b:67:e3:03:3b:34:7f:9d:31: 99:f5:d9:0d:71:5a:ce:51:1b:f3:5b:cc:d6:39:93:90:8d:6e: d7:ce:60:88:5c:7f:f7:a7:73:e4:2e:56:47:55:f8:dd:b5:b1: e6:82:d8:a2:51:ac:64:b6:47:38:bc:97:ce:81:cb:86:fa:33: df:3d:31:f9:03:59:e2:be:fa:00:75:d0:9e:5d:35:d2:06:10: 1b:4c:3e:20:cc:0b:dd:ab:f5:d5:ab:62:3e:43:cb:e8:43:3d: 80:a4:7d:b6:33:25:96:20:47:80:09:65:97:02:26:db:12:8b: c0:9f:fe:04:e4:80:de:2c:32:85:71:c1:c0:20:73:93:40:21: ec:6d:92:0e:0f:a1:60:cd:8c:6f:77:8f:ff:86:65:96:37:db: c2:9d:b9:8c:b1:ca:9f:a0:6d:4f:09:b0:7d:73:0f:36:40:b5: 11:1f:4a:bc:70:bb:c2:13:57:6f:40:31:21:59:a0:ce:0a:96: 1b:7d:f4:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzwZZWX33B/0RXhrGzrYjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTU0NTk2NDU5NzljNDEzZDBiYzZmNzQ1NGYwZDM2ZTQw ZTk5ZjkwHhcNMjUxMjI1MDAwMDU3WhcNMjUxMjI2MDAwMDU3WjAzMTEwLwYDVQQD EygzOGYxZDYwNTdmMzhhOTdhM2M5ODg1YzVlZjYxZDZlMThiMWJhZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9n7yfwP1Sbnzkv+21rdFoNGL0kda l6OVRmiAq5SRlD/rlAzBpaJarPIbjXRvvfG+GcHe3HrDFunRT14+sGB/R2bpQEgG x5N/5siB2d+0+jFfBsSe4GnXlBgkHoC0G0LbyrG/Hn5/Jy/67CMvVdOwoCTtvfCS 0/c7fPI1xkBgcOkHUjhso3jfk6jE7d4G1fBXJ6DczS4WldvHYMgTHAuVv09ASbkd V8c4ZPA1wLYQMuQa3hfeIPwN5t+cybfsc4F655L9Vua6iNLmfEDEEeC7awJ2HI6P 9XvREpBWBejohZzJaa4POgYq+VQlnMXPWzXQwMQM2xJmqJZ4/YCn5JrcnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjx1gV/OKl6PJiFxe9h1uGLG67IMB8GA1UdIwQY MBaAFO9VRZZFl5xBPQvG90VPDTbkDpn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFWRmxrV1huRUU5QzhiM1JVOE5OdVFPbWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wNTEyZGYtN2QwYy00NjNiLTg3MjQt ODI1MzFlOWM3ODA0LzEvNzFWRmxrV1huRUU5QzhiM1JVOE5OdVFPbWZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8wNTEyZGYtN2QwYy00NjNiLTg3MjQtODI1MzFlOWM3ODA0 LzEvNzFWRmxrV1huRUU5QzhiM1JVOE5OdVFPbWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPs+9WNf Fs5w8reghX1Fp4mUUMNjHQx7pxQvQkya/aMUTFW+j33T9RA6JrT8I5w/8YhA2Ma9 dFKVM3Y+Nc9ym2fjAzs0f50xmfXZDXFazlEb81vM1jmTkI1u185giFx/96dz5C5W R1X43bWx5oLYolGsZLZHOLyXzoHLhvoz3z0x+QNZ4r76AHXQnl010gYQG0w+IMwL 3av11atiPkPL6EM9gKR9tjMlliBHgAlllwIm2xKLwJ/+BOSA3iwyhXHBwCBzk0Ah 7G2SDg+hYM2Mb3eP/4Zlljfbwp25jLHKn6BtTwmwfXMPNkC1ER9KvHC7whNXb0Ax IVmgzgqWG330MQ== -----END CERTIFICATE-----Generated at Thu Dec 25 05:16:04 2025 by rpki-client