This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft File: fVaVeG-EUNEEHciK2JLLtXDVlys.mft (raw, json) Hash identifier: N+AzIK1w8ObLOxk1L3sklMw7r3nKgKncBapbz4a73vI= Subject key identifier: B8:52:EE:4D:5E:AF:D7:FD:23:37:B9:3D:40:8C:3F:C0:CC:D7:AD:3A Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b Certificate serial: 019B3CEC91A9EEDAA3B87097B6D71D7157D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft Manifest number: 17A5 Signing time: Sat 20 Dec 2025 18:01:35 +0000 Manifest this update: Sat 20 Dec 2025 18:01:35 +0000 Manifest next update: Sun 21 Dec 2025 18:01:35 +0000 Files and hashes: 1: 3rzAd226LvrMj0Cm0bg7sXb9CMo.roa (hash: n/9KaWla5IkEpIQV9qzq6meBd1c5WCnkPlwm2zCEneA=) 2: ATAXcZqjug_OpJ5XGTmLoPMGEOc.roa (hash: qD5faLkjHPVXEYY6RoVKIKOshkTkJFAi6AIDTmlkjhM=) 3: MqcJtj5YrV2deFqbcoVG32bZ2r8.roa (hash: E92Ulmv1M67QKZLv1VXUCMAlXz/Jc5TybOn0dCFrPnk=) 4: Snz83wMqCM-SKONtyGtVYyf_564.roa (hash: p8QMBaY7f26L9gcaXCq1Gvj1hb7teO/PHvsMVvNQlYA=) 5: fVaVeG-EUNEEHciK2JLLtXDVlys.crl (hash: 6ZkDBagksGnww2pfL2xznJNV9cxbs05K5kYnoHRBNJw=) 6: o1HryCgBbs653veiR5bTMLwPhd0.roa (hash: LtY1DMpIFY18APuJfTlDp+opuoKFNGf5hxmLjfIFwOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:91:a9:ee:da:a3:b8:70:97:b6:d7:1d:71:57:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b Validity Not Before: Dec 20 18:01:35 2025 GMT Not After : Dec 21 18:01:35 2025 GMT Subject: CN=b852ee4d5eafd7fd2337b93d408c3fc0ccd7ad3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:77:30:3d:c9:fa:9b:40:1f:64:41:9a:84:97: a7:a6:cb:99:1e:dd:0c:de:a6:0b:47:cf:40:16:9d: c9:2d:7e:9e:f5:c1:49:6f:b2:33:90:df:00:0f:58: 8e:a5:6f:71:c3:ed:ac:45:64:95:a5:b9:54:16:e8: 21:d0:1a:94:7f:b1:36:0a:b1:15:aa:a0:4a:d3:f6: 6d:8c:c6:d9:3b:f0:5a:e4:30:2c:13:64:29:98:88: a5:2d:6a:50:86:6c:ec:2f:7e:4d:0e:f3:15:a8:af: b8:16:3e:88:e9:8f:b9:38:7f:5e:9f:c7:ce:6f:19: e7:3d:7b:75:cb:21:c9:95:20:78:a9:43:96:5a:41: c8:cc:6a:35:14:e3:48:84:8e:64:f8:8d:ed:65:27: 50:9a:a2:64:b6:65:54:b9:74:0c:73:e7:93:48:6e: 81:39:5f:41:df:e6:2c:28:4a:7e:38:ea:06:d0:bc: 15:d5:a9:a7:86:08:08:11:62:99:da:57:b9:61:a1: 45:41:1d:77:94:fa:48:49:e7:fc:55:2a:2f:70:ed: 4d:d7:08:20:11:44:9e:70:38:69:96:41:d4:37:1e: c6:ea:7c:52:62:25:ef:ac:b2:2d:ba:6a:c7:d3:79: 33:2a:69:d9:19:b1:65:8f:8e:60:0a:c9:a2:30:94: 84:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:52:EE:4D:5E:AF:D7:FD:23:37:B9:3D:40:8C:3F:C0:CC:D7:AD:3A X509v3 Authority Key Identifier: keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:4e:3a:b8:04:0e:06:29:79:89:8e:dc:87:98:36:d8:9b:4a: 65:3e:89:35:a7:70:4f:cb:99:c6:49:eb:1b:00:d2:43:7f:e2: 72:6d:04:d1:d3:db:22:c6:1d:52:53:b3:14:6f:6e:45:93:14: bb:b8:87:00:35:9f:5e:87:05:74:28:7d:47:d0:07:28:f8:56: 69:15:d4:6e:99:91:19:ed:b7:af:c8:fd:1c:dc:af:b7:da:58: 33:b7:41:6e:6d:13:96:aa:cd:6e:d5:f3:18:f6:7d:c8:33:7c: 14:e3:2e:ab:62:d8:45:61:c5:2d:b9:fc:e7:d1:fa:6d:7f:1e: 63:75:c4:64:af:74:13:7e:e6:4c:c5:71:12:48:c1:a9:03:54: 3a:9c:43:b8:e6:38:c6:e4:d4:4c:ba:13:59:eb:f2:a1:8e:0e: da:04:56:bc:76:0d:f9:b7:c8:12:56:5b:63:1b:38:dc:6e:16: 81:dc:f7:70:fe:76:d8:72:50:04:23:fc:74:1d:1a:48:05:28: 1d:d9:ad:34:e6:23:54:77:d5:95:36:05:36:9a:22:11:f6:c4: e6:f0:4c:88:94:68:67:14:39:32:cc:27:12:d8:d2:76:ea:e0: 33:a3:bd:22:6a:23:0a:30:27:33:54:5d:a0:3c:0c:e3:32:64: e4:3b:f9:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87JGp7tqjuHCXttcdcVfZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTY5NTc4NmY4NDUwZDEwNDFkYzg4YWQ4OTJjYmI1NzBk NTk3MmIwHhcNMjUxMjIwMTgwMTM1WhcNMjUxMjIxMTgwMTM1WjAzMTEwLwYDVQQD EyhiODUyZWU0ZDVlYWZkN2ZkMjMzN2I5M2Q0MDhjM2ZjMGNjZDdhZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3cwPcn6m0AfZEGahJenpsuZHt0M 3qYLR89AFp3JLX6e9cFJb7IzkN8AD1iOpW9xw+2sRWSVpblUFugh0BqUf7E2CrEV qqBK0/ZtjMbZO/Ba5DAsE2QpmIilLWpQhmzsL35NDvMVqK+4Fj6I6Y+5OH9en8fO bxnnPXt1yyHJlSB4qUOWWkHIzGo1FONIhI5k+I3tZSdQmqJktmVUuXQMc+eTSG6B OV9B3+YsKEp+OOoG0LwV1amnhggIEWKZ2le5YaFFQR13lPpISef8VSovcO1N1wgg EUSecDhplkHUNx7G6nxSYiXvrLItumrH03kzKmnZGbFlj45gCsmiMJSEbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhS7k1er9f9Ize5PUCMP8DM1606MB8GA1UdIwQY MBaAFH1WlXhvhFDRBB3IitiSy7Vw1ZcrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMTdhYTctZTJhZC00YTg1LWIzZDIt NjNiMzM4MDhhNmE4LzEvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zMTdhYTctZTJhZC00YTg1LWIzZDItNjNiMzM4MDhhNmE4 LzEvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIk46uAQO Bil5iY7ch5g22JtKZT6JNadwT8uZxknrGwDSQ3/icm0E0dPbIsYdUlOzFG9uRZMU u7iHADWfXocFdCh9R9AHKPhWaRXUbpmRGe23r8j9HNyvt9pYM7dBbm0TlqrNbtXz GPZ9yDN8FOMuq2LYRWHFLbn859H6bX8eY3XEZK90E37mTMVxEkjBqQNUOpxDuOY4 xuTUTLoTWevyoY4O2gRWvHYN+bfIElZbYxs43G4Wgdz3cP522HJQBCP8dB0aSAUo HdmtNOYjVHfVlTYFNpoiEfbE5vBMiJRoZxQ5MswnEtjSdurgM6O9ImojCjAnM1Rd oDwM4zJk5Dv5Ew== -----END CERTIFICATE-----Generated at Sun Dec 21 01:50:50 2025 by rpki-client