This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft File: valtAqgi9GJTwq7mgEQdWsJ8PfU.mft (raw, json) Hash identifier: Fp2uDbjnFo1r+l70O1auDOtPGcqox2+DYlLEoRr4CCY= Subject key identifier: 54:CF:10:DA:61:CD:17:E3:70:2C:78:C7:94:4C:06:BD:63:59:B6:94 Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5 Certificate issuer: /CN=bda96d02a822f46253c2aee680441d5ac27c3df5 Certificate serial: 019B5C096C2B6776534C011996224972BF52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft Manifest number: 17A0 Signing time: Fri 26 Dec 2025 19:01:19 +0000 Manifest this update: Fri 26 Dec 2025 19:01:19 +0000 Manifest next update: Sat 27 Dec 2025 19:01:19 +0000 Files and hashes: 1: F3mmIE5e5Y4BeSDKQ3DR2L-rAk8.roa (hash: jbee28DZuoinhmMa1MpH2LACZ/XrJT7Z3vVmbAZdw7Q=) 2: Mk3OCH61bD3mOm8DSaSiAzwW7fk.roa (hash: oxlH7V9EjPMbmvgDLqeKQJs9KOwBY0gM7ZfOAxvET+w=) 3: dRiT-c0xAt2kngbyOhm_uFIV1zw.roa (hash: Wglqc09L4EahGS8AZXe98XrHNBuQBQLDeHD0KWaBnTQ=) 4: fV9G8OutvawEP_xsKieVXci-tIE.roa (hash: o9Ux/+t3JTsGEZGnq53xgSqRPo9nNu5/xoSyWOejP2Q=) 5: jx4NNkHPAbONhfyLhU8TOxw7M1s.roa (hash: g2tq87dmJIfsiGuaezvjDvuxwyvPju47/Uw+kKdECC0=) 6: valtAqgi9GJTwq7mgEQdWsJ8PfU.crl (hash: 7at0FEQxxlOWu/DRMGlqWAIlnYXRd7BmE2Jy4vErosE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 19:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:09:6c:2b:67:76:53:4c:01:19:96:22:49:72:bf:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5 Validity Not Before: Dec 26 19:01:19 2025 GMT Not After : Dec 27 19:01:19 2025 GMT Subject: CN=54cf10da61cd17e3702c78c7944c06bd6359b694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:46:d3:62:c1:e0:ef:38:37:0b:a1:e1:10:5e: 17:25:2b:07:d5:f3:b2:20:8c:01:b4:86:f3:85:1b: 21:c6:89:aa:aa:52:11:c8:c2:3b:8c:fa:d8:02:25: ac:f5:6e:16:2f:ce:03:30:0e:32:69:60:19:f0:70: 09:2c:80:14:d0:6d:f8:ac:b6:ff:29:34:30:81:36: 0b:12:46:d4:70:ea:f1:d0:e6:f9:3e:4e:ac:bb:bc: c7:4b:ea:1b:03:52:be:6c:2d:8e:3b:40:0a:e8:02: 7b:85:77:4a:f4:0a:71:5f:3b:0a:86:c1:ec:aa:51: 39:c0:0b:b6:a5:d9:6d:4e:c7:32:9e:6e:58:94:60: 8e:54:df:87:6d:72:48:57:3e:e2:f8:c6:04:b9:68: a9:1a:03:c5:c6:10:d7:74:96:06:9c:6c:4d:f3:b6: d4:ba:02:29:23:9e:ec:15:97:b1:82:fe:b8:0f:a2: 99:93:ec:ca:1d:9c:b4:aa:5d:69:51:07:d2:37:c7: 1d:58:88:22:04:d7:7b:2b:49:2f:22:9e:dd:01:24: 67:8e:52:ec:56:07:93:9e:b0:d2:02:b1:14:4d:ec: 5c:22:88:43:57:39:61:87:e0:78:cb:c3:f7:9c:01: 03:22:2f:51:c5:4e:8b:c9:ed:2c:92:5f:3a:a1:51: 7a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CF:10:DA:61:CD:17:E3:70:2C:78:C7:94:4C:06:BD:63:59:B6:94 X509v3 Authority Key Identifier: keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:bc:b8:a3:43:53:56:0b:cf:54:4e:bb:9a:72:d3:df:cf:ad: 44:79:60:9e:64:24:a5:ff:c1:e8:2d:40:bb:67:e8:6b:98:29: 0f:cb:36:c6:cb:49:b2:00:a2:18:79:5b:7f:88:73:5b:07:ed: 7f:8a:bb:b9:bf:ef:9b:a4:8a:80:5b:94:cc:59:2b:09:9c:64: 8d:0c:a2:51:30:38:53:4d:05:56:6b:78:5b:6a:7c:24:2a:28: 5a:c5:08:5b:9e:e0:30:b1:ea:f0:7d:60:ac:f9:20:3c:01:46: d2:b4:27:6c:6d:10:10:92:28:40:a0:39:cd:4b:2c:aa:dc:1c: 53:e8:d6:99:2d:c0:08:37:f7:33:99:0e:c9:8f:7b:f7:19:6b: 0c:87:e1:bd:93:f2:b7:0f:23:8a:ad:89:46:20:4b:59:65:f5: d6:5e:83:5b:f5:46:eb:4d:c6:1c:9d:02:4f:65:11:05:44:30: 81:0f:23:de:8f:0b:2a:ec:b1:63:2d:ee:9c:0b:54:26:2c:c0: d1:60:0e:ae:36:f0:1f:17:e7:68:f0:5d:5a:a8:32:f9:bc:2e: 53:3b:d0:78:84:0a:c4:84:42:ca:92:76:bf:82:7b:16:9f:51: 90:b9:bd:48:f9:18:53:63:11:17:ec:58:a5:26:0c:3d:ab:64: 9b:97:d3:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCWwrZ3ZTTAEZliJJcr9SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYTk2ZDAyYTgyMmY0NjI1M2MyYWVlNjgwNDQxZDVhYzI3 YzNkZjUwHhcNMjUxMjI2MTkwMTE5WhcNMjUxMjI3MTkwMTE5WjAzMTEwLwYDVQQD Eyg1NGNmMTBkYTYxY2QxN2UzNzAyYzc4Yzc5NDRjMDZiZDYzNTliNjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEbTYsHg7zg3C6HhEF4XJSsH1fOy IIwBtIbzhRshxomqqlIRyMI7jPrYAiWs9W4WL84DMA4yaWAZ8HAJLIAU0G34rLb/ KTQwgTYLEkbUcOrx0Ob5Pk6su7zHS+obA1K+bC2OO0AK6AJ7hXdK9ApxXzsKhsHs qlE5wAu2pdltTscynm5YlGCOVN+HbXJIVz7i+MYEuWipGgPFxhDXdJYGnGxN87bU ugIpI57sFZexgv64D6KZk+zKHZy0ql1pUQfSN8cdWIgiBNd7K0kvIp7dASRnjlLs VgeTnrDSArEUTexcIohDVzlhh+B4y8P3nAEDIi9RxU6Lye0skl86oVF6jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTPENphzRfjcCx4x5RMBr1jWbaUMB8GA1UdIwQY MBaAFL2pbQKoIvRiU8Ku5oBEHVrCfD31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hMjdiMzktODAxMS00MTQyLTg2YzIt Y2Y4M2Q2ZTQwNTU4LzEvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hMjdiMzktODAxMS00MTQyLTg2YzItY2Y4M2Q2ZTQwNTU4 LzEvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQby4o0NT VgvPVE67mnLT38+tRHlgnmQkpf/B6C1Au2foa5gpD8s2xstJsgCiGHlbf4hzWwft f4q7ub/vm6SKgFuUzFkrCZxkjQyiUTA4U00FVmt4W2p8JCooWsUIW57gMLHq8H1g rPkgPAFG0rQnbG0QEJIoQKA5zUssqtwcU+jWmS3ACDf3M5kOyY979xlrDIfhvZPy tw8jiq2JRiBLWWX11l6DW/VG603GHJ0CT2URBUQwgQ8j3o8LKuyxYy3unAtUJizA 0WAOrjbwHxfnaPBdWqgy+bwuUzvQeIQKxIRCypJ2v4J7Fp9RkLm9SPkYU2MRF+xY pSYMPatkm5fTcQ== -----END CERTIFICATE-----Generated at Sat Dec 27 04:01:09 2025 by rpki-client