This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft File: valtAqgi9GJTwq7mgEQdWsJ8PfU.mft (raw, json) Hash identifier: hm6+PqiY1XreKskb79Z5XjcAlIKfSNm+crGMyXGzNzw= Subject key identifier: D2:A0:23:46:B6:02:33:25:64:3D:DC:93:C7:AA:3C:CA:39:3E:5D:BD Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5 Certificate issuer: /CN=bda96d02a822f46253c2aee680441d5ac27c3df5 Certificate serial: 019B3D23A1297529A4F7881B549FD1FEFF2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft Manifest number: 1790 Signing time: Sat 20 Dec 2025 19:01:43 +0000 Manifest this update: Sat 20 Dec 2025 19:01:43 +0000 Manifest next update: Sun 21 Dec 2025 19:01:43 +0000 Files and hashes: 1: F3mmIE5e5Y4BeSDKQ3DR2L-rAk8.roa (hash: jbee28DZuoinhmMa1MpH2LACZ/XrJT7Z3vVmbAZdw7Q=) 2: Mk3OCH61bD3mOm8DSaSiAzwW7fk.roa (hash: oxlH7V9EjPMbmvgDLqeKQJs9KOwBY0gM7ZfOAxvET+w=) 3: dRiT-c0xAt2kngbyOhm_uFIV1zw.roa (hash: Wglqc09L4EahGS8AZXe98XrHNBuQBQLDeHD0KWaBnTQ=) 4: fV9G8OutvawEP_xsKieVXci-tIE.roa (hash: o9Ux/+t3JTsGEZGnq53xgSqRPo9nNu5/xoSyWOejP2Q=) 5: jx4NNkHPAbONhfyLhU8TOxw7M1s.roa (hash: g2tq87dmJIfsiGuaezvjDvuxwyvPju47/Uw+kKdECC0=) 6: valtAqgi9GJTwq7mgEQdWsJ8PfU.crl (hash: 0l/ygpCHfe2TqfQ1fNFlbZP9q1LvJGgwVng8kBImHSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:a1:29:75:29:a4:f7:88:1b:54:9f:d1:fe:ff:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5 Validity Not Before: Dec 20 19:01:43 2025 GMT Not After : Dec 21 19:01:43 2025 GMT Subject: CN=d2a02346b6023325643ddc93c7aa3cca393e5dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:34:73:8a:9b:71:5c:30:10:c7:72:ce:cb:dc: f8:89:20:80:b8:a2:e9:63:5d:5b:0b:49:51:a0:37: 74:58:93:e6:aa:e7:7a:13:74:24:00:ff:c5:a6:76: 68:a2:49:b4:fa:6e:91:3e:ec:8e:d0:54:7b:f9:6d: 85:de:72:30:58:4f:73:3c:79:a5:da:dc:58:0c:75: 80:d7:4f:ea:82:0a:fd:33:23:9f:e7:9b:dc:b8:1c: 82:31:43:47:42:fd:27:2a:35:79:4e:56:0a:c0:d0: f7:1e:b6:58:30:23:72:88:5d:78:b4:70:87:d6:fc: 17:4a:07:ab:62:96:58:e6:c3:e8:03:79:79:79:81: d6:be:71:32:83:8f:e0:be:d5:02:7d:5d:52:b2:1e: c8:77:36:bd:b3:d8:2f:a6:4b:86:15:2c:dd:ff:47: e1:8a:9b:79:b1:72:61:ed:c7:5e:00:5e:75:90:c1: e2:ed:33:76:e1:72:b0:65:ba:0c:00:de:f0:f1:34: f5:44:64:8f:73:59:cd:de:fe:46:fb:8a:2d:e2:e7: 4c:e6:02:c9:36:a0:dd:b4:02:23:ea:44:c9:45:ee: ce:75:73:f4:c5:2c:21:93:b2:b4:77:36:3e:17:a0: 55:cb:4e:ee:f1:4b:b2:95:3b:d3:65:71:7a:4c:80: 7f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A0:23:46:B6:02:33:25:64:3D:DC:93:C7:AA:3C:CA:39:3E:5D:BD X509v3 Authority Key Identifier: keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f6:33:4b:82:6f:e7:f5:bf:2b:1c:1a:3d:99:bc:bf:8a:58: 85:e4:ae:94:c9:fe:ec:ac:c3:de:e3:7e:69:af:06:d9:ea:e7: d6:5a:8e:47:45:bd:3d:42:52:4d:1b:49:3d:da:ec:f8:cd:a6: 64:26:3f:7e:4c:4a:aa:72:37:46:cf:86:b3:09:49:35:36:04: 5e:ee:b0:bc:f0:ff:9a:8d:6a:d6:bc:12:b1:33:57:e6:3f:82: ce:e8:e1:23:c3:49:a6:0f:e8:22:9c:0a:1a:6c:4e:cc:e1:60: 15:c2:b4:87:b2:6a:21:d1:84:b5:ae:ea:c6:51:02:5e:36:d2: 6d:88:24:17:87:9b:56:27:51:b5:5a:94:d0:eb:a6:68:c5:f4: a5:f6:0f:0d:64:02:6b:e2:46:fa:25:01:a1:b2:66:8d:9c:bf: 48:4d:2c:8e:e4:de:a1:f6:1f:da:d8:81:65:4b:7f:23:9b:c0: 81:73:63:a5:67:76:2b:05:48:09:d3:60:64:3e:fa:3f:27:9e: 61:ac:5d:1e:d2:73:c5:8d:ad:34:c8:1a:ff:f4:ad:7e:c7:7a: de:22:ed:96:74:20:75:68:05:1b:65:fa:07:76:e7:dd:5a:49: 43:49:ee:53:32:82:6f:90:67:14:0a:c0:91:f6:da:df:fd:a8: 85:95:27:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I6EpdSmk94gbVJ/R/v8rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYTk2ZDAyYTgyMmY0NjI1M2MyYWVlNjgwNDQxZDVhYzI3 YzNkZjUwHhcNMjUxMjIwMTkwMTQzWhcNMjUxMjIxMTkwMTQzWjAzMTEwLwYDVQQD EyhkMmEwMjM0NmI2MDIzMzI1NjQzZGRjOTNjN2FhM2NjYTM5M2U1ZGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jRziptxXDAQx3LOy9z4iSCAuKLp Y11bC0lRoDd0WJPmqud6E3QkAP/FpnZookm0+m6RPuyO0FR7+W2F3nIwWE9zPHml 2txYDHWA10/qggr9MyOf55vcuByCMUNHQv0nKjV5TlYKwND3HrZYMCNyiF14tHCH 1vwXSgerYpZY5sPoA3l5eYHWvnEyg4/gvtUCfV1Ssh7Idza9s9gvpkuGFSzd/0fh ipt5sXJh7cdeAF51kMHi7TN24XKwZboMAN7w8TT1RGSPc1nN3v5G+4ot4udM5gLJ NqDdtAIj6kTJRe7OdXP0xSwhk7K0dzY+F6BVy07u8UuylTvTZXF6TIB/KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKgI0a2AjMlZD3ck8eqPMo5Pl29MB8GA1UdIwQY MBaAFL2pbQKoIvRiU8Ku5oBEHVrCfD31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hMjdiMzktODAxMS00MTQyLTg2YzIt Y2Y4M2Q2ZTQwNTU4LzEvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hMjdiMzktODAxMS00MTQyLTg2YzItY2Y4M2Q2ZTQwNTU4 LzEvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPYzS4Jv 5/W/KxwaPZm8v4pYheSulMn+7KzD3uN+aa8G2ern1lqOR0W9PUJSTRtJPdrs+M2m ZCY/fkxKqnI3Rs+GswlJNTYEXu6wvPD/mo1q1rwSsTNX5j+CzujhI8NJpg/oIpwK GmxOzOFgFcK0h7JqIdGEta7qxlECXjbSbYgkF4ebVidRtVqU0OumaMX0pfYPDWQC a+JG+iUBobJmjZy/SE0sjuTeofYf2tiBZUt/I5vAgXNjpWd2KwVICdNgZD76Pyee YaxdHtJzxY2tNMga//Stfsd63iLtlnQgdWgFG2X6B3bn3VpJQ0nuUzKCb5BnFArA kfba3/2ohZUnKQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:14:41 2025 by rpki-client