This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft File: V1j80i-3oR3qizfkw_YiqnpHue4.mft (raw, json) Hash identifier: /ljZDg1980v621AEoWgNPDcQjck7bgMDD3k8oS8HtGg= Subject key identifier: A8:D2:E5:A0:49:99:91:55:FA:4E:34:2F:23:F3:5C:C4:AC:9E:F7:EE Authority key identifier: 57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE Certificate issuer: /CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee Certificate serial: 019B65E7FED0633A4FDA44AB4DF6556AE4D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft Manifest number: 14AB Signing time: Sun 28 Dec 2025 17:01:01 +0000 Manifest this update: Sun 28 Dec 2025 17:01:01 +0000 Manifest next update: Mon 29 Dec 2025 17:01:01 +0000 Files and hashes: 1: 1cAFysoNqNIZH8FwmwvYqJt5bM4.roa (hash: ODKSC75jE0xq09vjpL4sB7ddbosHMLlBxEPWj0XoiqQ=) 2: V1j80i-3oR3qizfkw_YiqnpHue4.crl (hash: 0mutQIU4TGyh+/Wa7zG63a91gYQhrMJi8+FOpq9qrco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 17:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e7:fe:d0:63:3a:4f:da:44:ab:4d:f6:55:6a:e4:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee Validity Not Before: Dec 28 17:01:01 2025 GMT Not After : Dec 29 17:01:01 2025 GMT Subject: CN=a8d2e5a049999155fa4e342f23f35cc4ac9ef7ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:92:6b:b2:df:c2:87:78:21:22:ed:14:3c:c3: 8c:49:0a:e4:08:ec:a4:d4:d4:cb:10:65:4f:0e:8f: fe:33:9d:20:a9:ac:e0:44:51:e2:f4:10:76:fc:a6: 7a:f7:d2:b0:66:4e:32:0b:db:4f:91:cf:b6:84:4a: 3f:99:cb:c5:38:87:82:6a:f8:af:73:84:78:3e:3e: 88:3e:e9:77:29:2a:97:a2:46:8f:35:61:8f:0e:3a: 63:77:08:90:29:a6:e5:d5:dd:87:58:4c:35:9d:fe: 49:11:f5:4b:4c:ac:7d:51:5f:dc:b1:28:da:1b:ec: 33:be:ad:85:c8:65:7b:c3:e7:18:42:26:25:76:f1: 16:24:06:46:1c:3b:94:d8:ed:84:dd:66:d5:10:aa: 3b:53:76:ad:01:af:63:48:88:98:52:d1:ad:44:e2: 13:c8:40:84:c5:55:50:5e:1f:d5:32:7b:47:2d:b4: e9:e3:41:a1:b2:fe:ac:85:52:8c:f4:59:53:ae:98: 44:52:ae:8a:f2:ea:90:e5:8e:c8:e8:cc:d4:0c:74: 8b:aa:8a:f5:a7:87:3e:62:14:03:71:e9:8a:70:ba: e2:0d:f5:64:c8:d7:0a:0a:55:eb:ca:12:fa:b2:52: 45:74:33:ef:ef:b9:3f:7b:a3:72:57:a9:9f:90:69: fd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D2:E5:A0:49:99:91:55:FA:4E:34:2F:23:F3:5C:C4:AC:9E:F7:EE X509v3 Authority Key Identifier: keyid:57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:a8:03:9f:73:57:78:18:6a:1b:54:5e:eb:6b:cc:b7:1e:a4: 0e:03:f7:cf:45:20:68:1f:54:d8:a8:e1:15:df:8e:b1:ae:6b: 63:92:a1:2e:b9:88:ca:55:65:aa:23:03:9a:e5:87:6e:dc:5e: 82:ee:cf:ac:a4:b4:b4:bb:a1:b1:92:83:c1:c0:66:bf:ce:e9: b2:5f:0e:02:1d:83:33:67:7b:7f:d3:0f:c8:a4:0c:7f:4d:a1: a7:92:dc:1a:f2:20:ac:47:47:b0:3c:11:f9:11:3c:0b:62:c5: 9b:02:ac:f3:fe:93:f7:61:e3:34:a7:66:86:f8:d0:3b:37:cb: bc:fe:9a:39:d1:8d:60:6a:57:ae:aa:0a:8c:93:9f:d4:03:41: 1e:aa:a6:ef:b1:6b:a6:20:e6:4d:2e:5c:34:c5:43:8d:59:73: 5a:14:52:a4:14:bb:84:98:c9:fa:e1:ef:5f:aa:02:fd:89:57: 28:d5:e7:88:79:1a:58:5c:72:b2:de:13:85:9a:bb:fd:9a:a2: 24:f6:09:1f:71:4d:c5:73:a1:51:4c:e2:26:53:46:a0:28:cb: ad:3b:f5:51:ed:bd:41:4c:bd:e4:0d:cb:e6:33:aa:bc:0d:db: 8a:df:d9:8a:42:bf:9c:46:98:66:7d:21:60:2e:4d:fa:d8:82: b6:e4:95:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtl5/7QYzpP2kSrTfZVauTSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NThmY2QyMmZiN2ExMWRlYThiMzdlNGMzZjYyMmFhN2E0 N2I5ZWUwHhcNMjUxMjI4MTcwMTAxWhcNMjUxMjI5MTcwMTAxWjAzMTEwLwYDVQQD EyhhOGQyZTVhMDQ5OTk5MTU1ZmE0ZTM0MmYyM2YzNWNjNGFjOWVmN2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpJrst/Ch3ghIu0UPMOMSQrkCOyk 1NTLEGVPDo/+M50gqazgRFHi9BB2/KZ699KwZk4yC9tPkc+2hEo/mcvFOIeCaviv c4R4Pj6IPul3KSqXokaPNWGPDjpjdwiQKabl1d2HWEw1nf5JEfVLTKx9UV/csSja G+wzvq2FyGV7w+cYQiYldvEWJAZGHDuU2O2E3WbVEKo7U3atAa9jSIiYUtGtROIT yECExVVQXh/VMntHLbTp40Ghsv6shVKM9FlTrphEUq6K8uqQ5Y7I6MzUDHSLqor1 p4c+YhQDcemKcLriDfVkyNcKClXryhL6slJFdDPv77k/e6NyV6mfkGn9kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjS5aBJmZFV+k40LyPzXMSsnvfuMB8GA1UdIwQY MBaAFFdY/NIvt6Ed6os35MP2Iqp6R7nuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFqODBpLTNvUjNxaXpma3dfWWlxbnBIdWU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80ZDgyMDctZTdjYi00MjMyLTgyOTAt MjUwYmVjOWRjY2ExLzEvVjFqODBpLTNvUjNxaXpma3dfWWlxbnBIdWU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC80ZDgyMDctZTdjYi00MjMyLTgyOTAtMjUwYmVjOWRjY2Ex LzEvVjFqODBpLTNvUjNxaXpma3dfWWlxbnBIdWU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1qgDn3NX eBhqG1Re62vMtx6kDgP3z0UgaB9U2KjhFd+Osa5rY5KhLrmIylVlqiMDmuWHbtxe gu7PrKS0tLuhsZKDwcBmv87psl8OAh2DM2d7f9MPyKQMf02hp5LcGvIgrEdHsDwR +RE8C2LFmwKs8/6T92HjNKdmhvjQOzfLvP6aOdGNYGpXrqoKjJOf1ANBHqqm77Fr piDmTS5cNMVDjVlzWhRSpBS7hJjJ+uHvX6oC/YlXKNXniHkaWFxyst4ThZq7/Zqi JPYJH3FNxXOhUUziJlNGoCjLrTv1Ue29QUy95A3L5jOqvA3bit/ZikK/nEaYZn0h YC5N+tiCtuSVyA== -----END CERTIFICATE-----Generated at Mon Dec 29 01:08:48 2025 by rpki-client