This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft File: 31OmtxkZem51F1dNOYfzHrnp1Mk.mft (raw, json) Hash identifier: Pd/roEC12vAFdRWg6fCyOagYGsevbPzWWQ2/pRPQONM= Subject key identifier: 1C:0F:67:2F:1D:F0:D2:B1:37:97:76:A3:F3:6E:CB:BA:B9:8E:E2:D6 Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9 Certificate issuer: /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9 Certificate serial: 019B51F3185A08DDD0029B4337783E2F4616 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft Manifest number: 1725 Signing time: Wed 24 Dec 2025 20:00:44 +0000 Manifest this update: Wed 24 Dec 2025 20:00:44 +0000 Manifest next update: Thu 25 Dec 2025 20:00:44 +0000 Files and hashes: 1: 31OmtxkZem51F1dNOYfzHrnp1Mk.crl (hash: FPOjMPhaTmPiEa1CYCotBiJB/+pgWK2Tl1Bpw9h+mgM=) 2: 65Xlj195X-cGSev9DG8oGbd1-U4.roa (hash: K+xD/8At0190Enhc+vU1PDhREni4vKMCikS55k0TxlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:18:5a:08:dd:d0:02:9b:43:37:78:3e:2f:46:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9 Validity Not Before: Dec 24 20:00:44 2025 GMT Not After : Dec 25 20:00:44 2025 GMT Subject: CN=1c0f672f1df0d2b1379776a3f36ecbbab98ee2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:dc:fc:f1:06:bb:f2:b0:7d:e3:f5:b5:e3:4b: 5f:3a:22:c2:1e:85:67:ba:52:60:21:92:f9:d6:1c: ce:fb:ad:4c:d8:35:eb:bc:f1:03:23:c6:ef:f4:25: b4:d5:2d:71:6d:d3:14:33:a2:9a:34:ab:0d:1b:af: 33:7b:e2:5f:7a:48:99:c3:d6:2e:47:b0:c3:9e:a0: 69:76:37:5b:7e:1b:16:b5:89:c7:c3:c1:26:99:e9: b9:ff:69:a8:ae:07:6d:21:af:cc:8b:10:25:b1:7a: ad:00:0a:ad:33:34:f6:6b:f0:c2:7b:de:ce:ed:fd: e7:02:d4:9d:61:30:cf:4b:ae:20:1b:0a:b8:eb:5c: 62:0d:38:83:f4:dd:06:08:d0:c1:af:81:f7:17:ed: d4:31:76:aa:5d:8b:27:d1:b9:0c:29:f5:72:91:9e: a2:11:b8:93:88:43:2e:c2:f7:a8:1f:32:67:65:1f: 77:a2:bc:ee:ce:c7:ce:c8:48:06:de:db:d0:cc:bf: bc:b4:0d:dc:de:6f:7e:00:11:42:b6:84:3c:04:6b: ac:24:fd:00:ce:84:50:55:a8:5a:bf:f6:23:2f:66: dd:48:a6:19:07:94:17:f5:89:c4:b2:ea:79:fb:a6: 3c:00:e1:a2:97:8e:29:20:c3:a1:5b:d1:89:cb:c7: 39:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0F:67:2F:1D:F0:D2:B1:37:97:76:A3:F3:6E:CB:BA:B9:8E:E2:D6 X509v3 Authority Key Identifier: keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0b:c6:58:f6:6c:80:5d:bc:e5:fe:ce:19:b5:93:3a:22:50: 4d:f1:7c:76:e8:45:39:37:d7:3d:ef:f8:84:90:df:3c:b9:82: d7:b1:6f:68:15:0b:dc:0b:5e:89:1a:80:07:db:20:fe:4e:91: 6a:a8:d0:4e:e5:e0:b9:33:94:0b:41:07:bb:76:b4:d9:c5:6d: ba:46:92:96:73:1e:82:92:01:22:54:fb:af:ba:a7:7e:b2:a6: 9d:38:d7:5d:86:41:53:8c:93:c7:a9:7b:e8:c4:5b:0b:b8:0b: 27:50:7c:90:3d:a5:40:ec:4a:71:4d:4e:92:05:af:42:14:7e: 98:be:fd:8b:17:fd:6e:8c:ed:c1:4e:69:26:6c:20:38:b1:8a: 9c:3a:8f:3c:18:0b:76:14:9c:40:ef:61:25:22:64:01:18:16: 0e:3e:09:72:8d:24:9b:5d:8b:e1:b0:7c:ab:d5:a7:1a:d3:ec: f9:c5:a3:dc:90:31:f0:ef:7b:d3:dc:a0:63:ef:a5:21:4f:72: 5d:f8:eb:d2:34:e2:36:fc:30:13:33:a4:e3:f8:ed:21:2f:22: df:c8:a4:5a:21:8c:99:2c:d0:b4:6a:30:bd:a6:44:93:d9:5b: ad:49:20:6d:f2:64:4a:16:bb:52:fb:4d:30:28:06:55:13:a0: 9a:c3:ff:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8xhaCN3QAptDN3g+L0YWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNTNhNmI3MTkxOTdhNmU3NTE3NTc0ZDM5ODdmMzFlYjll OWQ0YzkwHhcNMjUxMjI0MjAwMDQ0WhcNMjUxMjI1MjAwMDQ0WjAzMTEwLwYDVQQD EygxYzBmNjcyZjFkZjBkMmIxMzc5Nzc2YTNmMzZlY2JiYWI5OGVlMmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktz88Qa78rB94/W140tfOiLCHoVn ulJgIZL51hzO+61M2DXrvPEDI8bv9CW01S1xbdMUM6KaNKsNG68ze+JfekiZw9Yu R7DDnqBpdjdbfhsWtYnHw8Emmem5/2morgdtIa/MixAlsXqtAAqtMzT2a/DCe97O 7f3nAtSdYTDPS64gGwq461xiDTiD9N0GCNDBr4H3F+3UMXaqXYsn0bkMKfVykZ6i EbiTiEMuwveoHzJnZR93orzuzsfOyEgG3tvQzL+8tA3c3m9+ABFCtoQ8BGusJP0A zoRQVahav/YjL2bdSKYZB5QX9YnEsup5+6Y8AOGil44pIMOhW9GJy8c5vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwPZy8d8NKxN5d2o/Nuy7q5juLWMB8GA1UdIwQY MBaAFN9TprcZGXpudRdXTTmH8x656dTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZjM4YTYtYTk3ZS00ODYxLWFiM2Ut ODUyMTJiOWQxNTliLzEvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZjM4YTYtYTk3ZS00ODYxLWFiM2UtODUyMTJiOWQxNTli LzEvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQvGWPZs gF285f7OGbWTOiJQTfF8duhFOTfXPe/4hJDfPLmC17FvaBUL3AteiRqAB9sg/k6R aqjQTuXguTOUC0EHu3a02cVtukaSlnMegpIBIlT7r7qnfrKmnTjXXYZBU4yTx6l7 6MRbC7gLJ1B8kD2lQOxKcU1OkgWvQhR+mL79ixf9boztwU5pJmwgOLGKnDqPPBgL dhScQO9hJSJkARgWDj4Jco0km12L4bB8q9WnGtPs+cWj3JAx8O9709ygY++lIU9y Xfjr0jTiNvwwEzOk4/jtIS8i38ikWiGMmSzQtGowvaZEk9lbrUkgbfJkSha7UvtN MCgGVROgmsP/2g== -----END CERTIFICATE-----Generated at Wed Dec 24 23:30:30 2025 by rpki-client