This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft File: 31OmtxkZem51F1dNOYfzHrnp1Mk.mft (raw, json) Hash identifier: xew9RwqtO5dHpx1F4ItrNJLRbqw+hGZbHpf+otufYfU= Subject key identifier: 04:0E:B3:ED:6B:B6:DE:E2:E2:4F:04:48:C8:42:4C:DB:DC:2B:37:77 Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9 Certificate issuer: /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9 Certificate serial: 019B38D8156D76AA2DA9DB1FE9F8B6C51B33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft Manifest number: 1718 Signing time: Fri 19 Dec 2025 23:00:43 +0000 Manifest this update: Fri 19 Dec 2025 23:00:43 +0000 Manifest next update: Sat 20 Dec 2025 23:00:43 +0000 Files and hashes: 1: 31OmtxkZem51F1dNOYfzHrnp1Mk.crl (hash: hTsRbYk1vZWXyWtf2hFJZQ2ZX4zXL1hFdPvvsp7nFrQ=) 2: 65Xlj195X-cGSev9DG8oGbd1-U4.roa (hash: K+xD/8At0190Enhc+vU1PDhREni4vKMCikS55k0TxlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:15:6d:76:aa:2d:a9:db:1f:e9:f8:b6:c5:1b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9 Validity Not Before: Dec 19 23:00:43 2025 GMT Not After : Dec 20 23:00:43 2025 GMT Subject: CN=040eb3ed6bb6dee2e24f0448c8424cdbdc2b3777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:63:32:5f:98:e4:3f:88:0b:33:1d:23:3e:33: b1:b0:6d:5c:20:58:f0:9d:9d:7e:16:13:28:44:0c: ca:d8:ff:72:74:ab:94:c2:2d:43:c9:15:46:b9:e1: 05:7d:11:72:7a:c0:f2:f0:27:06:bd:21:a6:6c:d2: a2:bf:21:3b:65:56:8b:f2:a2:cf:13:30:b7:19:6e: c2:b4:54:44:b7:05:78:5a:63:0c:06:da:71:5c:8e: 77:ba:13:9d:72:68:76:8e:7b:5f:09:81:de:9e:da: 4e:3a:6e:18:cb:61:db:6b:5d:30:31:dd:ff:10:1f: d3:64:f6:b3:24:50:d7:cd:71:8a:0b:54:d6:56:49: 9b:fe:22:6a:5a:5f:a1:a1:5b:5c:b7:e6:fb:87:5d: 4b:c2:5e:63:bf:a9:c3:23:e2:de:f2:7a:44:da:41: b5:18:57:80:8b:44:0f:1e:4a:71:64:34:0c:ee:9c: b1:29:63:99:7c:66:ed:67:2a:1d:81:0c:39:de:bb: cc:ac:b8:5e:cb:9c:6a:61:81:c3:f2:ec:ac:c7:5d: b0:3a:30:a4:1a:b0:10:71:c5:1b:b1:32:0b:64:43: da:85:21:27:12:1d:ba:6a:5b:65:0d:b0:f3:f3:69: 9e:22:17:79:6a:02:f3:57:85:e4:ae:b7:1e:3c:76: 37:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0E:B3:ED:6B:B6:DE:E2:E2:4F:04:48:C8:42:4C:DB:DC:2B:37:77 X509v3 Authority Key Identifier: keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3a:8f:ec:1b:39:f6:9a:99:bc:58:20:1b:24:db:97:5c:36: 3b:3b:7e:48:6b:3e:fb:3c:88:c7:79:8d:1d:ca:ba:6e:7e:a9: 97:ec:bf:3e:13:2d:06:83:c2:06:ad:46:e1:77:5f:7e:d2:48: 95:be:90:8f:bf:12:c5:08:27:0e:8f:75:ae:77:fa:fc:3c:c5: fe:85:17:c9:3f:a0:60:35:be:bb:49:97:34:61:79:fa:9e:8d: c0:83:a6:c1:bd:3a:76:f8:a6:66:11:59:af:47:50:c6:58:38: 1a:69:99:b3:e0:4d:f1:9e:65:bb:5c:ef:f5:4d:bc:1a:37:54: 0b:af:9f:a3:5f:c4:d2:73:ae:b9:41:84:96:51:9a:6c:b8:8f: 44:98:bc:37:a0:c9:f3:50:1e:09:9a:65:05:d7:9e:ae:9c:00: 31:d8:0e:fa:a6:48:59:f9:e5:1b:9b:24:1e:a5:92:4f:85:9a: 03:5a:56:ad:b1:70:e9:74:25:e5:8f:6c:7c:ee:ee:37:e5:5f: 58:0d:15:e8:b0:3c:14:ce:c5:3f:0f:1f:44:88:91:2b:eb:80: 14:e5:42:9f:eb:23:e3:ce:8e:d9:4b:89:9c:fd:d2:b0:bd:0a: 20:80:71:fc:d7:07:49:c3:ec:07:ab:69:85:e9:ef:7d:35:5c: 81:65:6f:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42BVtdqotqdsf6fi2xRszMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNTNhNmI3MTkxOTdhNmU3NTE3NTc0ZDM5ODdmMzFlYjll OWQ0YzkwHhcNMjUxMjE5MjMwMDQzWhcNMjUxMjIwMjMwMDQzWjAzMTEwLwYDVQQD EygwNDBlYjNlZDZiYjZkZWUyZTI0ZjA0NDhjODQyNGNkYmRjMmIzNzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2MyX5jkP4gLMx0jPjOxsG1cIFjw nZ1+FhMoRAzK2P9ydKuUwi1DyRVGueEFfRFyesDy8CcGvSGmbNKivyE7ZVaL8qLP EzC3GW7CtFREtwV4WmMMBtpxXI53uhOdcmh2jntfCYHentpOOm4Yy2Hba10wMd3/ EB/TZPazJFDXzXGKC1TWVkmb/iJqWl+hoVtct+b7h11Lwl5jv6nDI+Le8npE2kG1 GFeAi0QPHkpxZDQM7pyxKWOZfGbtZyodgQw53rvMrLhey5xqYYHD8uysx12wOjCk GrAQccUbsTILZEPahSEnEh26altlDbDz82meIhd5agLzV4XkrrcePHY32QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQOs+1rtt7i4k8ESMhCTNvcKzd3MB8GA1UdIwQY MBaAFN9TprcZGXpudRdXTTmH8x656dTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZjM4YTYtYTk3ZS00ODYxLWFiM2Ut ODUyMTJiOWQxNTliLzEvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZjM4YTYtYTk3ZS00ODYxLWFiM2UtODUyMTJiOWQxNTli LzEvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjqP7Bs5 9pqZvFggGyTbl1w2Ozt+SGs++zyIx3mNHcq6bn6pl+y/PhMtBoPCBq1G4XdfftJI lb6Qj78SxQgnDo91rnf6/DzF/oUXyT+gYDW+u0mXNGF5+p6NwIOmwb06dvimZhFZ r0dQxlg4GmmZs+BN8Z5lu1zv9U28GjdUC6+fo1/E0nOuuUGEllGabLiPRJi8N6DJ 81AeCZplBdeerpwAMdgO+qZIWfnlG5skHqWST4WaA1pWrbFw6XQl5Y9sfO7uN+Vf WA0V6LA8FM7FPw8fRIiRK+uAFOVCn+sj486O2UuJnP3SsL0KIIBx/NcHScPsB6tp henvfTVcgWVvJw== -----END CERTIFICATE-----Generated at Sat Dec 20 06:05:56 2025 by rpki-client