This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft File: V0zKiZ71v0I38Pa90XeSIbIAUvM.mft (raw, json) Hash identifier: 3HvGLen3N45Vmh0eazuB29NpW4B/vZE2czUmaRAlOSI= Subject key identifier: 94:56:AE:7E:F2:76:6A:3B:AF:89:F6:94:B5:CE:C5:EC:81:7F:F1:D0 Authority key identifier: 57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3 Certificate issuer: /CN=574cca899ef5bf4237f0f6bdd1779221b20052f3 Certificate serial: 019B687B300153EA5C803DC4411A61D965AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft Manifest number: 17A5 Signing time: Mon 29 Dec 2025 05:01:02 +0000 Manifest this update: Mon 29 Dec 2025 05:01:02 +0000 Manifest next update: Tue 30 Dec 2025 05:01:02 +0000 Files and hashes: 1: V0zKiZ71v0I38Pa90XeSIbIAUvM.crl (hash: JNzRs+mBNaLj2arSzPhioPVbKVmhc9kch9wanbexJ0g=) 2: Y94X6_HOf3KuSVPAOGMuBrzSxtg.roa (hash: jodD56xisILiJQmZjw16ioNeXG3x3llQ2TPGO/o2XeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 05:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:7b:30:01:53:ea:5c:80:3d:c4:41:1a:61:d9:65:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=574cca899ef5bf4237f0f6bdd1779221b20052f3 Validity Not Before: Dec 29 05:01:02 2025 GMT Not After : Dec 30 05:01:02 2025 GMT Subject: CN=9456ae7ef2766a3baf89f694b5cec5ec817ff1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8d:3a:c0:18:67:dd:a0:19:a0:36:f3:77:12: 74:76:a7:aa:fa:81:4e:07:e3:05:55:4a:71:7a:2c: a2:3f:ea:d9:5f:f2:77:d2:87:88:38:3b:c1:7e:a3: 4d:9c:9c:3c:4e:06:f3:c3:94:3b:d8:a9:69:18:65: 6a:a5:89:47:29:1d:da:f4:29:5e:13:d1:e8:f7:51: 54:dc:81:e6:23:93:17:88:d1:13:e0:e9:a7:f5:b9: b6:6d:a1:f3:d2:74:80:33:a6:02:d5:93:73:d0:9c: 07:a5:c8:66:75:38:71:9a:5c:b5:97:e4:53:88:c1: a7:43:33:23:05:9e:bd:d1:13:fa:34:2c:09:1a:7c: bb:d9:a6:82:64:a9:d1:58:9c:23:89:cf:22:97:76: 16:4f:37:ad:19:23:c9:79:f8:26:b0:71:56:0c:9b: c2:66:c3:91:21:3f:3c:3b:ef:6a:07:d6:62:d9:c4: 0e:48:0c:5c:71:82:b2:5e:c6:70:dc:33:da:2b:6c: 4c:95:ae:b4:96:55:ab:20:ce:60:96:0e:74:e3:8c: f9:f6:94:96:a1:b2:fa:98:c7:00:2c:5e:ec:42:76: 6f:37:10:75:0a:75:40:2a:f6:0c:90:e1:d9:b7:48: a4:02:b7:82:d6:e3:09:8d:1e:a7:d6:ac:94:39:7e: 3f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:56:AE:7E:F2:76:6A:3B:AF:89:F6:94:B5:CE:C5:EC:81:7F:F1:D0 X509v3 Authority Key Identifier: keyid:57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:6e:2c:45:65:0d:d0:59:2d:70:71:01:2a:41:52:f9:19:77: e8:ff:dc:3c:bf:1e:a8:16:f3:2d:ed:a8:d4:dd:ea:2f:a6:8b: fd:01:7d:aa:1e:03:06:6b:ae:f9:f5:73:72:1c:b4:1b:56:ab: 75:00:2a:af:05:f2:ba:07:9e:70:3e:c0:10:2f:e3:d5:1c:5a: 5f:16:17:2d:37:a5:a5:23:be:af:5f:59:60:ed:de:33:f5:e3: b3:83:ab:81:9a:80:59:75:c8:cb:d3:0d:a2:4f:dc:14:db:b1: 6d:e8:2c:28:21:60:f3:7b:aa:32:c5:a1:36:62:25:80:ff:31: 6f:6d:62:e6:70:1c:e0:5c:8a:ae:c9:a7:ef:d6:7f:a7:33:b6: 8d:96:ae:96:76:c8:66:7c:44:12:3a:de:47:2d:b5:4a:f2:a7: 5e:64:58:24:98:49:f6:a5:8a:17:34:80:f8:02:a6:08:37:19: 8b:46:0a:2b:ee:a6:8c:51:ba:5a:60:0b:c3:d2:33:2a:34:00: e1:48:6f:80:82:96:ab:6e:ed:a6:33:64:d5:ee:98:f3:de:a6: 07:c9:c2:6e:29:32:15:de:83:63:30:47:e7:62:7c:63:38:4d: 2f:3c:ef:c1:4b:8f:16:75:10:39:70:19:ce:e3:52:dd:ef:5f: 6d:df:e6:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoezABU+pcgD3EQRph2WWqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NGNjYTg5OWVmNWJmNDIzN2YwZjZiZGQxNzc5MjIxYjIw MDUyZjMwHhcNMjUxMjI5MDUwMTAyWhcNMjUxMjMwMDUwMTAyWjAzMTEwLwYDVQQD Eyg5NDU2YWU3ZWYyNzY2YTNiYWY4OWY2OTRiNWNlYzVlYzgxN2ZmMWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto06wBhn3aAZoDbzdxJ0dqeq+oFO B+MFVUpxeiyiP+rZX/J30oeIODvBfqNNnJw8Tgbzw5Q72KlpGGVqpYlHKR3a9Cle E9Ho91FU3IHmI5MXiNET4Omn9bm2baHz0nSAM6YC1ZNz0JwHpchmdThxmly1l+RT iMGnQzMjBZ690RP6NCwJGny72aaCZKnRWJwjic8il3YWTzetGSPJefgmsHFWDJvC ZsORIT88O+9qB9Zi2cQOSAxccYKyXsZw3DPaK2xMla60llWrIM5glg5044z59pSW obL6mMcALF7sQnZvNxB1CnVAKvYMkOHZt0ikAreC1uMJjR6n1qyUOX4/3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRWrn7ydmo7r4n2lLXOxeyBf/HQMB8GA1UdIwQY MBaAFFdMyome9b9CN/D2vdF3kiGyAFLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC85MzhhYmQtMTAxOS00ZTdhLWFhODIt ZWUxMTI2YTI4MTk1LzEvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC85MzhhYmQtMTAxOS00ZTdhLWFhODItZWUxMTI2YTI4MTk1 LzEvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMm4sRWUN 0FktcHEBKkFS+Rl36P/cPL8eqBbzLe2o1N3qL6aL/QF9qh4DBmuu+fVzchy0G1ar dQAqrwXyugeecD7AEC/j1RxaXxYXLTelpSO+r19ZYO3eM/Xjs4OrgZqAWXXIy9MN ok/cFNuxbegsKCFg83uqMsWhNmIlgP8xb21i5nAc4FyKrsmn79Z/pzO2jZaulnbI ZnxEEjreRy21SvKnXmRYJJhJ9qWKFzSA+AKmCDcZi0YKK+6mjFG6WmALw9IzKjQA 4UhvgIKWq27tpjNk1e6Y896mB8nCbikyFd6DYzBH52J8YzhNLzzvwUuPFnUQOXAZ zuNS3e9fbd/mlg== -----END CERTIFICATE-----Generated at Mon Dec 29 10:26:43 2025 by rpki-client