This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft File: V0U31U828UIjG8gXA4hyy2B7Iec.mft (raw, json) Hash identifier: 3L3slfyH7LpHOVqf4BmwrvpXI+lCQxVH/3dlq/oE964= Subject key identifier: 10:3D:F7:CF:6E:69:4F:8F:4D:D8:EF:C8:F8:9D:96:C5:52:90:98:C8 Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7 Certificate issuer: /CN=574537d54f36f142231bc817038872cb607b21e7 Certificate serial: 019B66C3864BAE0BACE022F1FF4A2E6048AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft Manifest number: 17A3 Signing time: Sun 28 Dec 2025 21:00:48 +0000 Manifest this update: Sun 28 Dec 2025 21:00:48 +0000 Manifest next update: Mon 29 Dec 2025 21:00:48 +0000 Files and hashes: 1: V0U31U828UIjG8gXA4hyy2B7Iec.crl (hash: wl+Rz9xIqDqWDKMr+na6Ox2CHU+XCj8LXA5/hYkXLyI=) 2: YnXiOZFn5_Ti8j5SWgP0_2hT1vY.roa (hash: lRZQ9KsaLdanEcykQNh0FaeICI/LtcJmN2j17gaMSis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:c3:86:4b:ae:0b:ac:e0:22:f1:ff:4a:2e:60:48:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=574537d54f36f142231bc817038872cb607b21e7 Validity Not Before: Dec 28 21:00:48 2025 GMT Not After : Dec 29 21:00:48 2025 GMT Subject: CN=103df7cf6e694f8f4dd8efc8f89d96c5529098c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f0:e7:46:fe:17:e6:15:97:50:4a:d4:9e:b8: 43:39:17:ea:7f:b8:45:32:6d:79:b4:90:51:d8:d2: d2:52:93:2d:51:2b:c9:0d:dd:c4:52:5a:79:b9:d9: 79:f9:05:1b:83:fa:d8:22:10:43:19:f1:a8:a8:6e: da:42:5e:ec:45:61:27:a3:00:54:19:89:44:f8:d4: de:6a:fa:ff:a4:9e:f6:ef:62:8e:fc:5b:53:44:cd: c6:ea:1e:41:82:07:1e:99:bc:73:6e:b9:86:3a:01: a7:68:73:03:fb:24:07:f1:55:2b:cb:7a:45:8e:fc: d9:f8:b2:42:01:6c:77:94:9a:70:17:71:85:cf:b8: f2:dd:0c:c8:36:a8:7e:8f:78:5c:c2:1e:85:b3:d3: 29:f7:81:4f:6d:8d:65:1c:c5:cc:d1:ec:af:2d:c3: 38:48:c8:a0:c7:57:26:7c:ae:28:e0:ef:fe:b9:a7: de:60:c8:de:0c:ab:7f:3c:c3:e1:42:10:23:82:eb: c4:ca:1f:66:1a:e3:c9:90:99:22:39:e6:f7:ee:4a: b8:2a:61:f8:ea:66:04:de:62:2a:43:9f:15:e4:87: 12:d2:d3:4b:8d:2d:87:7e:c4:60:cf:00:ee:b1:af: c4:cb:17:9b:d8:3c:a3:00:a3:bb:ed:ab:5a:4a:44: b8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3D:F7:CF:6E:69:4F:8F:4D:D8:EF:C8:F8:9D:96:C5:52:90:98:C8 X509v3 Authority Key Identifier: keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:d8:1c:cd:87:6a:c4:07:ad:51:a0:07:17:fd:0b:ce:18:00: 7d:a3:23:72:03:87:2b:7a:99:0e:1f:fc:86:83:91:02:d3:ae: 54:02:f9:51:e8:ae:b3:8a:5a:92:4c:7e:31:94:c0:03:52:1f: ee:f6:db:34:c3:9e:88:0c:54:20:05:d4:0c:21:10:e9:26:2e: 6b:7b:dc:69:b6:e6:95:cf:e6:e9:03:88:17:34:95:77:0d:75: 1a:55:01:fe:6a:31:ca:0b:2f:ab:d6:c6:91:e1:8d:a2:22:72: 9e:b1:78:21:84:de:40:2f:45:3c:5a:2f:30:ae:41:dd:c9:22: 4e:da:55:90:ae:32:69:bc:93:22:86:b4:f7:8e:71:a6:49:76: e8:41:6e:ba:2e:95:6d:e2:57:84:8d:bc:8e:91:2b:32:b4:e6: 09:6f:d0:58:3e:ef:5b:95:4a:17:25:a7:70:03:c2:dd:05:57: 89:54:4a:b0:e8:c6:de:6d:38:03:29:b2:96:1a:7b:b3:ac:5b: 6e:36:f8:88:57:03:05:c5:22:59:54:bb:d2:3c:e4:43:c4:fc: 43:36:9b:e0:94:81:01:6c:62:81:1f:78:03:9e:5e:90:35:2b: 53:3c:ab:3c:0f:52:ac:1e:80:6a:b9:f7:64:59:44:29:e0:01: a3:b4:4d:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmw4ZLrgus4CLx/0ouYEiuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NDUzN2Q1NGYzNmYxNDIyMzFiYzgxNzAzODg3MmNiNjA3 YjIxZTcwHhcNMjUxMjI4MjEwMDQ4WhcNMjUxMjI5MjEwMDQ4WjAzMTEwLwYDVQQD EygxMDNkZjdjZjZlNjk0ZjhmNGRkOGVmYzhmODlkOTZjNTUyOTA5OGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+PDnRv4X5hWXUErUnrhDORfqf7hF Mm15tJBR2NLSUpMtUSvJDd3EUlp5udl5+QUbg/rYIhBDGfGoqG7aQl7sRWEnowBU GYlE+NTeavr/pJ7272KO/FtTRM3G6h5BggcembxzbrmGOgGnaHMD+yQH8VUry3pF jvzZ+LJCAWx3lJpwF3GFz7jy3QzINqh+j3hcwh6Fs9Mp94FPbY1lHMXM0eyvLcM4 SMigx1cmfK4o4O/+uafeYMjeDKt/PMPhQhAjguvEyh9mGuPJkJkiOeb37kq4KmH4 6mYE3mIqQ58V5IcS0tNLjS2HfsRgzwDusa/Eyxeb2DyjAKO77ataSkS4owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBA9989uaU+PTdjvyPidlsVSkJjIMB8GA1UdIwQY MBaAFFdFN9VPNvFCIxvIFwOIcstgeyHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQt NGI4OWQzNzc4MDhlLzEvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQtNGI4OWQzNzc4MDhl LzEvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2tgczYdq xAetUaAHF/0LzhgAfaMjcgOHK3qZDh/8hoORAtOuVAL5Ueius4pakkx+MZTAA1If 7vbbNMOeiAxUIAXUDCEQ6SYua3vcabbmlc/m6QOIFzSVdw11GlUB/moxygsvq9bG keGNoiJynrF4IYTeQC9FPFovMK5B3ckiTtpVkK4yabyTIoa0945xpkl26EFuui6V beJXhI28jpErMrTmCW/QWD7vW5VKFyWncAPC3QVXiVRKsOjG3m04Aymylhp7s6xb bjb4iFcDBcUiWVS70jzkQ8T8Qzab4JSBAWxigR94A55ekDUrUzyrPA9SrB6Aarn3 ZFlEKeABo7RNYQ== -----END CERTIFICATE-----Generated at Mon Dec 29 04:15:47 2025 by rpki-client