This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft File: 31EgEGEfkbFilnKKlNGmZbSrdXA.mft (raw, json) Hash identifier: 9zUJtqN9maol5lsFdOtIOTHiZcX9NAJm9Cys/HN1BHE= Subject key identifier: BE:F4:6C:0F:1A:A9:56:78:75:D0:EE:37:51:D7:23:15:7A:65:E2:E2 Authority key identifier: DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70 Certificate issuer: /CN=df512010611f91b16296728a94d1a665b4ab7570 Certificate serial: 019B3FED0CFCB6FF71056404A5D9CCFA38E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 08:00:58 +0000 Manifest this update: Sun 21 Dec 2025 08:00:58 +0000 Manifest next update: Mon 22 Dec 2025 08:00:58 +0000 Files and hashes: 1: 31EgEGEfkbFilnKKlNGmZbSrdXA.crl (hash: r2EwrLYf6HbfggBwVt+y4Gq88Bx/V0XwT1HSd30C2iE=) 2: Cre1atzMDwt4GowPQslT1BJNz70.roa (hash: AgobKkjGt4zwBE8+8mA/MF95V2kw1GXZGBf2IpysMAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:0c:fc:b6:ff:71:05:64:04:a5:d9:cc:fa:38:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df512010611f91b16296728a94d1a665b4ab7570 Validity Not Before: Dec 21 08:00:58 2025 GMT Not After : Dec 22 08:00:58 2025 GMT Subject: CN=bef46c0f1aa9567875d0ee3751d723157a65e2e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:61:f6:f9:cb:e4:9d:25:2f:ac:b2:ce:15:2b: d2:7b:91:14:58:19:32:3e:3d:20:fe:64:90:9c:c7: 3c:1d:df:e8:33:21:f5:ce:59:71:04:7d:66:a5:ce: de:a4:02:4d:b4:64:f9:7c:6b:b8:36:cd:2b:65:55: c8:09:ff:87:15:e1:4c:63:12:1b:7f:38:8a:a0:c0: c9:95:d6:84:2c:b7:83:75:0a:60:7d:c4:a1:7d:0e: 3b:29:33:ba:d1:b9:31:8a:2b:80:93:de:b3:0c:f9: df:09:1f:60:23:be:16:db:c2:37:e1:57:cc:c7:fe: 30:28:1b:ae:29:47:55:1e:d7:4a:cf:c3:a3:65:da: 6f:eb:0b:3d:3f:f2:f3:d5:fe:1e:3e:0c:62:3d:d5: 38:fb:f1:a5:54:09:b6:60:50:83:d7:a3:ae:23:4e: b2:fb:ae:bf:1e:49:a6:45:cb:50:63:97:e0:94:cc: cb:94:f7:99:9b:05:b0:49:78:40:59:29:90:63:ea: 67:55:4b:61:94:dd:ab:49:be:8c:f8:dc:56:4e:62: 56:be:ac:a3:95:32:fd:30:e1:73:6c:b3:9f:b9:7e: 10:e4:d4:41:24:af:06:4b:44:dd:aa:bf:dc:71:49: ce:5d:ca:62:af:40:da:75:e1:59:73:7d:b3:8c:bb: 9f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F4:6C:0F:1A:A9:56:78:75:D0:EE:37:51:D7:23:15:7A:65:E2:E2 X509v3 Authority Key Identifier: keyid:DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:1f:06:46:0e:5e:52:55:b1:39:3e:b3:3e:1a:d3:4e:d5:a1: 7e:c8:12:be:8d:47:95:65:4a:0c:a9:ee:db:64:55:f7:1c:76: c8:4c:4c:ee:94:4b:87:04:cb:63:9b:1d:8b:bb:eb:67:2f:7a: a8:a2:51:d7:14:13:3e:42:dd:ba:37:e5:87:21:c6:a6:14:2b: c8:cc:b1:ab:c8:d7:51:9d:1c:4a:ae:d3:3a:f7:4a:3d:cc:09: 07:7d:07:64:50:df:71:46:ae:56:82:ce:c4:b1:f6:55:1b:c1: 01:d2:df:3d:44:f7:5a:26:cb:11:8b:fe:06:21:31:b7:73:e8: b2:a9:04:f6:8a:71:99:79:1c:50:e1:76:ad:f8:e1:7a:36:c4: 3b:f0:8a:47:3c:11:9f:3c:2e:ca:cd:35:a0:aa:08:1b:47:4a: db:42:32:5b:ca:4d:36:9e:5c:18:de:88:c0:d5:95:ce:ce:29: 5d:ad:50:f1:8b:52:de:8b:ef:56:7c:0f:88:14:f3:bb:96:b7: a0:a1:29:54:14:83:7a:92:f5:2d:22:07:b0:f1:df:df:63:1d: d2:15:33:48:df:c4:be:04:74:1f:59:e3:f6:4f:50:6f:9c:45: 59:47:7e:15:30:e7:5c:19:46:5c:27:03:f6:12:06:bd:b8:d1: 21:7e:ad:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7Qz8tv9xBWQEpdnM+jjoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNTEyMDEwNjExZjkxYjE2Mjk2NzI4YTk0ZDFhNjY1YjRh Yjc1NzAwHhcNMjUxMjIxMDgwMDU4WhcNMjUxMjIyMDgwMDU4WjAzMTEwLwYDVQQD EyhiZWY0NmMwZjFhYTk1Njc4NzVkMGVlMzc1MWQ3MjMxNTdhNjVlMmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2H2+cvknSUvrLLOFSvSe5EUWBky Pj0g/mSQnMc8Hd/oMyH1zllxBH1mpc7epAJNtGT5fGu4Ns0rZVXICf+HFeFMYxIb fziKoMDJldaELLeDdQpgfcShfQ47KTO60bkxiiuAk96zDPnfCR9gI74W28I34VfM x/4wKBuuKUdVHtdKz8OjZdpv6ws9P/Lz1f4ePgxiPdU4+/GlVAm2YFCD16OuI06y +66/HkmmRctQY5fglMzLlPeZmwWwSXhAWSmQY+pnVUthlN2rSb6M+NxWTmJWvqyj lTL9MOFzbLOfuX4Q5NRBJK8GS0Tdqr/ccUnOXcpir0DadeFZc32zjLufZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL70bA8aqVZ4ddDuN1HXIxV6ZeLiMB8GA1UdIwQY MBaAFN9RIBBhH5GxYpZyipTRpmW0q3VwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81MGY3ZTEtNmNiYy00ZjVhLWIyZWIt YjA2MmU5NzI1YjFkLzEvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy81MGY3ZTEtNmNiYy00ZjVhLWIyZWItYjA2MmU5NzI1YjFk LzEvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUh8GRg5e UlWxOT6zPhrTTtWhfsgSvo1HlWVKDKnu22RV9xx2yExM7pRLhwTLY5sdi7vrZy96 qKJR1xQTPkLdujflhyHGphQryMyxq8jXUZ0cSq7TOvdKPcwJB30HZFDfcUauVoLO xLH2VRvBAdLfPUT3WibLEYv+BiExt3PosqkE9opxmXkcUOF2rfjhejbEO/CKRzwR nzwuys01oKoIG0dK20IyW8pNNp5cGN6IwNWVzs4pXa1Q8YtS3ovvVnwPiBTzu5a3 oKEpVBSDepL1LSIHsPHf32Md0hUzSN/EvgR0H1nj9k9Qb5xFWUd+FTDnXBlGXCcD 9hIGvbjRIX6twA== -----END CERTIFICATE-----Generated at Sun Dec 21 17:21:50 2025 by rpki-client