This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft File: fVaVeG-EUNEEHciK2JLLtXDVlys.mft (raw, json) Hash identifier: euy1dHEjeKwVpwSO22JsZ+Ke7M+JZ7o8VSjKoLbV9FM= Subject key identifier: 1C:0A:8F:0B:4B:B6:B7:BA:B1:06:1A:18:A0:C7:EC:30:B6:E3:43:94 Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b Certificate serial: 019B3720F1FC7655451C3707F0F50E572C28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft Manifest number: 17A2 Signing time: Fri 19 Dec 2025 15:01:04 +0000 Manifest this update: Fri 19 Dec 2025 15:01:04 +0000 Manifest next update: Sat 20 Dec 2025 15:01:04 +0000 Files and hashes: 1: 3rzAd226LvrMj0Cm0bg7sXb9CMo.roa (hash: n/9KaWla5IkEpIQV9qzq6meBd1c5WCnkPlwm2zCEneA=) 2: ATAXcZqjug_OpJ5XGTmLoPMGEOc.roa (hash: qD5faLkjHPVXEYY6RoVKIKOshkTkJFAi6AIDTmlkjhM=) 3: MqcJtj5YrV2deFqbcoVG32bZ2r8.roa (hash: E92Ulmv1M67QKZLv1VXUCMAlXz/Jc5TybOn0dCFrPnk=) 4: Snz83wMqCM-SKONtyGtVYyf_564.roa (hash: p8QMBaY7f26L9gcaXCq1Gvj1hb7teO/PHvsMVvNQlYA=) 5: fVaVeG-EUNEEHciK2JLLtXDVlys.crl (hash: XLySUq2y5L6iujL8OhzLlRZzst0SqP4NT3Cm/zoZees=) 6: o1HryCgBbs653veiR5bTMLwPhd0.roa (hash: LtY1DMpIFY18APuJfTlDp+opuoKFNGf5hxmLjfIFwOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:f1:fc:76:55:45:1c:37:07:f0:f5:0e:57:2c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b Validity Not Before: Dec 19 15:01:04 2025 GMT Not After : Dec 20 15:01:04 2025 GMT Subject: CN=1c0a8f0b4bb6b7bab1061a18a0c7ec30b6e34394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d8:eb:68:b2:99:d8:58:3b:b0:ae:79:e6:c2: 88:27:44:ff:2f:49:26:09:92:46:ad:88:dd:9a:02: 89:d1:0f:c3:01:31:00:d7:0c:38:5d:20:1c:c4:33: fc:31:3d:dd:3a:4c:18:69:ef:b2:b2:b3:8a:96:d8: 27:da:ad:d5:a2:27:b5:b7:99:df:ad:db:6a:9a:c4: 53:40:61:49:a7:73:23:dc:a8:35:ff:5e:c3:79:1e: 4d:77:34:1b:72:cc:6d:bf:34:17:dd:5b:2b:cf:47: 46:fd:69:87:cd:91:d5:eb:2b:15:8d:e7:74:af:7c: d7:dc:2c:6a:8e:13:ff:87:1e:61:32:d4:50:79:b9: db:0e:43:98:6f:8f:5c:3e:c3:20:14:29:fc:3a:ef: cc:a9:10:94:b7:09:a7:ae:55:eb:e2:8b:db:aa:80: df:f4:c8:37:41:2b:bf:51:53:d3:86:cf:ed:eb:14: b0:b7:d0:5e:bc:a0:53:c1:81:42:fd:30:36:da:4d: 51:d6:11:dd:46:22:5c:dc:2b:61:fa:24:63:1e:73: 7f:ab:9d:6e:05:f1:84:57:0e:72:95:70:ef:e5:78: a7:e9:f7:87:f1:3b:da:4b:e7:72:ac:97:c1:02:8d: 7e:fa:fb:61:e0:ce:62:c2:e1:5c:f2:d3:f6:19:76: 1d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0A:8F:0B:4B:B6:B7:BA:B1:06:1A:18:A0:C7:EC:30:B6:E3:43:94 X509v3 Authority Key Identifier: keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:ce:fb:d1:7f:45:6e:c2:17:ec:b8:92:b4:3c:4a:8a:cd:00: 6b:2c:2c:b2:d4:29:d7:66:95:79:5f:f9:49:40:4e:62:d1:0c: 86:a0:9f:75:95:1f:f2:81:82:d8:ff:ae:b0:a9:9f:c9:97:e0: ba:ee:c1:29:45:55:f8:35:27:1f:6d:7e:87:4a:8f:ca:89:ff: 78:8b:ce:1b:e3:ee:20:15:d3:d3:74:a8:46:d0:a7:bb:3a:8f: 94:c6:a7:10:ea:6b:3f:a7:8e:c0:c0:f9:d8:34:e7:ec:86:53: 5f:fb:9a:31:91:99:ac:d7:78:83:2f:44:b0:d6:5f:2f:df:9b: 74:19:b5:df:f9:29:c9:60:8f:61:bc:46:58:a7:d2:b1:93:e7: 0c:16:c7:97:1c:23:29:b9:d4:b9:1a:ab:38:df:c6:bd:21:d7: c1:bb:8e:fd:42:86:05:d8:2b:cd:ce:3d:a7:44:10:93:53:eb: 15:35:a4:7a:59:1c:c0:7c:09:c7:c7:38:a8:18:d8:82:b6:35: 8c:0a:d4:84:d2:83:71:e5:4f:24:6f:58:6f:8f:0e:8b:4f:b6: f8:77:3d:47:d1:f5:ed:84:36:ed:8c:e2:23:65:02:5b:e9:1a: b7:e7:87:1f:86:35:9e:bf:9c:38:4e:64:bf:b7:33:b1:3a:cb: a2:2d:37:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IPH8dlVFHDcH8PUOVywoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTY5NTc4NmY4NDUwZDEwNDFkYzg4YWQ4OTJjYmI1NzBk NTk3MmIwHhcNMjUxMjE5MTUwMTA0WhcNMjUxMjIwMTUwMTA0WjAzMTEwLwYDVQQD EygxYzBhOGYwYjRiYjZiN2JhYjEwNjFhMThhMGM3ZWMzMGI2ZTM0Mzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstjraLKZ2Fg7sK555sKIJ0T/L0km CZJGrYjdmgKJ0Q/DATEA1ww4XSAcxDP8MT3dOkwYae+ysrOKltgn2q3Voie1t5nf rdtqmsRTQGFJp3Mj3Kg1/17DeR5NdzQbcsxtvzQX3Vsrz0dG/WmHzZHV6ysVjed0 r3zX3CxqjhP/hx5hMtRQebnbDkOYb49cPsMgFCn8Ou/MqRCUtwmnrlXr4ovbqoDf 9Mg3QSu/UVPThs/t6xSwt9BevKBTwYFC/TA22k1R1hHdRiJc3Cth+iRjHnN/q51u BfGEVw5ylXDv5Xin6feH8TvaS+dyrJfBAo1++vth4M5iwuFc8tP2GXYdBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwKjwtLtre6sQYaGKDH7DC240OUMB8GA1UdIwQY MBaAFH1WlXhvhFDRBB3IitiSy7Vw1ZcrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMTdhYTctZTJhZC00YTg1LWIzZDIt NjNiMzM4MDhhNmE4LzEvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zMTdhYTctZTJhZC00YTg1LWIzZDItNjNiMzM4MDhhNmE4 LzEvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArs770X9F bsIX7LiStDxKis0AaywsstQp12aVeV/5SUBOYtEMhqCfdZUf8oGC2P+usKmfyZfg uu7BKUVV+DUnH21+h0qPyon/eIvOG+PuIBXT03SoRtCnuzqPlManEOprP6eOwMD5 2DTn7IZTX/uaMZGZrNd4gy9EsNZfL9+bdBm13/kpyWCPYbxGWKfSsZPnDBbHlxwj KbnUuRqrON/GvSHXwbuO/UKGBdgrzc49p0QQk1PrFTWkelkcwHwJx8c4qBjYgrY1 jArUhNKDceVPJG9Yb48Oi0+2+Hc9R9H17YQ27YziI2UCW+kat+eHH4Y1nr+cOE5k v7czsTrLoi03jg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:07:32 2025 by rpki-client