This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft File: valtAqgi9GJTwq7mgEQdWsJ8PfU.mft (raw, json) Hash identifier: 0GnN/ID76/VIZX2xV1vg34A6uem/dQsnk4L/vktOOeI= Subject key identifier: DD:E4:C1:C4:A2:45:DD:2F:75:BE:84:34:A1:C5:0E:A5:F1:26:21:40 Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5 Certificate issuer: /CN=bda96d02a822f46253c2aee680441d5ac27c3df5 Certificate serial: 019B1C4E65B4A1D40E8627036A33E0EFFA7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft Manifest number: 177F Signing time: Sun 14 Dec 2025 10:00:58 +0000 Manifest this update: Sun 14 Dec 2025 10:00:58 +0000 Manifest next update: Mon 15 Dec 2025 10:00:58 +0000 Files and hashes: 1: F3mmIE5e5Y4BeSDKQ3DR2L-rAk8.roa (hash: jbee28DZuoinhmMa1MpH2LACZ/XrJT7Z3vVmbAZdw7Q=) 2: Mk3OCH61bD3mOm8DSaSiAzwW7fk.roa (hash: oxlH7V9EjPMbmvgDLqeKQJs9KOwBY0gM7ZfOAxvET+w=) 3: dRiT-c0xAt2kngbyOhm_uFIV1zw.roa (hash: Wglqc09L4EahGS8AZXe98XrHNBuQBQLDeHD0KWaBnTQ=) 4: fV9G8OutvawEP_xsKieVXci-tIE.roa (hash: o9Ux/+t3JTsGEZGnq53xgSqRPo9nNu5/xoSyWOejP2Q=) 5: jx4NNkHPAbONhfyLhU8TOxw7M1s.roa (hash: g2tq87dmJIfsiGuaezvjDvuxwyvPju47/Uw+kKdECC0=) 6: valtAqgi9GJTwq7mgEQdWsJ8PfU.crl (hash: K1YC4YfYO/vtAgQoX0uS85jC/iGfGQdCuuqM/MpCT8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:4e:65:b4:a1:d4:0e:86:27:03:6a:33:e0:ef:fa:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5 Validity Not Before: Dec 14 10:00:58 2025 GMT Not After : Dec 15 10:00:58 2025 GMT Subject: CN=dde4c1c4a245dd2f75be8434a1c50ea5f1262140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:16:0d:97:8d:e9:4a:fc:a6:6e:a0:36:19:5c: 3e:07:a9:2c:ad:2a:87:d9:7f:9c:e2:ec:bf:78:c5: a0:b6:11:25:33:fd:3b:3a:c4:73:3f:5c:ae:81:6a: c1:6c:13:15:ef:22:93:81:1d:c1:6a:73:d4:10:25: 42:80:63:d4:7f:45:6b:2b:09:64:44:09:fd:4e:28: 07:16:ec:3c:3f:d5:b9:c4:4b:f4:fe:bb:73:2a:b7: 46:f7:51:8b:c7:0d:0b:ef:a4:00:96:9d:77:e3:aa: b3:ab:62:90:05:76:ff:02:a7:80:24:0f:ba:23:53: 86:19:86:e6:c9:3f:8e:fe:8d:5a:89:80:fb:c5:23: e2:79:87:85:c1:fe:0f:b3:91:78:1a:50:fe:80:f5: 2f:df:4a:1e:02:d8:f8:72:9a:80:6a:5b:bd:65:36: 67:01:19:da:e2:1b:11:b6:22:92:d9:44:2b:a1:7d: 70:bd:a9:30:62:92:8b:7a:07:00:18:31:ac:3a:89: 90:aa:4f:1d:64:f5:39:03:62:bb:ba:ed:01:64:6e: 11:93:83:b6:4e:db:ce:7f:07:60:3d:76:95:7b:89: e9:9b:13:f7:c6:83:7f:e6:66:60:31:b6:05:16:5e: 04:d4:4c:26:a1:8d:2f:bb:ad:35:bb:53:48:8d:6c: d1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E4:C1:C4:A2:45:DD:2F:75:BE:84:34:A1:C5:0E:A5:F1:26:21:40 X509v3 Authority Key Identifier: keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:25:b8:b8:c0:57:c2:c9:46:fe:7b:a4:18:42:82:78:27:50: 0e:e1:87:be:b6:81:5f:44:a1:2f:f4:8b:02:02:c7:55:93:a2: c9:de:d3:ba:31:bd:1b:69:7a:81:51:aa:91:eb:01:89:08:a9: f4:0d:cd:e7:1a:88:c2:05:a4:4d:1b:f3:12:f4:df:5d:b9:c3: d9:d5:d6:c5:d6:e7:cf:36:f2:bb:15:6b:62:0c:49:a4:9a:29: b0:2b:9a:24:f2:5b:f0:42:c5:fb:52:54:a4:d8:2e:df:43:01: ad:bd:87:bb:9a:d6:5f:4e:8e:96:a5:c5:2c:9c:96:10:69:5f: cf:d4:6b:72:79:ab:80:38:87:23:4c:07:8f:eb:d1:74:4c:4f: 68:d7:2f:27:3e:4f:87:e1:4d:37:68:d7:e5:76:e0:f5:99:6d: 84:45:04:3b:32:91:55:da:e2:26:12:2a:a4:d8:10:e8:7a:d9: 5c:d9:b3:aa:c1:d9:c7:28:e5:2c:a2:0a:c1:85:3c:b6:e3:49: 47:d7:54:81:9b:e5:3d:d0:e0:4d:20:75:80:31:0c:4a:e0:4b: 1d:7d:1d:c4:16:a9:b8:09:ac:ea:e4:38:6e:b0:aa:7a:51:61: a0:29:73:7e:88:d3:97:30:fb:2c:31:86:0b:81:d3:0d:1d:79: 5a:f6:f3:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscTmW0odQOhicDajPg7/p8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYTk2ZDAyYTgyMmY0NjI1M2MyYWVlNjgwNDQxZDVhYzI3 YzNkZjUwHhcNMjUxMjE0MTAwMDU4WhcNMjUxMjE1MTAwMDU4WjAzMTEwLwYDVQQD EyhkZGU0YzFjNGEyNDVkZDJmNzViZTg0MzRhMWM1MGVhNWYxMjYyMTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hYNl43pSvymbqA2GVw+B6ksrSqH 2X+c4uy/eMWgthElM/07OsRzP1yugWrBbBMV7yKTgR3BanPUECVCgGPUf0VrKwlk RAn9TigHFuw8P9W5xEv0/rtzKrdG91GLxw0L76QAlp1346qzq2KQBXb/AqeAJA+6 I1OGGYbmyT+O/o1aiYD7xSPieYeFwf4Ps5F4GlD+gPUv30oeAtj4cpqAalu9ZTZn ARna4hsRtiKS2UQroX1wvakwYpKLegcAGDGsOomQqk8dZPU5A2K7uu0BZG4Rk4O2 TtvOfwdgPXaVe4npmxP3xoN/5mZgMbYFFl4E1EwmoY0vu601u1NIjWzRyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3kwcSiRd0vdb6ENKHFDqXxJiFAMB8GA1UdIwQY MBaAFL2pbQKoIvRiU8Ku5oBEHVrCfD31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hMjdiMzktODAxMS00MTQyLTg2YzIt Y2Y4M2Q2ZTQwNTU4LzEvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hMjdiMzktODAxMS00MTQyLTg2YzItY2Y4M2Q2ZTQwNTU4 LzEvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCW4uMBX wslG/nukGEKCeCdQDuGHvraBX0ShL/SLAgLHVZOiyd7TujG9G2l6gVGqkesBiQip 9A3N5xqIwgWkTRvzEvTfXbnD2dXWxdbnzzbyuxVrYgxJpJopsCuaJPJb8ELF+1JU pNgu30MBrb2Hu5rWX06OlqXFLJyWEGlfz9RrcnmrgDiHI0wHj+vRdExPaNcvJz5P h+FNN2jX5Xbg9ZlthEUEOzKRVdriJhIqpNgQ6HrZXNmzqsHZxyjlLKIKwYU8tuNJ R9dUgZvlPdDgTSB1gDEMSuBLHX0dxBapuAms6uQ4brCqelFhoClzfojTlzD7LDGG C4HTDR15Wvbz/A== -----END CERTIFICATE-----Generated at Sun Dec 14 19:14:22 2025 by rpki-client