This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft File: V0AEDht6Uy3SrsIuk6YisuGzve8.mft (raw, json) Hash identifier: 06jstFWueoL1uo133LLuskQXbM613vGJCsUAQufC0Yc= Subject key identifier: 11:BD:2F:D8:8E:85:34:18:32:43:03:1B:A0:67:BD:9D:04:2B:3C:6E Authority key identifier: 57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF Certificate issuer: /CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef Certificate serial: 019B37FCA748484770984FA39E6633D5B16A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft Manifest number: 1717 Signing time: Fri 19 Dec 2025 19:01:03 +0000 Manifest this update: Fri 19 Dec 2025 19:01:03 +0000 Manifest next update: Sat 20 Dec 2025 19:01:03 +0000 Files and hashes: 1: V0AEDht6Uy3SrsIuk6YisuGzve8.crl (hash: NuqGSmchECMMUHtPjEA4mgv2ivxaDxP4INKCwF08MkA=) 2: wjijn454ptb7YjSwbgYustwNzJI.roa (hash: q85TNLC9Fv889V7DCE+ssvZg83i29aUc5JCe0NjjzpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.crl rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:a7:48:48:47:70:98:4f:a3:9e:66:33:d5:b1:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef Validity Not Before: Dec 19 19:01:03 2025 GMT Not After : Dec 20 19:01:03 2025 GMT Subject: CN=11bd2fd88e8534183243031ba067bd9d042b3c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:34:8e:c5:55:b8:8c:76:f3:e6:eb:a0:84:14: 47:ca:f4:d8:51:90:7a:ae:46:bf:63:c3:d5:86:4a: e4:87:59:dd:f5:c0:f4:cb:1b:ed:8c:ac:aa:79:c4: 14:4b:04:31:f7:a9:3e:d6:0b:11:ac:0a:cc:35:c9: 01:a3:ab:a3:c5:e1:0a:9e:77:d0:46:b5:14:34:7e: 62:8f:b3:e1:eb:23:ef:33:d4:09:39:ea:6f:fa:d1: e9:13:09:14:b8:e6:a6:7d:45:ee:23:91:03:85:3f: 49:78:bf:b9:10:fd:3e:f3:81:e2:12:0b:78:1b:26: a4:98:8f:b2:71:25:31:a7:16:32:20:0f:f8:ad:87: a6:07:75:9f:64:96:97:4f:f6:47:58:2d:db:d2:38: 61:2f:2c:2f:96:3e:ff:5a:18:a5:1d:05:79:40:6a: b5:d5:35:06:1a:96:72:57:88:53:91:67:6d:24:eb: b6:3f:96:8a:4e:d8:c4:22:4f:db:88:ed:30:c5:cc: b5:0b:ce:c1:c2:64:29:e7:76:f9:7f:e1:4b:d5:61: c3:3f:94:43:2c:91:66:61:2e:bd:ca:26:7c:2a:6a: 16:3d:31:42:8b:4c:c7:64:02:36:58:9c:be:54:5d: 21:74:15:9c:54:a4:63:61:e3:4d:cf:64:a3:30:1f: 7e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BD:2F:D8:8E:85:34:18:32:43:03:1B:A0:67:BD:9D:04:2B:3C:6E X509v3 Authority Key Identifier: keyid:57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:1d:2d:9a:5c:2d:8f:38:06:6e:74:0b:10:fb:a4:6d:29:b5: c6:aa:f7:50:09:ba:a7:87:d0:4d:3d:59:9a:84:32:0d:14:e7: 36:87:27:1c:f6:71:89:0a:d2:b4:4b:eb:ff:2a:91:97:54:2f: 9f:2d:cb:34:e3:ca:e7:db:ef:9d:40:6d:56:32:43:1e:00:be: 08:bf:9d:83:71:bd:2f:83:55:f1:ba:b9:35:cf:ec:08:32:9d: 90:1c:d6:9f:1e:29:91:83:6b:de:37:f2:6e:32:98:4a:b8:c5: 06:61:01:46:6e:45:41:fd:7e:b1:2a:99:3a:e0:bf:dd:6b:cb: b1:b5:30:c5:27:ff:31:07:97:c0:33:94:8a:d4:58:ea:62:ef: f4:da:d3:81:a2:19:d2:cf:5c:38:9b:55:d1:f4:9a:25:b4:2e: 43:23:ce:59:63:34:21:3d:41:01:66:a7:ec:5c:15:09:18:0b: 69:fa:9d:5a:d2:a7:a6:f5:35:62:35:6b:7e:fc:ef:c7:ea:d0: f9:78:59:8a:e8:07:f5:31:5e:85:e0:62:99:3b:4a:16:bd:57: d1:01:13:1e:b4:6d:9d:d3:0b:44:39:bf:24:f4:c9:f9:d2:8f: ec:cc:a5:6c:ca:8e:13:cc:85:4a:2d:d5:b1:9d:d8:6b:60:8f: c2:60:d6:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/KdISEdwmE+jnmYz1bFqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NDAwNDBlMWI3YTUzMmRkMmFlYzIyZTkzYTYyMmIyZTFi M2JkZWYwHhcNMjUxMjE5MTkwMTAzWhcNMjUxMjIwMTkwMTAzWjAzMTEwLwYDVQQD EygxMWJkMmZkODhlODUzNDE4MzI0MzAzMWJhMDY3YmQ5ZDA0MmIzYzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTSOxVW4jHbz5uughBRHyvTYUZB6 rka/Y8PVhkrkh1nd9cD0yxvtjKyqecQUSwQx96k+1gsRrArMNckBo6ujxeEKnnfQ RrUUNH5ij7Ph6yPvM9QJOepv+tHpEwkUuOamfUXuI5EDhT9JeL+5EP0+84HiEgt4 GyakmI+ycSUxpxYyIA/4rYemB3WfZJaXT/ZHWC3b0jhhLywvlj7/WhilHQV5QGq1 1TUGGpZyV4hTkWdtJOu2P5aKTtjEIk/biO0wxcy1C87BwmQp53b5f+FL1WHDP5RD LJFmYS69yiZ8KmoWPTFCi0zHZAI2WJy+VF0hdBWcVKRjYeNNz2SjMB9+2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBG9L9iOhTQYMkMDG6BnvZ0EKzxuMB8GA1UdIwQY MBaAFFdABA4belMt0q7CLpOmIrLhs73vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjBBRURodDZVeTNTcnNJdWs2WWlzdUd6dmU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xYzAyMDUtNWM2NS00N2NkLWIxYjMt MjdjMjZiMjNiODQ1LzEvVjBBRURodDZVeTNTcnNJdWs2WWlzdUd6dmU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8xYzAyMDUtNWM2NS00N2NkLWIxYjMtMjdjMjZiMjNiODQ1 LzEvVjBBRURodDZVeTNTcnNJdWs2WWlzdUd6dmU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZR0tmlwt jzgGbnQLEPukbSm1xqr3UAm6p4fQTT1ZmoQyDRTnNocnHPZxiQrStEvr/yqRl1Qv ny3LNOPK59vvnUBtVjJDHgC+CL+dg3G9L4NV8bq5Nc/sCDKdkBzWnx4pkYNr3jfy bjKYSrjFBmEBRm5FQf1+sSqZOuC/3WvLsbUwxSf/MQeXwDOUitRY6mLv9NrTgaIZ 0s9cOJtV0fSaJbQuQyPOWWM0IT1BAWan7FwVCRgLafqdWtKnpvU1YjVrfvzvx+rQ +XhZiugH9TFeheBimTtKFr1X0QETHrRtndMLRDm/JPTJ+dKP7MylbMqOE8yFSi3V sZ3Ya2CPwmDWgA== -----END CERTIFICATE-----Generated at Fri Dec 19 22:56:44 2025 by rpki-client