This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft File: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft (raw, json) Hash identifier: b+Ptq2KNJYvSTLT2C871zaZlkSlhtwgFs1DCB6KgG5U= Subject key identifier: 96:32:ED:40:7C:3C:B3:43:6C:88:15:57:F1:3F:9A:5E:EA:1A:1D:AB Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b Certificate serial: 019B0890E57824F6297EC89D3878FECFF93B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft Manifest number: 109B Signing time: Wed 10 Dec 2025 14:01:12 +0000 Manifest this update: Wed 10 Dec 2025 14:01:12 +0000 Manifest next update: Thu 11 Dec 2025 14:01:12 +0000 Files and hashes: 1: GyhAtf15yZqMprvOSAG-mSzNZTU.roa (hash: jfVjDUAXNOWRUx2duW7NqVNPhOHvwJFkEOJDlRjLf1c=) 2: Jn9LNrC4wIy3yIlbSkthFN9Albs.roa (hash: 6lIOMorBJKMVKOZBPqKcGfElc6xi+Wc/c9B3Sn6wFrA=) 3: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl (hash: M1bD2V0K++HXDHAs1vQLx5KqSh0C2vBrQD222SkCmyU=) 4: Y2_bnui3NBLO8jQirmiUuAzGyRw.roa (hash: Sj4Gp5iophRPrZcWhz+iS2BZX0tuH2ZNqq3e2/zFjig=) 5: ksLcGKV5sMLU2KPB50R-fjzhUGk.roa (hash: +vfDcxfz6f0BGTFfQ/MI9W/FDb0sJ/mH5+hlrqvwdck=) 6: ntrt1qLEp7JFw_l17Dbev4liPcY.roa (hash: 5lVCUBQu1df/S1FQOKl/MyF/XxoO3ZxscsaY8Q1dPLk=) 7: vfMCWDXHqUhfE9pCWjy3UIK3sYE.roa (hash: cZ4cjZLkxHd/pGP9SjokJ4j+E/I+MNHdDpithj4CeCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:90:e5:78:24:f6:29:7e:c8:9d:38:78:fe:cf:f9:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b Validity Not Before: Dec 10 14:01:12 2025 GMT Not After : Dec 11 14:01:12 2025 GMT Subject: CN=9632ed407c3cb3436c881557f13f9a5eea1a1dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8b:0f:73:09:c8:89:3b:c1:81:83:89:7a:f5: 04:0b:3c:72:0b:fc:57:0f:c3:64:24:81:d7:52:a9: 7d:7b:7b:e5:87:e6:8b:3d:09:53:34:59:13:0c:b2: bf:99:f0:0a:27:09:ea:4e:6d:ce:98:ae:40:3f:b2: cd:7f:d8:96:b7:92:28:2c:ff:4a:c3:31:af:20:9d: 55:79:b7:b8:ca:36:21:de:1d:1d:03:f1:07:6b:ee: 8f:b1:2e:79:d9:86:51:69:48:1d:92:b1:13:a9:44: 75:c5:cd:ee:37:05:70:0c:b0:eb:49:6b:07:45:d4: 95:2c:f0:1a:d2:4d:c9:26:e6:e3:b2:29:90:ab:95: 12:d5:69:24:50:15:df:d6:0c:0e:cf:0f:9b:da:01: 98:0f:d8:ac:dd:79:af:c9:03:4e:6a:5e:54:06:a1: f0:48:b3:ca:be:d2:36:c6:41:50:41:fa:86:85:9d: f3:d1:d1:f2:49:43:64:79:6b:db:18:23:cb:c2:ae: f5:cc:47:9b:a1:fd:7a:a2:b8:2b:c9:2a:d9:4d:93: 27:48:7c:50:29:49:8b:da:07:bf:ff:fc:a2:2c:96: 3b:4b:e7:88:c7:58:a9:65:c8:59:fe:fd:e7:37:f0: a5:75:b0:f6:ef:b6:65:da:a8:a1:b5:3d:0c:eb:28: ac:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:32:ED:40:7C:3C:B3:43:6C:88:15:57:F1:3F:9A:5E:EA:1A:1D:AB X509v3 Authority Key Identifier: keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:1b:6a:a1:22:0b:13:7b:df:4f:62:8b:a1:65:31:fe:80:c4: 2d:d1:25:6f:8c:40:a7:22:ca:80:1f:e3:27:e6:fc:05:11:8d: 29:e7:24:22:21:4b:d9:e1:39:0d:a2:8c:5c:b9:be:7f:c8:7e: 65:7a:5e:8b:44:da:67:32:9b:d6:8f:1c:0b:a4:5c:9f:ca:5b: 32:9b:bb:fb:0d:2a:69:31:80:08:6a:64:04:dc:19:f3:5d:a9: b2:7e:d4:bb:17:a8:88:46:30:8c:9d:36:d5:e6:20:4a:b7:cd: 90:7b:8f:05:65:8a:98:c5:76:a3:03:73:e8:40:0d:9e:01:95: 53:de:35:df:ac:de:1b:1a:bd:56:f9:25:49:d1:25:92:4d:f3: 44:a6:42:7d:0b:11:4d:e8:7a:e2:ec:70:87:53:ed:b6:4f:70: fc:22:b9:42:cc:57:d4:e9:eb:6a:12:b0:d1:c6:23:db:e8:53: 19:7d:27:04:76:c7:a4:de:2a:fe:b3:19:bd:c8:58:18:0e:26: 03:62:17:82:bf:df:97:08:28:eb:4b:a3:b7:c3:58:45:9c:ed: 24:af:e6:0d:9a:b3:91:b2:1a:ed:97:fa:6b:fb:77:63:b7:6e: 56:4d:9d:42:21:9a:52:30:91:9b:ce:f9:22:91:a6:76:a9:21: ca:ad:d2:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIkOV4JPYpfsidOHj+z/k7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NzAyMWRjZGY0NGI2YWZkZDM4MTA1NDdjNTVhNzliZDFh OWZhM2IwHhcNMjUxMjEwMTQwMTEyWhcNMjUxMjExMTQwMTEyWjAzMTEwLwYDVQQD Eyg5NjMyZWQ0MDdjM2NiMzQzNmM4ODE1NTdmMTNmOWE1ZWVhMWExZGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4sPcwnIiTvBgYOJevUECzxyC/xX D8NkJIHXUql9e3vlh+aLPQlTNFkTDLK/mfAKJwnqTm3OmK5AP7LNf9iWt5IoLP9K wzGvIJ1Vebe4yjYh3h0dA/EHa+6PsS552YZRaUgdkrETqUR1xc3uNwVwDLDrSWsH RdSVLPAa0k3JJubjsimQq5US1WkkUBXf1gwOzw+b2gGYD9is3XmvyQNOal5UBqHw SLPKvtI2xkFQQfqGhZ3z0dHySUNkeWvbGCPLwq71zEebof16orgrySrZTZMnSHxQ KUmL2ge///yiLJY7S+eIx1ipZchZ/v3nN/CldbD277Zl2qihtT0M6yisPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYy7UB8PLNDbIgVV/E/ml7qGh2rMB8GA1UdIwQY MBaAFFdwIdzfRLav3TgQVHxVp5vRqfo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQt YzkwN2FlMWMyMTFlLzEvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQtYzkwN2FlMWMyMTFl LzEvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyBtqoSIL E3vfT2KLoWUx/oDELdElb4xApyLKgB/jJ+b8BRGNKeckIiFL2eE5DaKMXLm+f8h+ ZXpei0TaZzKb1o8cC6Rcn8pbMpu7+w0qaTGACGpkBNwZ812psn7UuxeoiEYwjJ02 1eYgSrfNkHuPBWWKmMV2owNz6EANngGVU94136zeGxq9VvklSdElkk3zRKZCfQsR Teh64uxwh1Pttk9w/CK5QsxX1OnrahKw0cYj2+hTGX0nBHbHpN4q/rMZvchYGA4m A2IXgr/flwgo60ujt8NYRZztJK/mDZqzkbIa7Zf6a/t3Y7duVk2dQiGaUjCRm875 IpGmdqkhyq3Snw== -----END CERTIFICATE-----Generated at Wed Dec 10 18:26:47 2025 by rpki-client