This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft File: V04loW5dOqEQrF6DNfiPY-VLQvE.mft (raw, json) Hash identifier: 0wYPlryw92Lj9f6RYGX9mukapRzRaaxfAs7EZZPCWng= Subject key identifier: 73:B0:7F:86:C3:EA:7B:1F:80:FD:5E:68:BF:EF:1B:08:15:25:58:05 Authority key identifier: 57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1 Certificate issuer: /CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1 Certificate serial: 019B341F8ED2C410BB7BC6F1144665138890 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft Manifest number: 178C Signing time: Fri 19 Dec 2025 01:00:41 +0000 Manifest this update: Fri 19 Dec 2025 01:00:41 +0000 Manifest next update: Sat 20 Dec 2025 01:00:41 +0000 Files and hashes: 1: V04loW5dOqEQrF6DNfiPY-VLQvE.crl (hash: JC2pkMr+/i0YdgHfZvGzbNgtYWDZjAhplq+Md6YVfyw=) 2: aq9ZDPOt2KSoFZ-L-okek5SxK78.roa (hash: bWviDnPDEPH13dbpMPoZ7BrHECU4pVLl3k2fyU17UOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:8e:d2:c4:10:bb:7b:c6:f1:14:46:65:13:88:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1 Validity Not Before: Dec 19 01:00:41 2025 GMT Not After : Dec 20 01:00:41 2025 GMT Subject: CN=73b07f86c3ea7b1f80fd5e68bfef1b0815255805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1c:f5:1e:58:b3:84:a1:f2:56:e4:62:c4:bc: 90:08:f8:e9:fc:d1:f5:08:80:d6:1c:dd:6a:b0:f6: 2e:04:6a:99:6d:43:e2:45:5f:4e:7a:5b:78:8a:21: 30:d9:fb:c9:5e:8d:16:64:d5:b8:d8:17:2f:1d:f6: 44:f4:cb:de:60:c6:bb:08:3f:e9:61:4e:ee:51:fa: 00:24:57:d0:80:5e:10:bc:fd:66:d9:b8:e9:71:02: 4d:84:bd:dc:c0:ac:77:48:df:d7:f3:a9:7a:13:41: 7b:2d:b4:42:31:6f:5f:5b:8d:cf:2e:21:fe:5b:7a: 2c:30:ac:28:1e:43:6b:2d:2a:3d:10:a8:e4:44:55: f2:ea:ff:37:f4:45:ba:f1:9e:8f:a9:1c:71:39:0f: f3:3d:c2:bc:31:ea:92:ae:79:48:5c:8a:b4:27:12: ec:88:7f:fe:5b:7f:f2:2a:2e:28:20:81:22:8e:c6: e1:e5:f2:04:c1:21:77:08:d2:ea:7c:68:b6:63:52: e9:b3:29:07:af:8b:e7:43:49:fa:ad:2e:e5:c3:fd: fb:a5:25:ab:46:03:17:38:95:1a:86:2e:47:58:dd: b6:4a:c8:f5:b8:9b:46:03:a9:ff:f5:0b:19:d0:4a: 41:fe:60:b6:fa:54:bf:40:30:05:fb:9a:33:e6:13: 2e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B0:7F:86:C3:EA:7B:1F:80:FD:5E:68:BF:EF:1B:08:15:25:58:05 X509v3 Authority Key Identifier: keyid:57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:5e:f8:28:76:a3:4e:ab:61:af:a9:03:2e:14:94:a7:f1:55: 16:4a:d2:56:3d:91:2f:c7:53:3f:27:f3:46:12:3c:f5:42:85: c1:9c:6e:8c:8c:d4:b2:a9:c6:e0:57:cf:97:22:71:cc:13:10: b2:3b:7a:65:e5:24:0a:3e:8e:18:7c:0d:dc:44:12:50:22:81: e4:32:c7:b7:61:24:59:61:aa:3e:97:20:2c:71:b5:58:05:83: 6b:1d:6b:c1:66:cf:19:40:2c:b3:fe:e6:15:e5:b0:3a:e7:b7: e3:55:cf:34:a6:c0:50:b0:d8:c6:14:38:f0:0e:c0:e5:6b:be: cf:39:e5:52:f7:1b:4a:be:ac:48:0f:83:a3:a2:d7:3c:d4:bd: a9:f6:e9:d5:36:79:fd:d2:db:49:5c:d7:e9:89:f1:9f:90:29: 58:8c:00:dd:f4:0b:5c:ea:68:62:72:bc:d7:00:04:d2:a7:b1: 00:04:0e:5a:8f:9d:94:77:2a:ef:88:71:16:6a:26:d0:f0:87: a7:f8:86:6d:f2:39:7f:cc:31:b8:c9:31:fb:9c:9e:41:62:1f: 6e:78:cd:d9:56:9a:e6:0e:2a:5a:83:fd:f2:9e:93:47:97:b6: 85:db:86:94:fc:de:e6:42:54:38:42:d6:fb:67:ba:89:53:af: d3:73:64:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H47SxBC7e8bxFEZlE4iQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NGUyNWExNmU1ZDNhYTExMGFjNWU4MzM1Zjg4ZjYzZTU0 YjQyZjEwHhcNMjUxMjE5MDEwMDQxWhcNMjUxMjIwMDEwMDQxWjAzMTEwLwYDVQQD Eyg3M2IwN2Y4NmMzZWE3YjFmODBmZDVlNjhiZmVmMWIwODE1MjU1ODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hz1HlizhKHyVuRixLyQCPjp/NH1 CIDWHN1qsPYuBGqZbUPiRV9Oelt4iiEw2fvJXo0WZNW42BcvHfZE9MveYMa7CD/p YU7uUfoAJFfQgF4QvP1m2bjpcQJNhL3cwKx3SN/X86l6E0F7LbRCMW9fW43PLiH+ W3osMKwoHkNrLSo9EKjkRFXy6v839EW68Z6PqRxxOQ/zPcK8MeqSrnlIXIq0JxLs iH/+W3/yKi4oIIEijsbh5fIEwSF3CNLqfGi2Y1LpsykHr4vnQ0n6rS7lw/37pSWr RgMXOJUahi5HWN22Ssj1uJtGA6n/9QsZ0EpB/mC2+lS/QDAF+5oz5hMuJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOwf4bD6nsfgP1eaL/vGwgVJVgFMB8GA1UdIwQY MBaAFFdOJaFuXTqhEKxegzX4j2PlS0LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjA0bG9XNWRPcUVRckY2RE5maVBZLVZMUXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wNDI5MmYtZjEwNC00MTdjLWFjZGEt NTcxYWYwNjZjZjFlLzEvVjA0bG9XNWRPcUVRckY2RE5maVBZLVZMUXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wNDI5MmYtZjEwNC00MTdjLWFjZGEtNTcxYWYwNjZjZjFl LzEvVjA0bG9XNWRPcUVRckY2RE5maVBZLVZMUXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYF74KHaj Tqthr6kDLhSUp/FVFkrSVj2RL8dTPyfzRhI89UKFwZxujIzUsqnG4FfPlyJxzBMQ sjt6ZeUkCj6OGHwN3EQSUCKB5DLHt2EkWWGqPpcgLHG1WAWDax1rwWbPGUAss/7m FeWwOue341XPNKbAULDYxhQ48A7A5Wu+zznlUvcbSr6sSA+Do6LXPNS9qfbp1TZ5 /dLbSVzX6Ynxn5ApWIwA3fQLXOpoYnK81wAE0qexAAQOWo+dlHcq74hxFmom0PCH p/iGbfI5f8wxuMkx+5yeQWIfbnjN2Vaa5g4qWoP98p6TR5e2hduGlPze5kJUOELW +2e6iVOv03NkbQ== -----END CERTIFICATE-----Generated at Fri Dec 19 07:49:15 2025 by rpki-client