This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft File: V04loW5dOqEQrF6DNfiPY-VLQvE.mft (raw, json) Hash identifier: cM3gM7S+JFGUBgnYchxIlTtNLbproybhzOhWSOJw0Fk= Subject key identifier: DB:41:15:21:9B:38:7D:C3:6A:1D:FA:B1:93:EF:89:2D:9C:DC:C1:B8 Authority key identifier: 57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1 Certificate issuer: /CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1 Certificate serial: 019B323156208422946F7F520B9BB44CAEED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft Manifest number: 178B Signing time: Thu 18 Dec 2025 16:00:52 +0000 Manifest this update: Thu 18 Dec 2025 16:00:52 +0000 Manifest next update: Fri 19 Dec 2025 16:00:52 +0000 Files and hashes: 1: V04loW5dOqEQrF6DNfiPY-VLQvE.crl (hash: Dw4awC5vsfqc2nWsnD5eTZcXqb/6xqVV0W3N4853K6o=) 2: aq9ZDPOt2KSoFZ-L-okek5SxK78.roa (hash: bWviDnPDEPH13dbpMPoZ7BrHECU4pVLl3k2fyU17UOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:56:20:84:22:94:6f:7f:52:0b:9b:b4:4c:ae:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1 Validity Not Before: Dec 18 16:00:52 2025 GMT Not After : Dec 19 16:00:52 2025 GMT Subject: CN=db4115219b387dc36a1dfab193ef892d9cdcc1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7e:04:72:f9:f7:5b:aa:13:8b:5c:ca:20:b4: e8:1f:d9:1d:52:1e:46:6f:e5:28:bc:60:32:d0:42: 00:fa:95:25:bc:f8:a3:46:f0:1c:f8:d0:17:81:96: 50:17:87:6e:77:d9:46:0c:c8:1b:ea:d2:eb:53:b6: 9d:98:bf:96:4f:f6:17:ec:24:99:cb:aa:c9:f9:08: f9:52:bb:e5:bd:79:08:56:ad:95:62:84:ea:44:d1: 1f:7b:cf:3a:89:15:f8:6a:25:0b:31:6b:9a:d4:c8: b5:92:5d:94:49:cb:2b:a2:2b:01:0f:a8:9f:67:9c: d3:bf:31:04:8a:6c:06:d0:a3:e6:be:38:1a:09:30: 43:3a:81:bd:d8:da:b2:42:36:30:23:22:73:ee:ae: 5d:95:5a:b2:00:60:09:bd:28:f9:f3:c9:aa:5b:86: 63:1f:d3:d6:0b:46:4f:79:ba:f4:62:d1:d9:fa:76: 4c:37:14:dc:5a:81:80:51:2e:e6:f2:e3:ed:ea:80: f8:ef:d5:e6:af:9c:1b:b3:9d:56:85:b1:62:1a:b4: 1d:e1:ba:98:3e:de:ea:8f:ae:8b:b9:13:40:09:d5: f9:e7:15:fc:61:83:1a:2d:ce:4f:6a:9b:22:55:d4: ec:00:fc:91:71:ad:97:3a:2a:c9:e3:02:47:c6:8d: 66:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:41:15:21:9B:38:7D:C3:6A:1D:FA:B1:93:EF:89:2D:9C:DC:C1:B8 X509v3 Authority Key Identifier: keyid:57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:1a:9c:16:aa:1c:0f:10:3d:ac:c5:d7:db:ce:a0:ef:3a:37: d9:a9:dd:b3:2b:ae:06:ab:5d:04:0c:62:da:2e:47:51:6b:c1: b4:39:6a:f8:c4:43:12:b2:26:bc:06:b0:f3:c5:d5:3f:cf:68: 59:89:37:54:94:32:71:67:62:e0:6b:50:a2:ae:9e:81:a9:55: 90:dd:f6:68:c5:d5:89:cc:c6:7d:fd:21:25:14:73:d1:b0:e1: 62:e3:d2:79:d9:cd:1d:ac:cd:72:25:29:37:0f:52:68:e9:ef: 81:7a:2d:35:7f:c3:8b:9c:3c:d2:02:e3:08:41:76:7a:89:9a: 41:a1:8f:48:df:06:c9:4b:e1:88:28:ba:fc:01:bf:26:4a:bf: 4b:67:df:23:ff:fc:af:7c:41:14:77:46:f2:8e:fb:22:39:81: bb:17:3d:f2:ec:da:48:ef:99:4d:78:95:75:20:a6:1b:43:52: 24:14:a0:a9:0a:dc:47:a2:5a:6d:4b:b3:2f:72:ac:5d:40:08: 53:72:35:af:9c:d3:42:5e:64:81:8c:2d:03:71:ba:42:a3:2b: af:78:77:fc:14:85:f0:10:d3:41:de:ff:96:2e:40:c0:fa:94: 80:b3:03:0c:36:af:36:b3:a2:70:f5:86:06:53:2b:bb:f1:75: 7c:b6:5e:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMVYghCKUb39SC5u0TK7tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NGUyNWExNmU1ZDNhYTExMGFjNWU4MzM1Zjg4ZjYzZTU0 YjQyZjEwHhcNMjUxMjE4MTYwMDUyWhcNMjUxMjE5MTYwMDUyWjAzMTEwLwYDVQQD EyhkYjQxMTUyMTliMzg3ZGMzNmExZGZhYjE5M2VmODkyZDljZGNjMWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX4Ecvn3W6oTi1zKILToH9kdUh5G b+UovGAy0EIA+pUlvPijRvAc+NAXgZZQF4dud9lGDMgb6tLrU7admL+WT/YX7CSZ y6rJ+Qj5UrvlvXkIVq2VYoTqRNEfe886iRX4aiULMWua1Mi1kl2UScsroisBD6if Z5zTvzEEimwG0KPmvjgaCTBDOoG92NqyQjYwIyJz7q5dlVqyAGAJvSj588mqW4Zj H9PWC0ZPebr0YtHZ+nZMNxTcWoGAUS7m8uPt6oD479Xmr5wbs51WhbFiGrQd4bqY Pt7qj66LuRNACdX55xX8YYMaLc5PapsiVdTsAPyRca2XOirJ4wJHxo1miwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtBFSGbOH3Dah36sZPviS2c3MG4MB8GA1UdIwQY MBaAFFdOJaFuXTqhEKxegzX4j2PlS0LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjA0bG9XNWRPcUVRckY2RE5maVBZLVZMUXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wNDI5MmYtZjEwNC00MTdjLWFjZGEt NTcxYWYwNjZjZjFlLzEvVjA0bG9XNWRPcUVRckY2RE5maVBZLVZMUXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wNDI5MmYtZjEwNC00MTdjLWFjZGEtNTcxYWYwNjZjZjFl LzEvVjA0bG9XNWRPcUVRckY2RE5maVBZLVZMUXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtRqcFqoc DxA9rMXX286g7zo32andsyuuBqtdBAxi2i5HUWvBtDlq+MRDErImvAaw88XVP89o WYk3VJQycWdi4GtQoq6egalVkN32aMXViczGff0hJRRz0bDhYuPSednNHazNciUp Nw9SaOnvgXotNX/Di5w80gLjCEF2eomaQaGPSN8GyUvhiCi6/AG/Jkq/S2ffI//8 r3xBFHdG8o77IjmBuxc98uzaSO+ZTXiVdSCmG0NSJBSgqQrcR6JabUuzL3KsXUAI U3I1r5zTQl5kgYwtA3G6QqMrr3h3/BSF8BDTQd7/li5AwPqUgLMDDDavNrOicPWG BlMru/F1fLZezg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:36:50 2025 by rpki-client