This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft File: V0zKiZ71v0I38Pa90XeSIbIAUvM.mft (raw, json) Hash identifier: RWST42kQMN3UKeKBWnpbQ4CRMXS1aVFK5N68umHU3p0= Subject key identifier: DC:F2:70:08:A1:A7:42:6F:52:BF:12:96:FF:A3:E4:73:62:1F:4C:4C Authority key identifier: 57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3 Certificate issuer: /CN=574cca899ef5bf4237f0f6bdd1779221b20052f3 Certificate serial: 019B2E8B87C51609E3A9B0EA68A8C61A4051 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft Manifest number: 1787 Signing time: Wed 17 Dec 2025 23:00:54 +0000 Manifest this update: Wed 17 Dec 2025 23:00:54 +0000 Manifest next update: Thu 18 Dec 2025 23:00:54 +0000 Files and hashes: 1: V0zKiZ71v0I38Pa90XeSIbIAUvM.crl (hash: 4DSq5zzsOBOqV7Nr/69xYleFfA/qKl6u1b39ZPSPDXE=) 2: Y94X6_HOf3KuSVPAOGMuBrzSxtg.roa (hash: jodD56xisILiJQmZjw16ioNeXG3x3llQ2TPGO/o2XeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:87:c5:16:09:e3:a9:b0:ea:68:a8:c6:1a:40:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=574cca899ef5bf4237f0f6bdd1779221b20052f3 Validity Not Before: Dec 17 23:00:54 2025 GMT Not After : Dec 18 23:00:54 2025 GMT Subject: CN=dcf27008a1a7426f52bf1296ffa3e473621f4c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8b:b7:12:59:b3:30:80:7a:67:c4:2b:a3:2c: 66:66:1d:52:36:91:62:11:a0:51:6e:06:0c:dc:5f: 37:3a:e4:12:f9:dd:60:12:e0:00:f0:7e:e9:48:ac: 3f:9e:9d:d2:79:fe:5e:29:45:74:c6:71:28:43:20: e2:52:e9:f5:76:47:9b:84:bc:15:f2:36:ab:e3:09: e5:44:3d:19:2c:ae:b9:d3:31:e1:01:5a:31:16:b2: e9:44:9d:31:47:99:2c:d8:34:93:f7:f5:76:d6:93: 29:ee:f6:c3:72:49:0d:12:ea:59:e4:19:01:ab:cf: 8f:f0:12:31:15:4b:a1:b1:7e:01:2d:b4:39:b7:87: ef:50:d3:c3:d6:25:c7:3e:35:50:92:d2:90:25:25: dc:c2:7f:c9:a1:57:a9:05:73:a4:4b:1d:60:e4:5e: 1b:dc:f1:6e:98:87:5c:25:c6:bf:aa:3d:06:22:71: f6:58:dd:fc:7c:e5:91:8f:4e:09:00:43:9c:5e:1b: f8:0a:28:1e:22:ec:56:55:88:b4:95:ae:53:e1:97: 71:e8:40:f3:d6:7a:19:59:42:b8:5c:9e:13:8e:e8: ba:ef:ab:c7:df:3a:ed:92:2c:78:4c:7b:cd:b1:f2: 8e:2e:2d:05:19:21:be:7d:7b:c1:2f:ba:1f:8c:d8: c9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F2:70:08:A1:A7:42:6F:52:BF:12:96:FF:A3:E4:73:62:1F:4C:4C X509v3 Authority Key Identifier: keyid:57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:35:e3:7e:ad:c6:56:ef:07:de:42:ad:1b:9d:16:9b:9f:88: d0:ee:f8:27:ab:9f:4e:42:8c:b6:60:4d:31:92:bd:52:74:4d: 9c:ad:b5:ed:ed:eb:5b:19:e0:5c:49:5d:98:85:70:14:28:a2: 1a:44:3b:5f:09:71:ff:11:c7:fd:7e:82:51:45:c0:fd:f7:3c: a5:a3:07:1b:71:98:28:4d:25:0f:0f:97:32:b7:65:b3:ff:06: 81:53:97:ef:3b:73:7b:37:3c:76:48:a4:75:3d:39:b5:9c:80: 19:82:2a:18:2f:1c:ce:92:57:25:3e:2a:2c:e8:d4:f3:57:d7: 52:17:e9:4d:fe:6d:d6:55:b2:27:fc:dd:40:f4:46:ab:13:09: 63:b7:73:9c:d9:d4:2b:72:38:4a:20:fe:18:cb:68:c0:f0:f9: 7d:e5:d1:76:6f:43:5d:42:38:71:b9:75:25:f0:fd:e6:77:43: 8a:c4:1c:63:b3:06:19:5d:b9:8c:78:96:10:9c:23:b6:8c:3a: 32:a9:c0:a2:9a:0e:62:f7:d7:1e:00:a5:79:23:af:7b:a7:b3: bf:2e:c0:58:25:05:fc:1d:1f:d2:c5:17:cc:87:e2:62:10:c9: cc:b7:cd:12:f4:b6:bc:bf:96:cb:1a:15:be:42:45:65:cc:3a: 0b:e9:04:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui4fFFgnjqbDqaKjGGkBRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NGNjYTg5OWVmNWJmNDIzN2YwZjZiZGQxNzc5MjIxYjIw MDUyZjMwHhcNMjUxMjE3MjMwMDU0WhcNMjUxMjE4MjMwMDU0WjAzMTEwLwYDVQQD EyhkY2YyNzAwOGExYTc0MjZmNTJiZjEyOTZmZmEzZTQ3MzYyMWY0YzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIu3ElmzMIB6Z8QroyxmZh1SNpFi EaBRbgYM3F83OuQS+d1gEuAA8H7pSKw/np3Sef5eKUV0xnEoQyDiUun1dkebhLwV 8jar4wnlRD0ZLK650zHhAVoxFrLpRJ0xR5ks2DST9/V21pMp7vbDckkNEupZ5BkB q8+P8BIxFUuhsX4BLbQ5t4fvUNPD1iXHPjVQktKQJSXcwn/JoVepBXOkSx1g5F4b 3PFumIdcJca/qj0GInH2WN38fOWRj04JAEOcXhv4CigeIuxWVYi0la5T4Zdx6EDz 1noZWUK4XJ4Tjui676vH3zrtkix4THvNsfKOLi0FGSG+fXvBL7ofjNjJWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzycAihp0JvUr8Slv+j5HNiH0xMMB8GA1UdIwQY MBaAFFdMyome9b9CN/D2vdF3kiGyAFLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC85MzhhYmQtMTAxOS00ZTdhLWFhODIt ZWUxMTI2YTI4MTk1LzEvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC85MzhhYmQtMTAxOS00ZTdhLWFhODItZWUxMTI2YTI4MTk1 LzEvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAszXjfq3G Vu8H3kKtG50Wm5+I0O74J6ufTkKMtmBNMZK9UnRNnK217e3rWxngXEldmIVwFCii GkQ7Xwlx/xHH/X6CUUXA/fc8paMHG3GYKE0lDw+XMrdls/8GgVOX7ztzezc8dkik dT05tZyAGYIqGC8czpJXJT4qLOjU81fXUhfpTf5t1lWyJ/zdQPRGqxMJY7dznNnU K3I4SiD+GMtowPD5feXRdm9DXUI4cbl1JfD95ndDisQcY7MGGV25jHiWEJwjtow6 MqnAopoOYvfXHgCleSOve6ezvy7AWCUF/B0f0sUXzIfiYhDJzLfNEvS2vL+WyxoV vkJFZcw6C+kExw== -----END CERTIFICATE-----Generated at Thu Dec 18 08:00:00 2025 by rpki-client