This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft File: V2cFtVe4IwhralMjJL-7o2mVyxw.mft (raw, json) Hash identifier: RfMrcV3zRJXQwJoJVHJIKdNaO0OyTAoDIrPsICFnpW4= Subject key identifier: 42:C3:70:E5:79:BE:F9:A9:92:E5:DE:92:6D:7A:2E:34:86:CE:43:65 Authority key identifier: 57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C Certificate issuer: /CN=576705b557b823086b6a532324bfbba36995cb1c Certificate serial: 019B13B8C06EB440FE0E85D78A760EC5AC72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft Manifest number: 049F Signing time: Fri 12 Dec 2025 18:00:33 +0000 Manifest this update: Fri 12 Dec 2025 18:00:33 +0000 Manifest next update: Sat 13 Dec 2025 18:00:33 +0000 Files and hashes: 1: KvGrSnuEc1cM9X2Nk9gFAk0Nuqk.roa (hash: HFWxJLi4fAw0JkNdDx7HNRCU+Sz89xJhj6dOpXyk9UI=) 2: V2cFtVe4IwhralMjJL-7o2mVyxw.crl (hash: Q3G5QYOwzCxahVKUCwca3OJlQRbksuitheQncQLsCmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 16:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:b8:c0:6e:b4:40:fe:0e:85:d7:8a:76:0e:c5:ac:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576705b557b823086b6a532324bfbba36995cb1c Validity Not Before: Dec 12 18:00:33 2025 GMT Not After : Dec 13 18:00:33 2025 GMT Subject: CN=42c370e579bef9a992e5de926d7a2e3486ce4365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c0:1f:a7:4d:e1:c8:a4:1a:12:f5:24:83:d8: ee:38:b6:ef:24:e6:58:87:1b:ee:4c:25:df:1f:a6: 71:8e:c3:86:b2:3e:f1:51:58:c9:51:be:7d:2c:f7: d4:13:36:0e:22:8b:fa:08:50:c8:88:bb:e2:9a:67: f0:28:5e:bc:6c:74:07:32:e1:f0:aa:cb:e5:95:0c: d4:8b:97:89:4d:65:b6:ad:ea:8e:d8:a9:88:66:77: 9c:32:f0:f8:d2:ea:65:3c:0a:d6:45:f7:d6:dd:da: 6f:8a:48:40:1a:d4:b5:fa:16:98:b3:20:ea:60:fe: c0:1b:78:22:64:34:65:82:c0:12:c5:ba:b4:3e:1b: f5:55:94:40:d9:a9:b7:0d:ee:86:8b:7f:f2:87:aa: c8:7e:85:ff:a7:36:6c:e2:f0:06:15:28:1c:4f:55: 50:38:8a:b0:9f:ed:34:0d:c2:84:48:ab:9b:a6:39: 0f:c3:83:50:ed:0c:49:cb:18:c7:22:32:75:ff:6f: 95:23:c2:81:20:7e:ac:f1:30:a2:cf:f2:58:7b:cb: f2:88:31:53:7c:e4:fb:89:49:91:a3:dd:e8:d5:eb: fa:77:7d:c5:a0:91:a2:62:6a:e6:ed:c5:05:fd:44: 28:77:8d:9f:61:ea:c0:78:01:c5:f0:bb:99:17:f1: 3c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C3:70:E5:79:BE:F9:A9:92:E5:DE:92:6D:7A:2E:34:86:CE:43:65 X509v3 Authority Key Identifier: keyid:57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:5a:79:3f:f4:f6:71:c1:35:fa:14:80:28:bd:aa:29:9c:d3: 55:b0:9d:13:e0:dd:c8:a8:ba:0b:66:e6:a1:11:d6:aa:f9:5f: 70:da:16:61:2a:c8:29:78:51:64:9d:1d:6c:c6:68:18:0b:44: d4:2a:64:c0:07:98:17:d1:d2:dc:e2:f3:34:54:8b:98:44:be: 84:eb:1f:0c:78:93:92:d7:1f:90:47:70:0f:e0:b0:8f:89:5c: df:55:54:d5:63:4f:80:f0:a5:c2:61:58:33:96:81:c9:64:13: 9b:e2:b0:9f:f6:d2:d2:ca:2a:42:fc:bc:fe:41:a4:22:0b:93: af:e8:20:47:eb:33:2b:ad:43:26:0d:d9:01:30:20:f0:9c:44: e8:95:31:52:f8:24:7b:b7:31:2e:21:b1:ca:26:aa:c7:bd:34: 39:3b:ba:3f:27:b8:f7:56:84:bc:c2:52:d3:6f:ff:9b:17:43: af:35:68:4f:e4:50:3e:a5:7e:78:7b:5f:98:40:a1:47:e9:f6: 51:47:6b:ad:da:16:5c:18:a0:ce:dc:6a:64:63:12:11:c8:62: f8:f4:53:b0:a4:54:a9:a7:b3:37:65:37:5c:28:80:b1:9a:5b: 24:1f:b3:be:28:1d:07:85:ca:f8:7e:73:34:60:d5:c4:3b:cb: d4:ca:03:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsTuMButED+DoXXinYOxaxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NjcwNWI1NTdiODIzMDg2YjZhNTMyMzI0YmZiYmEzNjk5 NWNiMWMwHhcNMjUxMjEyMTgwMDMzWhcNMjUxMjEzMTgwMDMzWjAzMTEwLwYDVQQD Eyg0MmMzNzBlNTc5YmVmOWE5OTJlNWRlOTI2ZDdhMmUzNDg2Y2U0MzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosAfp03hyKQaEvUkg9juOLbvJOZY hxvuTCXfH6ZxjsOGsj7xUVjJUb59LPfUEzYOIov6CFDIiLvimmfwKF68bHQHMuHw qsvllQzUi5eJTWW2reqO2KmIZnecMvD40uplPArWRffW3dpvikhAGtS1+haYsyDq YP7AG3giZDRlgsASxbq0Phv1VZRA2am3De6Gi3/yh6rIfoX/pzZs4vAGFSgcT1VQ OIqwn+00DcKESKubpjkPw4NQ7QxJyxjHIjJ1/2+VI8KBIH6s8TCiz/JYe8vyiDFT fOT7iUmRo93o1ev6d33FoJGiYmrm7cUF/UQod42fYerAeAHF8LuZF/E8awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELDcOV5vvmpkuXekm16LjSGzkNlMB8GA1UdIwQY MBaAFFdnBbVXuCMIa2pTIyS/u6NplcscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjJjRnRWZTRJd2hyYWxNakpMLTdvMm1WeXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83ZDdlMWQtMzNjMC00MzQyLWIyNTkt YTdiZjNiZjkwMmQ4LzEvVjJjRnRWZTRJd2hyYWxNakpMLTdvMm1WeXh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC83ZDdlMWQtMzNjMC00MzQyLWIyNTktYTdiZjNiZjkwMmQ4 LzEvVjJjRnRWZTRJd2hyYWxNakpMLTdvMm1WeXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtFp5P/T2 ccE1+hSAKL2qKZzTVbCdE+DdyKi6C2bmoRHWqvlfcNoWYSrIKXhRZJ0dbMZoGAtE 1CpkwAeYF9HS3OLzNFSLmES+hOsfDHiTktcfkEdwD+Cwj4lc31VU1WNPgPClwmFY M5aByWQTm+Kwn/bS0soqQvy8/kGkIguTr+ggR+szK61DJg3ZATAg8JxE6JUxUvgk e7cxLiGxyiaqx700OTu6Pye491aEvMJS02//mxdDrzVoT+RQPqV+eHtfmEChR+n2 UUdrrdoWXBigztxqZGMSEchi+PRTsKRUqaezN2U3XCiAsZpbJB+zvigdB4XK+H5z NGDVxDvL1MoDFg== -----END CERTIFICATE-----Generated at Fri Dec 12 22:47:55 2025 by rpki-client