This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft File: V0U31U828UIjG8gXA4hyy2B7Iec.mft (raw, json) Hash identifier: DKB+GcEjUi6bSUh6qqME3orbkbvMqE21Dsml0nVojYM= Subject key identifier: 07:62:DB:FC:B0:26:D8:E4:20:0E:4C:E1:D4:CD:E4:5C:62:7B:54:E5 Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7 Certificate issuer: /CN=574537d54f36f142231bc817038872cb607b21e7 Certificate serial: 019B348D597DD6D9DD41C957C4CD6545C62A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 03:00:37 +0000 Manifest this update: Fri 19 Dec 2025 03:00:37 +0000 Manifest next update: Sat 20 Dec 2025 03:00:37 +0000 Files and hashes: 1: V0U31U828UIjG8gXA4hyy2B7Iec.crl (hash: 5sYXaolWBC/AwvE2NY5QIzzhGemJQKVj8ZcV0Ipe3z4=) 2: YnXiOZFn5_Ti8j5SWgP0_2hT1vY.roa (hash: lRZQ9KsaLdanEcykQNh0FaeICI/LtcJmN2j17gaMSis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:8d:59:7d:d6:d9:dd:41:c9:57:c4:cd:65:45:c6:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=574537d54f36f142231bc817038872cb607b21e7 Validity Not Before: Dec 19 03:00:37 2025 GMT Not After : Dec 20 03:00:37 2025 GMT Subject: CN=0762dbfcb026d8e4200e4ce1d4cde45c627b54e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f4:2c:f2:51:29:5b:2a:6e:d8:d7:5e:e2:bb: b9:4b:74:4d:46:2c:33:fc:96:2e:6d:41:6f:8e:fe: b9:8c:b3:2a:f5:60:22:90:43:ce:74:3a:0f:2d:98: f9:72:76:3e:40:18:f5:4a:cb:a0:35:5b:d9:72:b5: 09:9c:0a:25:b2:e8:42:b5:a2:23:c5:51:06:08:de: 4d:82:e0:27:13:4d:b6:1c:26:2c:d8:78:24:6c:dd: 16:ef:0d:ee:34:2a:b4:b3:7b:92:16:d0:f2:ea:f2: a4:08:e2:d9:35:74:af:9a:02:ad:e0:c8:8b:a3:43: 9b:73:9c:55:1d:5a:2a:37:9b:47:53:17:05:c8:4a: d1:aa:c7:87:fc:d5:8f:37:64:70:7c:81:56:23:14: 74:39:8c:e3:7f:25:a7:4b:0b:8c:30:8d:ee:25:ab: b3:bd:17:ae:28:70:8e:b0:fc:0e:3e:23:3f:90:2e: 06:77:69:95:e1:36:5c:0b:f2:80:34:69:60:9a:26: 18:3f:fe:3c:99:46:63:93:fc:f7:9b:b7:e6:29:63: fd:44:2e:b0:16:5c:36:d7:a4:1a:e2:b1:7a:90:b2: 64:da:a5:53:72:c6:35:80:9b:92:41:91:0f:32:08: 8f:0b:15:30:1a:1c:18:1c:47:d7:22:04:cd:92:61: 81:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:62:DB:FC:B0:26:D8:E4:20:0E:4C:E1:D4:CD:E4:5C:62:7B:54:E5 X509v3 Authority Key Identifier: keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:17:b4:c7:63:39:b6:e4:9b:4c:69:a6:56:cd:3e:16:cf:99: 8a:62:cc:55:81:7a:68:bc:6c:26:32:b2:d9:e1:a6:ad:bc:05: 26:e6:34:16:fa:70:b2:e2:7d:fb:dd:a2:ce:a4:d4:a3:61:a9: 48:02:be:34:78:ac:d1:58:6b:37:0f:05:7f:9e:ad:d1:2f:8d: c5:02:af:4c:73:46:d7:6f:a0:71:bc:d3:46:9f:9d:27:2d:16: 5c:4c:92:9f:a6:9a:65:f0:96:54:f4:09:dd:9d:a7:08:9d:bc: dc:e2:84:8f:30:c1:ce:3b:16:82:b6:6d:a8:93:16:71:46:e7: f3:78:25:da:ed:c2:b5:bd:f5:09:f8:be:56:29:85:b0:dd:8b: 66:f9:3c:21:d4:94:14:80:26:a7:36:44:44:e8:46:28:12:99: d0:2c:9d:e3:14:98:d3:0e:b6:89:32:d5:c2:ed:aa:6f:be:28: cb:7d:66:51:ec:b8:85:3d:c9:24:6d:85:13:6e:eb:41:7f:65: 15:13:a3:86:34:7a:da:43:01:20:05:24:e5:5c:35:75:fe:fb: 51:15:3b:d5:34:8b:e7:9b:ce:a1:39:22:06:52:82:ac:fc:e9: 5d:1b:a5:a2:36:1f:48:ba:3a:d9:13:f6:ac:f3:f5:06:9c:29: 5a:91:79:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0jVl91tndQclXxM1lRcYqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NDUzN2Q1NGYzNmYxNDIyMzFiYzgxNzAzODg3MmNiNjA3 YjIxZTcwHhcNMjUxMjE5MDMwMDM3WhcNMjUxMjIwMDMwMDM3WjAzMTEwLwYDVQQD EygwNzYyZGJmY2IwMjZkOGU0MjAwZTRjZTFkNGNkZTQ1YzYyN2I1NGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfQs8lEpWypu2Nde4ru5S3RNRiwz /JYubUFvjv65jLMq9WAikEPOdDoPLZj5cnY+QBj1SsugNVvZcrUJnAolsuhCtaIj xVEGCN5NguAnE022HCYs2HgkbN0W7w3uNCq0s3uSFtDy6vKkCOLZNXSvmgKt4MiL o0Obc5xVHVoqN5tHUxcFyErRqseH/NWPN2RwfIFWIxR0OYzjfyWnSwuMMI3uJauz vReuKHCOsPwOPiM/kC4Gd2mV4TZcC/KANGlgmiYYP/48mUZjk/z3m7fmKWP9RC6w Flw216Qa4rF6kLJk2qVTcsY1gJuSQZEPMgiPCxUwGhwYHEfXIgTNkmGBXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdi2/ywJtjkIA5M4dTN5Fxie1TlMB8GA1UdIwQY MBaAFFdFN9VPNvFCIxvIFwOIcstgeyHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQt NGI4OWQzNzc4MDhlLzEvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQtNGI4OWQzNzc4MDhl LzEvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqxe0x2M5 tuSbTGmmVs0+Fs+ZimLMVYF6aLxsJjKy2eGmrbwFJuY0FvpwsuJ9+92izqTUo2Gp SAK+NHis0VhrNw8Ff56t0S+NxQKvTHNG12+gcbzTRp+dJy0WXEySn6aaZfCWVPQJ 3Z2nCJ283OKEjzDBzjsWgrZtqJMWcUbn83gl2u3Ctb31Cfi+VimFsN2LZvk8IdSU FIAmpzZEROhGKBKZ0Cyd4xSY0w62iTLVwu2qb74oy31mUey4hT3JJG2FE27rQX9l FROjhjR62kMBIAUk5Vw1df77URU71TSL55vOoTkiBlKCrPzpXRulojYfSLo62RP2 rPP1BpwpWpF5Jg== -----END CERTIFICATE-----Generated at Fri Dec 19 06:58:44 2025 by rpki-client