This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft File: 45VXJQVD5Edq-IxGEtSolTExO1c.mft (raw, json) Hash identifier: Pe0od809nqr130khzATUMR0Tm7UM2eUiXepMl5uf64I= Subject key identifier: AF:E1:21:A4:CC:AF:E7:80:26:2B:41:E0:CF:A5:2C:D4:AA:3F:E5:07 Authority key identifier: E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57 Certificate issuer: /CN=e39557250543e4476af88c4612d4a89531313b57 Certificate serial: 019B37FC5D6A0730FE8818E4DA900A2EFE68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft Manifest number: 0328 Signing time: Fri 19 Dec 2025 19:00:44 +0000 Manifest this update: Fri 19 Dec 2025 19:00:44 +0000 Manifest next update: Sat 20 Dec 2025 19:00:44 +0000 Files and hashes: 1: 45VXJQVD5Edq-IxGEtSolTExO1c.crl (hash: bA6hEIwiG5gAUUG1cpZ5nKoMxxjqOI5JbtzXXoiL3hE=) 2: K_JZgBsGAVe42CM82ldUkYg0iAQ.roa (hash: bwVI85s3fTqLxVepdOjVCwyC9itDatE9AOSLnrN/zKU=) 3: O2ig3X7VNdoIgqEvSRSWulSevo4.roa (hash: b2vyXh49fwCqIp7fN7Ci84lv9+cxy1rLXbG95tTjerQ=) 4: df6ORV0T3_b0RdsmM3_USMPqdsg.roa (hash: q2PmH++N3IE0kcfGnwBqmXQjUmmTRWDH+eBviEbSMVk=) 5: zgHXXKhV6x08Iidi9kP_MDBdZ8U.roa (hash: taGLV+d4sUR0Mcx4A09Hc66ht4Rh+KLaRG3MKoCgLM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:5d:6a:07:30:fe:88:18:e4:da:90:0a:2e:fe:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39557250543e4476af88c4612d4a89531313b57 Validity Not Before: Dec 19 19:00:44 2025 GMT Not After : Dec 20 19:00:44 2025 GMT Subject: CN=afe121a4ccafe780262b41e0cfa52cd4aa3fe507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:92:f0:29:ee:91:b2:30:5e:01:e4:a4:02:bb: ba:87:d3:19:c1:48:21:a5:19:5c:3b:f8:84:bd:54: c9:0f:94:b6:08:8d:e9:38:76:08:cc:dc:be:db:26: 9b:f4:6d:27:f7:e1:6a:21:d2:9b:a0:dc:81:dc:ac: 70:59:7e:33:7c:09:e3:ac:6f:14:f6:96:73:23:f4: fa:6f:95:dc:e2:05:d5:19:f3:f3:6e:58:40:ff:3b: 6f:ab:f1:b9:84:5c:16:c7:66:86:0b:8e:1f:40:d4: 88:f2:32:2e:ef:24:8c:f4:40:86:fe:33:d5:68:0d: 94:a7:d7:8b:48:65:c3:58:a5:33:3a:79:16:45:3f: ab:02:55:1f:33:3f:15:57:14:6b:68:ed:df:86:00: 87:d2:e5:84:c3:a7:1c:d5:60:fa:cc:65:5b:ed:73: 41:9a:d6:29:58:8d:88:91:54:a9:eb:0d:a0:25:9d: d1:33:3a:e1:05:52:ee:66:ab:57:19:b1:66:37:6a: df:39:17:31:9f:75:99:04:01:ce:e8:39:75:49:08: 6a:e8:a6:1c:d0:3e:e4:c9:f3:f8:58:2d:b0:eb:05: d1:7d:df:a2:d9:5d:eb:6b:7b:29:7b:0d:3d:18:0b: be:9d:2e:08:7c:6f:be:3a:a2:17:b4:05:9b:5e:df: a3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E1:21:A4:CC:AF:E7:80:26:2B:41:E0:CF:A5:2C:D4:AA:3F:E5:07 X509v3 Authority Key Identifier: keyid:E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:93:30:89:d4:39:4c:d4:e1:7e:81:57:cd:e1:13:31:28:b5: bb:29:6c:2c:28:ba:d3:8e:da:5d:87:56:33:13:da:ea:af:6c: c1:de:36:9f:4e:e6:a9:32:af:f9:d8:23:4d:7b:7d:cf:d1:a1: cf:ed:94:11:52:33:da:bc:f3:49:9f:0c:8a:e6:ff:f3:4a:63: 64:c1:ca:f0:28:61:39:6d:f6:f7:19:82:68:e3:13:c3:e8:78: 5a:95:82:3e:7a:40:23:c7:d0:80:fb:bf:2d:e6:45:2f:c2:0a: eb:2d:ea:5a:5d:ec:98:48:29:50:af:5c:7d:48:2e:f5:f8:2d: 81:20:b3:be:64:73:c7:76:4d:33:75:8c:88:8b:3d:b3:c2:57: b6:b9:86:36:89:97:21:4a:99:74:f2:b5:20:20:a2:6e:f7:03: b3:de:34:5a:6f:f1:de:fa:06:06:21:04:95:98:d8:33:d2:dc: 77:0f:40:a9:e7:67:2c:9b:34:9d:0e:62:4e:8d:b6:cd:4e:01: aa:08:33:c5:65:e3:51:b7:73:57:99:dd:3f:96:a7:7f:7d:be: 07:c8:d5:17:3d:de:8b:c7:f3:c8:9e:b0:09:e8:71:bf:9d:96: a4:4f:6a:ee:b1:3d:e1:93:cf:52:a9:27:f0:fa:64:dc:d7:ac: 1b:05:9d:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/F1qBzD+iBjk2pAKLv5oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzOTU1NzI1MDU0M2U0NDc2YWY4OGM0NjEyZDRhODk1MzEz MTNiNTcwHhcNMjUxMjE5MTkwMDQ0WhcNMjUxMjIwMTkwMDQ0WjAzMTEwLwYDVQQD EyhhZmUxMjFhNGNjYWZlNzgwMjYyYjQxZTBjZmE1MmNkNGFhM2ZlNTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85LwKe6RsjBeAeSkAru6h9MZwUgh pRlcO/iEvVTJD5S2CI3pOHYIzNy+2yab9G0n9+FqIdKboNyB3KxwWX4zfAnjrG8U 9pZzI/T6b5Xc4gXVGfPzblhA/ztvq/G5hFwWx2aGC44fQNSI8jIu7ySM9ECG/jPV aA2Up9eLSGXDWKUzOnkWRT+rAlUfMz8VVxRraO3fhgCH0uWEw6cc1WD6zGVb7XNB mtYpWI2IkVSp6w2gJZ3RMzrhBVLuZqtXGbFmN2rfORcxn3WZBAHO6Dl1SQhq6KYc 0D7kyfP4WC2w6wXRfd+i2V3ra3spew09GAu+nS4IfG++OqIXtAWbXt+jcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/hIaTMr+eAJitB4M+lLNSqP+UHMB8GA1UdIwQY MBaAFOOVVyUFQ+RHaviMRhLUqJUxMTtXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOWQyNjQtYjk0MS00N2E0LTllYzUt MjA2OTUxOTNhYzA3LzEvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8yOWQyNjQtYjk0MS00N2E0LTllYzUtMjA2OTUxOTNhYzA3 LzEvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5MwidQ5 TNThfoFXzeETMSi1uylsLCi6047aXYdWMxPa6q9swd42n07mqTKv+dgjTXt9z9Gh z+2UEVIz2rzzSZ8Miub/80pjZMHK8ChhOW329xmCaOMTw+h4WpWCPnpAI8fQgPu/ LeZFL8IK6y3qWl3smEgpUK9cfUgu9fgtgSCzvmRzx3ZNM3WMiIs9s8JXtrmGNomX IUqZdPK1ICCibvcDs940Wm/x3voGBiEElZjYM9Lcdw9AqednLJs0nQ5iTo22zU4B qggzxWXjUbdzV5ndP5anf32+B8jVFz3ei8fzyJ6wCehxv52WpE9q7rE94ZPPUqkn 8Ppk3NesGwWdyA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:06:25 2025 by rpki-client