This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft File: 31OmtxkZem51F1dNOYfzHrnp1Mk.mft (raw, json) Hash identifier: yNBdNVfp45qqCx1hC8h+kTwgPw2TjKdGf4eNUWP82EU= Subject key identifier: 97:B5:0F:2F:C0:C6:DC:3A:94:D5:A8:94:65:21:92:5E:0D:35:A1:31 Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9 Certificate issuer: /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9 Certificate serial: 019AF163D339CD7C768576C250A3D366D06B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 02:00:42 +0000 Manifest this update: Sat 06 Dec 2025 02:00:42 +0000 Manifest next update: Sun 07 Dec 2025 02:00:42 +0000 Files and hashes: 1: 31OmtxkZem51F1dNOYfzHrnp1Mk.crl (hash: 9dv3Sxss0jHEA9vyS4kCXQ3PlDJjVDPUqOtMXeHpqRs=) 2: 65Xlj195X-cGSev9DG8oGbd1-U4.roa (hash: K+xD/8At0190Enhc+vU1PDhREni4vKMCikS55k0TxlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d3:39:cd:7c:76:85:76:c2:50:a3:d3:66:d0:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9 Validity Not Before: Dec 6 02:00:42 2025 GMT Not After : Dec 7 02:00:42 2025 GMT Subject: CN=97b50f2fc0c6dc3a94d5a8946521925e0d35a131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e0:ab:11:de:ae:a4:3e:53:2e:da:82:8d:0c: d3:a7:a8:d5:4d:c5:c7:8e:27:0d:02:14:63:5f:f5: 77:dd:bc:e4:11:65:19:94:62:b7:6a:3a:52:c5:4c: 4e:bc:23:01:f6:48:21:9f:0f:1a:fb:c6:b8:cd:44: 04:1d:10:89:fd:cc:a3:01:92:49:51:b9:cf:6a:d3: 64:28:ba:53:c7:e4:86:97:de:90:1a:7c:75:79:d4: c6:d1:f8:d0:88:d0:08:bd:8f:cc:63:9b:b3:74:ec: 95:02:07:6e:e9:b2:70:60:1f:f1:98:ef:96:75:89: 14:39:cf:13:69:db:bf:9a:77:af:9f:f8:69:60:54: d6:b0:31:1d:97:42:81:59:82:c0:19:4b:fa:b5:45: 9a:78:af:0c:f5:fd:1d:6c:c3:7f:2e:30:11:29:97: 05:06:ca:d7:b7:ca:4c:89:72:27:47:cb:77:0f:ce: fb:ab:4a:8f:b6:e5:8b:92:e9:a8:28:d4:6c:e3:55: 50:7a:25:f2:15:d0:7c:8b:c3:ca:ee:bd:da:f4:ed: 5c:09:67:e7:bc:aa:34:e5:a1:ed:d1:c9:61:55:e6: 90:e0:05:5b:af:8d:e2:ef:6d:d4:c9:16:2e:31:c3: 9d:e0:0b:bb:0e:9d:7b:15:87:ff:95:be:5b:c5:82: 2d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B5:0F:2F:C0:C6:DC:3A:94:D5:A8:94:65:21:92:5E:0D:35:A1:31 X509v3 Authority Key Identifier: keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:32:8c:4a:07:15:57:83:c3:75:1e:cd:1d:17:09:5d:ec:18: cb:20:7f:cb:76:b9:de:2a:7a:68:fc:0b:88:7b:37:ff:68:87: a6:5e:c2:c3:4a:9a:2b:c2:cd:6a:d1:d2:65:db:65:a7:07:ee: 24:af:11:ec:a3:1e:c0:08:4e:c3:dc:72:87:93:f7:24:e3:90: b4:d1:ba:32:68:bc:03:fd:07:11:54:7f:69:61:2f:7f:ba:6f: a7:12:e4:04:c3:3f:33:ae:4a:f5:a3:ca:ee:f4:87:5e:61:56: 00:e7:29:dd:86:30:19:a6:77:25:db:d1:34:f1:10:b4:c6:44: e0:25:18:9d:aa:b2:67:e3:9a:28:8d:03:d6:ff:4e:42:ad:a2: 48:83:f5:34:b2:1d:3a:91:a1:07:02:94:d6:16:03:9e:eb:dc: 8d:c4:7f:8b:3a:20:35:1c:79:d5:41:95:2d:ab:80:1d:63:09: 56:8d:3f:58:e3:63:44:aa:d7:7b:04:c6:0e:77:64:64:e4:ad: ef:64:50:b8:da:49:9d:c2:2a:95:a7:24:fd:d9:18:ca:47:dd: c2:c5:87:cc:c3:e4:1b:c8:c8:55:c2:ca:be:ba:e1:43:db:f3: b2:54:9f:57:d4:7e:a4:43:91:8b:c3:01:55:4b:66:b3:38:02: 36:22:2c:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9M5zXx2hXbCUKPTZtBrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNTNhNmI3MTkxOTdhNmU3NTE3NTc0ZDM5ODdmMzFlYjll OWQ0YzkwHhcNMjUxMjA2MDIwMDQyWhcNMjUxMjA3MDIwMDQyWjAzMTEwLwYDVQQD Eyg5N2I1MGYyZmMwYzZkYzNhOTRkNWE4OTQ2NTIxOTI1ZTBkMzVhMTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOCrEd6upD5TLtqCjQzTp6jVTcXH jicNAhRjX/V33bzkEWUZlGK3ajpSxUxOvCMB9kghnw8a+8a4zUQEHRCJ/cyjAZJJ UbnPatNkKLpTx+SGl96QGnx1edTG0fjQiNAIvY/MY5uzdOyVAgdu6bJwYB/xmO+W dYkUOc8Tadu/mnevn/hpYFTWsDEdl0KBWYLAGUv6tUWaeK8M9f0dbMN/LjARKZcF BsrXt8pMiXInR8t3D877q0qPtuWLkumoKNRs41VQeiXyFdB8i8PK7r3a9O1cCWfn vKo05aHt0clhVeaQ4AVbr43i723UyRYuMcOd4Au7Dp17FYf/lb5bxYIt/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJe1Dy/Axtw6lNWolGUhkl4NNaExMB8GA1UdIwQY MBaAFN9TprcZGXpudRdXTTmH8x656dTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZjM4YTYtYTk3ZS00ODYxLWFiM2Ut ODUyMTJiOWQxNTliLzEvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZjM4YTYtYTk3ZS00ODYxLWFiM2UtODUyMTJiOWQxNTli LzEvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzKMSgcV V4PDdR7NHRcJXewYyyB/y3a53ip6aPwLiHs3/2iHpl7Cw0qaK8LNatHSZdtlpwfu JK8R7KMewAhOw9xyh5P3JOOQtNG6Mmi8A/0HEVR/aWEvf7pvpxLkBMM/M65K9aPK 7vSHXmFWAOcp3YYwGaZ3JdvRNPEQtMZE4CUYnaqyZ+OaKI0D1v9OQq2iSIP1NLId OpGhBwKU1hYDnuvcjcR/izogNRx51UGVLauAHWMJVo0/WONjRKrXewTGDndkZOSt 72RQuNpJncIqlack/dkYykfdwsWHzMPkG8jIVcLKvrrhQ9vzslSfV9R+pEORi8MB VUtmszgCNiIs+g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:28 2025 by rpki-client