This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft File: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft (raw, json) Hash identifier: Qx4mM3hQ9hwPDES3chXMFcivUU9OZpB1D4RGCICSS7c= Subject key identifier: 47:52:6F:AF:74:D2:E3:5F:3F:F5:C2:1A:DE:D1:87:88:05:41:3F:23 Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b Certificate serial: 019AF352B6834CED336422C7117E03818711 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft Manifest number: 1090 Signing time: Sat 06 Dec 2025 11:01:15 +0000 Manifest this update: Sat 06 Dec 2025 11:01:15 +0000 Manifest next update: Sun 07 Dec 2025 11:01:15 +0000 Files and hashes: 1: GyhAtf15yZqMprvOSAG-mSzNZTU.roa (hash: jfVjDUAXNOWRUx2duW7NqVNPhOHvwJFkEOJDlRjLf1c=) 2: Jn9LNrC4wIy3yIlbSkthFN9Albs.roa (hash: 6lIOMorBJKMVKOZBPqKcGfElc6xi+Wc/c9B3Sn6wFrA=) 3: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl (hash: 0tuhs0ckyq7Ue/ul/AtB41fNvLRHvQJ/Y/oEMzSPuyA=) 4: Y2_bnui3NBLO8jQirmiUuAzGyRw.roa (hash: Sj4Gp5iophRPrZcWhz+iS2BZX0tuH2ZNqq3e2/zFjig=) 5: ksLcGKV5sMLU2KPB50R-fjzhUGk.roa (hash: +vfDcxfz6f0BGTFfQ/MI9W/FDb0sJ/mH5+hlrqvwdck=) 6: ntrt1qLEp7JFw_l17Dbev4liPcY.roa (hash: 5lVCUBQu1df/S1FQOKl/MyF/XxoO3ZxscsaY8Q1dPLk=) 7: vfMCWDXHqUhfE9pCWjy3UIK3sYE.roa (hash: cZ4cjZLkxHd/pGP9SjokJ4j+E/I+MNHdDpithj4CeCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:b6:83:4c:ed:33:64:22:c7:11:7e:03:81:87:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b Validity Not Before: Dec 6 11:01:15 2025 GMT Not After : Dec 7 11:01:15 2025 GMT Subject: CN=47526faf74d2e35f3ff5c21aded1878805413f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:af:7d:12:b0:de:97:f6:23:31:dd:2b:20:ae: c6:41:4e:3c:08:37:3a:15:38:54:8a:b8:41:20:42: 45:9e:60:ed:23:fb:96:6c:53:d5:88:02:03:f9:25: e7:d9:40:49:8f:34:54:80:0d:04:7c:0a:21:24:17: a7:c0:c1:75:ab:4e:f4:10:f2:26:0c:a4:d5:79:dc: 94:63:e3:9b:a9:90:92:bf:94:be:a5:42:e7:e5:19: 70:e1:a5:ef:df:7e:38:ef:7f:f9:16:d8:0e:ce:fe: 45:ba:a0:92:a0:f0:66:f1:c5:31:ba:c1:fb:b6:c4: 5d:91:46:a3:8f:01:2e:75:6b:7f:1e:85:fb:a7:4e: f1:dc:45:fe:5b:04:0e:c2:8e:d8:e5:c1:71:02:2a: b0:4e:2e:10:2c:66:5b:a9:46:73:7a:c7:19:23:24: 3e:6e:ab:2b:a9:05:16:3f:43:2a:92:94:58:b5:53: 33:5c:d3:62:0e:76:66:97:1e:eb:78:98:21:ef:63: 4e:fb:b3:79:76:c3:99:02:05:0f:43:71:10:df:89: 9c:92:41:cf:a8:02:85:7f:ed:b9:0c:82:8a:f8:ec: 6c:96:61:f8:aa:6f:dd:bd:c2:81:20:a8:16:26:b8: 80:6b:15:d7:0e:ad:81:c5:1f:d0:b9:07:52:37:4b: 91:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:52:6F:AF:74:D2:E3:5F:3F:F5:C2:1A:DE:D1:87:88:05:41:3F:23 X509v3 Authority Key Identifier: keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1d:fd:99:e8:00:cd:ab:a3:f5:0a:ba:e7:d7:27:22:24:31: 3d:70:33:f2:86:a2:03:a5:ad:3a:43:b1:94:85:a7:77:ca:e5: 86:09:c4:39:99:7a:5a:65:0f:5f:6a:51:fa:86:10:66:11:f3: 34:c4:b3:a5:d2:17:81:ba:ca:71:8e:5f:df:06:7e:f4:94:54: fc:96:9c:77:d2:96:67:a7:0e:73:8c:4f:0c:e9:b8:b4:10:07: d3:12:15:78:b8:4f:40:d2:3b:00:8e:fa:3c:b7:ab:4b:0d:0c: ee:e3:84:36:1f:c3:a7:f8:03:38:5d:cf:71:9b:b2:5e:4d:08: cb:0d:80:2a:e7:e1:d7:88:61:ed:65:30:87:45:8a:18:e8:9f: 02:cc:4d:ef:91:f7:9e:e8:b5:cf:d5:fb:26:ee:89:ef:0e:45: 07:b9:4f:81:af:c5:61:9d:ce:2c:c7:ce:35:bb:61:9a:c5:24: 50:c5:d7:13:12:05:9a:1d:23:e5:72:69:d3:de:3a:47:17:15: 71:e8:1a:69:ed:d1:22:b0:c3:99:ea:5b:f3:e2:c6:ad:34:b6: 68:84:96:35:a5:19:8f:81:12:8a:44:87:ab:2c:81:a0:51:01: 3d:b6:32:c2:04:07:99:db:b1:4d:e1:84:c5:b0:69:b5:70:65: 5e:16:66:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUraDTO0zZCLHEX4DgYcRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NzAyMWRjZGY0NGI2YWZkZDM4MTA1NDdjNTVhNzliZDFh OWZhM2IwHhcNMjUxMjA2MTEwMTE1WhcNMjUxMjA3MTEwMTE1WjAzMTEwLwYDVQQD Eyg0NzUyNmZhZjc0ZDJlMzVmM2ZmNWMyMWFkZWQxODc4ODA1NDEzZjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt699ErDel/YjMd0rIK7GQU48CDc6 FThUirhBIEJFnmDtI/uWbFPViAID+SXn2UBJjzRUgA0EfAohJBenwMF1q070EPIm DKTVedyUY+ObqZCSv5S+pULn5Rlw4aXv334473/5FtgOzv5FuqCSoPBm8cUxusH7 tsRdkUajjwEudWt/HoX7p07x3EX+WwQOwo7Y5cFxAiqwTi4QLGZbqUZzescZIyQ+ bqsrqQUWP0MqkpRYtVMzXNNiDnZmlx7reJgh72NO+7N5dsOZAgUPQ3EQ34mckkHP qAKFf+25DIKK+OxslmH4qm/dvcKBIKgWJriAaxXXDq2BxR/QuQdSN0uRUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdSb6900uNfP/XCGt7Rh4gFQT8jMB8GA1UdIwQY MBaAFFdwIdzfRLav3TgQVHxVp5vRqfo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQt YzkwN2FlMWMyMTFlLzEvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQtYzkwN2FlMWMyMTFl LzEvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXh39megA zauj9Qq659cnIiQxPXAz8oaiA6WtOkOxlIWnd8rlhgnEOZl6WmUPX2pR+oYQZhHz NMSzpdIXgbrKcY5f3wZ+9JRU/Jacd9KWZ6cOc4xPDOm4tBAH0xIVeLhPQNI7AI76 PLerSw0M7uOENh/Dp/gDOF3PcZuyXk0Iyw2AKufh14hh7WUwh0WKGOifAsxN75H3 nui1z9X7Ju6J7w5FB7lPga/FYZ3OLMfONbthmsUkUMXXExIFmh0j5XJp0946RxcV cegaae3RIrDDmepb8+LGrTS2aISWNaUZj4ESikSHqyyBoFEBPbYywgQHmduxTeGE xbBptXBlXhZmFw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:50:33 2025 by rpki-client