This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft File: V04loW5dOqEQrF6DNfiPY-VLQvE.mft (raw, json) Hash identifier: nA3orgXVRUQuknw6ZnMclZM5m+AYdBFcP6Nlva5TJlU= Subject key identifier: C9:D2:6A:4A:7A:89:27:67:23:81:6B:2D:52:54:E0:09:54:59:CE:48 Authority key identifier: 57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1 Certificate issuer: /CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1 Certificate serial: 019AF2096E3B5E913E236F26607C9929A492 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 05:01:35 +0000 Manifest this update: Sat 06 Dec 2025 05:01:35 +0000 Manifest next update: Sun 07 Dec 2025 05:01:35 +0000 Files and hashes: 1: BWoaGekGzmMFOcb57tiwQ9__17o.roa (hash: CdidSnwNP4v5tI+QOVdmDHPF0D650SAL4wHqBfTMNlc=) 2: V04loW5dOqEQrF6DNfiPY-VLQvE.crl (hash: 3a2TdgRzy+qTkhQklsblPvqZT6APkZNcxmhSgIiA7uM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:6e:3b:5e:91:3e:23:6f:26:60:7c:99:29:a4:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1 Validity Not Before: Dec 6 05:01:35 2025 GMT Not After : Dec 7 05:01:35 2025 GMT Subject: CN=c9d26a4a7a89276723816b2d5254e0095459ce48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:99:66:ab:2f:3b:fd:b9:f1:3e:86:b4:e7:e5: e4:6f:f7:f1:77:a7:ea:2c:16:31:34:a5:31:7e:03: a1:57:15:3b:5a:ca:71:0c:32:90:d4:70:67:89:4c: fd:c6:db:d3:c7:19:46:80:5e:50:37:47:c6:d1:8e: d5:3a:e4:1b:4f:c4:36:dd:12:cb:85:af:ca:85:53: 84:55:76:44:99:d7:89:59:b4:49:05:50:3e:35:e1: 76:49:84:3e:7f:1c:8e:57:ac:5a:9c:af:91:37:1a: 7d:78:25:d8:f4:a6:2e:bf:a0:ea:fb:4d:60:db:72: 46:fd:a4:2d:ab:4e:a0:44:23:0f:20:f1:ab:88:89: 45:de:56:c4:63:5d:79:c9:c5:d6:e4:0e:d9:c9:52: 8f:95:89:10:5c:c6:b3:bb:93:c0:f2:9a:2a:e7:4a: b8:8f:71:00:cb:3f:ae:9d:a1:e5:49:f0:61:37:cb: 0b:51:b7:57:d3:f2:96:b7:9e:07:c1:e1:b5:cd:0a: 28:c9:37:21:89:c2:9e:db:35:20:96:5a:25:94:0a: a6:f7:81:b6:15:32:9b:e3:0f:8e:9f:ed:46:2e:49: 07:05:3c:e0:ab:f4:c3:86:e9:ac:7c:e2:d5:81:f6: c7:41:e1:48:64:a2:ca:11:78:7b:1e:c3:b9:ec:72: 13:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D2:6A:4A:7A:89:27:67:23:81:6B:2D:52:54:E0:09:54:59:CE:48 X509v3 Authority Key Identifier: keyid:57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2b:66:c7:72:3b:e5:29:09:b2:15:29:3a:3a:e9:6e:e3:97: 83:7f:ad:87:d7:73:d6:a5:f4:52:88:0c:0b:a3:66:79:10:66: 4f:1d:a4:e6:94:d3:84:f4:b7:60:d8:74:66:d0:07:fa:64:86: 18:9d:81:c4:b2:2e:fe:f7:64:d0:f3:e5:8d:08:6a:48:2e:15: bc:f3:a5:e6:71:94:43:e0:a4:de:4d:10:fa:82:50:0a:87:93: d1:fe:f7:b4:15:92:29:02:78:c8:20:7d:35:61:7c:cb:36:63: 04:6a:19:e0:40:bf:97:d3:46:cc:ef:32:6e:fd:18:e4:6a:08: 21:70:96:a9:21:34:a0:6a:06:74:d6:85:a8:b2:91:4c:79:da: 5c:bf:dc:88:85:78:e7:d8:07:07:ae:91:13:55:ac:7c:40:4a: 8c:ad:ae:e2:b1:11:59:a4:c6:fc:4d:c1:40:5c:ac:ad:3f:ce: a8:b7:50:44:48:7f:bd:73:37:d8:cd:9d:d2:80:e4:10:c8:b2: b4:66:da:fa:39:7c:96:63:fe:39:2a:cc:76:d8:61:f5:0f:d4: 61:9c:93:a0:6f:22:01:33:85:5e:d1:1c:50:19:ae:9e:e6:f8: ba:89:f2:ad:dc:88:1d:76:3e:d0:71:74:21:74:04:3d:6f:0c: e1:fa:e2:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCW47XpE+I28mYHyZKaSSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NGUyNWExNmU1ZDNhYTExMGFjNWU4MzM1Zjg4ZjYzZTU0 YjQyZjEwHhcNMjUxMjA2MDUwMTM1WhcNMjUxMjA3MDUwMTM1WjAzMTEwLwYDVQQD EyhjOWQyNmE0YTdhODkyNzY3MjM4MTZiMmQ1MjU0ZTAwOTU0NTljZTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Jlmqy87/bnxPoa05+Xkb/fxd6fq LBYxNKUxfgOhVxU7WspxDDKQ1HBniUz9xtvTxxlGgF5QN0fG0Y7VOuQbT8Q23RLL ha/KhVOEVXZEmdeJWbRJBVA+NeF2SYQ+fxyOV6xanK+RNxp9eCXY9KYuv6Dq+01g 23JG/aQtq06gRCMPIPGriIlF3lbEY115ycXW5A7ZyVKPlYkQXMazu5PA8poq50q4 j3EAyz+unaHlSfBhN8sLUbdX0/KWt54HweG1zQooyTchicKe2zUgllollAqm94G2 FTKb4w+On+1GLkkHBTzgq/TDhumsfOLVgfbHQeFIZKLKEXh7HsO57HIT6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnSakp6iSdnI4FrLVJU4AlUWc5IMB8GA1UdIwQY MBaAFFdOJaFuXTqhEKxegzX4j2PlS0LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjA0bG9XNWRPcUVRckY2RE5maVBZLVZMUXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wNDI5MmYtZjEwNC00MTdjLWFjZGEt NTcxYWYwNjZjZjFlLzEvVjA0bG9XNWRPcUVRckY2RE5maVBZLVZMUXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wNDI5MmYtZjEwNC00MTdjLWFjZGEtNTcxYWYwNjZjZjFl LzEvVjA0bG9XNWRPcUVRckY2RE5maVBZLVZMUXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnitmx3I7 5SkJshUpOjrpbuOXg3+th9dz1qX0UogMC6NmeRBmTx2k5pTThPS3YNh0ZtAH+mSG GJ2BxLIu/vdk0PPljQhqSC4VvPOl5nGUQ+Ck3k0Q+oJQCoeT0f73tBWSKQJ4yCB9 NWF8yzZjBGoZ4EC/l9NGzO8ybv0Y5GoIIXCWqSE0oGoGdNaFqLKRTHnaXL/ciIV4 59gHB66RE1WsfEBKjK2u4rERWaTG/E3BQFysrT/OqLdQREh/vXM32M2d0oDkEMiy tGba+jl8lmP+OSrMdthh9Q/UYZyToG8iATOFXtEcUBmunub4uonyrdyIHXY+0HF0 IXQEPW8M4fri7w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:57 2025 by rpki-client