This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft File: V0zKiZ71v0I38Pa90XeSIbIAUvM.mft (raw, json) Hash identifier: rtlGOIZmz/suSthTmB17iCo4dfmXDnZmmYrcpzjkuFQ= Subject key identifier: A9:C8:89:1B:CC:84:DE:6E:28:71:6B:16:E4:A0:8E:56:D3:3E:93:0F Authority key identifier: 57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3 Certificate issuer: /CN=574cca899ef5bf4237f0f6bdd1779221b20052f3 Certificate serial: 019B3079E811086F909D232734D704E57E9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft Manifest number: 1788 Signing time: Thu 18 Dec 2025 08:00:54 +0000 Manifest this update: Thu 18 Dec 2025 08:00:54 +0000 Manifest next update: Fri 19 Dec 2025 08:00:54 +0000 Files and hashes: 1: V0zKiZ71v0I38Pa90XeSIbIAUvM.crl (hash: E92b7TdU99i0cv8vVUqJkvBqnFZDQf3Gnul2ZMip9Ok=) 2: Y94X6_HOf3KuSVPAOGMuBrzSxtg.roa (hash: jodD56xisILiJQmZjw16ioNeXG3x3llQ2TPGO/o2XeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 08:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:79:e8:11:08:6f:90:9d:23:27:34:d7:04:e5:7e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=574cca899ef5bf4237f0f6bdd1779221b20052f3 Validity Not Before: Dec 18 08:00:54 2025 GMT Not After : Dec 19 08:00:54 2025 GMT Subject: CN=a9c8891bcc84de6e28716b16e4a08e56d33e930f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:07:86:c4:7f:93:07:46:6d:e1:4a:80:a6: ab:ec:41:de:b4:47:4f:ba:71:6e:70:72:74:71:fa: d2:02:c0:20:b5:8d:34:d5:8e:00:51:02:e3:db:81: ce:01:94:27:53:34:2e:ab:88:ef:e8:3b:39:08:34: a7:38:f9:57:79:8a:71:d5:8a:8c:2e:18:fe:d3:da: 99:82:a5:34:c0:18:03:21:f3:c3:0f:0d:01:8b:60: a2:84:50:5c:6a:b2:1e:28:89:61:18:49:7d:ac:c9: a5:e9:29:c4:44:08:ae:be:05:21:88:f2:48:90:68: eb:ae:ba:63:c8:d9:58:58:c8:d1:e5:ba:6a:8c:33: fe:ef:a6:9f:7b:a3:f5:05:7d:c9:3e:9f:e3:fb:2c: 9e:99:11:35:3f:47:c9:de:8f:02:24:bb:29:bf:8e: 0a:0f:31:48:5b:75:e6:8a:e1:6c:c6:3b:1a:67:d8: a1:74:a7:3c:6e:6d:17:97:aa:15:14:f8:d4:cf:ad: 52:e9:78:d1:1f:90:a8:15:65:5f:77:b0:60:76:21: bd:e7:bb:bf:8e:64:67:2e:54:82:47:98:96:17:79: b1:8e:2f:99:c7:7e:ac:6c:ca:fe:eb:01:e1:2c:2d: 96:4a:16:1f:5c:58:29:74:73:5b:d4:64:c9:46:a9: 7f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C8:89:1B:CC:84:DE:6E:28:71:6B:16:E4:A0:8E:56:D3:3E:93:0F X509v3 Authority Key Identifier: keyid:57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:ea:4e:21:03:5f:cc:15:16:6f:73:c4:dd:49:99:9e:dd:1c: 1e:c2:5d:f6:26:f4:e5:32:50:c0:03:6e:1a:9e:70:bf:fd:89: 51:33:db:41:0e:df:8c:a6:5f:df:76:8b:9b:5b:42:b4:52:ad: cc:fa:d6:35:10:82:34:c5:4e:96:38:22:c4:14:1e:b2:eb:5d: 66:d9:e9:33:b7:1a:d6:c9:95:f9:77:c2:10:a7:c2:a5:1f:70: f1:4a:40:90:12:83:32:67:94:c3:cc:f3:3f:62:7d:27:b5:bc: 40:67:ff:ba:2f:cd:f3:16:98:a3:7a:90:0b:ce:7d:bd:51:b7: d8:16:2f:25:b2:79:9a:e6:b9:dc:d5:47:a9:bb:af:a7:58:17: ff:5c:94:ed:35:d0:23:28:33:4c:6e:82:7d:bd:a8:a7:d1:66: e8:98:f9:ae:b5:7f:80:ec:4d:3c:a4:20:99:df:59:55:bf:4b: 57:cf:dc:60:c7:e9:04:8f:88:a1:48:ac:95:ad:da:99:14:9d: de:b7:b2:27:25:46:50:81:52:08:aa:de:fa:40:95:f2:f5:0d: 94:0f:e1:f7:a8:d4:c4:fe:45:48:cb:37:8b:4c:20:d7:5e:da: 6c:04:9f:45:05:6e:12:d7:0c:5c:6c:c1:1d:dd:c0:20:70:a2: ce:0c:2f:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsweegRCG+QnSMnNNcE5X6bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NGNjYTg5OWVmNWJmNDIzN2YwZjZiZGQxNzc5MjIxYjIw MDUyZjMwHhcNMjUxMjE4MDgwMDU0WhcNMjUxMjE5MDgwMDU0WjAzMTEwLwYDVQQD EyhhOWM4ODkxYmNjODRkZTZlMjg3MTZiMTZlNGEwOGU1NmQzM2U5MzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxMHhsR/kwdGbeFKgKar7EHetEdP unFucHJ0cfrSAsAgtY001Y4AUQLj24HOAZQnUzQuq4jv6Ds5CDSnOPlXeYpx1YqM Lhj+09qZgqU0wBgDIfPDDw0Bi2CihFBcarIeKIlhGEl9rMml6SnERAiuvgUhiPJI kGjrrrpjyNlYWMjR5bpqjDP+76afe6P1BX3JPp/j+yyemRE1P0fJ3o8CJLspv44K DzFIW3XmiuFsxjsaZ9ihdKc8bm0Xl6oVFPjUz61S6XjRH5CoFWVfd7BgdiG957u/ jmRnLlSCR5iWF3mxji+Zx36sbMr+6wHhLC2WShYfXFgpdHNb1GTJRql/PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnIiRvMhN5uKHFrFuSgjlbTPpMPMB8GA1UdIwQY MBaAFFdMyome9b9CN/D2vdF3kiGyAFLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC85MzhhYmQtMTAxOS00ZTdhLWFhODIt ZWUxMTI2YTI4MTk1LzEvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC85MzhhYmQtMTAxOS00ZTdhLWFhODItZWUxMTI2YTI4MTk1 LzEvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+pOIQNf zBUWb3PE3UmZnt0cHsJd9ib05TJQwANuGp5wv/2JUTPbQQ7fjKZf33aLm1tCtFKt zPrWNRCCNMVOljgixBQesutdZtnpM7ca1smV+XfCEKfCpR9w8UpAkBKDMmeUw8zz P2J9J7W8QGf/ui/N8xaYo3qQC859vVG32BYvJbJ5mua53NVHqbuvp1gX/1yU7TXQ IygzTG6Cfb2op9Fm6Jj5rrV/gOxNPKQgmd9ZVb9LV8/cYMfpBI+IoUisla3amRSd 3reyJyVGUIFSCKre+kCV8vUNlA/h96jUxP5FSMs3i0wg117abASfRQVuEtcMXGzB Hd3AIHCizgwvdA== -----END CERTIFICATE-----Generated at Thu Dec 18 15:41:37 2025 by rpki-client