This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft File: 31EgEGEfkbFilnKKlNGmZbSrdXA.mft (raw, json) Hash identifier: +yfQqPvVEKBmTeXNmsNN8UGv3NhONoNGVKFLtgaSld8= Subject key identifier: 1E:2F:06:82:C4:F3:CB:37:29:41:6F:0F:49:3A:CB:50:9B:FA:20:CC Authority key identifier: DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70 Certificate issuer: /CN=df512010611f91b16296728a94d1a665b4ab7570 Certificate serial: 019AF49BA495AF0A203A34A58DC442C41D2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 17:00:31 +0000 Manifest this update: Sat 06 Dec 2025 17:00:31 +0000 Manifest next update: Sun 07 Dec 2025 17:00:31 +0000 Files and hashes: 1: 31EgEGEfkbFilnKKlNGmZbSrdXA.crl (hash: Ff1bWetdFn2bSF2dFLPVIdTZH1orTEY0PLMU5kRc0GE=) 2: Cre1atzMDwt4GowPQslT1BJNz70.roa (hash: AgobKkjGt4zwBE8+8mA/MF95V2kw1GXZGBf2IpysMAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:a4:95:af:0a:20:3a:34:a5:8d:c4:42:c4:1d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df512010611f91b16296728a94d1a665b4ab7570 Validity Not Before: Dec 6 17:00:31 2025 GMT Not After : Dec 7 17:00:31 2025 GMT Subject: CN=1e2f0682c4f3cb3729416f0f493acb509bfa20cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:16:11:f7:91:9c:b4:e5:df:01:1a:40:1b:6f: 83:f5:77:95:26:9a:78:8a:c4:cf:f4:2e:08:c7:32: 27:a5:7b:42:af:ac:a0:01:5f:7c:3f:ae:1d:41:92: e4:82:2a:29:44:1a:b9:ff:f1:c6:ab:5c:29:09:cf: 85:04:62:34:ea:48:70:ea:b8:9d:84:0a:05:75:8d: d2:7a:67:53:39:ff:1e:4f:46:f3:02:f8:ea:fc:03: a4:9c:9f:7c:7b:e6:1e:5b:e5:ae:76:ad:3e:ad:d5: 72:87:bc:29:11:b4:a2:90:43:ce:0f:89:65:f4:c3: 80:69:62:b1:28:d4:ef:61:33:f3:eb:07:1c:69:9f: fa:ca:f7:b0:2f:d6:5c:71:a4:61:ad:ff:4b:8d:ab: d9:cb:66:fc:d3:d2:13:3d:1d:11:1a:43:17:bc:36: a2:85:70:e5:86:f1:de:f3:37:74:92:24:08:cf:59: a6:0e:69:ec:7d:3a:6d:df:97:d4:39:5d:de:ce:5b: db:b6:18:b8:0d:22:0c:fd:f0:4a:c5:a9:05:b9:c0: 23:db:19:dd:24:5c:71:4e:23:84:0e:f4:70:1c:aa: 7b:65:33:d8:cf:fa:58:ac:16:2c:0a:30:23:80:2b: 1e:f2:5c:ff:62:7d:7a:6c:95:44:23:ee:71:cb:f0: 50:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2F:06:82:C4:F3:CB:37:29:41:6F:0F:49:3A:CB:50:9B:FA:20:CC X509v3 Authority Key Identifier: keyid:DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:01:13:89:2d:86:e2:6b:54:e5:6b:98:ee:40:87:b7:c9:ff: f0:ff:25:6d:f0:f3:05:00:72:48:a4:a2:66:37:e0:26:6c:e8: fb:07:e0:5b:c3:18:a7:c4:a1:c3:e8:95:16:92:68:90:76:13: 97:92:2c:95:8e:71:e9:06:1c:71:9f:54:59:9d:81:2f:e8:b6: 46:d2:19:d3:d8:f6:7f:cf:62:61:06:d2:4e:be:29:a6:f7:4e: 87:f2:9f:f3:20:ba:f0:c3:b3:73:90:d9:ba:9c:b7:15:e3:b2: a0:60:9d:65:62:37:74:3b:1b:8b:a2:22:5e:37:3e:2d:9e:da: 4d:ee:70:c6:16:d8:29:a4:d9:9c:15:cc:f4:e2:bf:5b:bc:2d: 6e:cf:ae:02:e8:21:7e:c8:c1:1d:4a:5c:d5:5e:b7:11:ed:b8: 5e:0e:a0:df:8a:8b:03:af:65:fa:bb:92:ff:64:3e:68:b3:f7: 0a:ff:7a:e3:7f:2d:6e:b4:ab:6d:71:7d:38:97:23:e0:ab:85: 26:e1:ce:d3:58:ad:44:18:9c:19:0d:60:8a:73:a8:2d:8c:ad: ab:07:38:23:9a:c8:39:ef:f6:ce:eb:b5:8e:c6:6f:37:9e:d6: 12:f3:f2:99:aa:d4:9b:83:2e:c2:f4:e4:d6:0d:4e:f2:06:06: 33:0b:a6:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m6SVrwogOjSljcRCxB0tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNTEyMDEwNjExZjkxYjE2Mjk2NzI4YTk0ZDFhNjY1YjRh Yjc1NzAwHhcNMjUxMjA2MTcwMDMxWhcNMjUxMjA3MTcwMDMxWjAzMTEwLwYDVQQD EygxZTJmMDY4MmM0ZjNjYjM3Mjk0MTZmMGY0OTNhY2I1MDliZmEyMGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRYR95GctOXfARpAG2+D9XeVJpp4 isTP9C4IxzInpXtCr6ygAV98P64dQZLkgiopRBq5//HGq1wpCc+FBGI06khw6rid hAoFdY3SemdTOf8eT0bzAvjq/AOknJ98e+YeW+Wudq0+rdVyh7wpEbSikEPOD4ll 9MOAaWKxKNTvYTPz6wccaZ/6yvewL9ZccaRhrf9LjavZy2b809ITPR0RGkMXvDai hXDlhvHe8zd0kiQIz1mmDmnsfTpt35fUOV3ezlvbthi4DSIM/fBKxakFucAj2xnd JFxxTiOEDvRwHKp7ZTPYz/pYrBYsCjAjgCse8lz/Yn16bJVEI+5xy/BQRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4vBoLE88s3KUFvD0k6y1Cb+iDMMB8GA1UdIwQY MBaAFN9RIBBhH5GxYpZyipTRpmW0q3VwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81MGY3ZTEtNmNiYy00ZjVhLWIyZWIt YjA2MmU5NzI1YjFkLzEvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy81MGY3ZTEtNmNiYy00ZjVhLWIyZWItYjA2MmU5NzI1YjFk LzEvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwETiS2G 4mtU5WuY7kCHt8n/8P8lbfDzBQBySKSiZjfgJmzo+wfgW8MYp8Shw+iVFpJokHYT l5IslY5x6QYccZ9UWZ2BL+i2RtIZ09j2f89iYQbSTr4ppvdOh/Kf8yC68MOzc5DZ upy3FeOyoGCdZWI3dDsbi6IiXjc+LZ7aTe5wxhbYKaTZnBXM9OK/W7wtbs+uAugh fsjBHUpc1V63Ee24Xg6g34qLA69l+ruS/2Q+aLP3Cv96438tbrSrbXF9OJcj4KuF JuHO01itRBicGQ1ginOoLYytqwc4I5rIOe/2zuu1jsZvN57WEvPymarUm4MuwvTk 1g1O8gYGMwumDg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:13:56 2025 by rpki-client