This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft File: V8e-KewTsKsBiXQR6G7Piw87NEo.mft (raw, json) Hash identifier: r0yj7KR+T/F4CDPQq6/Qpl8pBYHgEClXOSt2ULLvsxw= Subject key identifier: DD:19:F8:3F:42:15:E1:5C:5E:DD:13:20:47:11:B8:3E:85:7C:E9:25 Authority key identifier: 57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A Certificate issuer: /CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a Certificate serial: 019B3D9119E7FF36A8F0FD183B14F1085B53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 21:01:18 +0000 Manifest this update: Sat 20 Dec 2025 21:01:18 +0000 Manifest next update: Sun 21 Dec 2025 21:01:18 +0000 Files and hashes: 1: V8e-KewTsKsBiXQR6G7Piw87NEo.crl (hash: t0TQyd9e2U1/c9xvLjs1cK8e97KVst0xsktBaULG69g=) 2: v827Klwx8U7EDB2WbdLf4CEXliw.roa (hash: BAU2KXwimUuepAhjPQcMIt+Q0c8KhENCD8ID/skeNjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:19:e7:ff:36:a8:f0:fd:18:3b:14:f1:08:5b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a Validity Not Before: Dec 20 21:01:18 2025 GMT Not After : Dec 21 21:01:18 2025 GMT Subject: CN=dd19f83f4215e15c5edd13204711b83e857ce925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a2:27:24:1d:af:81:7c:1f:c8:74:59:f1:11: 0b:3b:6d:c7:4c:90:00:b8:cc:7d:ba:6c:34:bf:50: 5c:0b:60:23:4a:be:ad:20:69:ad:cd:f9:21:e0:34: 2c:34:57:24:86:29:67:93:55:e1:07:94:ad:2b:9e: ff:17:89:d8:82:6c:20:38:66:fd:76:f1:3b:6a:74: e0:5f:97:7f:10:fb:3d:0a:ff:67:33:eb:4b:4a:93: 83:6f:dd:98:be:8a:98:a5:6d:c5:6e:00:4e:b4:3a: 49:c6:e0:33:a5:de:0f:cd:24:ab:6c:ae:3a:a6:d0: 40:ad:52:38:d8:95:fe:38:18:21:84:72:a4:4e:2b: 51:25:3f:73:0e:ec:f4:32:eb:2e:47:11:04:d1:fc: b4:a8:5d:27:f2:ed:30:23:db:1c:53:56:2f:99:f7: a6:6c:72:49:aa:a9:bb:6a:b4:8e:c3:35:90:53:1e: 6c:a4:23:5a:2a:90:99:4f:4d:ce:8e:0f:11:e4:67: 12:84:d7:eb:cb:4b:35:d0:2e:a5:1d:ca:66:28:69: 9c:22:2b:21:a6:80:1c:8a:ad:03:22:6f:8a:6e:97: d2:72:27:d7:73:f8:ad:6b:e7:93:bb:f3:0f:65:df: 03:46:14:2a:d9:05:f4:d0:39:93:6e:24:14:6a:08: c1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:19:F8:3F:42:15:E1:5C:5E:DD:13:20:47:11:B8:3E:85:7C:E9:25 X509v3 Authority Key Identifier: keyid:57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:5c:8c:76:30:28:75:e2:c4:5b:83:e3:32:3d:01:31:b2:7a: 4c:fc:59:c3:44:7f:36:68:9d:2c:33:02:4b:f3:d9:ad:e0:d3: 38:fd:15:65:76:0d:95:45:ca:d7:3c:23:90:cc:ab:0a:e1:b3: 25:c7:10:95:2c:c8:aa:e0:50:93:17:1a:5c:47:1f:62:fe:52: aa:79:d0:78:9a:34:de:03:26:e2:5b:f3:cd:5a:a6:d8:75:88: cd:5f:85:2e:4d:fa:be:10:9a:23:21:ce:8e:1e:5d:d0:63:2a: bc:38:80:c7:61:ed:37:e3:d7:2b:ea:ac:78:40:98:92:57:d1: bd:1b:4d:f9:c0:66:14:66:a0:66:de:e0:b7:65:85:db:41:d6: 00:af:c0:12:57:46:f7:cf:45:5a:41:7f:73:30:d9:15:53:90: 5f:18:0e:41:4c:d5:9c:3a:5b:52:d9:6e:95:a7:96:40:ee:f5: a4:dc:aa:83:74:38:77:6f:8f:11:a1:e1:72:2b:b1:e9:ef:54: 9d:60:8e:ae:8e:9a:d6:2a:4e:8d:26:1d:2c:b3:d7:90:24:6e: 03:69:4c:69:12:fc:c8:d2:aa:91:bb:7c:ad:ce:a6:94:f6:a9: 19:8d:62:56:f6:29:e3:90:7b:4a:29:75:c8:33:6c:81:13:cd: 5f:96:89:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kRnn/zao8P0YOxTxCFtTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzdiZTI5ZWMxM2IwYWIwMTg5NzQxMWU4NmVjZjhiMGYz YjM0NGEwHhcNMjUxMjIwMjEwMTE4WhcNMjUxMjIxMjEwMTE4WjAzMTEwLwYDVQQD EyhkZDE5ZjgzZjQyMTVlMTVjNWVkZDEzMjA0NzExYjgzZTg1N2NlOTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6InJB2vgXwfyHRZ8RELO23HTJAA uMx9umw0v1BcC2AjSr6tIGmtzfkh4DQsNFckhilnk1XhB5StK57/F4nYgmwgOGb9 dvE7anTgX5d/EPs9Cv9nM+tLSpODb92YvoqYpW3FbgBOtDpJxuAzpd4PzSSrbK46 ptBArVI42JX+OBghhHKkTitRJT9zDuz0MusuRxEE0fy0qF0n8u0wI9scU1Yvmfem bHJJqqm7arSOwzWQUx5spCNaKpCZT03Ojg8R5GcShNfry0s10C6lHcpmKGmcIish poAciq0DIm+KbpfScifXc/ita+eTu/MPZd8DRhQq2QX00DmTbiQUagjBKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0Z+D9CFeFcXt0TIEcRuD6FfOklMB8GA1UdIwQY MBaAFFfHvinsE7CrAYl0Eehuz4sPOzRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhlLUtld1RzS3NCaVhRUjZHN1Bpdzg3TkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9mMGQ4NTMtNDJjYy00YTE3LTgxYTEt YmFlMWQ5ZWVjNDFhLzEvVjhlLUtld1RzS3NCaVhRUjZHN1Bpdzg3TkVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9mMGQ4NTMtNDJjYy00YTE3LTgxYTEtYmFlMWQ5ZWVjNDFh LzEvVjhlLUtld1RzS3NCaVhRUjZHN1Bpdzg3TkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAclyMdjAo deLEW4PjMj0BMbJ6TPxZw0R/NmidLDMCS/PZreDTOP0VZXYNlUXK1zwjkMyrCuGz JccQlSzIquBQkxcaXEcfYv5SqnnQeJo03gMm4lvzzVqm2HWIzV+FLk36vhCaIyHO jh5d0GMqvDiAx2HtN+PXK+qseECYklfRvRtN+cBmFGagZt7gt2WF20HWAK/AEldG 989FWkF/czDZFVOQXxgOQUzVnDpbUtlulaeWQO71pNyqg3Q4d2+PEaHhciux6e9U nWCOro6a1ipOjSYdLLPXkCRuA2lMaRL8yNKqkbt8rc6mlPapGY1iVvYp45B7Sil1 yDNsgRPNX5aJjg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:41:27 2025 by rpki-client