This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft File: d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft (raw, json) Hash identifier: fZZHy8pFumTsWpsEizkpnBK4HixL72FkUSzrbJJFvH4= Subject key identifier: 5F:F2:19:E2:FB:15:EB:5E:A2:35:3E:47:49:39:9D:27:3C:95:32:EE Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4 Certificate issuer: /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4 Certificate serial: 019B38A2AEDE3CCE7165A6547BF0A8472EF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft Manifest number: 12B4 Signing time: Fri 19 Dec 2025 22:02:24 +0000 Manifest this update: Fri 19 Dec 2025 22:02:24 +0000 Manifest next update: Sat 20 Dec 2025 22:02:24 +0000 Files and hashes: 1: FVyOtMSkw-0Vg62ACMKcfYtFTZg.roa (hash: 19Vo/+e85FEDOozBk9ulyjhvlWCZUEMrSObfkurwei4=) 2: bGBL61Pb5C5jQn9lTt04zeAidWQ.roa (hash: tcI+1ZDPgb0dQJ/mWEWyrYgZXPfZZ/VnqvsqqlmCxEY=) 3: d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl (hash: DBEFyUhrqx9Eo3iuQOXaYf7OioX4D2JwUdxXcvokbww=) 4: kfH4Hfcw2DAA4uCH3S-0NOLLLIE.roa (hash: +ssFltk6eznRSfe1ZkEA/pnveLfuNyk/DPp5U5STMlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:ae:de:3c:ce:71:65:a6:54:7b:f0:a8:47:2e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4 Validity Not Before: Dec 19 22:02:24 2025 GMT Not After : Dec 20 22:02:24 2025 GMT Subject: CN=5ff219e2fb15eb5ea2353e4749399d273c9532ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:75:36:98:c0:e2:a9:9e:c5:5d:35:37:c1:33: 0d:31:8c:83:a7:9d:ba:ea:c4:b8:ca:1c:23:d4:97: 79:1e:8b:16:e4:85:2a:6c:53:35:85:bb:e7:0d:bc: 7e:35:2f:0f:06:4d:aa:d8:5c:79:5d:5e:6c:17:22: 3b:90:8b:1b:e9:20:a2:6e:52:fa:ae:9f:b4:8d:13: 2b:3b:82:2a:53:ed:05:e0:eb:4e:76:28:ca:16:dc: 4b:73:ef:e4:d5:5e:ca:5f:0d:9b:4f:da:ff:05:92: d3:a3:5c:ec:49:d6:3d:f1:15:d3:51:d5:99:13:66: 21:58:46:c2:3e:f2:14:b8:f9:2a:3a:98:34:d7:a0: 83:bc:73:01:4a:6a:6c:63:6a:e1:cf:4b:ba:40:5e: 3e:10:ec:b3:be:a2:ce:b5:f5:a6:ee:17:4d:d0:cf: 0e:61:04:ea:26:92:6a:ad:ce:48:4f:48:08:1e:a4: 55:97:bc:93:38:41:ee:f4:44:99:01:fc:67:52:56: cb:3a:fc:a1:92:fb:ff:73:ee:d5:70:43:6b:07:5e: 6e:e2:73:6e:b3:09:e5:27:2d:6b:9d:40:4c:bc:c5: be:8e:d4:86:9b:8d:be:16:65:ff:de:c4:0b:27:db: c8:c2:d8:3b:2d:af:7e:ea:34:d3:bd:06:ae:4e:11: 08:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F2:19:E2:FB:15:EB:5E:A2:35:3E:47:49:39:9D:27:3C:95:32:EE X509v3 Authority Key Identifier: keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1a:4b:62:77:ff:c8:67:dd:4f:20:11:49:00:75:2c:dc:bf: 9c:04:9e:e6:b3:f5:0d:7d:c8:51:59:c2:50:b0:6a:1f:ea:b8: 6e:bc:14:41:10:51:a4:08:a5:d7:74:81:32:a2:01:18:c6:06: 37:1c:93:c8:c7:05:81:a2:3a:ff:ed:1d:43:85:c3:5f:ef:54: c5:bb:31:17:f8:c8:a7:9a:98:5e:cc:ae:9e:4b:64:e6:b4:8c: 54:80:b9:38:ec:6f:97:9a:be:1b:3f:73:80:36:21:30:8c:ae: 6c:d2:cf:da:c3:38:af:1b:ee:0c:52:0a:a1:50:18:bd:2a:b2: a6:94:88:b7:17:5a:02:d6:5a:9e:ba:17:08:ac:06:7c:5e:45: dc:c8:3e:72:4d:21:7d:73:b3:8c:03:05:24:bd:0b:13:25:c3: 39:af:81:93:63:8f:db:d9:5f:02:fd:17:cf:45:e2:9b:7e:0b: 96:85:26:c3:32:ae:9b:9b:9f:d7:0c:7e:b3:4d:16:83:21:11: 31:7f:30:70:fc:b9:f6:c8:a6:c2:15:4a:40:79:c1:9e:79:58: fd:9e:f9:94:5f:58:a2:48:d7:9d:0e:0f:41:61:b3:0e:5e:71: 80:48:45:02:fc:6a:3e:60:82:32:b7:84:0e:e1:fd:db:58:bf: f9:d4:75:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oq7ePM5xZaZUe/CoRy70MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3Y2M0NmFkZTk1N2M4ZjA2NmE1YzZmZTI1MzEwYTRjZjVh N2U5ZDQwHhcNMjUxMjE5MjIwMjI0WhcNMjUxMjIwMjIwMjI0WjAzMTEwLwYDVQQD Eyg1ZmYyMTllMmZiMTVlYjVlYTIzNTNlNDc0OTM5OWQyNzNjOTUzMmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHU2mMDiqZ7FXTU3wTMNMYyDp526 6sS4yhwj1Jd5HosW5IUqbFM1hbvnDbx+NS8PBk2q2Fx5XV5sFyI7kIsb6SCiblL6 rp+0jRMrO4IqU+0F4OtOdijKFtxLc+/k1V7KXw2bT9r/BZLTo1zsSdY98RXTUdWZ E2YhWEbCPvIUuPkqOpg016CDvHMBSmpsY2rhz0u6QF4+EOyzvqLOtfWm7hdN0M8O YQTqJpJqrc5IT0gIHqRVl7yTOEHu9ESZAfxnUlbLOvyhkvv/c+7VcENrB15u4nNu swnlJy1rnUBMvMW+jtSGm42+FmX/3sQLJ9vIwtg7La9+6jTTvQauThEIJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/yGeL7FeteojU+R0k5nSc8lTLuMB8GA1UdIwQY MBaAFHfMRq3pV8jwZqXG/iUxCkz1p+nUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDh4R3JlbFh5UEJtcGNiLUpURUtUUFduNmRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kNjFiNTQtZWU5Zi00ZTAwLWIxZTMt ZjdkMDI3NTYwMDU4LzEvZDh4R3JlbFh5UEJtcGNiLUpURUtUUFduNmRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9kNjFiNTQtZWU5Zi00ZTAwLWIxZTMtZjdkMDI3NTYwMDU4 LzEvZDh4R3JlbFh5UEJtcGNiLUpURUtUUFduNmRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBpLYnf/ yGfdTyARSQB1LNy/nASe5rP1DX3IUVnCULBqH+q4brwUQRBRpAil13SBMqIBGMYG NxyTyMcFgaI6/+0dQ4XDX+9UxbsxF/jIp5qYXsyunktk5rSMVIC5OOxvl5q+Gz9z gDYhMIyubNLP2sM4rxvuDFIKoVAYvSqyppSItxdaAtZanroXCKwGfF5F3Mg+ck0h fXOzjAMFJL0LEyXDOa+Bk2OP29lfAv0Xz0Xim34LloUmwzKum5uf1wx+s00WgyER MX8wcPy59simwhVKQHnBnnlY/Z75lF9YokjXnQ4PQWGzDl5xgEhFAvxqPmCCMreE DuH921i/+dR1Jg== -----END CERTIFICATE-----Generated at Sat Dec 20 05:01:30 2025 by rpki-client