This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft File: 339euIF_Lal_ZlUHaDtcRadNDKA.mft (raw, json) Hash identifier: v7GBJZndudW7qezsrMFeGb4fmG4IxTEW/O2GGi+EuGE= Subject key identifier: 99:17:78:33:DF:89:D1:79:09:F5:3A:7F:1C:64:06:7A:71:AD:5C:20 Authority key identifier: DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0 Certificate issuer: /CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0 Certificate serial: 019B50AA0000078A215F9B7E49DF816FE0B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft Manifest number: 148F Signing time: Wed 24 Dec 2025 14:01:16 +0000 Manifest this update: Wed 24 Dec 2025 14:01:16 +0000 Manifest next update: Thu 25 Dec 2025 14:01:16 +0000 Files and hashes: 1: 339euIF_Lal_ZlUHaDtcRadNDKA.crl (hash: VggDWMrbJOC7PEZQug6g8C9oLRdTohNDlJkyLKTjn1Q=) 2: h8Gl2OsdLuWPWtrNcU8n0JlSjzU.roa (hash: evSWiyr6r/rxtz4+EcFa39VIdmSuUvtGUXcbAAeqm0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:aa:00:00:07:8a:21:5f:9b:7e:49:df:81:6f:e0:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0 Validity Not Before: Dec 24 14:01:16 2025 GMT Not After : Dec 25 14:01:16 2025 GMT Subject: CN=99177833df89d17909f53a7f1c64067a71ad5c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:88:c1:f3:c3:55:8e:75:a0:c3:1e:4b:97:e4: 9c:56:f8:21:93:da:07:58:ca:96:4e:ac:eb:07:2d: b7:3f:94:14:d5:d8:09:79:d1:db:ca:7c:c2:a0:f5: 08:2e:5f:04:09:4c:ff:ae:e0:87:19:45:b9:d8:35: 67:99:15:56:4b:55:46:22:72:2d:b9:da:b1:63:18: 3a:88:c5:86:00:52:77:f3:2b:12:db:7d:56:79:33: e2:96:96:19:8a:50:c9:7e:40:16:9c:8d:4f:57:9d: 03:f3:1f:9a:8a:fd:21:eb:ec:df:a4:5a:9e:8e:bf: 76:8b:37:77:62:73:fc:6f:d5:8d:70:0a:9c:66:44: 99:88:d0:bb:7e:0f:87:36:1a:46:50:8a:d8:68:a6: 32:00:4d:cf:1b:b2:c8:a1:cc:fc:c0:ef:fe:fb:8b: aa:70:9b:2d:fa:6c:a5:15:b1:a1:18:85:cb:1e:83: d2:d4:c9:6d:06:bb:3a:d2:57:e9:e2:71:e8:97:de: ed:42:4c:dc:55:30:9e:64:37:1d:d8:28:52:8b:12: 04:aa:06:9d:53:53:e6:c4:2d:55:d8:54:ce:51:f5: 3b:65:5d:f9:58:53:d6:22:ec:7c:7a:b6:1b:97:d6: d5:ce:61:48:d8:fd:f0:77:3a:12:ce:f1:ea:d2:ec: 8f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:17:78:33:DF:89:D1:79:09:F5:3A:7F:1C:64:06:7A:71:AD:5C:20 X509v3 Authority Key Identifier: keyid:DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ce:90:69:fb:5a:3c:53:a7:42:3b:58:f7:00:28:31:e4:2b: 1f:49:09:92:89:5a:10:ae:1e:4e:3c:dc:45:d0:c1:21:26:51: ef:6f:24:6a:67:a4:28:2f:87:35:77:6d:77:8d:97:d0:84:07: d3:c9:2d:b8:78:9d:9b:6c:67:d5:14:f5:6c:af:29:c3:9e:c9: f1:9a:d1:6c:d7:ca:0c:cf:f8:36:25:03:a5:7a:21:18:ef:1b: 53:47:29:44:32:66:7c:8c:0e:d6:39:ca:07:02:99:5f:c1:96: c5:35:ee:8f:09:0e:63:d2:c4:4b:13:6b:b6:67:01:af:d2:bb: 8c:11:cb:0e:3c:eb:24:4d:63:26:f6:94:8c:c9:c0:6a:57:f8: 1c:d1:d5:b6:1d:90:82:eb:03:74:bd:4e:ec:07:50:39:65:43: e9:c6:73:42:a2:f9:82:9d:f4:dc:6d:19:e2:40:95:36:af:c3: a7:51:19:44:a0:fa:47:6a:4e:36:5d:8e:4a:ee:42:e8:07:8f: 3d:41:28:9f:10:ee:70:c6:4b:39:47:03:5b:db:3f:21:31:4b: d7:e6:9b:a9:68:96:e7:ea:34:f4:a5:6c:be:12:8a:7b:bf:a2: 93:3b:26:e1:9c:1c:6e:a4:c0:ee:41:ae:32:da:c3:92:bd:cd: 85:70:d1:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqgAAB4ohX5t+Sd+Bb+CyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmN2Y1ZWI4ODE3ZjJkYTk3ZjY2NTUwNzY4M2I1YzQ1YTc0 ZDBjYTAwHhcNMjUxMjI0MTQwMTE2WhcNMjUxMjI1MTQwMTE2WjAzMTEwLwYDVQQD Eyg5OTE3NzgzM2RmODlkMTc5MDlmNTNhN2YxYzY0MDY3YTcxYWQ1YzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44jB88NVjnWgwx5Ll+ScVvghk9oH WMqWTqzrBy23P5QU1dgJedHbynzCoPUILl8ECUz/ruCHGUW52DVnmRVWS1VGInIt udqxYxg6iMWGAFJ38ysS231WeTPilpYZilDJfkAWnI1PV50D8x+aiv0h6+zfpFqe jr92izd3YnP8b9WNcAqcZkSZiNC7fg+HNhpGUIrYaKYyAE3PG7LIocz8wO/++4uq cJst+mylFbGhGIXLHoPS1MltBrs60lfp4nHol97tQkzcVTCeZDcd2ChSixIEqgad U1PmxC1V2FTOUfU7ZV35WFPWIux8erYbl9bVzmFI2P3wdzoSzvHq0uyP7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkXeDPfidF5CfU6fxxkBnpxrVwgMB8GA1UdIwQY MBaAFN9/XriBfy2pf2ZVB2g7XEWnTQygMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzM5ZXVJRl9MYWxfWmxVSGFEdGNSYWROREtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC84NTdkOWMtNTk2ZS00Yjg5LTlmMWMt ZjkyMTI4YmU4Yjc5LzEvMzM5ZXVJRl9MYWxfWmxVSGFEdGNSYWROREtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC84NTdkOWMtNTk2ZS00Yjg5LTlmMWMtZjkyMTI4YmU4Yjc5 LzEvMzM5ZXVJRl9MYWxfWmxVSGFEdGNSYWROREtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE86Qafta PFOnQjtY9wAoMeQrH0kJkolaEK4eTjzcRdDBISZR728kamekKC+HNXdtd42X0IQH 08ktuHidm2xn1RT1bK8pw57J8ZrRbNfKDM/4NiUDpXohGO8bU0cpRDJmfIwO1jnK BwKZX8GWxTXujwkOY9LESxNrtmcBr9K7jBHLDjzrJE1jJvaUjMnAalf4HNHVth2Q gusDdL1O7AdQOWVD6cZzQqL5gp303G0Z4kCVNq/Dp1EZRKD6R2pONl2OSu5C6AeP PUEonxDucMZLOUcDW9s/ITFL1+abqWiW5+o09KVsvhKKe7+ikzsm4ZwcbqTA7kGu MtrDkr3NhXDRPw== -----END CERTIFICATE-----Generated at Wed Dec 24 19:59:36 2025 by rpki-client