This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft File: 08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json) Hash identifier: 2zGJa6Ew6MxSuP+LoZKc5RFzUqebUa4EDXyN7wWD80M= Subject key identifier: 46:80:34:E7:74:B6:45:A6:65:DE:C2:E8:72:63:BD:D8:7B:AD:14:83 Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD Certificate issuer: /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd Certificate serial: 019B631D9A9615027BD0D6EC276B14C37CAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft Manifest number: 179C Signing time: Sun 28 Dec 2025 04:00:43 +0000 Manifest this update: Sun 28 Dec 2025 04:00:43 +0000 Manifest next update: Mon 29 Dec 2025 04:00:43 +0000 Files and hashes: 1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: mq2jVHTY6lxGHtS9u6vCRYjVFSAYkWstrqOpab/VQnY=) 2: vhpsA1QTyqlbOgTgwwiSOvjLosU.roa (hash: oOzCVm5vsYLrY+U1GpoNLtBM7Fbrqb31l0clRbwWzyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1d:9a:96:15:02:7b:d0:d6:ec:27:6b:14:c3:7c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd Validity Not Before: Dec 28 04:00:43 2025 GMT Not After : Dec 29 04:00:43 2025 GMT Subject: CN=468034e774b645a665dec2e87263bdd87bad1483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:58:28:4a:20:b8:30:91:84:b8:26:4c:29:65: cf:b1:54:0d:5d:82:1a:d7:c5:d9:6f:ef:91:7e:14: 50:94:09:63:34:54:9a:2d:d8:f6:5e:ae:cc:48:a9: 07:54:b1:b2:1b:cc:31:3c:c6:0f:1f:6a:20:40:0a: fd:a7:4b:eb:89:12:0d:a1:5b:0c:35:38:14:3c:2a: c5:eb:1c:5b:de:1b:12:0f:c9:88:0e:3c:95:fd:dc: 40:3c:0a:b2:55:79:40:81:44:86:e1:0d:f1:9b:12: 08:21:d4:d5:c9:06:ea:1f:bd:f7:dd:e9:96:30:c6: 30:14:76:94:c4:72:3d:e2:a5:93:8d:fb:bb:ac:56: 21:10:0e:91:0c:1b:d1:49:27:0f:92:9b:17:d3:2c: 8e:3a:99:6a:2a:6a:52:4d:42:b9:e6:cc:91:41:9c: d2:ed:52:b1:37:99:70:11:8e:8c:e2:75:06:62:d9: d9:2a:43:40:0f:68:32:06:20:a8:8c:31:54:12:ab: 4f:8a:76:91:5a:dc:95:7e:50:b2:83:a4:5e:19:50: 27:5b:b1:f5:be:41:a9:71:dd:6f:dc:d1:51:35:99: 02:30:09:e3:d0:78:44:6a:d5:6d:f2:d4:b1:ea:e5: 93:c3:5c:36:f1:2f:16:86:b5:66:1f:f3:8e:b0:fd: 60:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:80:34:E7:74:B6:45:A6:65:DE:C2:E8:72:63:BD:D8:7B:AD:14:83 X509v3 Authority Key Identifier: keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ec:1e:ce:cf:16:5f:3b:49:5a:16:16:a2:9c:c0:61:bc:06: e6:1e:6c:ca:1b:de:c4:c1:4e:04:c7:bf:99:b7:8e:f1:21:9a: b7:f5:b4:5d:91:56:b3:ac:f2:38:c7:34:f6:16:45:b7:8a:8b: 43:ea:4f:47:56:f2:aa:fc:be:c7:f0:e5:dc:54:7b:28:3a:e5: 15:c6:ba:c4:7f:6e:a8:e4:40:83:b1:68:f0:c2:d8:8b:60:31: 18:79:14:a5:ec:1a:3d:16:11:59:de:67:ef:5d:a0:5c:0f:0a: 4c:e7:1d:b1:82:e4:a3:96:fd:f6:f2:7c:cf:6a:89:a0:58:b6: 81:df:6c:ad:f5:e5:69:46:d0:13:bc:dd:86:67:95:b3:5f:48: c0:96:05:87:af:ce:79:d5:d9:64:00:c4:33:55:2c:e8:e4:14: 3e:7e:71:88:2e:57:c5:31:2a:24:4c:bb:c5:7c:23:73:77:18: 88:1d:f1:bc:27:84:25:7b:f0:be:33:ee:29:e3:92:df:25:60: 03:3e:8f:02:9f:06:1d:6a:e9:94:22:ee:64:b2:89:4b:ce:76: 99:1a:20:ef:c6:06:74:a1:76:82:b6:af:2d:f1:75:8a:21:3a: 48:dc:21:ae:eb:87:fb:fe:70:68:3d:55:30:dd:e9:87:4d:29: d6:f8:48:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHZqWFQJ70NbsJ2sUw3ytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYzBkNWIxMDZiODFhOTI5MjRlYTJiYzUxMzlmYmI1ZWUx MTg2ZGQwHhcNMjUxMjI4MDQwMDQzWhcNMjUxMjI5MDQwMDQzWjAzMTEwLwYDVQQD Eyg0NjgwMzRlNzc0YjY0NWE2NjVkZWMyZTg3MjYzYmRkODdiYWQxNDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1goSiC4MJGEuCZMKWXPsVQNXYIa 18XZb++RfhRQlAljNFSaLdj2Xq7MSKkHVLGyG8wxPMYPH2ogQAr9p0vriRINoVsM NTgUPCrF6xxb3hsSD8mIDjyV/dxAPAqyVXlAgUSG4Q3xmxIIIdTVyQbqH7333emW MMYwFHaUxHI94qWTjfu7rFYhEA6RDBvRSScPkpsX0yyOOplqKmpSTUK55syRQZzS 7VKxN5lwEY6M4nUGYtnZKkNAD2gyBiCojDFUEqtPinaRWtyVflCyg6ReGVAnW7H1 vkGpcd1v3NFRNZkCMAnj0HhEatVt8tSx6uWTw1w28S8WhrVmH/OOsP1gbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEaANOd0tkWmZd7C6HJjvdh7rRSDMB8GA1UdIwQY MBaAFNPA1bEGuBqSkk6ivFE5+7XuEYbdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xOWY0ZDQtNWMxZS00MjFmLTlmNTYt YmM1MTA0YTM4NWUyLzEvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8xOWY0ZDQtNWMxZS00MjFmLTlmNTYtYmM1MTA0YTM4NWUy LzEvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+wezs8W XztJWhYWopzAYbwG5h5syhvexMFOBMe/mbeO8SGat/W0XZFWs6zyOMc09hZFt4qL Q+pPR1byqvy+x/Dl3FR7KDrlFca6xH9uqORAg7Fo8MLYi2AxGHkUpewaPRYRWd5n 712gXA8KTOcdsYLko5b99vJ8z2qJoFi2gd9srfXlaUbQE7zdhmeVs19IwJYFh6/O edXZZADEM1Us6OQUPn5xiC5XxTEqJEy7xXwjc3cYiB3xvCeEJXvwvjPuKeOS3yVg Az6PAp8GHWrplCLuZLKJS852mRog78YGdKF2gravLfF1iiE6SNwhruuH+/5waD1V MN3ph00p1vhIag== -----END CERTIFICATE-----Generated at Sun Dec 28 04:59:33 2025 by rpki-client