This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft File: d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft (raw, json) Hash identifier: QJAGR4AispZKrmCJPev9WF43gJsbbMukIifQcmtAkVI= Subject key identifier: 82:8B:CE:94:69:56:D7:B4:05:48:BD:39:98:06:6C:1C:00:0D:E5:3D Authority key identifier: 77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F Certificate issuer: /CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f Certificate serial: 019B405BB9E36EE404419EB9B4E235E3E07C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 10:01:51 +0000 Manifest this update: Sun 21 Dec 2025 10:01:51 +0000 Manifest next update: Mon 22 Dec 2025 10:01:51 +0000 Files and hashes: 1: KfVGrrJYfyAf1ioL1wUbST77ZGc.roa (hash: 6wDGYAdbjHeb0jIyTRUSvJfvhrmfOqr3R3ir+lFRzkY=) 2: d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl (hash: vvotnLnFsQ5wgX7+wtaEnyDH2SB0RCNmUxP0p783Z0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:b9:e3:6e:e4:04:41:9e:b9:b4:e2:35:e3:e0:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f Validity Not Before: Dec 21 10:01:51 2025 GMT Not After : Dec 22 10:01:51 2025 GMT Subject: CN=828bce946956d7b40548bd3998066c1c000de53d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c8:73:82:3b:e6:9d:9b:bc:92:5d:60:ca:be: ec:5a:eb:43:37:14:12:ef:cd:0c:fd:81:08:8d:e8: 4e:1b:2b:69:cf:10:50:bf:e1:8d:59:36:d0:50:50: 70:6a:72:54:d1:ce:4f:a7:7c:df:38:f0:18:35:b6: 5e:d9:b7:89:47:4f:7d:bf:8a:d3:4f:c0:8f:5f:03: f4:ae:b9:fa:ed:a6:fa:08:2c:8d:e3:f3:13:76:a3: 25:d7:7e:33:13:2b:96:79:f6:6c:46:62:2c:ed:c8: 3c:d0:5c:9f:5b:e4:69:5d:9f:75:94:9a:72:27:b1: 81:8e:63:2e:33:65:a4:d0:1d:74:0e:c5:f3:65:16: 81:9c:01:c0:3a:8d:2c:07:50:46:6e:df:4f:ff:ae: d1:b5:44:73:b3:8c:ad:da:74:c5:74:de:fe:9f:53: ef:75:8a:90:fa:83:0a:41:fb:ce:34:ef:6a:fd:4c: a7:30:bb:1b:a6:0f:8a:20:fd:b9:ca:f5:b9:a5:6a: 76:5a:21:fc:4f:1f:0c:e0:b4:fd:29:52:ae:97:8f: 45:d9:bb:ad:b3:45:8c:d8:10:3f:f7:cb:7f:70:f2: 52:cb:ed:aa:6a:d5:20:bd:c0:9f:84:9a:b4:b1:38: e4:ac:6d:dd:fd:a3:b2:79:2f:e5:00:49:b4:84:da: 93:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8B:CE:94:69:56:D7:B4:05:48:BD:39:98:06:6C:1C:00:0D:E5:3D X509v3 Authority Key Identifier: keyid:77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:19:4b:3c:13:31:94:d9:97:28:18:62:7d:89:55:28:92:44: c8:3e:ef:cc:76:ce:82:54:e8:42:9a:10:34:ee:f6:30:f5:14: 07:82:b2:eb:b5:6a:9b:6d:29:c7:f4:5e:3c:81:9c:b1:66:d3: 1b:57:da:1b:21:04:68:aa:8a:03:c5:af:29:36:05:d7:83:74: 6b:bd:0f:89:c7:93:61:05:11:6c:97:c5:05:9f:89:1e:2e:bb: 8b:58:33:7b:c8:a2:f7:15:ff:61:62:ec:07:51:13:f5:a9:d6: 1a:61:73:40:3a:79:eb:b3:2e:71:5b:70:5e:0d:db:39:6e:dd: 69:14:60:65:6e:5b:8b:39:ea:ff:ce:c6:b5:84:5e:01:d9:f8: cf:72:76:54:7d:30:2d:51:d7:6b:75:1d:cd:b0:f7:83:0b:18: f9:08:e8:96:03:b7:5a:47:32:bd:ef:9c:36:8c:69:51:ac:40: 77:73:52:e5:b7:92:70:23:a6:89:92:46:bf:54:0b:5f:6b:6c: f5:ac:12:17:4d:2b:fa:a4:fe:fa:16:ec:fe:a7:2b:ba:73:b2: 78:be:7c:db:a7:18:a4:dc:2a:4f:8d:89:eb:04:03:5c:29:6c: b9:9a:fe:19:79:30:5e:7d:c1:7b:71:e9:1b:80:bc:5c:c5:e3: 70:30:27:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW7njbuQEQZ65tOI14+B8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NDAyZmY4MTVlZWJjNjFhOTNjZjFiMGQwYmNkY2VjN2Ey OWYxOWYwHhcNMjUxMjIxMTAwMTUxWhcNMjUxMjIyMTAwMTUxWjAzMTEwLwYDVQQD Eyg4MjhiY2U5NDY5NTZkN2I0MDU0OGJkMzk5ODA2NmMxYzAwMGRlNTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMhzgjvmnZu8kl1gyr7sWutDNxQS 780M/YEIjehOGytpzxBQv+GNWTbQUFBwanJU0c5Pp3zfOPAYNbZe2beJR099v4rT T8CPXwP0rrn67ab6CCyN4/MTdqMl134zEyuWefZsRmIs7cg80FyfW+RpXZ91lJpy J7GBjmMuM2Wk0B10DsXzZRaBnAHAOo0sB1BGbt9P/67RtURzs4yt2nTFdN7+n1Pv dYqQ+oMKQfvONO9q/UynMLsbpg+KIP25yvW5pWp2WiH8Tx8M4LT9KVKul49F2but s0WM2BA/98t/cPJSy+2qatUgvcCfhJq0sTjkrG3d/aOyeS/lAEm0hNqT/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKLzpRpVte0BUi9OZgGbBwADeU9MB8GA1UdIwQY MBaAFHdAL/gV7rxhqTzxsNC83Ox6KfGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDBBdi1CWHV2R0dwUFBHdzBMemM3SG9wOFo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hZGZiZjAtMGMwNy00YTA3LTg5NTQt OWQ4YTE4ZTdiMjUyLzEvZDBBdi1CWHV2R0dwUFBHdzBMemM3SG9wOFo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9hZGZiZjAtMGMwNy00YTA3LTg5NTQtOWQ4YTE4ZTdiMjUy LzEvZDBBdi1CWHV2R0dwUFBHdzBMemM3SG9wOFo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBlLPBMx lNmXKBhifYlVKJJEyD7vzHbOglToQpoQNO72MPUUB4Ky67Vqm20px/RePIGcsWbT G1faGyEEaKqKA8WvKTYF14N0a70PiceTYQURbJfFBZ+JHi67i1gze8ii9xX/YWLs B1ET9anWGmFzQDp567MucVtwXg3bOW7daRRgZW5biznq/87GtYReAdn4z3J2VH0w LVHXa3UdzbD3gwsY+QjolgO3Wkcyve+cNoxpUaxAd3NS5beScCOmiZJGv1QLX2ts 9awSF00r+qT++hbs/qcrunOyeL5826cYpNwqT42J6wQDXClsuZr+GXkwXn3Be3Hp G4C8XMXjcDAnPA== -----END CERTIFICATE-----Generated at Sun Dec 21 16:56:02 2025 by rpki-client