This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json) Hash identifier: rGD3aI05QGqakl70lrG7iIdz1QEbH/hBo8jmybnltTg= Subject key identifier: F3:C9:36:66:25:CD:AA:54:74:AD:B2:A6:E6:58:03:6B:58:57:54:BC Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2 Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2 Certificate serial: 019B3AC6BCA089695F0301D833407F85BB5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft Manifest number: 122B Signing time: Sat 20 Dec 2025 08:01:01 +0000 Manifest this update: Sat 20 Dec 2025 08:01:01 +0000 Manifest next update: Sun 21 Dec 2025 08:01:01 +0000 Files and hashes: 1: KzHfiiDg2EcCwKAmppKJC7QdUFA.roa (hash: QZ0RWt1gfijBZB5RL8yUAfB/DWbprl5d1kxp7e8kc3g=) 2: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: myILKPS1pihWDmlHKKQqZMBq4cWE2jrW3e/k5XFp09w=) 3: kuAnd9NqWnoBzCTnx0XxXmRi7Z4.roa (hash: gmNwgm6wcIRoGUSbEH7MItCnGX2M/c/Toez7Z0Fqses=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:bc:a0:89:69:5f:03:01:d8:33:40:7f:85:bb:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2 Validity Not Before: Dec 20 08:01:01 2025 GMT Not After : Dec 21 08:01:01 2025 GMT Subject: CN=f3c9366625cdaa5474adb2a6e658036b585754bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:53:ce:99:4c:e7:4a:46:f0:66:b8:3d:05:b7: b2:5c:cc:0a:ca:b0:ed:b7:af:01:fd:05:8e:1d:99: 56:da:38:5c:e5:fe:f6:60:ec:ba:4c:92:48:6e:93: 2b:5d:51:6f:33:d0:e8:b9:56:4f:20:e3:ed:a4:ba: f2:13:92:be:6d:04:0d:ad:96:e5:d6:a0:6f:34:53: d5:56:10:26:2f:93:88:6a:2f:ba:b1:f9:00:82:cc: e0:9d:76:09:97:cb:27:45:1f:14:22:6b:ac:df:e0: ae:bb:4e:3a:37:7f:36:5b:59:79:e8:32:d3:ac:05: 8a:65:45:b3:94:4a:e8:74:49:7a:7a:2f:79:e5:73: be:59:1d:68:d4:4e:fa:8a:92:f5:5f:ba:4d:a9:8b: 78:94:fc:b7:f3:47:86:fd:b6:9c:a5:cf:39:e3:59: 99:fd:4a:bb:27:41:8f:31:98:b9:93:b1:1a:71:08: a2:84:6a:e8:4d:70:e4:06:7c:9c:fc:3e:08:0c:cf: b1:99:34:56:e8:c7:6c:0c:81:1c:4e:f8:a7:ae:96: 0c:50:54:24:d4:eb:e8:cd:ac:da:9a:b4:ed:fd:47: 0e:91:8b:96:37:4f:dd:c2:6b:43:62:2c:1f:ec:b2: 46:10:c2:b1:8b:29:31:79:16:b4:a7:c5:b6:ad:71: 4e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C9:36:66:25:CD:AA:54:74:AD:B2:A6:E6:58:03:6B:58:57:54:BC X509v3 Authority Key Identifier: keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ea:e9:30:b4:b4:44:5b:06:e4:e8:a0:a1:fb:73:d3:0d:b6: 19:ae:98:8a:6f:45:f0:72:11:82:42:17:ea:13:d7:de:6a:2d: 06:0f:08:86:77:3d:9a:b6:c8:f6:d1:05:62:f4:65:4c:84:04: a1:b4:8a:29:c6:8f:ae:01:30:29:bb:4a:8b:2f:b1:97:ca:01: c5:21:16:f3:a5:3f:d2:c8:7c:df:22:41:e5:c6:96:5a:b9:11: 00:72:68:d1:17:05:ee:9d:03:f9:32:33:21:b3:91:f4:f1:eb: 4b:3c:30:3e:98:ed:1c:69:d9:08:35:46:9d:e1:34:c2:f9:11: 1e:85:d1:c3:27:02:97:29:eb:13:61:b8:66:55:df:d1:48:6e: 14:0e:e3:c9:fd:72:79:4c:b5:71:34:15:1c:30:3e:b7:93:11: df:2e:07:37:3b:bb:f8:96:9e:90:b0:72:d4:7c:c8:b6:6b:f9: ef:4a:dc:e4:7f:e8:fb:42:98:e6:8b:73:cc:41:4c:16:17:ff: 28:48:f3:db:80:26:cc:26:97:c5:f1:af:51:a4:95:f7:79:c7: 35:ee:0c:79:37:c4:5b:f3:f7:37:cc:a1:11:04:a3:e2:5d:20: 79:d9:3b:9d:13:22:23:b3:f0:bc:e6:83:05:ba:6d:11:c7:69: 6c:98:35:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xrygiWlfAwHYM0B/hbtdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzZmYjY1NTQ2MWQ3M2ZjZjIxZTg2MTJjMzE4NzA2YTA4 OWE1YzIwHhcNMjUxMjIwMDgwMTAxWhcNMjUxMjIxMDgwMTAxWjAzMTEwLwYDVQQD EyhmM2M5MzY2NjI1Y2RhYTU0NzRhZGIyYTZlNjU4MDM2YjU4NTc1NGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylPOmUznSkbwZrg9BbeyXMwKyrDt t68B/QWOHZlW2jhc5f72YOy6TJJIbpMrXVFvM9DouVZPIOPtpLryE5K+bQQNrZbl 1qBvNFPVVhAmL5OIai+6sfkAgszgnXYJl8snRR8UImus3+Cuu046N382W1l56DLT rAWKZUWzlErodEl6ei955XO+WR1o1E76ipL1X7pNqYt4lPy380eG/bacpc8541mZ /Uq7J0GPMZi5k7EacQiihGroTXDkBnyc/D4IDM+xmTRW6MdsDIEcTvinrpYMUFQk 1OvozazamrTt/UcOkYuWN0/dwmtDYiwf7LJGEMKxiykxeRa0p8W2rXFOUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPJNmYlzapUdK2ypuZYA2tYV1S8MB8GA1UdIwQY MBaAFHfG+2VUYdc/zyHoYSwxhwagiaXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2Yt YWIzMDgxYjJhYmE0LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2YtYWIzMDgxYjJhYmE0 LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+rpMLS0 RFsG5Oigoftz0w22Ga6Yim9F8HIRgkIX6hPX3motBg8Ihnc9mrbI9tEFYvRlTIQE obSKKcaPrgEwKbtKiy+xl8oBxSEW86U/0sh83yJB5caWWrkRAHJo0RcF7p0D+TIz IbOR9PHrSzwwPpjtHGnZCDVGneE0wvkRHoXRwycClynrE2G4ZlXf0UhuFA7jyf1y eUy1cTQVHDA+t5MR3y4HNzu7+JaekLBy1HzItmv570rc5H/o+0KY5otzzEFMFhf/ KEjz24AmzCaXxfGvUaSV93nHNe4MeTfEW/P3N8yhEQSj4l0gedk7nRMiI7PwvOaD BbptEcdpbJg1qg== -----END CERTIFICATE-----Generated at Sat Dec 20 13:37:37 2025 by rpki-client