This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft File: dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft (raw, json) Hash identifier: tuc3v4Zrk6cNWJOx9JuKI2uQ5Su9F8NtECj++zGSAq4= Subject key identifier: 1B:EA:0B:D6:4B:6B:95:0B:29:2D:8A:2F:DA:34:C6:1C:7D:2C:C1:13 Authority key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62 Certificate issuer: /CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62 Certificate serial: 019B3CEC1E41E16B28D01D31DB1855CB9150 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft Manifest number: 0A7E Signing time: Sat 20 Dec 2025 18:01:05 +0000 Manifest this update: Sat 20 Dec 2025 18:01:05 +0000 Manifest next update: Sun 21 Dec 2025 18:01:05 +0000 Files and hashes: 1: dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl (hash: zLhHxInNiNynm10SUhx35GFHx+kWcGqT9h8MPDdRAvs=) 2: dqNNte5TVfV2tDh9E3yBjcN5L9k.roa (hash: ZCWWVAbkz+YG+QqwhLTaaD7cWJwvtiRAyhgAtKdQ9Ro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:1e:41:e1:6b:28:d0:1d:31:db:18:55:cb:91:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62 Validity Not Before: Dec 20 18:01:05 2025 GMT Not After : Dec 21 18:01:05 2025 GMT Subject: CN=1bea0bd64b6b950b292d8a2fda34c61c7d2cc113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3b:47:6f:a9:51:d6:f8:dd:b7:c1:15:28:cc: 05:e2:7c:30:d8:a1:7e:40:22:9d:d3:ad:df:a7:e4: ab:ac:11:6e:3b:75:05:09:72:c5:3e:ab:95:6c:9e: a5:fb:25:ff:77:66:f2:fb:0a:4e:59:4c:42:bc:c0: fe:c6:84:ec:8b:c7:29:58:44:7f:83:c4:75:3e:c2: 88:3e:f0:2e:be:54:b5:b6:b7:d7:4c:27:98:bc:74: 14:c8:23:47:c9:fb:f6:96:25:d4:5f:d9:2f:cb:50: 88:3b:35:36:d8:3f:17:cd:26:b3:46:28:f4:27:b6: 74:21:88:78:1c:90:17:ad:8b:cd:f9:fc:89:b8:b9: 99:2c:17:ae:a2:5e:01:3f:b3:55:fd:d0:39:26:99: d3:7a:1d:6a:6b:27:20:53:91:36:db:7b:72:87:5a: 68:25:6c:2e:bd:87:ae:43:ab:79:ff:1f:9b:87:a4: 0f:18:87:c0:7d:9a:3f:58:09:16:c8:be:ee:60:8b: 01:62:a0:89:b8:ba:38:47:63:ce:06:77:ba:2d:64: ac:e2:16:c4:88:79:31:25:34:ee:d5:83:55:4a:bb: 8d:b2:09:ce:e1:38:61:08:23:f7:4f:d7:a3:c8:b3: 05:72:8e:a2:02:7f:5f:93:54:5b:ed:13:14:29:d0: a7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EA:0B:D6:4B:6B:95:0B:29:2D:8A:2F:DA:34:C6:1C:7D:2C:C1:13 X509v3 Authority Key Identifier: keyid:74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:e7:2a:ee:1a:47:f0:d5:37:1c:21:d4:91:aa:36:cb:b1:63: 37:bf:80:04:47:d3:ff:6b:31:21:cc:22:ac:3f:0b:9d:9d:62: 7b:52:9e:fd:6a:7f:f3:c3:f5:f0:fc:43:35:cf:1c:a6:39:1b: 55:f7:af:13:ac:1e:30:a4:fb:8f:99:83:81:8d:c4:9d:20:b7: a1:f2:81:47:42:0e:3a:31:b7:5b:2a:02:83:e6:f3:c0:ee:0e: 34:63:dc:5a:b3:21:49:0d:f1:81:5d:e5:1a:ba:af:91:b9:90: 29:9a:0a:1c:d3:1d:8d:f0:ec:3d:ee:35:b1:81:57:39:75:73: fc:73:c6:6f:72:1d:f4:45:7d:bf:35:c8:05:8e:bd:fe:0d:f7: 30:8a:1e:1f:52:6e:a3:ec:d8:12:96:89:05:35:44:d5:b8:ab: 7b:f2:d9:6d:c9:e2:ae:53:e2:e5:ef:55:c1:cf:af:53:5f:8b: 4b:3e:75:57:20:49:47:3c:1f:bf:6b:24:24:24:2c:8c:2c:5a: f8:1c:22:da:15:31:11:88:fc:37:73:89:37:b6:bd:5b:8d:9c: 75:c6:64:b5:72:4a:f2:e8:3a:53:58:a2:89:4f:e6:b0:3b:2b: ff:c7:1a:25:01:e1:7f:59:d0:5f:d4:d5:e8:7c:86:de:8d:52: c8:04:77:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87B5B4Wso0B0x2xhVy5FQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YmYwN2YwNGNjNzZhOTBhZDk3ZjlmMTc0OWZhYmNmMDVj MzVkNjIwHhcNMjUxMjIwMTgwMTA1WhcNMjUxMjIxMTgwMTA1WjAzMTEwLwYDVQQD EygxYmVhMGJkNjRiNmI5NTBiMjkyZDhhMmZkYTM0YzYxYzdkMmNjMTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjtHb6lR1vjdt8EVKMwF4nww2KF+ QCKd063fp+SrrBFuO3UFCXLFPquVbJ6l+yX/d2by+wpOWUxCvMD+xoTsi8cpWER/ g8R1PsKIPvAuvlS1trfXTCeYvHQUyCNHyfv2liXUX9kvy1CIOzU22D8XzSazRij0 J7Z0IYh4HJAXrYvN+fyJuLmZLBeuol4BP7NV/dA5JpnTeh1qaycgU5E223tyh1po JWwuvYeuQ6t5/x+bh6QPGIfAfZo/WAkWyL7uYIsBYqCJuLo4R2POBne6LWSs4hbE iHkxJTTu1YNVSruNsgnO4ThhCCP3T9ejyLMFco6iAn9fk1Rb7RMUKdCnqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvqC9ZLa5ULKS2KL9o0xhx9LMETMB8GA1UdIwQY MBaAFHS/B/BMx2qQrZf58XSfq88Fw11iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hMGIzOTUtNjFmZi00NTdkLThmZjgt ZWMwODQxMzdlMjQyLzEvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hMGIzOTUtNjFmZi00NTdkLThmZjgtZWMwODQxMzdlMjQy LzEvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROcq7hpH 8NU3HCHUkao2y7FjN7+ABEfT/2sxIcwirD8LnZ1ie1Ke/Wp/88P18PxDNc8cpjkb VfevE6weMKT7j5mDgY3EnSC3ofKBR0IOOjG3WyoCg+bzwO4ONGPcWrMhSQ3xgV3l GrqvkbmQKZoKHNMdjfDsPe41sYFXOXVz/HPGb3Id9EV9vzXIBY69/g33MIoeH1Ju o+zYEpaJBTVE1bire/LZbcnirlPi5e9Vwc+vU1+LSz51VyBJRzwfv2skJCQsjCxa +Bwi2hUxEYj8N3OJN7a9W42cdcZktXJK8ug6U1iiiU/msDsr/8caJQHhf1nQX9TV 6HyG3o1SyAR3ag== -----END CERTIFICATE-----Generated at Sat Dec 20 21:07:57 2025 by rpki-client