This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft File: p8dUTotILSMRkDcG7tckBJ_jhb8.mft (raw, json) Hash identifier: UEDoP8sRCZk5oeJLSBFA73jhgS3d8tey5K6ND0Jdgv8= Subject key identifier: 97:33:E9:1E:0C:67:46:20:D3:C0:26:22:D5:6A:5F:55:25:74:E4:08 Authority key identifier: A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF Certificate issuer: /CN=a7c7544e8b482d2311903706eed724049fe385bf Certificate serial: 019B3C7EE5C25E44FC100CB279C1D1886623 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft Manifest number: 120A Signing time: Sat 20 Dec 2025 16:01:47 +0000 Manifest this update: Sat 20 Dec 2025 16:01:47 +0000 Manifest next update: Sun 21 Dec 2025 16:01:47 +0000 Files and hashes: 1: 7mKsLxZ1YUursivxbDFLaTJwj3E.roa (hash: FPzsPJGqWdwrFvseNY78lYszDWnEn2Sc/ADORiyM6K8=) 2: F6GbEsOwyyG8o8bV63EAhvgPv20.roa (hash: EM9ccbF4wbMzML21gfy8G7ZsIEgbEwrm+BJcQvLh9SE=) 3: p8dUTotILSMRkDcG7tckBJ_jhb8.crl (hash: 3qkVEix3QO1S5qGaUYmZ6eKPmmD9rAzXJ1joAwErZQs=) 4: zTYC0rihbvQfm9oWRaiGAXMBQqs.roa (hash: 6o0tQLujWnAnKLQhjlOk4ynnEvtZuILHNK+l2Zgw0QA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:e5:c2:5e:44:fc:10:0c:b2:79:c1:d1:88:66:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7c7544e8b482d2311903706eed724049fe385bf Validity Not Before: Dec 20 16:01:47 2025 GMT Not After : Dec 21 16:01:47 2025 GMT Subject: CN=9733e91e0c674620d3c02622d56a5f552574e408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:16:08:93:56:13:e3:19:85:41:f0:71:1e:28: 57:c5:c8:5e:37:87:8c:33:f5:26:f2:56:f4:33:61: 66:d4:c9:cc:76:26:70:fe:e5:06:8b:3f:8a:a0:8c: ea:92:a7:b9:35:30:6a:1c:cb:d8:17:b0:9a:ed:5c: b2:f1:85:18:fc:13:6d:da:fb:4b:e5:39:be:81:6e: 9f:4a:d3:40:4d:61:d9:e0:52:16:d2:29:68:d8:ce: b1:a1:1a:80:1a:a1:b1:03:64:e9:04:9f:24:2a:13: 02:86:e1:19:86:58:fe:7e:bb:b0:4d:f1:06:90:82: 24:50:9b:4a:b9:af:13:85:be:db:f5:d9:a7:43:f7: 59:f8:29:c4:34:68:72:7f:11:b0:d0:76:7f:88:c4: b6:85:55:8a:32:0c:a4:28:06:bd:2f:28:2b:00:22: 71:3a:6e:44:b7:3c:8b:0a:aa:f9:ac:41:31:2b:36: 62:f1:66:a8:9d:db:d4:da:25:dc:b2:8f:d6:de:93: 92:87:f8:02:e3:66:59:fe:64:67:ce:73:89:f6:f5: b8:cb:38:4c:93:b6:3f:0a:7b:91:66:58:3f:66:04: e4:df:f8:23:56:df:8e:1f:60:2e:6c:82:20:92:ef: 48:0f:fe:de:68:1d:62:8d:fc:71:0b:82:89:39:c0: 19:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:33:E9:1E:0C:67:46:20:D3:C0:26:22:D5:6A:5F:55:25:74:E4:08 X509v3 Authority Key Identifier: keyid:A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e7:89:69:a3:37:84:8c:97:20:49:6d:67:78:6e:ca:b2:f9: 9d:db:03:cb:ac:73:32:26:02:3d:43:26:e4:81:cf:dd:56:ce: a0:70:a7:0d:c6:82:b8:27:61:a7:e4:cd:cf:25:b3:8d:8f:76: b9:85:53:cd:fe:ff:ba:8e:07:a1:5a:f1:dc:64:49:ca:59:4e: 69:fa:b8:2b:47:e8:a8:2e:b1:21:73:af:51:cc:5a:ca:e4:2d: 97:f3:76:d2:87:bf:77:6e:d3:27:63:e6:ab:a2:8e:6f:56:0a: 0b:ac:30:6b:22:d4:aa:16:23:1e:27:2a:6d:8d:5e:1e:53:e3: 76:72:c5:d5:bc:c7:3d:78:2e:82:f7:fc:84:ba:54:a5:45:c1: 9b:1c:e9:7f:60:64:ca:1d:fb:bd:1a:6c:75:2d:cb:0e:61:22: 65:e5:ae:5b:39:d2:7b:ee:dc:92:2c:00:05:96:7b:ba:47:b5: f0:a5:cf:f1:e1:fc:67:91:0b:8e:44:70:a4:34:eb:97:71:0a: ce:02:76:2e:2d:e7:17:e8:2d:85:3b:e0:5c:35:2c:28:e7:2c: ee:33:26:f7:7e:81:fc:9e:57:de:2f:f2:9b:0e:32:54:26:47: 6b:54:86:e0:7e:41:e6:8c:6b:37:89:3f:7f:1f:c0:20:ab:29: 58:da:35:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fuXCXkT8EAyyecHRiGYjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3Yzc1NDRlOGI0ODJkMjMxMTkwMzcwNmVlZDcyNDA0OWZl Mzg1YmYwHhcNMjUxMjIwMTYwMTQ3WhcNMjUxMjIxMTYwMTQ3WjAzMTEwLwYDVQQD Eyg5NzMzZTkxZTBjNjc0NjIwZDNjMDI2MjJkNTZhNWY1NTI1NzRlNDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBYIk1YT4xmFQfBxHihXxcheN4eM M/Um8lb0M2Fm1MnMdiZw/uUGiz+KoIzqkqe5NTBqHMvYF7Ca7Vyy8YUY/BNt2vtL 5Tm+gW6fStNATWHZ4FIW0ilo2M6xoRqAGqGxA2TpBJ8kKhMChuEZhlj+fruwTfEG kIIkUJtKua8Thb7b9dmnQ/dZ+CnENGhyfxGw0HZ/iMS2hVWKMgykKAa9LygrACJx Om5EtzyLCqr5rEExKzZi8WaondvU2iXcso/W3pOSh/gC42ZZ/mRnznOJ9vW4yzhM k7Y/CnuRZlg/ZgTk3/gjVt+OH2AubIIgku9ID/7eaB1ijfxxC4KJOcAZkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcz6R4MZ0Yg08AmItVqX1UldOQIMB8GA1UdIwQY MBaAFKfHVE6LSC0jEZA3Bu7XJASf44W/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDhkVVRvdElMU01Sa0RjRzd0Y2tCSl9qaGI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yZDU5NjAtYzY2ZC00MmRmLTk1ZDIt NDA1MjQ1MGM5MGE5LzEvcDhkVVRvdElMU01Sa0RjRzd0Y2tCSl9qaGI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8yZDU5NjAtYzY2ZC00MmRmLTk1ZDItNDA1MjQ1MGM5MGE5 LzEvcDhkVVRvdElMU01Sa0RjRzd0Y2tCSl9qaGI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKueJaaM3 hIyXIEltZ3huyrL5ndsDy6xzMiYCPUMm5IHP3VbOoHCnDcaCuCdhp+TNzyWzjY92 uYVTzf7/uo4HoVrx3GRJyllOafq4K0foqC6xIXOvUcxayuQtl/N20oe/d27TJ2Pm q6KOb1YKC6wwayLUqhYjHicqbY1eHlPjdnLF1bzHPXgugvf8hLpUpUXBmxzpf2Bk yh37vRpsdS3LDmEiZeWuWznSe+7ckiwABZZ7uke18KXP8eH8Z5ELjkRwpDTrl3EK zgJ2Li3nF+gthTvgXDUsKOcs7jMm936B/J5X3i/ymw4yVCZHa1SG4H5B5oxrN4k/ fx/AIKspWNo1ZA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:27:29 2025 by rpki-client