This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft File: p8dUTotILSMRkDcG7tckBJ_jhb8.mft (raw, json) Hash identifier: 0iixA0knTXFjvln0c9Uy8zNgeTCkYRKAXK2hIqBq6/A= Subject key identifier: 3E:3E:D0:B6:3D:95:CC:17:4C:AD:44:02:38:4F:F1:D4:E0:9B:2E:D7 Authority key identifier: A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF Certificate issuer: /CN=a7c7544e8b482d2311903706eed724049fe385bf Certificate serial: 019B66FA5074C87D6FECB0A14411A55C130B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft Manifest number: 1220 Signing time: Sun 28 Dec 2025 22:00:39 +0000 Manifest this update: Sun 28 Dec 2025 22:00:39 +0000 Manifest next update: Mon 29 Dec 2025 22:00:39 +0000 Files and hashes: 1: 7mKsLxZ1YUursivxbDFLaTJwj3E.roa (hash: FPzsPJGqWdwrFvseNY78lYszDWnEn2Sc/ADORiyM6K8=) 2: F6GbEsOwyyG8o8bV63EAhvgPv20.roa (hash: EM9ccbF4wbMzML21gfy8G7ZsIEgbEwrm+BJcQvLh9SE=) 3: p8dUTotILSMRkDcG7tckBJ_jhb8.crl (hash: tuCD78U+fTF6KqIAzfzc+sy4KGIRDT9Q4bRnm/UNPHk=) 4: zTYC0rihbvQfm9oWRaiGAXMBQqs.roa (hash: 6o0tQLujWnAnKLQhjlOk4ynnEvtZuILHNK+l2Zgw0QA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fa:50:74:c8:7d:6f:ec:b0:a1:44:11:a5:5c:13:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7c7544e8b482d2311903706eed724049fe385bf Validity Not Before: Dec 28 22:00:39 2025 GMT Not After : Dec 29 22:00:39 2025 GMT Subject: CN=3e3ed0b63d95cc174cad4402384ff1d4e09b2ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:fe:bd:0d:01:b2:d0:a6:bf:6b:9e:d2:e1: 9c:9e:69:c5:a4:cc:db:70:e7:21:34:39:18:66:ee: 16:52:45:6f:05:77:04:5e:77:44:a4:b9:5f:81:91: 03:70:29:b5:8c:88:4e:9d:bc:55:70:d9:33:65:39: 98:ea:60:ba:c7:cd:6d:ad:36:25:2e:ef:e6:ed:3e: 4d:3f:fa:dc:9a:fb:8b:f1:3e:15:e4:d5:bd:f7:f4: ce:b4:8a:dc:5a:3f:3e:e6:52:51:37:de:5e:ac:f2: 49:b6:3a:5a:e8:ee:d2:a1:d4:e4:4d:bc:bd:77:df: 63:06:0b:aa:d5:b4:2d:71:e0:fe:7d:45:89:d8:06: 6c:d4:20:e1:f0:de:f3:d2:42:81:0b:03:2e:27:ed: 8e:d9:b7:ac:13:68:39:2e:c7:5a:2f:13:d5:f4:bb: 68:fa:23:0c:28:96:fd:ef:8e:18:79:15:5f:d5:89: 8b:29:76:56:bf:f1:85:dd:9b:79:6b:ab:23:96:70: e1:d3:0d:70:14:f4:73:2a:68:17:73:f8:92:35:38: 49:d8:2d:1b:70:90:1c:d0:5a:83:0d:97:3b:2e:1f: b2:a4:c3:5b:97:d8:fd:46:c6:f1:d4:fe:af:79:f6: 8b:3c:27:62:67:cb:57:a3:63:5b:4e:21:25:62:22: 63:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3E:D0:B6:3D:95:CC:17:4C:AD:44:02:38:4F:F1:D4:E0:9B:2E:D7 X509v3 Authority Key Identifier: keyid:A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:97:0b:6e:bf:4a:19:f0:32:89:ef:4d:d4:65:22:a0:ea:71: fb:45:b2:8e:2d:2f:31:01:ca:2b:b1:b9:bf:3e:22:e5:f6:db: 39:0c:30:4c:d9:de:68:b8:db:d7:69:82:03:22:4a:d8:a5:5b: 0a:7f:0b:d5:e8:e8:e5:06:02:a4:f8:cf:be:91:fb:90:77:27: 18:df:bb:2e:e5:3b:4a:82:4f:07:91:12:4f:14:9f:78:73:78: fe:03:13:4e:63:b0:0d:55:87:2c:40:e5:9a:55:3c:42:d2:ab: 6e:9c:0d:ec:68:57:1e:b9:3f:fa:07:0d:8e:57:5b:7a:5d:db: 85:b7:67:8b:d7:1e:80:3d:15:6b:38:37:6c:dc:e6:be:ee:8d: 45:68:1f:38:94:75:7d:3f:80:c9:c0:2b:11:17:d3:6d:ea:fd: 3c:17:ec:9e:6b:db:6c:56:31:d1:97:4a:1f:9c:8b:fc:25:a4: bc:32:4f:ee:48:f2:2a:c8:44:7d:9a:a8:4a:9f:a5:03:6f:a2: f7:db:f1:83:ff:37:3e:99:a2:d5:ba:7d:6b:86:14:47:01:0e: 40:f8:e6:05:00:4a:f0:77:31:84:62:f7:96:d3:51:71:cc:d1: 6b:22:cd:68:ea:4a:cd:2a:90:26:3b:5e:32:61:03:68:03:20: c2:5d:b3:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+lB0yH1v7LChRBGlXBMLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3Yzc1NDRlOGI0ODJkMjMxMTkwMzcwNmVlZDcyNDA0OWZl Mzg1YmYwHhcNMjUxMjI4MjIwMDM5WhcNMjUxMjI5MjIwMDM5WjAzMTEwLwYDVQQD EygzZTNlZDBiNjNkOTVjYzE3NGNhZDQ0MDIzODRmZjFkNGUwOWIyZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv3+vQ0BstCmv2ue0uGcnmnFpMzb cOchNDkYZu4WUkVvBXcEXndEpLlfgZEDcCm1jIhOnbxVcNkzZTmY6mC6x81trTYl Lu/m7T5NP/rcmvuL8T4V5NW99/TOtIrcWj8+5lJRN95erPJJtjpa6O7SodTkTby9 d99jBguq1bQtceD+fUWJ2AZs1CDh8N7z0kKBCwMuJ+2O2besE2g5LsdaLxPV9Lto +iMMKJb9744YeRVf1YmLKXZWv/GF3Zt5a6sjlnDh0w1wFPRzKmgXc/iSNThJ2C0b cJAc0FqDDZc7Lh+ypMNbl9j9Rsbx1P6vefaLPCdiZ8tXo2NbTiElYiJjYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4+0LY9lcwXTK1EAjhP8dTgmy7XMB8GA1UdIwQY MBaAFKfHVE6LSC0jEZA3Bu7XJASf44W/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDhkVVRvdElMU01Sa0RjRzd0Y2tCSl9qaGI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yZDU5NjAtYzY2ZC00MmRmLTk1ZDIt NDA1MjQ1MGM5MGE5LzEvcDhkVVRvdElMU01Sa0RjRzd0Y2tCSl9qaGI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8yZDU5NjAtYzY2ZC00MmRmLTk1ZDItNDA1MjQ1MGM5MGE5 LzEvcDhkVVRvdElMU01Sa0RjRzd0Y2tCSl9qaGI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJcLbr9K GfAyie9N1GUioOpx+0Wyji0vMQHKK7G5vz4i5fbbOQwwTNneaLjb12mCAyJK2KVb Cn8L1ejo5QYCpPjPvpH7kHcnGN+7LuU7SoJPB5ESTxSfeHN4/gMTTmOwDVWHLEDl mlU8QtKrbpwN7GhXHrk/+gcNjldbel3bhbdni9cegD0Vazg3bNzmvu6NRWgfOJR1 fT+AycArERfTber9PBfsnmvbbFYx0ZdKH5yL/CWkvDJP7kjyKshEfZqoSp+lA2+i 99vxg/83Ppmi1bp9a4YURwEOQPjmBQBK8HcxhGL3ltNRcczRayLNaOpKzSqQJjte MmEDaAMgwl2zig== -----END CERTIFICATE-----Generated at Mon Dec 29 03:27:27 2025 by rpki-client