This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft File: 8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json) Hash identifier: M9sFdeC/+P5R6P6rM61OOJftE5jV6rjtQSAdBuXbdzw= Subject key identifier: 62:D2:E9:BF:3C:3E:79:DD:2E:DE:5D:FA:EE:A6:C7:45:88:56:A2:9A Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c Certificate serial: 019B71EBB0BEA12866686A0EAB8FFA7C3B31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft Manifest number: 17A5 Signing time: Wed 31 Dec 2025 01:00:30 +0000 Manifest this update: Wed 31 Dec 2025 01:00:30 +0000 Manifest next update: Thu 01 Jan 2026 01:00:30 +0000 Files and hashes: 1: 4ghkRfOquB-e7Fok48kTrT0aVAU.roa (hash: 6SkfRPpDusU3pdgmnRmAtb8LYqLwuaj5aFdgg7X05Uw=) 2: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: ZgQWTaRUYGKdrJmr6roiv1XjbxZr+Y9g+HpIQF7QHJA=) 3: k86L2r6PyseZfyszmOgSsSpazQk.roa (hash: IsdULHTb1wucLEEG+EnermzxJ4zmYkO1E7qf8JXpI3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:eb:b0:be:a1:28:66:68:6a:0e:ab:8f:fa:7c:3b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c Validity Not Before: Dec 31 01:00:30 2025 GMT Not After : Jan 1 01:00:30 2026 GMT Subject: CN=62d2e9bf3c3e79dd2ede5dfaeea6c7458856a29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fc:f4:33:8a:5d:b9:df:90:d9:c9:ea:5b:0c: b1:9a:91:4a:36:3a:9d:62:17:80:18:be:88:69:f9: bb:72:ac:02:d2:bf:12:65:74:e4:bf:12:0a:7c:53: c2:68:83:ae:06:1d:97:2a:b2:31:f2:7d:a0:4c:01: a1:8b:b2:bd:4a:fd:ca:eb:97:97:38:57:b0:0f:85: 16:67:b3:a2:93:18:dd:c2:d1:a3:8f:9b:01:c1:20: ce:53:80:5b:48:ab:7e:5b:79:fc:e2:4a:0d:63:68: cb:aa:88:71:4c:7e:58:a2:a0:af:1f:3a:c5:91:8d: c8:e3:7a:54:c0:7c:92:27:7d:d5:e6:1f:a7:70:23: a0:23:3c:b5:b2:87:00:8c:fb:f4:ed:63:16:e7:c7: 4e:09:3e:8f:44:d4:7f:4a:95:fa:96:be:16:98:12: 6b:71:bd:75:e8:ca:c5:fd:17:b9:27:62:bd:d6:0f: 45:5c:93:1c:1c:cc:4a:ec:42:db:ea:30:08:9a:62: 17:d8:c5:1b:36:ca:13:22:d2:3c:c1:ed:e7:dc:6d: 2f:8e:21:73:a5:2a:84:6a:bb:61:6a:8b:f3:6b:fe: e5:ea:bc:1a:67:50:e8:7f:74:0b:c1:86:a8:79:9d: 9f:8e:f4:18:9b:29:ed:45:a3:f3:34:90:d1:4c:56: 96:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D2:E9:BF:3C:3E:79:DD:2E:DE:5D:FA:EE:A6:C7:45:88:56:A2:9A X509v3 Authority Key Identifier: keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:df:06:cc:a9:cd:d7:97:67:c7:10:d8:0a:e3:ca:9e:2f:01: d0:ee:42:b6:56:b5:73:c5:72:cc:fc:50:78:5b:5d:84:16:58: c7:d4:52:2d:35:79:77:22:05:7a:9d:57:4c:5b:1c:f4:26:a5: 64:ed:ef:30:a4:7e:f3:6f:5b:5e:1f:6b:b6:5a:25:82:c8:98: ff:35:f0:b6:c6:23:22:ba:1a:cd:c4:a5:df:99:18:0f:14:2a: 5b:1a:5f:53:4f:dd:c8:fd:9a:66:9a:e7:f5:c7:f5:74:db:c1: bc:d9:0d:49:a9:bd:d3:3b:8c:04:c3:ff:90:6d:2a:9d:c8:de: 12:39:0e:20:28:71:14:a1:0c:9c:26:b9:c1:39:97:c2:16:bc: c6:06:a6:29:f7:70:b1:a1:40:ad:49:0b:98:ac:92:f6:7f:04: 79:9f:63:f4:a7:80:c0:fe:d9:d0:88:d9:a3:6a:34:51:d3:f4: e1:78:df:0d:ba:9a:21:68:bf:3c:1f:74:30:96:dd:e9:e9:1b: b0:ca:c7:b6:82:2c:ed:39:60:ed:ec:fe:59:80:3d:7e:b5:60: 50:fe:04:bc:df:ec:9b:87:33:45:22:4d:47:8e:bf:06:e9:c6: 17:c3:08:8d:3c:79:74:fb:67:2e:d7:5b:bd:7d:00:79:18:42: cd:90:68:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtx67C+oShmaGoOq4/6fDsxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZGQ3OTViZTM2ZTRiNWIzMDllYmM4ZTA0ZWE3Mzk0MTM1 YzcxNGMwHhcNMjUxMjMxMDEwMDMwWhcNMjYwMTAxMDEwMDMwWjAzMTEwLwYDVQQD Eyg2MmQyZTliZjNjM2U3OWRkMmVkZTVkZmFlZWE2Yzc0NTg4NTZhMjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/z0M4pdud+Q2cnqWwyxmpFKNjqd YheAGL6Iafm7cqwC0r8SZXTkvxIKfFPCaIOuBh2XKrIx8n2gTAGhi7K9Sv3K65eX OFewD4UWZ7OikxjdwtGjj5sBwSDOU4BbSKt+W3n84koNY2jLqohxTH5YoqCvHzrF kY3I43pUwHySJ33V5h+ncCOgIzy1socAjPv07WMW58dOCT6PRNR/SpX6lr4WmBJr cb116MrF/Re5J2K91g9FXJMcHMxK7ELb6jAImmIX2MUbNsoTItI8we3n3G0vjiFz pSqEarthaovza/7l6rwaZ1Dof3QLwYaoeZ2fjvQYmyntRaPzNJDRTFaWDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLS6b88PnndLt5d+u6mx0WIVqKaMB8GA1UdIwQY MBaAFPHdeVvjbktbMJ68jgTqc5QTXHFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGQxNVctTnVTMXN3bnJ5T0JPcHpsQk5jY1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85NzliZGItMDFhMy00ZDE3LTg3NDYt ZmU0NDc3MmQ1YWUxLzEvOGQxNVctTnVTMXN3bnJ5T0JPcHpsQk5jY1V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85NzliZGItMDFhMy00ZDE3LTg3NDYtZmU0NDc3MmQ1YWUx LzEvOGQxNVctTnVTMXN3bnJ5T0JPcHpsQk5jY1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAed8GzKnN 15dnxxDYCuPKni8B0O5Ctla1c8VyzPxQeFtdhBZYx9RSLTV5dyIFep1XTFsc9Cal ZO3vMKR+829bXh9rtlolgsiY/zXwtsYjIroazcSl35kYDxQqWxpfU0/dyP2aZprn 9cf1dNvBvNkNSam90zuMBMP/kG0qncjeEjkOIChxFKEMnCa5wTmXwha8xgamKfdw saFArUkLmKyS9n8EeZ9j9KeAwP7Z0IjZo2o0UdP04XjfDbqaIWi/PB90MJbd6ekb sMrHtoIs7Tlg7ez+WYA9frVgUP4EvN/sm4czRSJNR46/BunGF8MIjTx5dPtnLtdb vX0AeRhCzZBoiQ== -----END CERTIFICATE-----Generated at Wed Dec 31 05:59:05 2025 by rpki-client