This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft File: cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json) Hash identifier: qxljij9dK4n/iPQPoQ03yCGFCRi4KcGFIl0Ix1tvDa8= Subject key identifier: 70:21:A1:B1:18:07:FE:7A:5A:FA:4D:F7:03:7D:F2:21:DF:CD:BD:B4 Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab Certificate serial: 019B4023C4E71A08F297F13D20CCE455BF3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft Manifest number: 0508 Signing time: Sun 21 Dec 2025 09:00:44 +0000 Manifest this update: Sun 21 Dec 2025 09:00:44 +0000 Manifest next update: Mon 22 Dec 2025 09:00:44 +0000 Files and hashes: 1: Q3DzC8Xezd_wUJe_qmHOdRY16z8.roa (hash: UbPlIZy2nFY/zJS4B8sCeti8RZE/Rxf0ELKnlfBMfvg=) 2: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: JyhCHdEH9rDqMI2Ddeqw7BNnFe7hooxL4dOSWJ0KbqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:23:c4:e7:1a:08:f2:97:f1:3d:20:cc:e4:55:bf:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab Validity Not Before: Dec 21 09:00:44 2025 GMT Not After : Dec 22 09:00:44 2025 GMT Subject: CN=7021a1b11807fe7a5afa4df7037df221dfcdbdb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fa:42:e7:d6:7c:43:80:29:9f:04:72:74:3e: 35:d3:d2:78:0e:da:18:d4:2c:7d:5d:57:a4:02:c2: d9:53:43:84:b9:1d:3d:8b:de:c6:35:0f:55:e3:0e: d7:c9:6a:51:9e:72:63:e8:c3:d0:a4:8f:49:7e:1c: 89:94:a8:8d:82:3f:f6:e7:6a:0b:68:ca:b9:31:29: 76:d2:6e:b6:26:67:e7:33:94:92:a8:90:35:f5:9d: 73:0b:34:82:82:86:1f:98:5d:1e:37:0a:18:64:ed: 23:0f:cf:43:1f:16:fe:3e:98:e4:21:67:24:44:68: 09:ef:ac:f1:10:e2:83:bd:db:bd:b2:ab:f1:cf:11: f6:b7:6c:bb:4b:09:da:3c:83:f3:c5:9f:94:9a:7a: f2:c1:05:de:82:67:7e:83:d9:9a:34:5d:4e:b8:65: e2:97:d2:aa:1d:9b:ce:a9:f7:60:11:a6:ec:31:d8: 6d:17:64:65:9f:e0:91:c4:c9:24:5d:17:67:25:b6: 4a:ce:2e:16:6c:c5:24:43:ff:ab:65:56:4b:a8:4f: bc:5f:22:8e:37:36:a7:a1:43:31:4f:3c:8f:d8:1f: f6:f5:4f:cf:1a:93:ab:b4:f9:b7:9a:61:1b:76:19: d3:27:0b:ad:a7:63:d4:98:a6:6d:88:62:a7:16:70: 1e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:21:A1:B1:18:07:FE:7A:5A:FA:4D:F7:03:7D:F2:21:DF:CD:BD:B4 X509v3 Authority Key Identifier: keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a5:a6:3c:6b:ed:8a:fb:1e:fb:3f:10:c5:74:a3:98:ee:ea: 23:c7:5b:01:a7:10:1d:d7:4f:05:bb:cd:00:3e:9e:87:e5:96: f5:ac:a5:5f:48:5b:42:9c:ff:b2:1f:5f:b1:04:44:a3:da:48: 24:04:af:84:64:3d:6e:ca:84:51:aa:0c:ef:85:36:2e:22:85: 2d:df:fb:ee:3f:37:96:c4:46:d3:79:18:63:e7:e6:f7:8b:43: e2:ec:90:c3:3d:54:80:9a:1d:c2:5e:65:30:05:a7:cc:62:33: cc:d7:3e:d3:2f:40:f5:01:31:ab:e3:06:1b:22:45:4a:cf:15: 98:4e:c1:2f:98:65:3b:eb:2d:fd:00:3a:6c:ee:b3:9b:2c:4a: a0:17:07:50:00:9e:9a:d7:a9:04:b2:f7:dd:d5:4c:af:7d:d4: e4:77:c3:57:30:5d:77:73:e3:69:0a:d1:c5:27:55:d8:38:c6: 05:15:9b:79:a1:52:9a:81:d7:66:da:56:44:dc:fd:bd:d3:12: 79:6c:bc:78:21:24:7b:ca:1b:d7:2f:ca:04:b1:84:0e:e5:01: a0:c5:93:25:b7:7c:2d:fb:44:6a:14:83:9f:30:f1:84:a9:1c: eb:ae:2e:83:50:09:6d:3c:e1:6d:62:f2:63:05:79:85:8a:f8: 7f:43:e4:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAI8TnGgjyl/E9IMzkVb88MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMzEzNzRlYjk2NzkxMDllOTFhMzhlMjhiMTdiZjI2MGFi OWQzYWIwHhcNMjUxMjIxMDkwMDQ0WhcNMjUxMjIyMDkwMDQ0WjAzMTEwLwYDVQQD Eyg3MDIxYTFiMTE4MDdmZTdhNWFmYTRkZjcwMzdkZjIyMWRmY2RiZGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfpC59Z8Q4ApnwRydD4109J4DtoY 1Cx9XVekAsLZU0OEuR09i97GNQ9V4w7XyWpRnnJj6MPQpI9JfhyJlKiNgj/252oL aMq5MSl20m62JmfnM5SSqJA19Z1zCzSCgoYfmF0eNwoYZO0jD89DHxb+PpjkIWck RGgJ76zxEOKDvdu9sqvxzxH2t2y7SwnaPIPzxZ+UmnrywQXegmd+g9maNF1OuGXi l9KqHZvOqfdgEabsMdhtF2Rln+CRxMkkXRdnJbZKzi4WbMUkQ/+rZVZLqE+8XyKO NzanoUMxTzyP2B/29U/PGpOrtPm3mmEbdhnTJwutp2PUmKZtiGKnFnAerwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAhobEYB/56WvpN9wN98iHfzb20MB8GA1UdIwQY MBaAFHAxN065Z5EJ6Ro44osXvyYKudOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0RFM1RybG5rUW5wR2pqaWl4ZV9KZ3E1MDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kOGI3M2ItNTAxMy00M2NkLWJhMmIt MmMyMTgwNzE0ZTcxLzEvY0RFM1RybG5rUW5wR2pqaWl4ZV9KZ3E1MDZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9kOGI3M2ItNTAxMy00M2NkLWJhMmItMmMyMTgwNzE0ZTcx LzEvY0RFM1RybG5rUW5wR2pqaWl4ZV9KZ3E1MDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKWmPGvt ivse+z8QxXSjmO7qI8dbAacQHddPBbvNAD6eh+WW9aylX0hbQpz/sh9fsQREo9pI JASvhGQ9bsqEUaoM74U2LiKFLd/77j83lsRG03kYY+fm94tD4uyQwz1UgJodwl5l MAWnzGIzzNc+0y9A9QExq+MGGyJFSs8VmE7BL5hlO+st/QA6bO6zmyxKoBcHUACe mtepBLL33dVMr33U5HfDVzBdd3PjaQrRxSdV2DjGBRWbeaFSmoHXZtpWRNz9vdMS eWy8eCEke8ob1y/KBLGEDuUBoMWTJbd8LftEahSDnzDxhKkc664ug1AJbTzhbWLy YwV5hYr4f0PkIQ== -----END CERTIFICATE-----Generated at Sun Dec 21 12:08:38 2025 by rpki-client