This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json) Hash identifier: KYQBPaMYlEc7Gh2ZSv44QqEO3vpLa4u0oSHCBxs9GH4= Subject key identifier: B5:BF:1D:17:E0:04:28:36:E6:A5:66:35:EE:00:6C:EE:15:AB:70:B5 Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda Certificate serial: 019B390FF7E5A8E1EE6E46D0915AFBAE060C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft Manifest number: 05EF Signing time: Sat 20 Dec 2025 00:01:46 +0000 Manifest this update: Sat 20 Dec 2025 00:01:46 +0000 Manifest next update: Sun 21 Dec 2025 00:01:46 +0000 Files and hashes: 1: O5tzYrtFkkmA82WUY-iM9I4npFQ.roa (hash: NAkRuZlLqZ6QGa6dyEO9WBh2M5GYWwb6X+60cj2kmSQ=) 2: UpM_9nRhN5sEo1jLWob4fYkRieQ.roa (hash: 1KbxTVWk0iQIjrJWGCs4uRw+yTwWoVCpGhtFHqc3mxE=) 3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: KaFd00PGPgt8kJrppTrHV/ZG8QjaObP299VYX7b/KwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:f7:e5:a8:e1:ee:6e:46:d0:91:5a:fb:ae:06:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda Validity Not Before: Dec 20 00:01:46 2025 GMT Not After : Dec 21 00:01:46 2025 GMT Subject: CN=b5bf1d17e0042836e6a56635ee006cee15ab70b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c1:75:b7:de:4d:e1:4e:2f:f3:53:a6:c3:4b: 8b:09:3b:9a:a1:84:f5:49:51:0d:7e:18:1f:dc:b6: ce:9e:ba:b3:2a:3e:34:96:e3:24:b0:e4:47:de:a8: b5:30:07:68:2c:0e:34:c6:41:49:48:3e:e1:64:1e: cd:6d:6c:79:9c:24:57:0f:ce:8b:47:eb:3a:b8:23: 1d:49:06:75:37:f4:80:69:c9:be:86:bc:8a:a9:4e: c1:cd:cc:c7:c8:c0:d2:5a:18:b9:98:75:d1:bd:f6: 01:f3:8a:7a:dd:2f:f6:5a:ef:b6:2c:a4:5e:51:5c: 28:0b:50:d7:8a:b6:2e:2d:e1:6d:c8:34:94:ce:02: 1d:bf:a3:00:5b:04:b6:8b:4f:2d:8e:43:e5:fc:51: 5e:ab:7f:82:24:30:48:0e:a8:cf:ed:81:78:a0:2d: a5:cc:2a:d3:21:dd:8a:fc:d0:6d:5f:07:aa:4d:2e: 88:5b:dc:28:06:ab:47:ad:05:a6:c9:5a:68:13:f4: 01:11:c5:af:d6:85:83:fa:0e:83:f8:5d:bc:53:f6: 13:07:93:2e:c4:76:c1:02:0a:09:27:26:b0:39:5a: 96:e3:19:ca:96:92:07:ee:bb:06:d5:25:34:0a:31: c7:8d:bc:3c:51:7e:c4:2b:82:c2:39:e4:dd:6e:eb: 8e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BF:1D:17:E0:04:28:36:E6:A5:66:35:EE:00:6C:EE:15:AB:70:B5 X509v3 Authority Key Identifier: keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:57:f0:cd:72:62:b3:5d:fe:2b:1a:ac:b0:ed:08:ca:20:b2: e5:4d:04:b8:a2:03:61:d4:d8:1a:ff:00:33:76:a4:09:14:93: d5:93:28:e7:6e:0d:ab:c8:0a:61:49:17:41:e2:6f:ab:4a:e7: 49:5f:f5:ed:21:55:b2:07:5b:7e:eb:16:58:25:4c:4f:f6:0c: 8b:9c:ca:1f:ab:8c:e1:7d:bb:d7:fc:e4:75:f8:d7:f1:9f:d0: 73:22:34:df:54:25:2f:20:47:63:cc:f9:a0:6f:89:c8:53:89: 8a:e9:ca:db:1e:8a:3f:31:82:83:93:2d:5f:f0:96:2e:25:dd: 25:2a:70:6e:55:64:e3:16:7f:51:76:48:25:5a:97:85:14:9f: 46:ef:db:51:4d:eb:61:7d:b3:27:41:ed:c1:bc:ff:4d:e7:35: fd:65:44:cd:9a:f9:69:90:a4:b4:aa:e4:07:0a:30:ce:d3:ce: b3:59:75:7e:91:3e:22:ca:73:39:bd:4c:40:2e:78:26:f0:f4: 92:7f:b8:ff:88:d5:42:ea:c5:71:8f:cb:0e:e4:d2:da:5e:72: 8e:c9:b9:be:d9:8a:e1:56:3b:1e:9b:99:33:b7:19:46:f9:9b: 65:08:51:ef:2a:08:3f:bb:db:54:41:3c:1d:b8:56:3c:3d:a7: b7:1f:a9:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D/flqOHubkbQkVr7rgYMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YzRiY2RkNTMxMmY4YTdjMzNkZTRiN2Q3NWMxNWI0Y2Ji YzFkZGEwHhcNMjUxMjIwMDAwMTQ2WhcNMjUxMjIxMDAwMTQ2WjAzMTEwLwYDVQQD EyhiNWJmMWQxN2UwMDQyODM2ZTZhNTY2MzVlZTAwNmNlZTE1YWI3MGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MF1t95N4U4v81Omw0uLCTuaoYT1 SVENfhgf3LbOnrqzKj40luMksORH3qi1MAdoLA40xkFJSD7hZB7NbWx5nCRXD86L R+s6uCMdSQZ1N/SAacm+hryKqU7BzczHyMDSWhi5mHXRvfYB84p63S/2Wu+2LKRe UVwoC1DXirYuLeFtyDSUzgIdv6MAWwS2i08tjkPl/FFeq3+CJDBIDqjP7YF4oC2l zCrTId2K/NBtXweqTS6IW9woBqtHrQWmyVpoE/QBEcWv1oWD+g6D+F28U/YTB5Mu xHbBAgoJJyawOVqW4xnKlpIH7rsG1SU0CjHHjbw8UX7EK4LCOeTdbuuOUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLW/HRfgBCg25qVmNe4AbO4Vq3C1MB8GA1UdIwQY MBaAFJfEvN1TEvinwz3kt9dcFbTLvB3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80NDc3NWYtMzdhNi00YTg2LTlmZTUt ZTkzYmRiOGQ5Yzg1LzEvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80NDc3NWYtMzdhNi00YTg2LTlmZTUtZTkzYmRiOGQ5Yzg1 LzEvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilfwzXJi s13+KxqssO0IyiCy5U0EuKIDYdTYGv8AM3akCRST1ZMo524Nq8gKYUkXQeJvq0rn SV/17SFVsgdbfusWWCVMT/YMi5zKH6uM4X271/zkdfjX8Z/QcyI031QlLyBHY8z5 oG+JyFOJiunK2x6KPzGCg5MtX/CWLiXdJSpwblVk4xZ/UXZIJVqXhRSfRu/bUU3r YX2zJ0Htwbz/Tec1/WVEzZr5aZCktKrkBwowztPOs1l1fpE+IspzOb1MQC54JvD0 kn+4/4jVQurFcY/LDuTS2l5yjsm5vtmK4VY7HpuZM7cZRvmbZQhR7yoIP7vbVEE8 HbhWPD2ntx+pjQ== -----END CERTIFICATE-----Generated at Sat Dec 20 03:01:46 2025 by rpki-client