This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft File: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json) Hash identifier: q/lgjRHZhnFXofN1G2EPvnyZWrRGwnA/uGtAcsDdOtE= Subject key identifier: DE:DD:D7:CE:1B:DD:4D:1C:42:30:F0:30:03:6C:D1:07:20:A3:D4:08 Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5 Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5 Certificate serial: 019B300C6970C0B7F9E7DC519E817ECC96CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft Manifest number: 1789 Signing time: Thu 18 Dec 2025 06:01:18 +0000 Manifest this update: Thu 18 Dec 2025 06:01:18 +0000 Manifest next update: Fri 19 Dec 2025 06:01:18 +0000 Files and hashes: 1: _Q5q23PPHO-mRvT-qL8ygRyZcq8.roa (hash: MlSwzzd2g428PzEfHlimkQJSWkAp7XxXXCW+AJUIUOw=) 2: jyrC-t0H_GkAg2c88y9tSfnyeDQ.roa (hash: QuK2j2bldMS2fMD4ill15moXvawQIfM3BSjaK9rkpUw=) 3: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: iTobk+glO/9Lo3WJ3Ym6gN8N4/Png39kaoKypRgcWuw=) 4: rZAA3Y495kRkRNDpWyGUUlyfTzU.roa (hash: Fgv+FkEtI7c1vlophMoAf5XyRQp0aEoHwM68DDPsUbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:69:70:c0:b7:f9:e7:dc:51:9e:81:7e:cc:96:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5 Validity Not Before: Dec 18 06:01:18 2025 GMT Not After : Dec 19 06:01:18 2025 GMT Subject: CN=deddd7ce1bdd4d1c4230f030036cd10720a3d408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b1:4f:a1:db:6f:26:c0:4c:dc:ce:8e:f7:f2: 6e:57:15:42:83:af:06:48:63:64:74:32:dc:fa:16: 99:c9:93:23:7f:bf:c8:c7:64:c5:87:de:0c:17:63: 41:c4:11:ea:cf:d3:f9:57:31:54:c2:87:69:5e:7d: f7:c1:5d:b1:da:c8:74:80:d9:01:f8:7d:3e:e8:3f: 86:91:a6:ba:d3:83:cf:21:7c:d5:5e:1c:fe:87:23: a2:6e:26:e7:8e:0e:c5:f4:39:8c:a4:dc:1f:8a:ab: 43:ad:29:d5:70:80:e0:9e:30:af:2e:87:08:71:aa: b9:50:b6:7c:19:bb:ea:c9:57:a3:a0:5b:cf:d1:d7: 87:00:6d:d1:e8:df:c0:82:5c:d8:00:c9:8e:f6:bd: 08:4e:f8:c1:df:29:d7:45:57:d3:a5:a8:77:5f:95: 3b:2e:fa:1a:45:69:17:c2:31:82:86:f7:69:9d:64: 8b:e2:22:29:5e:86:08:36:d8:ab:13:84:75:c2:8a: e7:b3:55:78:d7:32:6d:44:58:2c:22:fb:68:de:0a: 12:b3:80:25:29:6b:c8:a4:30:cd:1f:39:c6:bb:b4: 56:58:9c:25:9d:45:e3:a2:b5:c9:18:93:b1:e7:2e: e2:0a:d6:44:fb:27:9e:ba:a8:81:99:0d:16:9e:95: 87:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DD:D7:CE:1B:DD:4D:1C:42:30:F0:30:03:6C:D1:07:20:A3:D4:08 X509v3 Authority Key Identifier: keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:87:b9:54:37:bc:39:65:29:1d:af:85:26:e4:d3:32:b2:94: 1d:ef:6b:69:0c:33:3d:41:93:10:35:5f:65:9f:1b:c7:cd:35: 4e:95:a5:8b:24:59:ec:03:79:ba:ad:1a:34:78:6f:52:3c:48: db:15:96:9c:f4:77:84:9a:1e:b6:71:4a:99:e1:69:4c:00:51: 5b:25:fd:ed:06:79:7d:45:45:67:c6:d9:32:dd:35:87:c5:06: 3a:e8:21:08:78:82:a8:47:8b:d9:1b:d2:5d:c6:b5:17:3d:92: fd:33:b8:da:5f:4d:d2:09:81:9c:43:0a:7b:0e:b2:e0:0e:4e: f2:47:76:fd:05:ea:a9:7a:b9:e6:13:33:48:1b:a2:80:38:01: e2:94:7e:5f:04:fd:6d:76:27:a6:cf:bf:9c:fc:13:57:93:3c: 2f:fb:e0:e2:9d:80:d0:de:4e:8d:2a:77:5b:bc:23:17:cb:63: bf:cf:97:e3:62:8f:13:d4:c4:30:b1:6a:94:18:15:27:f4:98: b2:b4:02:d9:bb:ca:53:5e:43:f5:98:9e:aa:57:60:71:53:b6: fd:63:b5:0d:8b:d8:c4:05:ba:27:05:7d:6c:c4:98:e3:76:cb: 30:f3:12:c9:23:63:1d:04:f4:32:ce:70:9a:be:47:87:2a:f5: 29:2d:b8:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDGlwwLf559xRnoF+zJbKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTc3YzcwOGFmMGJhMWY4MTU0OWM5Zjg3MDg5NTU5Mzkw MTY3YTUwHhcNMjUxMjE4MDYwMTE4WhcNMjUxMjE5MDYwMTE4WjAzMTEwLwYDVQQD EyhkZWRkZDdjZTFiZGQ0ZDFjNDIzMGYwMzAwMzZjZDEwNzIwYTNkNDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLFPodtvJsBM3M6O9/JuVxVCg68G SGNkdDLc+haZyZMjf7/Ix2TFh94MF2NBxBHqz9P5VzFUwodpXn33wV2x2sh0gNkB +H0+6D+Gkaa604PPIXzVXhz+hyOibibnjg7F9DmMpNwfiqtDrSnVcIDgnjCvLocI caq5ULZ8GbvqyVejoFvP0deHAG3R6N/AglzYAMmO9r0ITvjB3ynXRVfTpah3X5U7 LvoaRWkXwjGChvdpnWSL4iIpXoYINtirE4R1worns1V41zJtRFgsIvto3goSs4Al KWvIpDDNHznGu7RWWJwlnUXjorXJGJOx5y7iCtZE+yeeuqiBmQ0WnpWHmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7d184b3U0cQjDwMANs0Qcgo9QIMB8GA1UdIwQY MBaAFKynfHCK8LofgVScn4cIlVk5AWelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktkOGNJcnd1aC1CVkp5Zmh3aVZXVGtCWjZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84ZmU3ZDgtMDE3Yi00MWFhLWE5MWYt MjhiMTllM2ZkNGE2LzEvcktkOGNJcnd1aC1CVkp5Zmh3aVZXVGtCWjZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84ZmU3ZDgtMDE3Yi00MWFhLWE5MWYtMjhiMTllM2ZkNGE2 LzEvcktkOGNJcnd1aC1CVkp5Zmh3aVZXVGtCWjZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4e5VDe8 OWUpHa+FJuTTMrKUHe9raQwzPUGTEDVfZZ8bx801TpWliyRZ7AN5uq0aNHhvUjxI 2xWWnPR3hJoetnFKmeFpTABRWyX97QZ5fUVFZ8bZMt01h8UGOughCHiCqEeL2RvS Xca1Fz2S/TO42l9N0gmBnEMKew6y4A5O8kd2/QXqqXq55hMzSBuigDgB4pR+XwT9 bXYnps+/nPwTV5M8L/vg4p2A0N5OjSp3W7wjF8tjv8+X42KPE9TEMLFqlBgVJ/SY srQC2bvKU15D9ZieqldgcVO2/WO1DYvYxAW6JwV9bMSY43bLMPMSySNjHQT0Ms5w mr5Hhyr1KS24Uw== -----END CERTIFICATE-----Generated at Thu Dec 18 10:24:44 2025 by rpki-client