This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft File: d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json) Hash identifier: rjp8i53wJOSmKC8gCi5lkpxNlgOu9+P9GU2LcuRR/J4= Subject key identifier: A5:72:95:D6:71:1C:95:D7:FE:E6:17:23:2B:86:57:DE:6D:C9:24:81 Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46 Certificate issuer: /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46 Certificate serial: 019B3CB5380B835261A83F86C8749E935333 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft Manifest number: 030E Signing time: Sat 20 Dec 2025 17:01:07 +0000 Manifest this update: Sat 20 Dec 2025 17:01:07 +0000 Manifest next update: Sun 21 Dec 2025 17:01:07 +0000 Files and hashes: 1: 2IggjZcKQnsJ27bFYIHqEpYv-GQ.roa (hash: QiDI9ap52s0p2XMZDDr7ZxsLONOENyLmIWJ6ECFI2k0=) 2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: cvT3MmNfSMWKNKoxpeHGJO9T+7FjFNDsP+B8CaU4kYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:38:0b:83:52:61:a8:3f:86:c8:74:9e:93:53:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46 Validity Not Before: Dec 20 17:01:07 2025 GMT Not After : Dec 21 17:01:07 2025 GMT Subject: CN=a57295d6711c95d7fee617232b8657de6dc92481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:63:ad:fb:87:68:86:ed:1a:fe:9a:45:9d: cc:b6:13:33:13:20:0b:7b:5f:02:91:ab:f1:dd:d2: 26:6b:8c:23:8f:98:f3:27:bb:df:4f:61:48:f3:64: c7:32:cc:f3:99:08:dd:0b:d2:c2:92:f9:10:34:e3: 0a:2e:80:7e:a0:bd:5c:f3:72:0f:8c:c2:e9:29:26: d3:a3:50:d8:68:10:69:f4:22:8d:19:f3:64:bb:04: 3a:40:0d:e4:84:5c:25:2e:e7:c8:bd:1a:05:ca:fd: 25:33:bd:81:be:7f:f7:e7:65:fc:1c:91:30:72:45: f5:07:73:96:4d:1d:96:9e:c7:60:62:27:44:d6:d2: 98:5d:e0:08:60:10:9a:b4:6f:f6:95:9a:29:be:55: 8e:8a:97:d1:2a:30:16:ad:49:c0:5b:21:af:74:75: 1d:8e:e1:68:3f:67:31:4e:be:c8:0b:91:b4:5e:8a: 1b:c7:18:45:e3:d9:6b:31:4f:83:3d:95:ec:28:1c: f3:a7:11:cf:48:9d:59:04:7e:1a:18:58:0b:20:ed: f5:14:56:64:1b:b4:57:b4:51:fc:11:27:4d:00:cb: fe:b7:f7:68:97:68:81:56:c0:05:3a:4e:b6:1b:19: b5:8d:36:5c:74:58:f1:2a:a7:62:b2:bc:86:41:db: d1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:72:95:D6:71:1C:95:D7:FE:E6:17:23:2B:86:57:DE:6D:C9:24:81 X509v3 Authority Key Identifier: keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:50:14:7e:0b:28:d5:4a:21:b2:69:f8:bc:47:24:00:4a:5a: 4b:ac:e5:64:aa:94:57:fc:a7:72:fa:37:01:54:7b:2a:fa:f3: 6f:67:9d:a7:e1:be:46:9d:42:a8:56:18:e2:55:26:ea:d1:ed: a5:a9:bd:a8:fd:64:5d:be:7f:7c:c6:10:64:c0:7f:9a:fb:d6: 96:33:84:13:b5:3c:25:a4:9c:f2:16:1f:a8:95:37:d1:db:7f: c2:da:e1:c7:9e:4b:84:59:ab:e0:5b:43:27:91:12:e4:bf:b4: 1f:38:15:48:99:3f:f3:e9:15:8f:97:cd:ac:1a:fc:1e:0d:8e: 02:22:28:a8:e5:23:10:a0:40:71:74:76:94:0a:e4:da:5c:4e: 68:f9:ba:bb:9a:f9:d8:b5:fc:3e:e3:b7:a8:d4:83:1c:04:27: d7:3c:12:1b:a7:7b:db:18:98:4e:c3:33:c9:de:b5:37:19:06: 3d:6b:d0:a3:21:4e:62:ef:9c:ae:64:9c:e6:ef:46:bf:9a:1c: 00:07:74:66:a0:24:20:54:df:62:36:51:af:35:c7:f1:96:4b: 6b:51:9b:a4:c1:69:ec:b4:b7:78:67:53:53:24:e2:9c:f2:ee: 4c:dc:2a:dd:f1:d9:46:c3:43:67:bd:b7:42:85:33:6f:e5:3c: a6:48:7b:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tTgLg1JhqD+GyHSek1MzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzhkOTRiZGYzN2UwZjkwMGNkNmE4YzQyMmNkYjE0ZDk3 Y2ViNDYwHhcNMjUxMjIwMTcwMTA3WhcNMjUxMjIxMTcwMTA3WjAzMTEwLwYDVQQD EyhhNTcyOTVkNjcxMWM5NWQ3ZmVlNjE3MjMyYjg2NTdkZTZkYzkyNDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujtjrfuHaIbtGv6aRZ3MthMzEyAL e18Ckavx3dIma4wjj5jzJ7vfT2FI82THMszzmQjdC9LCkvkQNOMKLoB+oL1c83IP jMLpKSbTo1DYaBBp9CKNGfNkuwQ6QA3khFwlLufIvRoFyv0lM72Bvn/352X8HJEw ckX1B3OWTR2WnsdgYidE1tKYXeAIYBCatG/2lZopvlWOipfRKjAWrUnAWyGvdHUd juFoP2cxTr7IC5G0XoobxxhF49lrMU+DPZXsKBzzpxHPSJ1ZBH4aGFgLIO31FFZk G7RXtFH8ESdNAMv+t/dol2iBVsAFOk62Gxm1jTZcdFjxKqdisryGQdvRZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVyldZxHJXX/uYXIyuGV95tySSBMB8GA1UdIwQY MBaAFHfI2UvfN+D5AM1qjEIs2xTZfOtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82Y2U1M2MtNzY3MC00N2E3LTgxYWUt NTRjMGFlNjE3NmQ0LzEvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82Y2U1M2MtNzY3MC00N2E3LTgxYWUtNTRjMGFlNjE3NmQ0 LzEvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1AUfgso 1Uohsmn4vEckAEpaS6zlZKqUV/yncvo3AVR7Kvrzb2edp+G+Rp1CqFYY4lUm6tHt pam9qP1kXb5/fMYQZMB/mvvWljOEE7U8JaSc8hYfqJU30dt/wtrhx55LhFmr4FtD J5ES5L+0HzgVSJk/8+kVj5fNrBr8Hg2OAiIoqOUjEKBAcXR2lArk2lxOaPm6u5r5 2LX8PuO3qNSDHAQn1zwSG6d72xiYTsMzyd61NxkGPWvQoyFOYu+crmSc5u9Gv5oc AAd0ZqAkIFTfYjZRrzXH8ZZLa1GbpMFp7LS3eGdTUyTinPLuTNwq3fHZRsNDZ723 QoUzb+U8pkh7eA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:45:23 2025 by rpki-client