This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft File: d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft (raw, json) Hash identifier: iiaSlY8Titt3cyowSwjCzOyludPLyn8B3SIjT8xx1HI= Subject key identifier: 14:73:86:05:46:B0:DC:11:92:01:DC:81:4C:E5:D5:D8:2D:AD:BB:E8 Authority key identifier: 77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E Certificate issuer: /CN=77c7b457f9af042924142373ce090f7fa876257e Certificate serial: 019B3A90953F95EC3F906CE40A585235741E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft Manifest number: 1047 Signing time: Sat 20 Dec 2025 07:01:52 +0000 Manifest this update: Sat 20 Dec 2025 07:01:52 +0000 Manifest next update: Sun 21 Dec 2025 07:01:52 +0000 Files and hashes: 1: d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl (hash: Qt6aFecpX4zNMc46YZPk00sfoIpYnhC9EuYP2QN/0F0=) 2: gLKpyPGbqCEdbx2uKWZ-HtuhLy0.roa (hash: f77sZOCl1dYzZqqQSp/e70T40ZHDdgkRvhdb7798S4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:95:3f:95:ec:3f:90:6c:e4:0a:58:52:35:74:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c7b457f9af042924142373ce090f7fa876257e Validity Not Before: Dec 20 07:01:52 2025 GMT Not After : Dec 21 07:01:52 2025 GMT Subject: CN=1473860546b0dc119201dc814ce5d5d82dadbbe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ab:ef:3d:4c:58:9d:1e:b6:27:68:ac:c0:fb: 99:9f:c9:c2:38:01:91:69:36:47:51:50:c0:a4:4a: 70:a6:c0:85:be:10:fd:fd:bc:12:6e:83:f2:67:f2: bf:a5:3e:ca:19:09:6f:17:f7:73:d3:0a:58:58:a3: 42:7c:ae:c9:09:f2:6c:d5:9e:24:a0:9a:46:8a:e9: 53:0c:ca:0e:e2:53:9c:93:ba:c0:22:c9:50:4f:b6: 6c:02:f3:c1:8e:27:a3:45:f2:9d:da:96:9a:f2:3e: c2:1b:c1:76:cf:55:c4:6d:e4:46:c8:d9:0b:5f:f0: 73:58:b4:89:5e:bf:d1:e8:a5:73:0b:24:c2:29:03: 63:ce:35:8e:24:ce:38:0a:d6:e9:33:61:1d:9d:7b: 24:46:ea:6d:a2:eb:7e:76:b0:9d:c0:94:94:23:9d: 31:27:f2:9c:e1:36:34:1f:23:52:f9:ba:de:8c:aa: 8c:ef:21:25:70:d3:21:60:90:57:05:25:51:d5:4d: 52:ee:26:bf:a2:51:28:73:0a:9d:0d:b4:76:12:b3: 14:6d:22:62:37:73:95:1c:b2:2a:14:72:8e:d8:1c: c7:46:93:f1:b0:11:bb:4f:7f:39:82:eb:6b:78:cb: c6:0d:3d:2a:ea:4b:d5:ec:f4:1a:67:fb:53:08:f9: a9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:73:86:05:46:B0:DC:11:92:01:DC:81:4C:E5:D5:D8:2D:AD:BB:E8 X509v3 Authority Key Identifier: keyid:77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ab:9f:55:70:3a:9b:09:a2:e8:68:e7:40:1d:6f:ff:f5:93: 7f:a0:62:63:e1:8f:e8:db:d1:ca:69:25:6c:22:c9:d0:56:2d: 1c:bf:8b:00:79:97:34:1c:69:f6:2f:f8:68:7b:5d:24:23:41: 0b:93:f6:36:39:25:d2:f6:f7:6a:65:d6:db:5d:5e:3f:78:df: 8f:73:0d:36:4c:70:fa:df:9b:c2:66:59:67:7b:51:79:6a:97: 46:a8:b9:ba:f2:f8:27:6a:dc:3a:d7:42:43:d1:7b:db:cc:22: 2f:fb:7e:9b:dd:ac:32:e2:de:8f:79:80:9d:ab:35:a9:82:ca: 3c:21:64:58:ac:42:a9:0f:35:9d:a0:1d:da:a9:5a:26:c4:be: f7:39:61:7c:3d:f2:e6:9b:f2:19:0c:3f:aa:0a:48:78:fc:5a: f7:55:ce:ca:54:85:08:05:e6:58:a5:15:5b:79:c1:bd:ec:14: 64:eb:e0:4c:b1:6e:c9:bb:b1:5d:a8:fa:26:31:a4:72:66:73: ab:85:5f:2b:8c:d3:c6:69:32:8e:5e:9f:39:4a:76:df:0c:94: 13:70:7a:22:8f:b5:47:b0:18:45:3d:f5:56:db:dc:2c:45:e9: 91:0a:19:a8:8c:e5:77:a0:a6:c6:cd:81:a3:9b:1c:62:5f:3c: 4c:30:e4:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kJU/lew/kGzkClhSNXQeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzdiNDU3ZjlhZjA0MjkyNDE0MjM3M2NlMDkwZjdmYTg3 NjI1N2UwHhcNMjUxMjIwMDcwMTUyWhcNMjUxMjIxMDcwMTUyWjAzMTEwLwYDVQQD EygxNDczODYwNTQ2YjBkYzExOTIwMWRjODE0Y2U1ZDVkODJkYWRiYmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqvvPUxYnR62J2iswPuZn8nCOAGR aTZHUVDApEpwpsCFvhD9/bwSboPyZ/K/pT7KGQlvF/dz0wpYWKNCfK7JCfJs1Z4k oJpGiulTDMoO4lOck7rAIslQT7ZsAvPBjiejRfKd2paa8j7CG8F2z1XEbeRGyNkL X/BzWLSJXr/R6KVzCyTCKQNjzjWOJM44CtbpM2EdnXskRuptout+drCdwJSUI50x J/Kc4TY0HyNS+brejKqM7yElcNMhYJBXBSVR1U1S7ia/olEocwqdDbR2ErMUbSJi N3OVHLIqFHKO2BzHRpPxsBG7T385gutreMvGDT0q6kvV7PQaZ/tTCPmpbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRzhgVGsNwRkgHcgUzl1dgtrbvoMB8GA1UdIwQY MBaAFHfHtFf5rwQpJBQjc84JD3+odiV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhlMFZfbXZCQ2trRkNOenpna1BmNmgySlg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZDBiN2QtZGI5Ni00Mzg3LTkzZWMt ODQ2OWNmNjU5MTAxLzEvZDhlMFZfbXZCQ2trRkNOenpna1BmNmgySlg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS81ZDBiN2QtZGI5Ni00Mzg3LTkzZWMtODQ2OWNmNjU5MTAx LzEvZDhlMFZfbXZCQ2trRkNOenpna1BmNmgySlg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaufVXA6 mwmi6GjnQB1v//WTf6BiY+GP6NvRymklbCLJ0FYtHL+LAHmXNBxp9i/4aHtdJCNB C5P2Njkl0vb3amXW211eP3jfj3MNNkxw+t+bwmZZZ3tReWqXRqi5uvL4J2rcOtdC Q9F728wiL/t+m92sMuLej3mAnas1qYLKPCFkWKxCqQ81naAd2qlaJsS+9zlhfD3y 5pvyGQw/qgpIePxa91XOylSFCAXmWKUVW3nBvewUZOvgTLFuybuxXaj6JjGkcmZz q4VfK4zTxmkyjl6fOUp23wyUE3B6Io+1R7AYRT31VtvcLEXpkQoZqIzld6Cmxs2B o5scYl88TDDkNg== -----END CERTIFICATE-----Generated at Sat Dec 20 12:16:24 2025 by rpki-client