This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft File: d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft (raw, json) Hash identifier: UjuZGSMsR/SMBTr2XldAJFy7HdWWGXyen8fdmvxZHgs= Subject key identifier: 05:F7:B1:4B:C3:F6:60:A7:39:58:10:4F:67:85:A3:F9:40:60:3C:70 Authority key identifier: 77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E Certificate issuer: /CN=77c7b457f9af042924142373ce090f7fa876257e Certificate serial: 019B481553F9E6836E7429B097A17FF4D964 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft Manifest number: 104E Signing time: Mon 22 Dec 2025 22:01:55 +0000 Manifest this update: Mon 22 Dec 2025 22:01:55 +0000 Manifest next update: Tue 23 Dec 2025 22:01:55 +0000 Files and hashes: 1: d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl (hash: MYg9UgxAyRXEfVRM0fkYW31vx+vEv5GIgyGou5t/UEY=) 2: gLKpyPGbqCEdbx2uKWZ-HtuhLy0.roa (hash: f77sZOCl1dYzZqqQSp/e70T40ZHDdgkRvhdb7798S4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:53:f9:e6:83:6e:74:29:b0:97:a1:7f:f4:d9:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c7b457f9af042924142373ce090f7fa876257e Validity Not Before: Dec 22 22:01:55 2025 GMT Not After : Dec 23 22:01:55 2025 GMT Subject: CN=05f7b14bc3f660a73958104f6785a3f940603c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0a:e3:94:a4:c9:2f:fe:20:7e:33:83:70:29: e9:d1:e3:9b:aa:5e:0d:79:93:12:47:71:d0:2d:0f: 42:22:b0:82:38:d1:bf:02:c8:8a:c2:80:c4:ba:bc: 62:ba:18:48:9b:2d:b6:90:2f:cf:55:09:b7:5f:ee: 64:99:cf:ec:0b:77:61:11:af:d8:84:f0:e7:7f:2f: 94:e9:29:9a:02:09:dd:63:a7:2f:59:9a:e1:87:94: a2:8f:a3:db:31:92:1a:0f:d4:24:f8:5f:f2:ba:ae: 2b:2d:03:72:b8:18:0e:da:89:6a:ac:86:a1:80:f3: 9f:ce:c8:74:48:0d:ce:13:4e:17:90:08:13:75:84: 1b:4e:ce:af:9a:57:8f:7a:ab:99:c5:60:48:03:67: 6a:9d:19:68:67:31:d4:12:a8:3c:08:17:8e:f6:ec: a7:da:48:ba:61:ef:3a:91:30:5e:e3:51:90:ed:5d: f1:4b:93:f3:84:a4:96:40:44:c1:8d:b6:c9:e2:67: c1:f2:52:a3:f2:80:62:5a:d7:5b:f0:0c:e2:b4:41: b5:cc:d6:f6:82:3b:ac:4f:71:dd:e9:6c:9a:fc:17: 25:cb:88:59:b9:be:8a:ef:73:53:02:da:c5:95:d2: dc:57:3f:1c:ed:b8:55:c4:76:c2:24:86:3f:57:36: 70:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F7:B1:4B:C3:F6:60:A7:39:58:10:4F:67:85:A3:F9:40:60:3C:70 X509v3 Authority Key Identifier: keyid:77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:31:92:96:8c:a0:7d:9e:5e:92:cc:8c:e0:6d:b0:3b:0e:83: 50:17:23:b8:0b:4b:b2:40:c3:82:0e:77:d8:9d:92:99:22:05: a3:29:9e:62:37:0b:f1:15:36:a9:28:5e:72:40:b7:1d:47:bf: 33:9a:06:f4:16:b6:98:a0:64:ad:05:99:a7:27:cf:b1:73:ae: 85:a3:db:e1:fd:c3:31:70:a6:f9:c5:b7:9b:0a:54:77:0d:6a: 50:f7:9f:77:52:8f:fc:06:76:a5:e3:aa:95:92:b7:4b:9d:a7: bf:35:c0:ce:95:24:56:21:35:fe:dd:21:e1:d1:f5:40:3e:09: 5b:d6:07:d2:68:43:47:30:e4:f2:b8:29:23:ae:e0:ac:be:3d: 1f:06:87:61:1f:b4:41:e4:43:cb:e7:44:c8:d1:f6:5a:e2:7d: 67:20:78:d8:7b:c9:ce:b9:56:f9:9d:c9:22:2a:ce:43:01:a5: 9b:62:f4:79:64:2e:cb:36:d4:6d:26:29:89:da:81:12:0b:f0: 99:92:0a:50:d8:3d:17:4c:46:72:d0:63:7e:3a:44:55:98:56: e6:ac:2a:b5:e3:0a:86:f5:5a:09:3d:ae:6f:da:b0:45:7e:1a: eb:e6:3b:db:be:18:65:fb:99:66:8d:8e:b7:9d:6c:c6:29:9d: e9:24:a4:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFVP55oNudCmwl6F/9NlkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzdiNDU3ZjlhZjA0MjkyNDE0MjM3M2NlMDkwZjdmYTg3 NjI1N2UwHhcNMjUxMjIyMjIwMTU1WhcNMjUxMjIzMjIwMTU1WjAzMTEwLwYDVQQD EygwNWY3YjE0YmMzZjY2MGE3Mzk1ODEwNGY2Nzg1YTNmOTQwNjAzYzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3grjlKTJL/4gfjODcCnp0eObql4N eZMSR3HQLQ9CIrCCONG/AsiKwoDEurxiuhhImy22kC/PVQm3X+5kmc/sC3dhEa/Y hPDnfy+U6SmaAgndY6cvWZrhh5Sij6PbMZIaD9Qk+F/yuq4rLQNyuBgO2olqrIah gPOfzsh0SA3OE04XkAgTdYQbTs6vmlePequZxWBIA2dqnRloZzHUEqg8CBeO9uyn 2ki6Ye86kTBe41GQ7V3xS5PzhKSWQETBjbbJ4mfB8lKj8oBiWtdb8AzitEG1zNb2 gjusT3Hd6Wya/Bcly4hZub6K73NTAtrFldLcVz8c7bhVxHbCJIY/VzZwvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAX3sUvD9mCnOVgQT2eFo/lAYDxwMB8GA1UdIwQY MBaAFHfHtFf5rwQpJBQjc84JD3+odiV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhlMFZfbXZCQ2trRkNOenpna1BmNmgySlg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZDBiN2QtZGI5Ni00Mzg3LTkzZWMt ODQ2OWNmNjU5MTAxLzEvZDhlMFZfbXZCQ2trRkNOenpna1BmNmgySlg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS81ZDBiN2QtZGI5Ni00Mzg3LTkzZWMtODQ2OWNmNjU5MTAx LzEvZDhlMFZfbXZCQ2trRkNOenpna1BmNmgySlg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDGSloyg fZ5eksyM4G2wOw6DUBcjuAtLskDDgg532J2SmSIFoymeYjcL8RU2qSheckC3HUe/ M5oG9Ba2mKBkrQWZpyfPsXOuhaPb4f3DMXCm+cW3mwpUdw1qUPefd1KP/AZ2peOq lZK3S52nvzXAzpUkViE1/t0h4dH1QD4JW9YH0mhDRzDk8rgpI67grL49HwaHYR+0 QeRDy+dEyNH2WuJ9ZyB42HvJzrlW+Z3JIirOQwGlm2L0eWQuyzbUbSYpidqBEgvw mZIKUNg9F0xGctBjfjpEVZhW5qwqteMKhvVaCT2ub9qwRX4a6+Y7274YZfuZZo2O t51sximd6SSkPQ== -----END CERTIFICATE-----Generated at Tue Dec 23 03:48:13 2025 by rpki-client