This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft File: 82DHix1GLWuv33NZ08Iz3b-SnTE.mft (raw, json) Hash identifier: 9ctYYqivqMSsKxJPgkLL6bLAWTIK+kxr6UhBU8w7J7g= Subject key identifier: FD:DE:E5:69:B2:8E:EC:B7:89:28:21:50:D5:A5:05:DF:8A:D5:A1:B8 Authority key identifier: F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31 Certificate issuer: /CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31 Certificate serial: 019B243F2F3794CA29E816C4CCA1CDD44459 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft Manifest number: 06EB Signing time: Mon 15 Dec 2025 23:01:19 +0000 Manifest this update: Mon 15 Dec 2025 23:01:19 +0000 Manifest next update: Tue 16 Dec 2025 23:01:19 +0000 Files and hashes: 1: 82DHix1GLWuv33NZ08Iz3b-SnTE.crl (hash: 1SRym6vUxtg5XyGkAqDsX2ytLY6zeIzDCI/Sx0gHASw=) 2: nPeojOrbaPs45UMM5xBsx67HUyw.roa (hash: I+r6NKoTQ/LaZOROIxMVJyc2C7XDOY211tQjVI17x0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3f:2f:37:94:ca:29:e8:16:c4:cc:a1:cd:d4:44:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31 Validity Not Before: Dec 15 23:01:19 2025 GMT Not After : Dec 16 23:01:19 2025 GMT Subject: CN=fddee569b28eecb789282150d5a505df8ad5a1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a3:6a:db:05:c2:02:ab:8d:37:c2:c7:ba:22: db:04:d0:56:45:2d:85:0d:a1:7d:df:5b:cf:ed:25: c5:2c:cc:bf:e8:55:49:21:43:52:cd:97:01:7b:95: 5a:e6:8d:1a:c3:6f:3b:47:f1:9b:03:a4:dc:73:86: 06:c8:b3:1a:54:fd:40:a2:2f:57:2b:87:2a:14:0d: da:53:3f:59:eb:bd:5b:6a:c2:4a:47:1e:d3:03:a3: 6a:b3:85:88:b2:3e:fe:5e:66:06:01:63:5c:5b:d4: d4:bc:08:ce:bf:1e:60:9f:fe:82:29:2f:30:f5:3f: a5:4d:2b:0e:df:c4:11:27:83:2a:68:03:5a:aa:06: 76:65:e7:b5:cb:e9:93:68:37:65:77:e6:09:ae:56: 37:a0:c6:4a:b2:a8:69:c8:22:07:1d:60:06:2e:ce: a1:b5:c6:e8:36:9f:17:cd:d8:08:4b:cd:34:40:f3: 35:1b:51:20:3c:88:13:0b:a1:89:6b:df:df:7e:5d: 49:6c:56:a8:32:69:7a:8b:a5:a6:bf:34:ef:53:bf: f7:18:76:95:a2:2a:42:a1:9c:a2:bd:e4:19:07:39: 82:69:83:6b:c1:67:5c:36:2d:f2:6e:2b:a2:2d:86: 85:19:1e:6e:cc:c2:4e:17:88:ee:d9:75:ac:bc:45: ce:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DE:E5:69:B2:8E:EC:B7:89:28:21:50:D5:A5:05:DF:8A:D5:A1:B8 X509v3 Authority Key Identifier: keyid:F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:ef:d8:12:bd:0a:28:aa:a8:4c:6d:13:07:e6:5a:45:d5:ec: 4f:a7:83:a9:32:ee:e9:50:01:a2:b4:7b:b4:51:ac:14:b8:6d: 0c:49:15:53:4d:89:a2:7b:d1:b4:19:09:b4:27:de:e7:03:9a: 48:21:9a:a2:e9:cf:91:3a:f1:fd:53:49:39:b3:50:27:1c:df: c8:1c:b3:64:a2:92:32:5c:16:96:25:e7:56:d5:ba:10:87:f3: 0f:05:30:b2:eb:03:b9:04:a4:d7:da:80:c0:63:69:f1:db:23: a0:68:41:25:40:23:f9:be:82:a7:c3:ec:64:f9:84:ed:85:fc: df:df:47:cd:fe:7c:26:ec:73:a5:33:64:b9:69:eb:db:ec:40: 3f:37:77:98:51:5c:4b:88:ea:da:72:64:e9:d2:ed:f5:0f:cf: de:70:82:a8:55:15:c8:9b:20:da:20:5c:fb:44:44:1d:cf:7e: 56:38:11:84:c3:0c:c1:68:80:b5:cf:2f:38:b3:70:01:e9:10: 9b:a0:0d:b6:ee:e6:80:96:05:e8:30:1b:28:c3:d1:be:63:a2: 3c:6a:54:8b:61:73:ac:fb:fa:7a:e3:90:93:99:74:e4:ac:db: b9:20:0f:e8:24:82:9e:e6:ed:ed:9d:e6:50:de:94:55:67:0a: e7:92:6f:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPy83lMop6BbEzKHN1ERZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNjBjNzhiMWQ0NjJkNmJhZmRmNzM1OWQzYzIzM2RkYmY5 MjlkMzEwHhcNMjUxMjE1MjMwMTE5WhcNMjUxMjE2MjMwMTE5WjAzMTEwLwYDVQQD EyhmZGRlZTU2OWIyOGVlY2I3ODkyODIxNTBkNWE1MDVkZjhhZDVhMWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6Nq2wXCAquNN8LHuiLbBNBWRS2F DaF931vP7SXFLMy/6FVJIUNSzZcBe5Va5o0aw287R/GbA6Tcc4YGyLMaVP1Aoi9X K4cqFA3aUz9Z671basJKRx7TA6Nqs4WIsj7+XmYGAWNcW9TUvAjOvx5gn/6CKS8w 9T+lTSsO38QRJ4MqaANaqgZ2Zee1y+mTaDdld+YJrlY3oMZKsqhpyCIHHWAGLs6h tcboNp8XzdgIS800QPM1G1EgPIgTC6GJa9/ffl1JbFaoMml6i6WmvzTvU7/3GHaV oipCoZyiveQZBzmCaYNrwWdcNi3ybiuiLYaFGR5uzMJOF4ju2XWsvEXOcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3e5Wmyjuy3iSghUNWlBd+K1aG4MB8GA1UdIwQY MBaAFPNgx4sdRi1rr99zWdPCM92/kp0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODJESGl4MUdMV3V2MzNOWjA4SXozYi1TblRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kOGM5OWMtZTBjOC00YzFhLTgxZmIt OTAwZDFjYTMyZDdlLzEvODJESGl4MUdMV3V2MzNOWjA4SXozYi1TblRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kOGM5OWMtZTBjOC00YzFhLTgxZmItOTAwZDFjYTMyZDdl LzEvODJESGl4MUdMV3V2MzNOWjA4SXozYi1TblRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAee/YEr0K KKqoTG0TB+ZaRdXsT6eDqTLu6VABorR7tFGsFLhtDEkVU02JonvRtBkJtCfe5wOa SCGaounPkTrx/VNJObNQJxzfyByzZKKSMlwWliXnVtW6EIfzDwUwsusDuQSk19qA wGNp8dsjoGhBJUAj+b6Cp8PsZPmE7YX8399Hzf58JuxzpTNkuWnr2+xAPzd3mFFc S4jq2nJk6dLt9Q/P3nCCqFUVyJsg2iBc+0REHc9+VjgRhMMMwWiAtc8vOLNwAekQ m6ANtu7mgJYF6DAbKMPRvmOiPGpUi2FzrPv6euOQk5l05KzbuSAP6CSCnubt7Z3m UN6UVWcK55JvNg== -----END CERTIFICATE-----Generated at Tue Dec 16 04:35:56 2025 by rpki-client