This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft File: d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft (raw, json) Hash identifier: rkCWH9CiKG+SZyWyktIFpQHu+E7d9w1Hlmq5BAye4S0= Subject key identifier: 09:7A:F2:C1:84:09:1C:95:5E:33:98:5E:F1:C5:57:3B:1E:89:66:D7 Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78 Certificate issuer: /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78 Certificate serial: 019B416D7201CCC3DD984F3545909162E9D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft Manifest number: 0F2C Signing time: Sun 21 Dec 2025 15:00:50 +0000 Manifest this update: Sun 21 Dec 2025 15:00:50 +0000 Manifest next update: Mon 22 Dec 2025 15:00:50 +0000 Files and hashes: 1: Wqa4SsP2h_ssNFKOjNzf7n1D1Oc.roa (hash: r8Od7aNV9w5qxKZEsiTyK8JnMXxLB2GhaVrqj9OwkeA=) 2: d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl (hash: Pj4TYtFotuc3OuzC0O8ONH2YmjemMJsSNS/ErPOo3Xc=) 3: kwVeacE9Id0juKigol5W8QUGZmY.roa (hash: 7cxULpmrleNFyzISvZ8CMCvy9RGxzfGSr5MdwYQQpa0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:72:01:cc:c3:dd:98:4f:35:45:90:91:62:e9:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78 Validity Not Before: Dec 21 15:00:50 2025 GMT Not After : Dec 22 15:00:50 2025 GMT Subject: CN=097af2c184091c955e33985ef1c5573b1e8966d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5c:85:09:d4:7c:0a:fd:1b:72:0f:31:26:e6: b6:c2:93:f3:3e:f9:c1:db:f9:bb:90:a1:24:13:41: a4:d1:65:75:39:f5:43:18:03:60:2d:94:a8:a5:28: c5:7e:51:4f:43:45:8a:1d:4f:77:82:79:3e:0b:6c: 5a:89:c4:d9:b7:f4:36:b1:ad:5c:c8:b4:35:2e:a7: 27:b0:94:06:a8:82:76:0d:a3:7d:c8:fc:4e:14:32: b4:98:bb:34:c8:bb:52:5b:0c:26:67:36:42:15:5b: 7b:74:51:c5:8b:bd:ed:3c:d9:a7:b8:38:66:60:ad: 00:7c:d3:da:35:03:af:8b:2c:30:d9:61:c8:a2:45: 8c:83:0e:0c:9d:75:a8:1d:68:13:0c:0c:0d:84:47: e7:fd:c6:42:38:f6:00:eb:a0:bf:d2:27:60:21:62: 2c:34:95:b1:90:98:10:4b:70:56:fb:bb:c9:14:14: 13:08:0a:d4:75:0c:83:82:e3:c7:56:0a:9b:11:c4: 45:fe:56:d9:6c:19:a2:55:4b:1c:1e:bf:a1:5b:2a: e7:b6:56:62:5b:36:ce:2c:36:00:c7:fe:91:70:df: 99:2c:cd:a8:a2:93:89:78:3b:8a:97:cf:30:47:96: aa:15:bb:c9:25:0f:b0:fa:45:15:8f:78:02:bb:31: ba:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7A:F2:C1:84:09:1C:95:5E:33:98:5E:F1:C5:57:3B:1E:89:66:D7 X509v3 Authority Key Identifier: keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:b5:72:0d:d4:3c:96:35:4c:96:6f:c2:58:15:1c:a2:4c:7e: 63:d1:73:39:f1:15:6f:06:9d:81:6d:d8:d2:ad:6a:18:48:f7: 71:b8:77:52:21:45:ce:c3:b5:5e:78:45:73:15:6e:f7:24:81: 65:94:87:7d:ef:93:08:b8:58:84:bc:4c:94:e0:06:69:95:51: 6f:5d:15:fa:77:8f:95:05:2d:d5:6b:0f:fc:8a:6e:07:1b:37: c4:72:8b:bf:6f:15:2d:8c:49:0a:48:4a:93:12:c4:a8:4a:80: 86:f3:35:b1:f4:91:4a:84:5a:33:20:d9:7e:56:b2:65:fe:6c: 72:4a:35:e2:c6:8f:ef:d7:e2:86:b3:6c:c1:35:5f:cd:ad:8a: 26:90:0c:ab:53:60:16:52:cb:74:b0:37:a8:6a:1e:ea:db:21: 33:01:84:8c:17:58:41:b6:2b:fc:aa:8a:98:b9:de:b7:ec:f8: 03:4c:94:09:51:3a:7f:ad:93:02:43:97:da:36:bc:a7:48:74: 62:3f:83:c1:d1:7b:5a:be:0e:45:c7:d4:41:22:37:f0:2a:12: 9d:46:e9:1a:4a:64:04:c7:72:5d:4f:87:6f:03:b0:72:67:57: a4:2d:cb:91:4a:24:e4:a0:f5:97:d1:94:6f:c0:ee:87:72:da: 8e:af:ba:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbXIBzMPdmE81RZCRYunVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzdkZDI1Y2E1ZmIxZGM5MTNjMmZmYjkxNmZhMjJmYjg2 MTBiNzgwHhcNMjUxMjIxMTUwMDUwWhcNMjUxMjIyMTUwMDUwWjAzMTEwLwYDVQQD EygwOTdhZjJjMTg0MDkxYzk1NWUzMzk4NWVmMWM1NTczYjFlODk2NmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1yFCdR8Cv0bcg8xJua2wpPzPvnB 2/m7kKEkE0Gk0WV1OfVDGANgLZSopSjFflFPQ0WKHU93gnk+C2xaicTZt/Q2sa1c yLQ1LqcnsJQGqIJ2DaN9yPxOFDK0mLs0yLtSWwwmZzZCFVt7dFHFi73tPNmnuDhm YK0AfNPaNQOviyww2WHIokWMgw4MnXWoHWgTDAwNhEfn/cZCOPYA66C/0idgIWIs NJWxkJgQS3BW+7vJFBQTCArUdQyDguPHVgqbEcRF/lbZbBmiVUscHr+hWyrntlZi WzbOLDYAx/6RcN+ZLM2oopOJeDuKl88wR5aqFbvJJQ+w+kUVj3gCuzG6jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAl68sGECRyVXjOYXvHFVzseiWbXMB8GA1UdIwQY MBaAFHfH3SXKX7HckTwv+5Fvoi+4YQt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhmZEpjcGZzZHlSUENfN2tXLWlMN2hoQzNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80OTNhYjgtNTRjNC00MmY1LWI0YWYt ZGRiMzViMWFiYWQ1LzEvZDhmZEpjcGZzZHlSUENfN2tXLWlMN2hoQzNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC80OTNhYjgtNTRjNC00MmY1LWI0YWYtZGRiMzViMWFiYWQ1 LzEvZDhmZEpjcGZzZHlSUENfN2tXLWlMN2hoQzNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULVyDdQ8 ljVMlm/CWBUcokx+Y9FzOfEVbwadgW3Y0q1qGEj3cbh3UiFFzsO1XnhFcxVu9ySB ZZSHfe+TCLhYhLxMlOAGaZVRb10V+nePlQUt1WsP/IpuBxs3xHKLv28VLYxJCkhK kxLEqEqAhvM1sfSRSoRaMyDZflayZf5scko14saP79fihrNswTVfza2KJpAMq1Ng FlLLdLA3qGoe6tshMwGEjBdYQbYr/KqKmLnet+z4A0yUCVE6f62TAkOX2ja8p0h0 Yj+DwdF7Wr4ORcfUQSI38CoSnUbpGkpkBMdyXU+HbwOwcmdXpC3LkUok5KD1l9GU b8Duh3Lajq+6YA== -----END CERTIFICATE-----Generated at Sun Dec 21 22:39:10 2025 by rpki-client