This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft File: 82BUCSXbyxoJ-2XzspAD1o8j3ms.mft (raw, json) Hash identifier: /Iov6muTCh63hLJlh/GlhTczVWCMtNDv7mHnHyPQuI0= Subject key identifier: 39:A3:BB:5C:1B:3C:75:DD:02:AC:8D:11:14:70:29:A4:20:E9:79:11 Authority key identifier: F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B Certificate issuer: /CN=f360540925dbcb1a09fb65f3b29003d68f23de6b Certificate serial: 019B4438DB17AB5F5E043019861114579CE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft Manifest number: 0B38 Signing time: Mon 22 Dec 2025 04:02:15 +0000 Manifest this update: Mon 22 Dec 2025 04:02:15 +0000 Manifest next update: Tue 23 Dec 2025 04:02:15 +0000 Files and hashes: 1: 82BUCSXbyxoJ-2XzspAD1o8j3ms.crl (hash: 4F/jrS4k0E0R3l5IHoGsYzEnMb46ZYwiddKEafSlgYc=) 2: WO4Lx-SRYYsLgDA8d_7YHDSf7BI.roa (hash: nMdj6H5AmHScUq7iFK7ub3BJ0X174BqxH7J5lRBxaFk=) 3: oI7kOSiG8h1OQh9w777ujGQ8d5c.roa (hash: 7bzozQwhPvIcjtgW8D6KNMw02ktIJKUDIRXI6dPZ7uY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:db:17:ab:5f:5e:04:30:19:86:11:14:57:9c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f360540925dbcb1a09fb65f3b29003d68f23de6b Validity Not Before: Dec 22 04:02:15 2025 GMT Not After : Dec 23 04:02:15 2025 GMT Subject: CN=39a3bb5c1b3c75dd02ac8d11147029a420e97911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7f:14:b8:90:10:73:df:6e:21:6a:32:86:40: 78:23:e4:39:d3:57:21:ca:b3:e6:03:86:f0:c0:a2: 08:33:1d:97:ef:5e:f5:f8:b0:26:d1:74:e1:12:88: b6:7f:80:91:63:3c:84:06:18:9f:4d:86:a4:d9:bb: 84:d8:c3:d3:56:2f:bb:f2:38:8d:0a:72:25:6d:c4: a4:75:51:14:cd:a3:04:74:2f:a8:4d:9a:71:93:b0: 45:af:dd:8a:5b:d6:60:47:aa:03:37:c4:50:f7:b7: c7:93:2e:42:06:8e:8c:36:3c:ea:7f:d4:f6:39:da: df:97:a5:70:1a:da:43:df:f5:6c:05:f3:45:91:71: 2f:be:26:8a:31:ea:a8:dd:57:55:fa:62:6e:03:af: b9:cc:66:e1:d0:be:1a:92:30:ea:05:ff:e0:10:0a: 20:d4:1e:69:59:5f:95:b0:fb:54:88:34:2a:fd:f4: 85:c4:8b:02:e3:7b:d2:5b:f9:64:a8:4c:23:06:3c: 34:13:7a:91:8f:2a:b8:6e:99:20:a7:f5:2b:72:9b: a3:77:57:26:42:27:42:5b:fb:c1:0e:c6:74:c1:d8: 69:34:4c:30:2f:ed:59:9a:c0:f1:33:55:b3:ee:a5: 41:15:bf:66:1a:d0:48:e3:f9:c5:74:21:43:03:ca: ae:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A3:BB:5C:1B:3C:75:DD:02:AC:8D:11:14:70:29:A4:20:E9:79:11 X509v3 Authority Key Identifier: keyid:F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:6e:19:1d:4b:0c:df:47:1a:02:34:76:15:1b:a9:ae:60:50: 6a:0b:3a:f7:ff:fb:aa:07:6d:70:14:e6:a9:38:4f:9e:03:ea: 23:2c:73:59:89:50:98:e1:04:fc:e8:8f:4c:b3:76:fc:b9:52: 2c:9c:be:e5:f7:86:f0:23:95:1d:93:fd:dc:99:5f:3a:7f:2c: e9:17:94:5c:34:b3:66:62:f4:df:08:36:5b:43:91:30:f2:3e: af:1e:f8:f6:f6:20:17:f5:92:e1:32:ca:5b:50:98:95:5c:74: 9f:93:04:70:2c:0c:c4:5a:b0:49:4d:bf:a0:37:20:d1:23:1c: fb:61:b5:98:3d:4d:f7:5d:d1:12:53:92:14:9f:57:bf:8f:6c: 6d:fb:c1:0b:30:74:da:df:e9:32:b9:31:97:24:da:25:a8:4b: 6a:6d:74:a9:a2:28:4f:0d:59:36:b2:85:b8:de:6b:50:7b:b5: 6d:8f:a7:51:35:a9:75:59:c7:a6:69:a4:a8:b4:a2:87:fc:3a: d3:09:df:14:88:b9:52:ae:d7:67:43:eb:75:dd:26:6c:2e:91: cb:fd:12:33:84:fe:2e:67:48:84:07:16:72:ee:2b:98:3c:88: b4:dc:9d:74:be:88:e8:e9:6a:58:3b:81:61:ff:d9:89:9d:15: 2e:66:ba:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEONsXq19eBDAZhhEUV5znMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNjA1NDA5MjVkYmNiMWEwOWZiNjVmM2IyOTAwM2Q2OGYy M2RlNmIwHhcNMjUxMjIyMDQwMjE1WhcNMjUxMjIzMDQwMjE1WjAzMTEwLwYDVQQD EygzOWEzYmI1YzFiM2M3NWRkMDJhYzhkMTExNDcwMjlhNDIwZTk3OTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq38UuJAQc99uIWoyhkB4I+Q501ch yrPmA4bwwKIIMx2X7171+LAm0XThEoi2f4CRYzyEBhifTYak2buE2MPTVi+78jiN CnIlbcSkdVEUzaMEdC+oTZpxk7BFr92KW9ZgR6oDN8RQ97fHky5CBo6MNjzqf9T2 Odrfl6VwGtpD3/VsBfNFkXEvviaKMeqo3VdV+mJuA6+5zGbh0L4akjDqBf/gEAog 1B5pWV+VsPtUiDQq/fSFxIsC43vSW/lkqEwjBjw0E3qRjyq4bpkgp/Urcpujd1cm QidCW/vBDsZ0wdhpNEwwL+1ZmsDxM1Wz7qVBFb9mGtBI4/nFdCFDA8quoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmju1wbPHXdAqyNERRwKaQg6XkRMB8GA1UdIwQY MBaAFPNgVAkl28saCftl87KQA9aPI95rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODJCVUNTWGJ5eG9KLTJYenNwQUQxbzhqM21zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy80ZGFlN2YtYmEwZS00Mjc3LTllOTIt YjRmMDA3ZWY3ZTg2LzEvODJCVUNTWGJ5eG9KLTJYenNwQUQxbzhqM21zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy80ZGFlN2YtYmEwZS00Mjc3LTllOTItYjRmMDA3ZWY3ZTg2 LzEvODJCVUNTWGJ5eG9KLTJYenNwQUQxbzhqM21zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWW4ZHUsM 30caAjR2FRuprmBQags69//7qgdtcBTmqThPngPqIyxzWYlQmOEE/OiPTLN2/LlS LJy+5feG8COVHZP93JlfOn8s6ReUXDSzZmL03wg2W0ORMPI+rx749vYgF/WS4TLK W1CYlVx0n5MEcCwMxFqwSU2/oDcg0SMc+2G1mD1N913RElOSFJ9Xv49sbfvBCzB0 2t/pMrkxlyTaJahLam10qaIoTw1ZNrKFuN5rUHu1bY+nUTWpdVnHpmmkqLSih/w6 0wnfFIi5Uq7XZ0Prdd0mbC6Ry/0SM4T+LmdIhAcWcu4rmDyItNyddL6I6OlqWDuB Yf/ZiZ0VLma6aw== -----END CERTIFICATE-----Generated at Mon Dec 22 09:47:34 2025 by rpki-client