This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft File: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft (raw, json) Hash identifier: cofCVh/0CPysRqNn0ay/bcS918ur1NC4PHSUpyzTnB0= Subject key identifier: 3D:C4:7D:5F:5B:26:05:A8:DB:E2:5F:6A:36:D2:22:67:F3:CD:38:23 Authority key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74 Certificate issuer: /CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174 Certificate serial: 019B3B6B2B2E70963938BBB4DB32247F1712 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft Manifest number: 05E3 Signing time: Sat 20 Dec 2025 11:00:37 +0000 Manifest this update: Sat 20 Dec 2025 11:00:37 +0000 Manifest next update: Sun 21 Dec 2025 11:00:37 +0000 Files and hashes: 1: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl (hash: A44IjCxtfAdDc3aI6tJID1FcmdnaE+NjIj9vblgl2Mw=) 2: i40en23OGg_DEWIRxhMGmgEox1s.roa (hash: iWUkdAfgE1mLIKUO/1DuqvBR2l5IncPfNwSFVOKSJKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:2b:2e:70:96:39:38:bb:b4:db:32:24:7f:17:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174 Validity Not Before: Dec 20 11:00:37 2025 GMT Not After : Dec 21 11:00:37 2025 GMT Subject: CN=3dc47d5f5b2605a8dbe25f6a36d22267f3cd3823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:26:c8:d6:ba:65:8c:26:5b:a2:6d:5e:b7:ca: 4d:bd:a4:cf:11:f0:d4:7d:cd:15:2a:b2:df:8f:cf: e2:43:59:3c:1e:45:98:06:ef:04:8e:d1:c4:65:e7: 2a:6b:36:f5:c6:2f:d8:d0:26:36:91:7f:b1:7c:24: ed:f2:82:0b:8a:b9:78:ed:77:5d:52:23:86:6f:99: 13:10:ef:4f:d5:8b:d2:33:9a:ff:28:c1:88:a7:ad: a6:31:fc:c4:ea:65:1e:72:ae:6a:41:fa:d4:c9:30: fa:43:85:c3:ff:f8:44:88:19:47:c8:c0:b2:dd:5c: 3d:a2:2f:b5:c2:9a:62:ff:49:d9:5e:81:a1:de:98: 0f:da:32:59:3d:dd:ef:03:96:21:85:d1:2f:95:72: 95:9f:c2:0e:d9:8a:3f:fe:59:1f:ce:a7:6e:c6:6f: 0d:a1:4b:d8:93:83:94:28:ef:8f:ef:51:23:70:c8: 7b:ef:15:59:7d:98:a4:2d:8f:95:0b:c0:33:4a:e1: 93:6b:2f:5c:d4:de:f6:b3:5c:7e:9c:f6:1d:bc:76: ba:df:91:97:62:14:66:8b:8b:df:bc:96:14:ba:d3: 1b:6c:81:bc:41:46:84:5c:ef:39:30:a4:cc:85:05: f6:6c:f8:03:cc:08:80:33:12:26:69:4e:2f:11:e5: 69:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C4:7D:5F:5B:26:05:A8:DB:E2:5F:6A:36:D2:22:67:F3:CD:38:23 X509v3 Authority Key Identifier: keyid:F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:8a:f3:10:e7:58:75:11:e6:9c:ba:0d:00:21:e6:f2:2f:8f: 25:e7:34:bd:8d:0c:92:cb:d1:35:cc:bb:5f:e8:99:35:db:50: 8d:ce:8e:e3:e0:73:87:67:0e:39:8b:1f:29:5a:4e:38:7c:31: 33:6f:6c:1a:54:ef:37:eb:56:7a:0d:1a:6b:43:68:38:5e:db: 71:86:b3:12:cd:72:60:89:d9:81:83:f4:0a:e7:4b:42:f4:84: e0:e9:e4:57:31:84:e1:26:10:2f:07:7e:cf:dc:ad:7b:d2:65: cb:bb:2c:d5:47:90:71:3d:d4:35:d4:55:eb:5f:19:07:9e:7e: aa:2f:21:22:26:93:9c:e7:78:7d:fd:f9:be:78:e3:4f:65:39: aa:40:4a:bb:a0:62:5a:16:49:4f:7e:64:44:a0:36:02:1a:36: f8:87:3c:81:4d:97:5f:ca:8a:39:fc:f3:c8:b8:40:8d:2c:57: bd:8a:b1:52:85:fe:22:06:4c:00:31:55:11:e5:20:11:13:00: cb:1d:5e:f5:cb:bb:4d:f3:70:84:24:d5:d3:ed:60:e8:17:e7: 39:31:ab:50:3f:77:06:60:01:36:4a:eb:f7:7d:b1:44:38:be: 55:97:a5:4b:35:de:0c:ad:8f:fe:4a:51:b8:4a:f7:c4:c7:5e: 35:f3:53:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7aysucJY5OLu02zIkfxcSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwM2VkNGZlZGY1NmQwYjAyYjE3MmM4Zjg5ZWMzNzY1MTBj ZDMxNzQwHhcNMjUxMjIwMTEwMDM3WhcNMjUxMjIxMTEwMDM3WjAzMTEwLwYDVQQD EygzZGM0N2Q1ZjViMjYwNWE4ZGJlMjVmNmEzNmQyMjI2N2YzY2QzODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ibI1rpljCZbom1et8pNvaTPEfDU fc0VKrLfj8/iQ1k8HkWYBu8EjtHEZecqazb1xi/Y0CY2kX+xfCTt8oILirl47Xdd UiOGb5kTEO9P1YvSM5r/KMGIp62mMfzE6mUecq5qQfrUyTD6Q4XD//hEiBlHyMCy 3Vw9oi+1wppi/0nZXoGh3pgP2jJZPd3vA5YhhdEvlXKVn8IO2Yo//lkfzqduxm8N oUvYk4OUKO+P71EjcMh77xVZfZikLY+VC8AzSuGTay9c1N72s1x+nPYdvHa635GX YhRmi4vfvJYUutMbbIG8QUaEXO85MKTMhQX2bPgDzAiAMxImaU4vEeVpKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3EfV9bJgWo2+JfajbSImfzzTgjMB8GA1UdIwQY MBaAFPA+1P7fVtCwKxcsj4nsN2UQzTF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNjM5NTAtNzZlOC00ZjJiLTg3MzEt ZmI0ZmQwN2UyNmEwLzEvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lNjM5NTAtNzZlOC00ZjJiLTg3MzEtZmI0ZmQwN2UyNmEw LzEvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4rzEOdY dRHmnLoNACHm8i+PJec0vY0MksvRNcy7X+iZNdtQjc6O4+Bzh2cOOYsfKVpOOHwx M29sGlTvN+tWeg0aa0NoOF7bcYazEs1yYInZgYP0CudLQvSE4OnkVzGE4SYQLwd+ z9yte9Jly7ss1UeQcT3UNdRV618ZB55+qi8hIiaTnOd4ff35vnjjT2U5qkBKu6Bi WhZJT35kRKA2Aho2+Ic8gU2XX8qKOfzzyLhAjSxXvYqxUoX+IgZMADFVEeUgERMA yx1e9cu7TfNwhCTV0+1g6BfnOTGrUD93BmABNkrr932xRDi+VZelSzXeDK2P/kpR uEr3xMdeNfNTYw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:02:35 2025 by rpki-client