This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft File: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft (raw, json) Hash identifier: ID7qZHMaVCUxNfn/ZUsfDbF2nub5ebC0GfUeOr3r0Mo= Subject key identifier: 56:52:63:CB:6C:E8:35:DC:C1:C5:32:16:6F:33:09:11:07:BA:52:90 Authority key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74 Certificate issuer: /CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174 Certificate serial: 019B620B5CB2B0CE97D1FE5F1B69B87A2119 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft Manifest number: 05F7 Signing time: Sat 27 Dec 2025 23:01:10 +0000 Manifest this update: Sat 27 Dec 2025 23:01:10 +0000 Manifest next update: Sun 28 Dec 2025 23:01:10 +0000 Files and hashes: 1: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl (hash: zjgPVgPyLXDhSwtI+atPgZpqiWug5mWdNcCUtQWmpPE=) 2: i40en23OGg_DEWIRxhMGmgEox1s.roa (hash: iWUkdAfgE1mLIKUO/1DuqvBR2l5IncPfNwSFVOKSJKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 23:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:0b:5c:b2:b0:ce:97:d1:fe:5f:1b:69:b8:7a:21:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174 Validity Not Before: Dec 27 23:01:10 2025 GMT Not After : Dec 28 23:01:10 2025 GMT Subject: CN=565263cb6ce835dcc1c532166f33091107ba5290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:43:27:4b:b2:a9:a1:3d:0a:54:d9:d5:41:3b: 99:e7:31:b1:3a:68:bf:c2:2d:e9:c0:22:b6:d7:c3: e4:bd:20:eb:f5:79:37:f8:c6:cf:0b:0a:02:e4:5c: e0:15:99:84:ee:f1:5f:49:37:01:ec:17:4c:28:10: 93:d8:aa:28:61:26:ef:68:49:12:91:80:e2:c1:ab: 7e:56:ba:0a:90:62:c4:7e:b9:23:f7:03:2d:7b:19: 6c:c6:da:be:82:ff:96:3d:a7:c8:e9:eb:0a:5d:ed: 51:70:7c:70:50:8a:57:49:bc:02:b8:ba:14:90:49: 5f:12:a3:51:1c:3f:d4:34:58:85:8f:7b:da:b1:71: 7a:96:8a:1b:6b:ab:cb:16:ae:dc:14:2f:e3:c8:f4: 2d:4c:4c:d2:1f:1d:73:7d:17:95:33:fd:8a:45:60: d8:9c:ac:f7:52:dc:ff:87:ac:b5:dd:f2:7b:3f:26: 0b:31:ba:5a:51:e8:28:14:4b:75:8f:ff:6a:70:e6: 0c:7a:44:a8:0a:6e:d4:50:f6:7a:51:77:37:2c:01: d2:67:ec:f4:5f:93:4a:19:86:03:e5:a5:86:58:3d: 26:8d:07:4a:71:b6:14:86:36:1f:a6:ed:e0:c6:94: 5c:f5:18:26:76:db:23:1f:eb:f7:5e:9f:4f:43:f9: 0c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:52:63:CB:6C:E8:35:DC:C1:C5:32:16:6F:33:09:11:07:BA:52:90 X509v3 Authority Key Identifier: keyid:F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e4:5e:02:d6:34:05:5d:52:0c:b8:c2:6e:83:fb:04:81:b3: 29:87:16:81:e8:d0:ef:12:e9:a9:ae:48:61:30:33:f6:a0:aa: 9f:b8:75:6a:8a:9e:27:61:09:ff:c1:50:14:37:c3:e8:7b:2d: e9:6b:9d:85:33:62:77:4a:d8:ee:17:57:e1:71:96:7a:ec:e1: fa:6c:43:4d:d8:9b:90:20:9c:39:80:5c:b8:c3:53:55:ee:e6: 51:1e:91:3a:34:65:5b:88:08:e1:e1:3e:12:10:4a:e7:55:c7: c6:c4:92:77:cd:85:a7:e9:05:77:9f:32:c2:af:be:d1:c0:b0: c8:a0:2f:6f:70:53:74:ed:f4:08:9d:27:9b:50:6b:dc:e3:4b: 8a:16:04:79:7e:6a:be:b1:c6:66:21:ce:fb:d1:d8:ad:a1:42: f7:04:83:44:ce:4f:a0:d7:bf:8b:0e:4a:65:fd:ec:64:e9:1f: bd:83:09:24:cc:20:61:be:af:66:7f:96:58:55:4a:09:7a:45: ff:9c:e5:f2:a7:23:5e:6d:05:45:d6:9e:95:89:a1:e2:7c:bf: c5:2e:4f:94:26:5b:41:10:93:88:bd:dc:c4:92:ea:a4:3d:79: 63:e0:60:34:68:7a:e8:1f:5f:e8:4e:53:0e:21:1e:8a:9f:da: 71:ea:51:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiC1yysM6X0f5fG2m4eiEZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwM2VkNGZlZGY1NmQwYjAyYjE3MmM4Zjg5ZWMzNzY1MTBj ZDMxNzQwHhcNMjUxMjI3MjMwMTEwWhcNMjUxMjI4MjMwMTEwWjAzMTEwLwYDVQQD Eyg1NjUyNjNjYjZjZTgzNWRjYzFjNTMyMTY2ZjMzMDkxMTA3YmE1MjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkMnS7KpoT0KVNnVQTuZ5zGxOmi/ wi3pwCK218PkvSDr9Xk3+MbPCwoC5FzgFZmE7vFfSTcB7BdMKBCT2KooYSbvaEkS kYDiwat+VroKkGLEfrkj9wMtexlsxtq+gv+WPafI6esKXe1RcHxwUIpXSbwCuLoU kElfEqNRHD/UNFiFj3vasXF6looba6vLFq7cFC/jyPQtTEzSHx1zfReVM/2KRWDY nKz3Utz/h6y13fJ7PyYLMbpaUegoFEt1j/9qcOYMekSoCm7UUPZ6UXc3LAHSZ+z0 X5NKGYYD5aWGWD0mjQdKcbYUhjYfpu3gxpRc9RgmdtsjH+v3Xp9PQ/kMMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZSY8ts6DXcwcUyFm8zCREHulKQMB8GA1UdIwQY MBaAFPA+1P7fVtCwKxcsj4nsN2UQzTF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNjM5NTAtNzZlOC00ZjJiLTg3MzEt ZmI0ZmQwN2UyNmEwLzEvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lNjM5NTAtNzZlOC00ZjJiLTg3MzEtZmI0ZmQwN2UyNmEw LzEvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANeReAtY0 BV1SDLjCboP7BIGzKYcWgejQ7xLpqa5IYTAz9qCqn7h1aoqeJ2EJ/8FQFDfD6Hst 6WudhTNid0rY7hdX4XGWeuzh+mxDTdibkCCcOYBcuMNTVe7mUR6ROjRlW4gI4eE+ EhBK51XHxsSSd82Fp+kFd58ywq++0cCwyKAvb3BTdO30CJ0nm1Br3ONLihYEeX5q vrHGZiHO+9HYraFC9wSDRM5PoNe/iw5KZf3sZOkfvYMJJMwgYb6vZn+WWFVKCXpF /5zl8qcjXm0FRdaelYmh4ny/xS5PlCZbQRCTiL3cxJLqpD15Y+BgNGh66B9f6E5T DiEeip/acepRZw== -----END CERTIFICATE-----Generated at Sun Dec 28 05:50:33 2025 by rpki-client