This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft File: V8e-KewTsKsBiXQR6G7Piw87NEo.mft (raw, json) Hash identifier: z+0bYP8p1ZJy06FpqY0Pw9qRf2keGt9iMnSVKc59P2k= Subject key identifier: 78:F7:19:FE:47:DF:5B:C1:1B:54:0B:1B:0E:77:D3:6B:13:0B:8D:DE Authority key identifier: 57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A Certificate issuer: /CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a Certificate serial: 019B2E1DB99180851E03EE8D1AA6453C87FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft Manifest number: 1783 Signing time: Wed 17 Dec 2025 21:00:58 +0000 Manifest this update: Wed 17 Dec 2025 21:00:58 +0000 Manifest next update: Thu 18 Dec 2025 21:00:58 +0000 Files and hashes: 1: V8e-KewTsKsBiXQR6G7Piw87NEo.crl (hash: P1V7CyP9smcjBTBpHX6FzSGvQSNjb+qRsDeDxzCpjpQ=) 2: v827Klwx8U7EDB2WbdLf4CEXliw.roa (hash: BAU2KXwimUuepAhjPQcMIt+Q0c8KhENCD8ID/skeNjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:b9:91:80:85:1e:03:ee:8d:1a:a6:45:3c:87:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a Validity Not Before: Dec 17 21:00:58 2025 GMT Not After : Dec 18 21:00:58 2025 GMT Subject: CN=78f719fe47df5bc11b540b1b0e77d36b130b8dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:56:82:93:d9:ee:17:37:15:95:60:cf:b0:d7: a8:b9:40:2f:01:60:a1:b2:be:92:69:d8:02:33:b4: 24:91:23:49:d8:57:77:94:22:3b:b7:84:3f:ba:83: e4:9b:11:8e:a2:8c:aa:00:7b:45:39:0a:c7:08:0f: d1:30:66:59:9a:90:62:f8:f8:53:a7:ef:48:28:38: d6:e8:e5:6f:e5:63:3b:04:80:1d:27:d0:a4:d3:5d: 40:ba:e9:64:bd:50:1f:3d:48:67:54:dc:f3:9b:68: 96:68:97:1a:0b:79:be:73:15:67:49:8f:9d:15:3f: 96:6c:09:42:cf:03:73:dc:f2:4c:0c:be:4b:26:fb: 0f:31:c9:68:d4:f4:4e:5f:45:09:1a:ee:9c:08:3d: e7:9c:9c:7f:e5:13:51:b0:40:77:9b:61:7e:bf:c8: d1:ff:8b:8d:61:54:23:b1:c0:72:a7:f0:db:5b:57: e0:b0:1b:8d:9a:ff:80:5f:7c:0c:6d:81:a3:0a:8d: 13:8b:96:e4:96:4a:f4:36:c3:d8:e2:fd:15:4c:b9: b8:5e:f3:c4:cb:fc:ac:99:98:58:ce:2c:37:44:d3: 99:ae:46:24:4b:95:17:de:8a:a1:04:30:76:73:f3: 96:5e:17:42:b8:87:d3:3b:7d:e6:80:41:67:8f:94: 76:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F7:19:FE:47:DF:5B:C1:1B:54:0B:1B:0E:77:D3:6B:13:0B:8D:DE X509v3 Authority Key Identifier: keyid:57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:91:c2:e3:bd:49:c6:4c:3e:58:4d:09:ea:55:80:fb:07:2b: a1:46:a1:51:d8:f9:f2:27:af:ac:c7:27:e5:1a:fd:63:df:3d: e0:91:87:37:0d:ba:b3:b4:85:db:40:02:dd:c4:48:18:7e:29: 2a:11:16:9d:79:cf:13:be:d3:5a:e5:66:c9:19:81:64:92:43: 21:5f:f6:d3:ce:15:06:ed:ae:ff:58:41:2b:a9:38:4e:51:87: b5:0b:5d:76:96:20:b3:6d:30:2d:7b:1a:9b:19:62:65:00:c4: 14:5c:b9:4c:cd:d8:a0:82:c0:8d:12:b4:0e:3c:51:5e:d4:0b: e1:16:03:5b:46:ca:f7:52:18:54:4e:04:41:3b:13:99:42:f1: a6:1a:1f:5f:75:86:2b:c0:61:99:86:27:47:e2:5c:6e:08:75: 08:e6:f4:0e:81:3c:9f:8f:2c:da:11:7d:fe:d3:0d:a7:77:f7: cc:48:6d:f3:de:c2:7e:b3:c1:10:4b:c5:0c:10:b8:61:75:d2: 60:04:aa:61:1f:46:33:4a:57:b0:b6:1a:3e:1f:76:cc:4a:15: 31:d1:34:b5:a7:e7:1c:87:d4:7a:e9:9f:a5:e0:d6:44:d7:d4: 43:6c:65:3b:44:b9:f1:cb:74:57:a5:ab:8c:2d:e3:9e:75:1c: 65:ce:0f:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHbmRgIUeA+6NGqZFPIf+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzdiZTI5ZWMxM2IwYWIwMTg5NzQxMWU4NmVjZjhiMGYz YjM0NGEwHhcNMjUxMjE3MjEwMDU4WhcNMjUxMjE4MjEwMDU4WjAzMTEwLwYDVQQD Eyg3OGY3MTlmZTQ3ZGY1YmMxMWI1NDBiMWIwZTc3ZDM2YjEzMGI4ZGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVaCk9nuFzcVlWDPsNeouUAvAWCh sr6SadgCM7QkkSNJ2Fd3lCI7t4Q/uoPkmxGOooyqAHtFOQrHCA/RMGZZmpBi+PhT p+9IKDjW6OVv5WM7BIAdJ9Ck011AuulkvVAfPUhnVNzzm2iWaJcaC3m+cxVnSY+d FT+WbAlCzwNz3PJMDL5LJvsPMclo1PROX0UJGu6cCD3nnJx/5RNRsEB3m2F+v8jR /4uNYVQjscByp/DbW1fgsBuNmv+AX3wMbYGjCo0Ti5bklkr0NsPY4v0VTLm4XvPE y/ysmZhYziw3RNOZrkYkS5UX3oqhBDB2c/OWXhdCuIfTO33mgEFnj5R2CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHj3Gf5H31vBG1QLGw5302sTC43eMB8GA1UdIwQY MBaAFFfHvinsE7CrAYl0Eehuz4sPOzRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhlLUtld1RzS3NCaVhRUjZHN1Bpdzg3TkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9mMGQ4NTMtNDJjYy00YTE3LTgxYTEt YmFlMWQ5ZWVjNDFhLzEvVjhlLUtld1RzS3NCaVhRUjZHN1Bpdzg3TkVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9mMGQ4NTMtNDJjYy00YTE3LTgxYTEtYmFlMWQ5ZWVjNDFh LzEvVjhlLUtld1RzS3NCaVhRUjZHN1Bpdzg3TkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZHC471J xkw+WE0J6lWA+wcroUahUdj58ievrMcn5Rr9Y9894JGHNw26s7SF20AC3cRIGH4p KhEWnXnPE77TWuVmyRmBZJJDIV/2084VBu2u/1hBK6k4TlGHtQtddpYgs20wLXsa mxliZQDEFFy5TM3YoILAjRK0DjxRXtQL4RYDW0bK91IYVE4EQTsTmULxphofX3WG K8BhmYYnR+Jcbgh1COb0DoE8n48s2hF9/tMNp3f3zEht897CfrPBEEvFDBC4YXXS YASqYR9GM0pXsLYaPh92zEoVMdE0tafnHIfUeumfpeDWRNfUQ2xlO0S58ct0V6Wr jC3jnnUcZc4PFQ== -----END CERTIFICATE-----Generated at Thu Dec 18 04:00:47 2025 by rpki-client