This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft File: d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft (raw, json) Hash identifier: 0l/TbUfKI25S543UCd+Y5rV+6L1xduI/x2TC2yQm02Y= Subject key identifier: BA:97:8B:D2:FB:D4:E5:7B:E0:8B:7F:59:D1:FA:37:8D:99:8B:38:2F Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4 Certificate issuer: /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4 Certificate serial: 019AABA704FDE2258D9197C7EF0CF605F476 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft Manifest number: 126B Signing time: Sat 22 Nov 2025 13:00:40 +0000 Manifest this update: Sat 22 Nov 2025 13:00:40 +0000 Manifest next update: Sun 23 Nov 2025 13:00:40 +0000 Files and hashes: 1: FVyOtMSkw-0Vg62ACMKcfYtFTZg.roa (hash: 19Vo/+e85FEDOozBk9ulyjhvlWCZUEMrSObfkurwei4=) 2: bGBL61Pb5C5jQn9lTt04zeAidWQ.roa (hash: tcI+1ZDPgb0dQJ/mWEWyrYgZXPfZZ/VnqvsqqlmCxEY=) 3: d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl (hash: 0DgEX/nkYqWISWRUmYh6PAyZ72+sLbjwsfQYRYJQ+ds=) 4: kfH4Hfcw2DAA4uCH3S-0NOLLLIE.roa (hash: +ssFltk6eznRSfe1ZkEA/pnveLfuNyk/DPp5U5STMlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:a7:04:fd:e2:25:8d:91:97:c7:ef:0c:f6:05:f4:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4 Validity Not Before: Nov 22 13:00:40 2025 GMT Not After : Nov 23 13:00:40 2025 GMT Subject: CN=ba978bd2fbd4e57be08b7f59d1fa378d998b382f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:71:95:cc:f4:58:bb:3b:d1:6f:a2:9b:7f:8e: b1:2f:4a:d3:68:a5:a9:1e:57:c4:e7:81:d7:25:8e: 7e:a4:cd:cb:8a:0d:8d:c8:94:af:56:29:be:d0:d8: f8:d5:de:09:cf:b9:55:39:5d:55:52:47:b2:fc:af: 32:63:e7:cb:fa:04:29:ae:1f:a5:30:c0:25:52:cf: d0:2a:b6:e5:0b:2e:a7:2e:a4:23:9e:ba:2f:f5:8a: f1:4e:75:c0:3b:9b:01:00:09:4a:aa:59:0b:d7:74: 75:69:7f:07:55:b4:39:b6:19:38:0a:50:be:3a:62: cc:73:86:f2:01:9b:2d:e7:7b:a9:16:19:e4:fb:87: 4b:ab:6c:09:cd:53:92:b2:91:fd:15:9e:72:7d:a1: 9c:bb:14:e8:90:35:15:68:56:47:3d:6f:75:87:26: d6:e8:12:fd:0a:e9:91:2c:80:1a:96:41:1e:41:ce: b5:b5:ed:4d:00:9c:d1:71:03:8e:3b:6e:13:66:13: 0a:3b:20:d3:dc:77:c5:1a:2d:83:c9:e7:84:8e:1e: 20:b0:96:b8:0c:5f:72:fd:0b:80:4b:d9:bb:e9:1a: 63:77:ca:8a:fc:60:64:d8:fd:7d:07:d0:0f:96:eb: 2d:19:41:fa:88:9c:70:e2:f3:6e:d5:2a:d1:4d:07: 49:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:97:8B:D2:FB:D4:E5:7B:E0:8B:7F:59:D1:FA:37:8D:99:8B:38:2F X509v3 Authority Key Identifier: keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:da:02:5f:e0:34:ea:cc:5e:fb:c4:2d:40:59:df:91:74:f8: ce:ff:f9:d6:6c:c1:d9:ba:de:a3:73:4c:0b:ce:27:76:ae:c9: ed:b5:7a:10:e0:9f:0a:7c:0d:b1:77:80:b6:24:f4:9f:00:3b: 40:17:cd:16:31:0c:75:f9:dc:ab:03:bb:f9:72:09:9a:42:26: 6b:b8:00:67:43:88:7c:d8:83:fe:69:f4:b3:15:4b:ca:58:eb: 4e:03:59:9b:33:5c:59:cd:81:c8:89:62:d6:94:9d:68:d5:e9: 66:ef:7d:5b:6c:b8:d7:25:ae:fd:54:16:b6:98:94:b7:e8:17: 37:36:89:3b:3d:03:76:f6:04:f4:7b:93:80:84:b3:28:95:39: 68:55:ed:54:45:22:39:99:39:49:2c:1a:a9:4f:d2:41:23:8f: d1:a2:20:f4:6c:92:ab:40:44:7b:d2:42:4b:81:21:d2:c8:82: 62:e3:cb:11:23:70:02:fd:3a:5b:67:12:27:2d:f6:a8:2f:b1: e5:c1:b0:d6:29:29:8a:06:80:f2:50:b1:4f:c9:03:0c:dc:49: 32:ca:2b:66:1e:5d:66:21:3a:48:18:8a:71:28:95:f2:75:ce: da:52:7d:ef:57:7e:a9:51:87:c6:e7:61:d7:37:4a:1c:96:af: a9:b9:a9:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqrpwT94iWNkZfH7wz2BfR2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3Y2M0NmFkZTk1N2M4ZjA2NmE1YzZmZTI1MzEwYTRjZjVh N2U5ZDQwHhcNMjUxMTIyMTMwMDQwWhcNMjUxMTIzMTMwMDQwWjAzMTEwLwYDVQQD EyhiYTk3OGJkMmZiZDRlNTdiZTA4YjdmNTlkMWZhMzc4ZDk5OGIzODJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnGVzPRYuzvRb6Kbf46xL0rTaKWp HlfE54HXJY5+pM3Lig2NyJSvVim+0Nj41d4Jz7lVOV1VUkey/K8yY+fL+gQprh+l MMAlUs/QKrblCy6nLqQjnrov9YrxTnXAO5sBAAlKqlkL13R1aX8HVbQ5thk4ClC+ OmLMc4byAZst53upFhnk+4dLq2wJzVOSspH9FZ5yfaGcuxTokDUVaFZHPW91hybW 6BL9CumRLIAalkEeQc61te1NAJzRcQOOO24TZhMKOyDT3HfFGi2DyeeEjh4gsJa4 DF9y/QuAS9m76Rpjd8qK/GBk2P19B9APlustGUH6iJxw4vNu1SrRTQdJCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqXi9L71OV74It/WdH6N42ZizgvMB8GA1UdIwQY MBaAFHfMRq3pV8jwZqXG/iUxCkz1p+nUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDh4R3JlbFh5UEJtcGNiLUpURUtUUFduNmRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kNjFiNTQtZWU5Zi00ZTAwLWIxZTMt ZjdkMDI3NTYwMDU4LzEvZDh4R3JlbFh5UEJtcGNiLUpURUtUUFduNmRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9kNjFiNTQtZWU5Zi00ZTAwLWIxZTMtZjdkMDI3NTYwMDU4 LzEvZDh4R3JlbFh5UEJtcGNiLUpURUtUUFduNmRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAutoCX+A0 6sxe+8QtQFnfkXT4zv/51mzB2breo3NMC84ndq7J7bV6EOCfCnwNsXeAtiT0nwA7 QBfNFjEMdfncqwO7+XIJmkIma7gAZ0OIfNiD/mn0sxVLyljrTgNZmzNcWc2ByIli 1pSdaNXpZu99W2y41yWu/VQWtpiUt+gXNzaJOz0DdvYE9HuTgISzKJU5aFXtVEUi OZk5SSwaqU/SQSOP0aIg9GySq0BEe9JCS4Eh0siCYuPLESNwAv06W2cSJy32qC+x 5cGw1ikpigaA8lCxT8kDDNxJMsorZh5dZiE6SBiKcSiV8nXO2lJ971d+qVGHxudh 1zdKHJavqbmpEg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:39:54 2025 by rpki-client