This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft File: 80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft (raw, json) Hash identifier: /aV1OLHZidNGAVVP+tEd7dGVc9ZZU5Kd6+QwHpTWKaQ= Subject key identifier: FC:ED:17:CD:7C:7B:99:3B:C7:29:4E:41:9E:6E:2A:EC:D0:F3:F0:B1 Authority key identifier: F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4 Certificate issuer: /CN=f344a9f3665084f5009921ac52d119750beed4b4 Certificate serial: 019B07B5606F67F163B2BD20BF12DDC1E3B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft Manifest number: 176F Signing time: Wed 10 Dec 2025 10:01:25 +0000 Manifest this update: Wed 10 Dec 2025 10:01:25 +0000 Manifest next update: Thu 11 Dec 2025 10:01:25 +0000 Files and hashes: 1: 80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl (hash: 5i5L9eIYA5hDXD1nHkMEluIz1gStfF9ouqsDtWeUDcw=) 2: duO9LxBTkVs9bWkFXNzc7GNBnLM.roa (hash: qNyvixX6BJstTr21KHWMkBm39t0mtYSLiR/YYgK3594=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:60:6f:67:f1:63:b2:bd:20:bf:12:dd:c1:e3:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f344a9f3665084f5009921ac52d119750beed4b4 Validity Not Before: Dec 10 10:01:25 2025 GMT Not After : Dec 11 10:01:25 2025 GMT Subject: CN=fced17cd7c7b993bc7294e419e6e2aecd0f3f0b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5e:94:4c:f6:ac:87:a5:4a:b3:91:ca:a3:0f: 8e:a0:51:c8:c5:35:f8:03:72:8f:96:c4:04:f4:c5: d9:6e:43:99:87:b6:fe:0f:75:d5:45:58:59:c1:f0: 78:e4:ff:d6:2d:16:c0:d9:70:a5:b5:07:87:eb:96: 15:14:cb:1a:f5:fa:c9:95:6d:c9:f1:67:4f:28:e4: 06:e8:21:a8:3e:e4:18:8b:0a:de:4b:98:c7:47:c9: 6c:82:d9:3e:7c:c4:4e:14:8d:55:a5:3a:6c:a7:b4: d6:61:ae:28:df:b4:63:49:e8:51:40:2a:78:92:42: 9d:b0:df:1f:5e:5b:72:eb:50:69:41:e7:91:4b:e8: 4f:e5:b2:d7:f9:93:a2:2e:d8:bd:56:55:a2:af:bb: 7e:bb:0e:d1:af:26:13:54:92:6d:49:e3:8d:61:c5: 7e:6b:62:30:03:c7:a3:6c:ef:d2:5f:c5:5b:ec:8e: 9e:58:ee:8b:4f:8d:33:c7:54:e5:f5:a0:46:bc:62: b5:ce:f6:25:11:f3:81:1a:e9:54:a3:24:5e:6c:23: b1:68:a0:d3:b8:a2:63:ac:c4:2f:df:9e:38:a4:47: ae:44:7e:b5:56:fa:2c:67:e3:9a:09:bd:b1:3e:01: b8:79:dd:f1:17:fc:02:5f:5e:a4:ad:3e:5f:10:9d: 0f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:ED:17:CD:7C:7B:99:3B:C7:29:4E:41:9E:6E:2A:EC:D0:F3:F0:B1 X509v3 Authority Key Identifier: keyid:F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:fd:f3:44:a3:42:ec:36:cd:32:b1:66:89:eb:93:26:65:6b: 24:ac:f8:e8:66:d9:8b:e0:f0:a3:e9:c5:81:01:e3:3b:24:f1: 33:e5:e5:51:d8:ea:dc:1d:b8:d4:7c:f8:b9:40:ce:c8:a9:a0: cb:e2:a2:24:b1:ed:d4:43:0e:2c:9d:6f:a3:98:3f:03:23:cc: d5:1f:02:10:b6:b6:1c:dd:6f:df:96:ed:6c:aa:5f:cd:43:a8: d4:0c:cf:46:f1:18:15:b5:28:e7:4d:6f:be:fe:c0:6e:9d:7a: 9d:cd:e9:fa:ce:27:2e:7c:ba:ad:1e:f5:49:44:b5:7c:4c:2e: 09:74:68:18:c8:4e:00:fb:e9:ea:04:84:42:89:96:0a:f3:23: b8:d5:da:bd:3b:0e:55:53:72:38:66:a8:4c:04:4b:a8:57:b2: 42:54:30:bf:a4:93:4e:bb:09:bb:a1:19:95:d5:f4:52:7c:27: 37:07:f2:71:53:14:68:a4:5e:8f:b1:41:8e:33:f9:ae:b9:62: 2d:c5:a5:e4:7c:a1:75:98:13:00:2f:0e:02:09:92:09:aa:e0: a3:52:56:a1:87:be:01:d1:63:2a:c7:42:7f:d2:ad:ae:3e:ff: fe:52:5e:e7:cd:17:7a:8c:88:43:7d:4b:4b:90:48:5c:fd:60: de:67:c8:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtWBvZ/Fjsr0gvxLdweO1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNDRhOWYzNjY1MDg0ZjUwMDk5MjFhYzUyZDExOTc1MGJl ZWQ0YjQwHhcNMjUxMjEwMTAwMTI1WhcNMjUxMjExMTAwMTI1WjAzMTEwLwYDVQQD EyhmY2VkMTdjZDdjN2I5OTNiYzcyOTRlNDE5ZTZlMmFlY2QwZjNmMGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp16UTPash6VKs5HKow+OoFHIxTX4 A3KPlsQE9MXZbkOZh7b+D3XVRVhZwfB45P/WLRbA2XCltQeH65YVFMsa9frJlW3J 8WdPKOQG6CGoPuQYiwreS5jHR8lsgtk+fMROFI1VpTpsp7TWYa4o37RjSehRQCp4 kkKdsN8fXlty61BpQeeRS+hP5bLX+ZOiLti9VlWir7t+uw7RryYTVJJtSeONYcV+ a2IwA8ejbO/SX8Vb7I6eWO6LT40zx1Tl9aBGvGK1zvYlEfOBGulUoyRebCOxaKDT uKJjrMQv3544pEeuRH61VvosZ+OaCb2xPgG4ed3xF/wCX16krT5fEJ0PKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPztF818e5k7xylOQZ5uKuzQ8/CxMB8GA1UdIwQY MBaAFPNEqfNmUIT1AJkhrFLRGXUL7tS0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODBTcDgyWlFoUFVBbVNHc1V0RVpkUXZ1MUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83MTZhOTAtZDI5NS00OTAzLTkwZjkt ZDhjN2VmMTU1MTFkLzEvODBTcDgyWlFoUFVBbVNHc1V0RVpkUXZ1MUxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83MTZhOTAtZDI5NS00OTAzLTkwZjktZDhjN2VmMTU1MTFk LzEvODBTcDgyWlFoUFVBbVNHc1V0RVpkUXZ1MUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu/3zRKNC 7DbNMrFmieuTJmVrJKz46GbZi+Dwo+nFgQHjOyTxM+XlUdjq3B241Hz4uUDOyKmg y+KiJLHt1EMOLJ1vo5g/AyPM1R8CELa2HN1v35btbKpfzUOo1AzPRvEYFbUo501v vv7Abp16nc3p+s4nLny6rR71SUS1fEwuCXRoGMhOAPvp6gSEQomWCvMjuNXavTsO VVNyOGaoTARLqFeyQlQwv6STTrsJu6EZldX0UnwnNwfycVMUaKRej7FBjjP5rrli LcWl5HyhdZgTAC8OAgmSCargo1JWoYe+AdFjKsdCf9Ktrj7//lJe580XeoyIQ31L S5BIXP1g3mfI6g== -----END CERTIFICATE-----Generated at Wed Dec 10 18:29:41 2025 by rpki-client