This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft File: 08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json) Hash identifier: /G5ygh0SEwi+Xm50N+XehCuWhzN3L66wJN+Bqe2T4wQ= Subject key identifier: 2D:8B:DC:F4:35:BD:1E:FB:2A:09:09:19:7C:C4:4F:25:EE:C4:9E:52 Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD Certificate issuer: /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd Certificate serial: 019B59759AE52F6A949AEC945BAF43C824E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 07:00:37 +0000 Manifest this update: Fri 26 Dec 2025 07:00:37 +0000 Manifest next update: Sat 27 Dec 2025 07:00:37 +0000 Files and hashes: 1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: R/BYe0uNR6esqt7ymp8U1MwFRr4AN7uwnE6/Sg4f1y4=) 2: vhpsA1QTyqlbOgTgwwiSOvjLosU.roa (hash: oOzCVm5vsYLrY+U1GpoNLtBM7Fbrqb31l0clRbwWzyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:9a:e5:2f:6a:94:9a:ec:94:5b:af:43:c8:24:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd Validity Not Before: Dec 26 07:00:37 2025 GMT Not After : Dec 27 07:00:37 2025 GMT Subject: CN=2d8bdcf435bd1efb2a0909197cc44f25eec49e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:87:a8:6f:d7:63:bd:d2:a5:98:e8:30:69:eb: 24:55:95:8a:bf:8c:df:59:63:5d:13:b7:83:3b:cf: 7a:12:60:28:3b:4d:70:17:c6:8f:eb:99:5c:a6:2a: e4:b8:46:93:69:84:47:6e:59:4b:8c:41:b2:54:96: bf:f9:63:e2:61:a6:16:1e:ca:eb:c1:91:fd:b4:bf: 66:a9:82:cf:7c:3d:de:25:f0:af:9a:8c:a5:be:7f: 4f:0f:b4:03:56:31:12:a9:b8:18:80:26:05:1d:eb: 2c:9c:2a:c5:a4:e4:37:14:c6:f8:02:45:6c:e2:8d: 53:7b:14:be:bf:fd:87:c1:a1:b0:31:4b:67:6f:2f: 9e:8b:8d:4f:f3:6e:fa:16:6a:dc:c8:df:9f:27:98: 6c:91:02:63:2f:c6:a4:57:5a:3a:60:fa:d8:e1:01: 30:2a:0d:64:d2:ee:65:93:39:86:2e:32:71:19:00: ff:a4:e8:c1:d7:87:05:66:75:83:89:8e:09:82:69: 10:92:a3:ab:7a:71:69:b0:e2:f4:1f:e8:59:da:ab: ee:bb:86:c5:1e:80:07:cf:ce:b8:24:84:23:d2:90: 8c:83:b0:8e:84:28:a4:71:e8:6e:75:ca:2a:cd:9c: 80:8c:63:4d:09:b2:e7:7d:c8:41:4d:08:02:d5:e2: 1f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8B:DC:F4:35:BD:1E:FB:2A:09:09:19:7C:C4:4F:25:EE:C4:9E:52 X509v3 Authority Key Identifier: keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:18:2d:65:d3:42:c9:93:30:db:0c:fb:e0:67:fd:6e:df:48: bd:57:c8:c9:ac:e6:15:50:51:d4:57:c8:5b:79:9f:dc:4c:5c: 69:b8:6f:88:c2:5a:6c:1f:e2:86:c6:b9:8a:e9:9c:24:f9:1c: 47:1e:24:dd:c4:8d:1c:50:9d:00:24:73:0f:b1:8b:cd:e2:a4: 15:04:69:70:2e:ab:33:66:a4:16:e1:97:e7:5a:9c:85:c6:46: 87:07:bd:ae:99:1f:71:a8:1a:ff:35:82:0c:1b:f1:4e:45:f0: dd:3f:8c:bb:2d:27:f2:31:62:df:c9:ff:da:b2:6b:2a:c0:26: 50:7d:7f:be:61:6f:e9:73:df:30:d9:bb:f1:6b:1f:14:90:ec: ef:2b:56:11:ec:29:67:9f:c3:24:18:6d:6d:a8:85:f9:17:2f: 94:2f:7a:74:31:37:35:25:5c:54:4f:c8:cf:65:4f:e5:2d:6b: e3:c1:cf:34:27:b6:44:f1:b2:cc:ba:a3:0d:86:2b:af:ef:c6: 84:28:b4:ab:19:d0:ec:14:bc:de:f7:77:37:b6:7c:dc:c5:3c: f1:11:24:4e:b9:ad:c1:ba:fa:14:21:dd:3d:80:21:22:e8:62: 7b:d4:15:56:83:f9:7e:4a:3f:ca:5f:a7:29:ba:c0:42:f4:c8: e4:2a:e8:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdZrlL2qUmuyUW69DyCTlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYzBkNWIxMDZiODFhOTI5MjRlYTJiYzUxMzlmYmI1ZWUx MTg2ZGQwHhcNMjUxMjI2MDcwMDM3WhcNMjUxMjI3MDcwMDM3WjAzMTEwLwYDVQQD EygyZDhiZGNmNDM1YmQxZWZiMmEwOTA5MTk3Y2M0NGYyNWVlYzQ5ZTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oeob9djvdKlmOgwaeskVZWKv4zf WWNdE7eDO896EmAoO01wF8aP65lcpirkuEaTaYRHbllLjEGyVJa/+WPiYaYWHsrr wZH9tL9mqYLPfD3eJfCvmoylvn9PD7QDVjESqbgYgCYFHessnCrFpOQ3FMb4AkVs 4o1TexS+v/2HwaGwMUtnby+ei41P8276FmrcyN+fJ5hskQJjL8akV1o6YPrY4QEw Kg1k0u5lkzmGLjJxGQD/pOjB14cFZnWDiY4JgmkQkqOrenFpsOL0H+hZ2qvuu4bF HoAHz864JIQj0pCMg7COhCikcehudcoqzZyAjGNNCbLnfchBTQgC1eIfpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2L3PQ1vR77KgkJGXzETyXuxJ5SMB8GA1UdIwQY MBaAFNPA1bEGuBqSkk6ivFE5+7XuEYbdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xOWY0ZDQtNWMxZS00MjFmLTlmNTYt YmM1MTA0YTM4NWUyLzEvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8xOWY0ZDQtNWMxZS00MjFmLTlmNTYtYmM1MTA0YTM4NWUy LzEvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBgtZdNC yZMw2wz74Gf9bt9IvVfIyazmFVBR1FfIW3mf3ExcabhviMJabB/ihsa5iumcJPkc Rx4k3cSNHFCdACRzD7GLzeKkFQRpcC6rM2akFuGX51qchcZGhwe9rpkfcaga/zWC DBvxTkXw3T+Muy0n8jFi38n/2rJrKsAmUH1/vmFv6XPfMNm78WsfFJDs7ytWEewp Z5/DJBhtbaiF+RcvlC96dDE3NSVcVE/Iz2VP5S1r48HPNCe2RPGyzLqjDYYrr+/G hCi0qxnQ7BS83vd3N7Z83MU88REkTrmtwbr6FCHdPYAhIuhie9QVVoP5fko/yl+n KbrAQvTI5Cro0Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:04 2025 by rpki-client