This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft File: V8dqgOwpEqVok1y1e2plDwPf2NI.mft (raw, json) Hash identifier: L66Jq2DOXcxQDOE7uKRuq6I2tfNRKQdiCK3IK7E/8/c= Subject key identifier: 80:4B:1A:D1:3B:7E:CB:3C:7A:01:C6:47:E5:21:13:52:A7:D6:F2:34 Authority key identifier: 57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2 Certificate issuer: /CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2 Certificate serial: 019B34FBD41F8E9A45CDAFD8F8831FC75E3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft Manifest number: 0DB0 Signing time: Fri 19 Dec 2025 05:01:17 +0000 Manifest this update: Fri 19 Dec 2025 05:01:17 +0000 Manifest next update: Sat 20 Dec 2025 05:01:17 +0000 Files and hashes: 1: V8dqgOwpEqVok1y1e2plDwPf2NI.crl (hash: UL0bkgdbjtUR2O97juLFZWfihAbCzA3CSeEY/+YJKbQ=) 2: c0WcDmEa-I3e6oejtEWp5xBEKhk.roa (hash: gv5nn6HuxLobRhPQtfW9QLB/XRSSApZbiTBp/n9p8eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:d4:1f:8e:9a:45:cd:af:d8:f8:83:1f:c7:5e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2 Validity Not Before: Dec 19 05:01:17 2025 GMT Not After : Dec 20 05:01:17 2025 GMT Subject: CN=804b1ad13b7ecb3c7a01c647e5211352a7d6f234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:29:a8:4b:50:90:69:1c:0d:63:79:75:44:92: 75:ea:c3:50:a3:59:85:3b:d3:8d:c7:85:74:f1:3c: f4:94:97:3e:c6:2a:2a:cf:05:f5:11:5c:39:69:25: 9e:0c:ed:7c:df:a8:83:c4:46:47:5d:ce:3a:0f:36: 5b:1c:e8:4b:4c:3d:b0:8b:e6:15:99:43:9e:2a:07: 0b:4a:86:85:a2:5f:8a:18:77:f7:52:11:9d:54:08: e7:9e:e5:76:75:2d:1f:40:ff:4b:d3:99:1f:78:8f: de:be:a3:66:48:94:d1:94:60:53:63:d2:0b:88:c5: 0f:e6:51:22:6a:22:0e:f5:88:4f:d0:e0:82:7c:3c: 44:a2:2f:84:bc:c1:bc:b5:c1:af:88:99:58:84:30: 40:f0:ab:41:44:b2:aa:2b:9f:03:5d:67:6a:aa:4a: 34:10:f8:32:07:ff:39:13:6b:02:a8:e9:5a:e9:25: 90:cd:56:00:e5:96:33:9c:5f:51:83:8d:66:c9:cf: d0:6a:40:e3:85:61:42:4f:d1:c9:5d:68:75:81:54: 60:d3:8c:3d:0f:95:ec:04:eb:b9:bc:90:43:b9:96: a7:01:52:b6:cf:06:6f:9f:c4:c9:1e:50:b4:89:a7: a3:4f:95:36:9e:53:f5:57:5b:fc:cd:c2:3c:9f:bc: 30:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4B:1A:D1:3B:7E:CB:3C:7A:01:C6:47:E5:21:13:52:A7:D6:F2:34 X509v3 Authority Key Identifier: keyid:57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:fc:c1:31:20:5f:33:ff:5d:95:9c:45:36:9e:29:48:a7:bd: be:e8:20:63:8c:b4:19:92:c8:47:2d:be:2b:e0:28:6e:92:7f: fe:c9:bc:c0:86:22:54:40:ce:21:5d:75:5c:33:21:7f:29:55: a5:2a:59:f0:33:ab:f8:b0:5e:73:b2:89:0f:55:d8:01:87:ce: 88:55:4b:01:e4:96:fe:94:23:0e:d4:89:a4:ba:f9:24:a8:58: bc:fd:c7:f9:15:55:28:be:a7:e3:56:85:19:df:03:ff:66:4b: 2c:7b:2c:4a:60:17:8b:1d:cb:e1:85:5c:31:5e:b5:df:4f:35: c3:34:3d:12:42:85:5e:24:ed:e4:16:7b:19:5e:81:e4:12:07: 6c:b7:f0:4a:e6:4d:af:be:63:32:fa:1d:b2:47:7c:e1:e3:8b: 93:ef:91:84:c9:bc:31:d1:cc:fd:13:40:9e:f5:06:27:32:ed: 6f:c6:cf:7c:ad:a4:12:b1:f3:f7:8e:cb:1c:73:aa:26:20:12: d5:77:d3:67:9d:45:da:1b:43:cf:99:22:fa:18:4c:92:47:93: 7a:99:ff:c7:83:e5:ab:48:b6:db:2e:91:ee:2d:07:6d:17:16: 19:e8:87:3c:56:93:69:14:68:5f:de:ef:32:92:15:37:48:1b: af:07:4b:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+9QfjppFza/Y+IMfx149MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3Yzc2YTgwZWMyOTEyYTU2ODkzNWNiNTdiNmE2NTBmMDNk ZmQ4ZDIwHhcNMjUxMjE5MDUwMTE3WhcNMjUxMjIwMDUwMTE3WjAzMTEwLwYDVQQD Eyg4MDRiMWFkMTNiN2VjYjNjN2EwMWM2NDdlNTIxMTM1MmE3ZDZmMjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApimoS1CQaRwNY3l1RJJ16sNQo1mF O9ONx4V08Tz0lJc+xioqzwX1EVw5aSWeDO1836iDxEZHXc46DzZbHOhLTD2wi+YV mUOeKgcLSoaFol+KGHf3UhGdVAjnnuV2dS0fQP9L05kfeI/evqNmSJTRlGBTY9IL iMUP5lEiaiIO9YhP0OCCfDxEoi+EvMG8tcGviJlYhDBA8KtBRLKqK58DXWdqqko0 EPgyB/85E2sCqOla6SWQzVYA5ZYznF9Rg41myc/QakDjhWFCT9HJXWh1gVRg04w9 D5XsBOu5vJBDuZanAVK2zwZvn8TJHlC0iaejT5U2nlP1V1v8zcI8n7wwXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBLGtE7fss8egHGR+UhE1Kn1vI0MB8GA1UdIwQY MBaAFFfHaoDsKRKlaJNctXtqZQ8D39jSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhkcWdPd3BFcVZvazF5MWUycGxEd1BmMk5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80MGU1ZjQtZDA1Ni00NGYyLTg5OWUt MjI4NmI4OWU3YTdlLzEvVjhkcWdPd3BFcVZvazF5MWUycGxEd1BmMk5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS80MGU1ZjQtZDA1Ni00NGYyLTg5OWUtMjI4NmI4OWU3YTdl LzEvVjhkcWdPd3BFcVZvazF5MWUycGxEd1BmMk5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnPzBMSBf M/9dlZxFNp4pSKe9vuggY4y0GZLIRy2+K+AobpJ//sm8wIYiVEDOIV11XDMhfylV pSpZ8DOr+LBec7KJD1XYAYfOiFVLAeSW/pQjDtSJpLr5JKhYvP3H+RVVKL6n41aF Gd8D/2ZLLHssSmAXix3L4YVcMV613081wzQ9EkKFXiTt5BZ7GV6B5BIHbLfwSuZN r75jMvodskd84eOLk++RhMm8MdHM/RNAnvUGJzLtb8bPfK2kErHz947LHHOqJiAS 1XfTZ51F2htDz5ki+hhMkkeTepn/x4Plq0i22y6R7i0HbRcWGeiHPFaTaRRoX97v MpIVN0gbrwdLEQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:45:06 2025 by rpki-client