This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json) Hash identifier: rCnF68gt/O6DYBsAlav/yJXRftgwHb8PzI8kQQfNGBM= Subject key identifier: 6B:2B:0D:29:78:40:7A:5E:A8:A0:5F:7D:E1:8D:C8:DF:E8:D1:7D:1D Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2 Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2 Certificate serial: 019B239A5D658C53086250618BDD90DF77C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft Manifest number: 121F Signing time: Mon 15 Dec 2025 20:01:17 +0000 Manifest this update: Mon 15 Dec 2025 20:01:17 +0000 Manifest next update: Tue 16 Dec 2025 20:01:17 +0000 Files and hashes: 1: KzHfiiDg2EcCwKAmppKJC7QdUFA.roa (hash: QZ0RWt1gfijBZB5RL8yUAfB/DWbprl5d1kxp7e8kc3g=) 2: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: wQwBHQxG7H7fk51FDnpu3dnSfX7NSAeNXar4tvjNPh4=) 3: kuAnd9NqWnoBzCTnx0XxXmRi7Z4.roa (hash: gmNwgm6wcIRoGUSbEH7MItCnGX2M/c/Toez7Z0Fqses=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:9a:5d:65:8c:53:08:62:50:61:8b:dd:90:df:77:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2 Validity Not Before: Dec 15 20:01:17 2025 GMT Not After : Dec 16 20:01:17 2025 GMT Subject: CN=6b2b0d2978407a5ea8a05f7de18dc8dfe8d17d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:63:c9:ab:85:b0:ce:92:16:d7:c6:42:03:d4: 0b:51:3d:71:de:e5:e7:cc:db:05:cf:54:18:0e:ff: 38:7c:39:eb:98:80:05:64:88:80:4e:2a:1c:2c:cf: 30:e5:da:29:22:61:9d:c2:25:66:b0:95:dc:74:4d: dd:6f:59:d7:29:24:bb:f8:22:f4:0e:e2:62:54:3e: 7a:de:97:07:69:71:f2:3d:cd:4f:b0:8b:9a:ec:ae: e4:82:76:6d:32:e5:03:5d:d7:93:cb:a1:81:a5:25: 10:19:7b:49:04:70:59:c6:16:75:3d:0c:16:30:81: 8f:56:30:5c:21:44:ea:df:f2:fd:93:09:9f:da:82: 16:29:74:04:2d:73:82:73:c1:f6:fb:95:62:70:da: fb:a4:15:d7:9b:8f:f6:7d:ca:74:aa:7e:74:dc:cf: 76:67:a9:60:10:80:d0:7f:8a:55:b2:be:9b:8f:69: f7:7a:4c:11:84:76:42:dc:70:d7:4f:9f:39:f4:91: 06:48:64:73:36:27:87:cc:50:3d:d1:e0:d8:5d:70: 8e:38:1e:ce:8b:59:02:39:34:85:46:62:0e:b1:a4: 9c:05:c8:4f:c7:0d:bf:9d:8c:cd:e5:0e:e0:5c:89: 6c:ef:d3:5c:09:64:1c:66:64:93:72:f9:ae:1c:6b: 68:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2B:0D:29:78:40:7A:5E:A8:A0:5F:7D:E1:8D:C8:DF:E8:D1:7D:1D X509v3 Authority Key Identifier: keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:7a:06:55:80:fc:27:fb:8f:99:76:4a:10:4b:a2:69:3b:bf: 2f:28:cb:21:9f:f9:c3:f8:2f:8b:16:7c:b4:9b:4e:44:fd:26: ef:20:f5:18:ad:57:65:cb:79:27:c7:f5:e1:8c:43:48:59:69: 5c:f6:cf:c8:35:84:d8:1f:b3:18:b2:76:c1:44:77:c0:d2:75: 94:68:aa:c9:d6:b6:67:c8:bb:f8:19:a8:9d:15:46:6d:9b:f1: a5:8e:76:7b:e0:50:d2:8f:7f:bd:7c:a9:05:38:37:2e:b9:5b: 5c:59:e6:41:d5:62:57:47:f9:50:c0:a2:0e:22:7a:54:f2:e5: 6f:69:66:aa:93:b9:c9:20:fe:58:79:45:d0:b7:66:50:56:b5: 57:fa:50:13:01:fd:b4:87:53:a8:f5:a7:c5:4b:79:d1:63:cf: 11:0b:e2:e8:10:a3:05:55:8d:ad:7e:8f:af:19:4e:49:51:1b: 11:6c:6c:42:40:40:21:81:83:b5:a7:df:73:14:cc:a8:70:8f: b3:7b:5b:f8:3b:1f:ba:af:09:b7:ee:96:08:87:8a:54:75:7b: 30:a9:45:b2:03:09:04:52:cc:be:d4:2b:08:07:95:7a:c4:3f: 93:45:b5:21:2a:42:e3:42:bf:17:da:a3:ee:6a:49:b2:9e:ea: 70:39:4a:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjml1ljFMIYlBhi92Q33fIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzZmYjY1NTQ2MWQ3M2ZjZjIxZTg2MTJjMzE4NzA2YTA4 OWE1YzIwHhcNMjUxMjE1MjAwMTE3WhcNMjUxMjE2MjAwMTE3WjAzMTEwLwYDVQQD Eyg2YjJiMGQyOTc4NDA3YTVlYThhMDVmN2RlMThkYzhkZmU4ZDE3ZDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmPJq4WwzpIW18ZCA9QLUT1x3uXn zNsFz1QYDv84fDnrmIAFZIiATiocLM8w5dopImGdwiVmsJXcdE3db1nXKSS7+CL0 DuJiVD563pcHaXHyPc1PsIua7K7kgnZtMuUDXdeTy6GBpSUQGXtJBHBZxhZ1PQwW MIGPVjBcIUTq3/L9kwmf2oIWKXQELXOCc8H2+5VicNr7pBXXm4/2fcp0qn503M92 Z6lgEIDQf4pVsr6bj2n3ekwRhHZC3HDXT5859JEGSGRzNieHzFA90eDYXXCOOB7O i1kCOTSFRmIOsaScBchPxw2/nYzN5Q7gXIls79NcCWQcZmSTcvmuHGtolQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsrDSl4QHpeqKBffeGNyN/o0X0dMB8GA1UdIwQY MBaAFHfG+2VUYdc/zyHoYSwxhwagiaXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2Yt YWIzMDgxYjJhYmE0LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2YtYWIzMDgxYjJhYmE0 LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3oGVYD8 J/uPmXZKEEuiaTu/LyjLIZ/5w/gvixZ8tJtORP0m7yD1GK1XZct5J8f14YxDSFlp XPbPyDWE2B+zGLJ2wUR3wNJ1lGiqyda2Z8i7+BmonRVGbZvxpY52e+BQ0o9/vXyp BTg3LrlbXFnmQdViV0f5UMCiDiJ6VPLlb2lmqpO5ySD+WHlF0LdmUFa1V/pQEwH9 tIdTqPWnxUt50WPPEQvi6BCjBVWNrX6PrxlOSVEbEWxsQkBAIYGDtaffcxTMqHCP s3tb+Dsfuq8Jt+6WCIeKVHV7MKlFsgMJBFLMvtQrCAeVesQ/k0W1ISpC40K/F9qj 7mpJsp7qcDlKsA== -----END CERTIFICATE-----Generated at Tue Dec 16 01:09:13 2025 by rpki-client