This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft File: mD8bE53ySgXC5SVgUrAhJRfkc1E.mft (raw, json) Hash identifier: MJ2ko4fyi4Nyo7YeruNO9qB0H0kckoXl1daI66jMtuA= Subject key identifier: 5A:5E:7A:38:8D:4D:45:22:0E:9B:03:21:B8:B7:19:18:60:43:26:56 Authority key identifier: 98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51 Certificate issuer: /CN=983f1b139df24a05c2e5256052b0212517e47351 Certificate serial: 019B495E2CCCA844A0202FC940DE33C37A9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft Manifest number: 0390 Signing time: Tue 23 Dec 2025 04:01:07 +0000 Manifest this update: Tue 23 Dec 2025 04:01:07 +0000 Manifest next update: Wed 24 Dec 2025 04:01:07 +0000 Files and hashes: 1: mD8bE53ySgXC5SVgUrAhJRfkc1E.crl (hash: pSTZ8hZr6qvrbTYcl9XdKeYgpRaA6YGEqJL9H9Y1QXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5e:2c:cc:a8:44:a0:20:2f:c9:40:de:33:c3:7a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983f1b139df24a05c2e5256052b0212517e47351 Validity Not Before: Dec 23 04:01:07 2025 GMT Not After : Dec 24 04:01:07 2025 GMT Subject: CN=5a5e7a388d4d45220e9b0321b8b7191860432656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4b:33:24:fd:e2:da:87:c9:00:cd:36:2f:99: 43:89:30:59:d3:75:79:51:22:16:22:8d:4b:20:82: 75:77:40:f9:e5:14:a4:f7:c8:fa:18:34:d9:e3:9b: 45:21:c4:9c:83:7e:0e:8f:75:2e:44:e1:1c:15:a2: 33:36:4f:32:66:4a:8e:80:3d:18:c0:8f:48:34:c8: d4:76:98:5f:92:53:d6:1e:8a:87:76:48:57:59:62: 1d:32:f8:d7:ff:8b:dc:73:5e:dd:a0:05:08:4e:c3: af:06:4c:ca:11:86:df:d4:29:fd:19:67:4f:94:79: 5d:17:9b:d4:ab:2a:07:90:58:bf:29:1f:3e:f6:ee: e8:5b:eb:07:26:d6:da:9c:1b:45:e0:ab:2b:07:00: cf:1a:74:e3:8e:e9:b4:48:b3:f9:03:36:07:c6:e6: 00:f4:07:92:de:54:8d:0a:35:97:20:96:bf:73:e8: fa:bd:ea:50:ff:0b:5b:89:83:96:d9:bd:4a:fc:01: d9:21:69:60:47:9a:7c:36:c3:34:a6:36:19:53:fc: 85:13:1b:2a:37:94:82:98:cb:80:a4:f7:d4:21:53: 0d:13:73:65:79:31:a8:94:e8:00:7a:4f:59:86:7a: 23:76:1c:3c:07:4b:19:60:52:27:a0:76:c7:63:ba: 87:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5E:7A:38:8D:4D:45:22:0E:9B:03:21:B8:B7:19:18:60:43:26:56 X509v3 Authority Key Identifier: keyid:98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b7:59:c6:65:86:6b:2b:51:67:55:8c:9f:8e:d8:22:fd:18: 16:6a:0f:3d:cf:e5:33:d7:9b:69:9a:78:b5:04:ce:44:8c:bf: 18:7a:00:98:68:55:6c:31:4f:0d:b3:eb:74:19:8c:83:a5:9f: 81:a8:c7:c0:0c:00:b7:1c:58:85:c1:4d:9d:40:50:0d:15:3c: b6:b0:0a:d2:9c:e0:94:36:31:71:56:7c:93:5f:11:a4:0c:55: 39:17:1f:2f:ba:a9:67:09:21:da:f5:c3:49:75:2c:07:8a:32: f4:cb:59:2e:6c:2e:9b:e9:2b:b9:b6:e5:f4:92:82:24:0b:ab: 9e:e0:00:59:a5:33:6f:4d:95:a1:d5:34:30:23:6b:a5:53:db: 0e:19:e6:2d:78:6b:d2:23:7c:49:69:23:ca:4e:36:c0:33:58: f3:f1:c6:fa:8d:01:ce:fe:58:f1:0c:da:2a:ac:e8:7d:00:0f: cc:d2:48:a8:6f:e7:b8:e8:28:fc:96:0c:ea:9b:6b:cb:db:26: 7b:b9:62:8f:d0:86:95:c1:74:12:43:ed:e1:72:84:65:fc:21: f8:a2:1c:92:a8:44:c3:a1:34:5c:7c:6d:27:27:1c:0b:2f:e4: 1a:d1:68:2d:f1:78:4c:85:a2:93:30:7a:02:c3:56:09:19:7f: 4e:72:2c:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXizMqESgIC/JQN4zw3qaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4M2YxYjEzOWRmMjRhMDVjMmU1MjU2MDUyYjAyMTI1MTdl NDczNTEwHhcNMjUxMjIzMDQwMTA3WhcNMjUxMjI0MDQwMTA3WjAzMTEwLwYDVQQD Eyg1YTVlN2EzODhkNGQ0NTIyMGU5YjAzMjFiOGI3MTkxODYwNDMyNjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30szJP3i2ofJAM02L5lDiTBZ03V5 USIWIo1LIIJ1d0D55RSk98j6GDTZ45tFIcScg34Oj3UuROEcFaIzNk8yZkqOgD0Y wI9INMjUdphfklPWHoqHdkhXWWIdMvjX/4vcc17doAUITsOvBkzKEYbf1Cn9GWdP lHldF5vUqyoHkFi/KR8+9u7oW+sHJtbanBtF4KsrBwDPGnTjjum0SLP5AzYHxuYA 9AeS3lSNCjWXIJa/c+j6vepQ/wtbiYOW2b1K/AHZIWlgR5p8NsM0pjYZU/yFExsq N5SCmMuApPfUIVMNE3NleTGolOgAek9Zhnojdhw8B0sZYFInoHbHY7qHKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpeejiNTUUiDpsDIbi3GRhgQyZWMB8GA1UdIwQY MBaAFJg/GxOd8koFwuUlYFKwISUX5HNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUQ4YkU1M3lTZ1hDNVNWZ1VyQWhKUmZrYzFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jMmNjNWYtMjVhNi00MmJiLWE5NzAt ZWY5NjQ0MzEyZGRiLzEvbUQ4YkU1M3lTZ1hDNVNWZ1VyQWhKUmZrYzFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9jMmNjNWYtMjVhNi00MmJiLWE5NzAtZWY5NjQ0MzEyZGRi LzEvbUQ4YkU1M3lTZ1hDNVNWZ1VyQWhKUmZrYzFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrdZxmWG aytRZ1WMn47YIv0YFmoPPc/lM9ebaZp4tQTORIy/GHoAmGhVbDFPDbPrdBmMg6Wf gajHwAwAtxxYhcFNnUBQDRU8trAK0pzglDYxcVZ8k18RpAxVORcfL7qpZwkh2vXD SXUsB4oy9MtZLmwum+krubbl9JKCJAurnuAAWaUzb02VodU0MCNrpVPbDhnmLXhr 0iN8SWkjyk42wDNY8/HG+o0Bzv5Y8QzaKqzofQAPzNJIqG/nuOgo/JYM6ptry9sm e7lij9CGlcF0EkPt4XKEZfwh+KIckqhEw6E0XHxtJyccCy/kGtFoLfF4TIWikzB6 AsNWCRl/TnIs2g== -----END CERTIFICATE-----Generated at Tue Dec 23 07:53:05 2025 by rpki-client