This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft File: mD8bE53ySgXC5SVgUrAhJRfkc1E.mft (raw, json) Hash identifier: aQDjzuZeaDx9sMQejhjdbA+bJh412zIiUiZXdk63r5c= Subject key identifier: 09:16:D2:01:FA:65:C5:78:57:50:C5:3B:EB:8E:3A:72:96:4B:57:A1 Authority key identifier: 98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51 Certificate issuer: /CN=983f1b139df24a05c2e5256052b0212517e47351 Certificate serial: 019B3FB61C80B771BEE01B91D916B160463F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft Manifest number: 038B Signing time: Sun 21 Dec 2025 07:00:57 +0000 Manifest this update: Sun 21 Dec 2025 07:00:57 +0000 Manifest next update: Mon 22 Dec 2025 07:00:57 +0000 Files and hashes: 1: mD8bE53ySgXC5SVgUrAhJRfkc1E.crl (hash: U7A95vNSG7QNxwaj/b/EwnDM0/VFeRWPeQ6/bzdDS5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:1c:80:b7:71:be:e0:1b:91:d9:16:b1:60:46:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983f1b139df24a05c2e5256052b0212517e47351 Validity Not Before: Dec 21 07:00:57 2025 GMT Not After : Dec 22 07:00:57 2025 GMT Subject: CN=0916d201fa65c5785750c53beb8e3a72964b57a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9a:c6:2f:76:f2:70:ae:20:ed:a9:4f:6b:66: 20:cf:70:15:4e:72:63:a5:04:04:0a:a5:33:e3:79: f5:18:46:7d:b7:d0:51:8a:b0:a3:89:14:05:79:bf: 28:70:ad:9c:ad:b3:b0:27:24:10:7e:d2:bd:76:a4: d4:a9:e9:8d:03:b0:a9:a4:2a:f3:03:8a:8d:ad:a3: 9c:d4:22:f4:fc:db:b0:e5:4d:24:08:80:46:57:14: c0:a4:13:f9:f7:8d:7c:14:d8:52:64:96:e7:a0:72: 12:6c:9e:6a:78:0c:ee:33:f6:16:ab:5e:60:67:5e: 23:75:13:39:e4:ef:5d:22:5f:43:f7:c4:b6:d2:4e: 15:4d:d0:9c:5f:14:95:c0:6e:cd:4b:ce:b6:64:96: fa:1f:fc:b6:60:87:88:fe:05:db:d3:a1:fd:2c:23: 8e:85:6c:ac:ee:02:6a:19:c0:e6:cf:fa:0e:b2:4d: e4:a3:06:73:19:c8:f2:03:0e:d2:69:41:ca:bf:1f: f7:8b:0b:ec:e9:be:da:80:7c:11:c7:79:4f:14:66: cd:a7:12:d8:bf:47:dc:9f:27:b3:1f:a8:01:90:80: de:36:53:e1:c2:08:21:b6:b8:6f:ca:8a:05:0c:a4: 27:93:c8:71:6e:b9:27:26:fd:1e:0a:b6:60:2b:09: df:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:16:D2:01:FA:65:C5:78:57:50:C5:3B:EB:8E:3A:72:96:4B:57:A1 X509v3 Authority Key Identifier: keyid:98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:55:f7:3b:b4:da:8f:b3:58:cc:74:69:17:ac:78:e6:bb:cc: be:56:05:49:89:6d:9b:94:5e:8f:b8:61:73:2a:26:ae:45:94: a3:16:e6:b1:cc:ee:d0:35:9b:bf:12:ed:13:4d:d6:03:e4:27: 06:cc:e4:9b:76:a7:b7:09:73:98:54:d3:54:0b:18:8d:d5:34: 8e:cd:ec:7e:d7:46:1e:b0:e4:4f:4d:4b:fd:f3:67:18:98:1f: 9e:06:16:92:ab:1b:ee:17:ce:88:e2:3d:fc:4c:15:3d:05:67: e6:7e:85:28:b0:d3:9f:30:58:00:a4:8d:4c:8d:95:0e:6b:5d: 1c:fc:86:b4:03:38:d2:75:55:29:d1:9d:4a:b0:b0:0e:3a:19: 65:9c:46:c1:f2:fa:a1:6c:9d:3a:e9:fc:d3:ef:3d:be:b2:79: c4:56:0f:a6:20:26:74:62:fe:e0:61:a7:94:64:39:af:a8:aa: 58:cb:01:82:f4:66:f8:d8:99:a9:4a:7c:46:3c:1d:d8:28:e1: 96:94:be:9c:b0:d4:fb:0b:a0:4a:01:f2:53:a4:59:02:2d:3f: 0c:ae:c3:ad:e5:1e:a6:2f:b2:7a:29:c4:57:3f:95:80:7c:aa: b7:94:b9:69:a8:75:fa:93:d9:1e:11:e4:28:d6:82:12:9a:20: f7:f2:c5:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/thyAt3G+4BuR2RaxYEY/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4M2YxYjEzOWRmMjRhMDVjMmU1MjU2MDUyYjAyMTI1MTdl NDczNTEwHhcNMjUxMjIxMDcwMDU3WhcNMjUxMjIyMDcwMDU3WjAzMTEwLwYDVQQD EygwOTE2ZDIwMWZhNjVjNTc4NTc1MGM1M2JlYjhlM2E3Mjk2NGI1N2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApprGL3bycK4g7alPa2Ygz3AVTnJj pQQECqUz43n1GEZ9t9BRirCjiRQFeb8ocK2crbOwJyQQftK9dqTUqemNA7CppCrz A4qNraOc1CL0/Nuw5U0kCIBGVxTApBP59418FNhSZJbnoHISbJ5qeAzuM/YWq15g Z14jdRM55O9dIl9D98S20k4VTdCcXxSVwG7NS862ZJb6H/y2YIeI/gXb06H9LCOO hWys7gJqGcDmz/oOsk3kowZzGcjyAw7SaUHKvx/3iwvs6b7agHwRx3lPFGbNpxLY v0fcnyezH6gBkIDeNlPhwgghtrhvyooFDKQnk8hxbrknJv0eCrZgKwnfLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkW0gH6ZcV4V1DFO+uOOnKWS1ehMB8GA1UdIwQY MBaAFJg/GxOd8koFwuUlYFKwISUX5HNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUQ4YkU1M3lTZ1hDNVNWZ1VyQWhKUmZrYzFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jMmNjNWYtMjVhNi00MmJiLWE5NzAt ZWY5NjQ0MzEyZGRiLzEvbUQ4YkU1M3lTZ1hDNVNWZ1VyQWhKUmZrYzFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9jMmNjNWYtMjVhNi00MmJiLWE5NzAtZWY5NjQ0MzEyZGRi LzEvbUQ4YkU1M3lTZ1hDNVNWZ1VyQWhKUmZrYzFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFX3O7Ta j7NYzHRpF6x45rvMvlYFSYltm5Rej7hhcyomrkWUoxbmsczu0DWbvxLtE03WA+Qn Bszkm3antwlzmFTTVAsYjdU0js3sftdGHrDkT01L/fNnGJgfngYWkqsb7hfOiOI9 /EwVPQVn5n6FKLDTnzBYAKSNTI2VDmtdHPyGtAM40nVVKdGdSrCwDjoZZZxGwfL6 oWydOun80+89vrJ5xFYPpiAmdGL+4GGnlGQ5r6iqWMsBgvRm+NiZqUp8Rjwd2Cjh lpS+nLDU+wugSgHyU6RZAi0/DK7DreUepi+yeinEVz+VgHyqt5S5aah1+pPZHhHk KNaCEpog9/LFsw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:41:46 2025 by rpki-client