This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft File: d8LYpgGX_HveZPw_rRDrLaT-h3k.mft (raw, json) Hash identifier: ej8uEX9qbcoRx0birnWRrz2m7vec74JIQBNvXV6eHqc= Subject key identifier: 55:25:86:B8:BA:E4:25:52:4B:0E:D1:43:80:08:12:BF:47:E0:E7:68 Authority key identifier: 77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79 Certificate issuer: /CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779 Certificate serial: 019B2664880AB2C344AB9C3C87B0909AD21B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft Manifest number: 07D2 Signing time: Tue 16 Dec 2025 09:01:21 +0000 Manifest this update: Tue 16 Dec 2025 09:01:21 +0000 Manifest next update: Wed 17 Dec 2025 09:01:21 +0000 Files and hashes: 1: Fio9S4kkM_6MY_PyvY4nnlbZSX0.roa (hash: MLkm/zb7dfsD7k0W1D+pAVDUongRrbvCkAFDtBq/FSI=) 2: d8LYpgGX_HveZPw_rRDrLaT-h3k.crl (hash: DdZVIFWTa10PgeLzqg1RglX7+hXjDoyTz2NH7CayNfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:88:0a:b2:c3:44:ab:9c:3c:87:b0:90:9a:d2:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779 Validity Not Before: Dec 16 09:01:21 2025 GMT Not After : Dec 17 09:01:21 2025 GMT Subject: CN=552586b8bae425524b0ed143800812bf47e0e768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:8c:b8:77:af:a6:56:7d:56:1a:57:bd:59:54: e1:77:ff:4d:8f:87:3b:40:af:1a:3c:78:0c:28:aa: 33:28:1e:59:5f:46:c4:f0:ef:5e:11:03:65:8c:a9: cf:77:4a:c1:68:83:0b:2b:8d:e5:f9:73:e4:cc:02: ef:3e:43:b8:ba:65:1c:ae:11:e3:d6:14:bf:e5:65: f9:79:87:f3:a0:b1:4f:28:77:a6:0d:91:9f:61:c6: ab:20:08:1b:7e:9c:c4:30:51:80:2e:65:bd:d6:c5: 40:95:24:f4:13:53:f1:07:09:98:3a:a0:0f:cf:d9: 09:5c:dd:55:4b:23:40:15:9e:16:12:2a:76:b4:02: fb:2f:f9:dd:05:96:bf:bc:c8:04:67:87:25:4a:24: 70:fa:58:66:a1:a4:75:d2:e0:2f:cf:a7:79:d9:0f: 67:e0:fb:59:3f:9f:a3:89:24:b6:84:2f:75:ee:6b: b9:4d:dd:32:7f:62:55:d7:2c:77:83:02:05:17:d4: cc:7b:f9:ce:f2:ee:ad:63:6c:11:b2:28:4e:1e:75: 1f:4f:32:e7:eb:40:7b:c1:a8:fd:67:92:7c:f5:1c: 73:bd:71:00:65:8a:42:09:20:43:12:14:ed:f0:25: 0e:de:33:46:e7:d9:99:01:6a:33:18:38:cf:fe:99: 6e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:25:86:B8:BA:E4:25:52:4B:0E:D1:43:80:08:12:BF:47:E0:E7:68 X509v3 Authority Key Identifier: keyid:77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c2:af:6f:71:13:5f:24:4f:45:17:3b:05:26:17:7c:0e:ae: bd:6e:30:25:ea:7d:ca:9b:da:20:33:49:b0:be:ba:81:cb:d5: ab:d3:0c:d9:3d:da:b8:3f:d9:23:65:70:37:3d:0d:a6:5e:a9: 74:2d:89:f4:7b:44:13:96:6c:d1:78:bb:01:49:65:db:33:4d: e0:29:12:74:45:ed:f6:91:9b:7c:02:e0:9a:29:96:60:0f:90: 4f:b2:be:48:13:53:7c:55:b6:d7:2a:f0:20:3a:1d:ef:25:b5: ff:8e:e9:02:8d:4a:3c:7a:70:e0:fc:16:04:dd:f4:8d:4e:9d: 38:20:25:79:98:b1:46:9c:33:8f:b3:ae:bf:62:63:79:86:17: bb:8f:85:84:04:59:ad:00:d0:92:86:0e:cb:72:68:d0:db:d3: d1:db:ea:b8:5b:4a:c6:e8:df:4c:70:0a:78:61:16:31:3c:23: aa:70:c8:a7:fd:fa:88:ae:a9:84:c3:3a:35:2e:71:f9:d3:d6: 89:94:31:00:aa:db:b5:d3:29:c4:95:8b:a7:5e:1d:31:b7:a7: 0f:8e:cb:cd:42:fc:29:e9:a1:90:ce:c9:60:51:93:39:f3:34: 7d:79:1e:84:c8:db:9d:d3:c6:ed:fa:30:79:4a:5d:0d:e3:e5: 0d:75:e0:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZIgKssNEq5w8h7CQmtIbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzJkOGE2MDE5N2ZjN2JkZTY0ZmMzZmFkMTBlYjJkYTRm ZTg3NzkwHhcNMjUxMjE2MDkwMTIxWhcNMjUxMjE3MDkwMTIxWjAzMTEwLwYDVQQD Eyg1NTI1ODZiOGJhZTQyNTUyNGIwZWQxNDM4MDA4MTJiZjQ3ZTBlNzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+oy4d6+mVn1WGle9WVThd/9Nj4c7 QK8aPHgMKKozKB5ZX0bE8O9eEQNljKnPd0rBaIMLK43l+XPkzALvPkO4umUcrhHj 1hS/5WX5eYfzoLFPKHemDZGfYcarIAgbfpzEMFGALmW91sVAlST0E1PxBwmYOqAP z9kJXN1VSyNAFZ4WEip2tAL7L/ndBZa/vMgEZ4clSiRw+lhmoaR10uAvz6d52Q9n 4PtZP5+jiSS2hC917mu5Td0yf2JV1yx3gwIFF9TMe/nO8u6tY2wRsihOHnUfTzLn 60B7waj9Z5J89RxzvXEAZYpCCSBDEhTt8CUO3jNG59mZAWozGDjP/plufQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUlhri65CVSSw7RQ4AIEr9H4OdoMB8GA1UdIwQY MBaAFHfC2KYBl/x73mT8P60Q6y2k/od5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhMWXBnR1hfSHZlWlB3X3JSRHJMYVQtaDNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ZmIyNTQtNDE3YS00MTgwLWE0ZjAt OGYyYWY5YjUxYzViLzEvZDhMWXBnR1hfSHZlWlB3X3JSRHJMYVQtaDNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ZmIyNTQtNDE3YS00MTgwLWE0ZjAtOGYyYWY5YjUxYzVi LzEvZDhMWXBnR1hfSHZlWlB3X3JSRHJMYVQtaDNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkcKvb3ET XyRPRRc7BSYXfA6uvW4wJep9ypvaIDNJsL66gcvVq9MM2T3auD/ZI2VwNz0Npl6p dC2J9HtEE5Zs0Xi7AUll2zNN4CkSdEXt9pGbfALgmimWYA+QT7K+SBNTfFW21yrw IDod7yW1/47pAo1KPHpw4PwWBN30jU6dOCAleZixRpwzj7Ouv2JjeYYXu4+FhARZ rQDQkoYOy3Jo0NvT0dvquFtKxujfTHAKeGEWMTwjqnDIp/36iK6phMM6NS5x+dPW iZQxAKrbtdMpxJWLp14dMbenD47LzUL8KemhkM7JYFGTOfM0fXkehMjbndPG7fow eUpdDePlDXXg5A== -----END CERTIFICATE-----Generated at Tue Dec 16 16:51:13 2025 by rpki-client