This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft File: dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft (raw, json) Hash identifier: /dDWF8CYpJjXq/dCXpzzyxcE3qthspwtxg7dLXpGMbA= Subject key identifier: E9:EB:C2:84:AF:8D:FD:CD:83:CE:EE:30:04:E9:23:F5:C7:67:EE:73 Authority key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62 Certificate issuer: /CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62 Certificate serial: 019B390F51BDDB870818BDBA9E8F854DC622 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft Manifest number: 0A7C Signing time: Sat 20 Dec 2025 00:01:03 +0000 Manifest this update: Sat 20 Dec 2025 00:01:03 +0000 Manifest next update: Sun 21 Dec 2025 00:01:03 +0000 Files and hashes: 1: dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl (hash: NSQeVKM4F0jIt4t5ySV96GZ7Y/XPbLwsRFCJtfxfaLk=) 2: dqNNte5TVfV2tDh9E3yBjcN5L9k.roa (hash: ZCWWVAbkz+YG+QqwhLTaaD7cWJwvtiRAyhgAtKdQ9Ro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:51:bd:db:87:08:18:bd:ba:9e:8f:85:4d:c6:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62 Validity Not Before: Dec 20 00:01:03 2025 GMT Not After : Dec 21 00:01:03 2025 GMT Subject: CN=e9ebc284af8dfdcd83ceee3004e923f5c767ee73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ea:16:d1:b5:4c:5b:ba:28:3c:a2:1c:12:be: 5c:70:09:dd:e4:4c:db:a2:cc:e5:56:0f:a8:03:b2: 1b:1c:88:cd:e3:d0:81:42:17:a9:9d:a7:59:13:27: 8f:40:5d:7f:05:1b:f3:67:7b:d0:3a:10:c2:80:70: 3a:20:c8:16:ad:e5:30:ea:c3:c4:87:1e:29:c5:2b: 17:fe:ba:e6:bd:aa:e5:84:6b:e7:a0:46:c7:45:78: 03:f7:e3:60:dc:61:7e:84:e0:7d:06:7b:5b:d2:be: 5b:d8:93:85:b3:fd:f1:fb:1d:f4:cc:c0:7a:3e:86: 49:64:06:ea:c6:74:ab:47:2c:ef:b1:4a:38:b8:78: 5a:e8:2f:95:c5:51:74:46:ae:74:3b:1f:a5:5d:c1: 8e:c3:6f:d6:c5:ba:7d:e2:da:a8:0b:3e:78:dc:62: db:61:a0:a1:dd:e7:17:b9:f8:3c:17:fa:44:4d:e4: 9d:9e:2e:6a:92:5a:83:0b:66:42:e7:39:c2:fd:88: 3c:6d:99:8d:f3:f6:2e:66:de:07:2e:6b:e9:66:d5: 6e:34:f1:62:ff:3c:4f:3b:37:91:52:b3:5f:d4:9c: dd:53:62:de:93:3a:a4:11:8c:d5:93:45:c0:65:b0: 82:87:bb:69:a9:58:71:c4:5c:0a:0d:e1:9f:56:0b: 8b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EB:C2:84:AF:8D:FD:CD:83:CE:EE:30:04:E9:23:F5:C7:67:EE:73 X509v3 Authority Key Identifier: keyid:74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:d9:b8:d9:7b:00:f6:45:62:8f:02:7e:2c:f8:d8:6b:99:09: 99:76:87:f7:ab:c2:bf:39:73:fb:ee:9d:10:e5:00:11:29:68: 4d:66:20:c7:a3:e3:62:3e:2b:dd:b6:86:ca:b4:0e:ae:5a:e4: 9a:58:d6:ae:1f:48:6a:5b:5a:27:86:3d:f0:0e:f6:5b:db:6a: 36:8e:b5:6b:11:0c:45:79:5e:5b:98:63:d1:2e:9f:a5:e1:23: 5e:2d:18:52:1f:ed:2a:ec:35:fa:84:da:c2:e7:cc:09:a4:a4: 29:e0:d4:84:76:b9:2b:40:cd:f9:35:97:db:32:82:c0:03:3f: 12:ea:e2:bb:7b:47:ea:d7:ec:89:bd:ae:94:c2:68:1c:c0:ba: da:a6:36:70:14:09:e2:d5:2e:9a:f2:52:39:2d:b4:14:f1:15: b1:a0:5d:e3:af:96:03:bd:f7:d1:d8:4b:e5:12:14:77:10:b4: 15:4c:c9:a4:47:a5:05:6a:a8:08:9c:7a:9a:47:42:28:61:48: 66:31:d5:8e:7f:6b:e6:95:b8:fd:d2:6c:ec:c0:1a:e6:d6:d9: 0c:ba:52:b9:5e:a3:e0:ad:ba:c4:94:ac:5e:2c:10:d1:29:13: 5e:c6:d3:bb:0d:97:a1:27:36:8b:d6:82:82:15:ed:7b:b2:23: 74:cb:2f:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D1G924cIGL26no+FTcYiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YmYwN2YwNGNjNzZhOTBhZDk3ZjlmMTc0OWZhYmNmMDVj MzVkNjIwHhcNMjUxMjIwMDAwMTAzWhcNMjUxMjIxMDAwMTAzWjAzMTEwLwYDVQQD EyhlOWViYzI4NGFmOGRmZGNkODNjZWVlMzAwNGU5MjNmNWM3NjdlZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuoW0bVMW7ooPKIcEr5ccAnd5Ezb oszlVg+oA7IbHIjN49CBQhepnadZEyePQF1/BRvzZ3vQOhDCgHA6IMgWreUw6sPE hx4pxSsX/rrmvarlhGvnoEbHRXgD9+Ng3GF+hOB9Bntb0r5b2JOFs/3x+x30zMB6 PoZJZAbqxnSrRyzvsUo4uHha6C+VxVF0Rq50Ox+lXcGOw2/Wxbp94tqoCz543GLb YaCh3ecXufg8F/pETeSdni5qklqDC2ZC5znC/Yg8bZmN8/YuZt4HLmvpZtVuNPFi /zxPOzeRUrNf1JzdU2LekzqkEYzVk0XAZbCCh7tpqVhxxFwKDeGfVguLVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnrwoSvjf3Ng87uMATpI/XHZ+5zMB8GA1UdIwQY MBaAFHS/B/BMx2qQrZf58XSfq88Fw11iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hMGIzOTUtNjFmZi00NTdkLThmZjgt ZWMwODQxMzdlMjQyLzEvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hMGIzOTUtNjFmZi00NTdkLThmZjgtZWMwODQxMzdlMjQy LzEvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtm42XsA 9kVijwJ+LPjYa5kJmXaH96vCvzlz++6dEOUAESloTWYgx6PjYj4r3baGyrQOrlrk mljWrh9IaltaJ4Y98A72W9tqNo61axEMRXleW5hj0S6fpeEjXi0YUh/tKuw1+oTa wufMCaSkKeDUhHa5K0DN+TWX2zKCwAM/Euriu3tH6tfsib2ulMJoHMC62qY2cBQJ 4tUumvJSOS20FPEVsaBd46+WA7330dhL5RIUdxC0FUzJpEelBWqoCJx6mkdCKGFI ZjHVjn9r5pW4/dJs7MAa5tbZDLpSuV6j4K26xJSsXiwQ0SkTXsbTuw2XoSc2i9aC ghXte7IjdMsvdA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:10:12 2025 by rpki-client