This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft File: 12b8bxuOK2BPf7c8Kf1daJoOqB0.mft (raw, json) Hash identifier: m+B3rzLjypZovYTdJ3f5EKDYe397Vk/36bGr8mKN46I= Subject key identifier: E0:93:68:6A:D6:25:97:14:71:CB:3A:01:3C:FD:16:96:70:8F:6A:C5 Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d Certificate serial: 019B33B1850764501176AF6FF2C90451DAE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft Manifest number: 1792 Signing time: Thu 18 Dec 2025 23:00:30 +0000 Manifest this update: Thu 18 Dec 2025 23:00:30 +0000 Manifest next update: Fri 19 Dec 2025 23:00:30 +0000 Files and hashes: 1: 12b8bxuOK2BPf7c8Kf1daJoOqB0.crl (hash: 6CDMmeBn6sRFSbpPsVUf5y047zd1z2N4Zde0ySZtGLU=) 2: qGuTXxX3KPPGE7gornZUmtCgXus.roa (hash: hoxbUVU+eahUxnAmZd8qLyauIUnjncf8aJqcwbWkeXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:85:07:64:50:11:76:af:6f:f2:c9:04:51:da:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d Validity Not Before: Dec 18 23:00:30 2025 GMT Not After : Dec 19 23:00:30 2025 GMT Subject: CN=e093686ad625971471cb3a013cfd1696708f6ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:27:39:53:89:19:78:31:06:f4:e1:b0:01:bf: c2:15:d2:0c:eb:01:3d:00:ca:07:6e:64:46:9d:9a: 2e:16:d5:d4:81:75:f4:76:0e:10:ad:42:69:1e:f2: 31:df:de:af:fd:74:7e:2d:8b:07:db:24:55:e9:60: 23:3b:5f:db:44:23:06:8f:61:b9:0e:40:2b:40:eb: b7:8c:f5:12:41:17:06:99:dd:c5:5c:17:e5:9b:a3: 15:9f:74:2f:87:c3:a3:f7:5f:3f:37:ef:d3:2d:24: 93:c0:43:03:b0:94:45:58:4f:bb:4d:2b:68:55:f8: b8:d9:d6:78:e4:d6:57:f9:1b:6f:b8:d0:d9:3d:cc: 13:22:8a:eb:bd:e8:95:5f:82:21:d0:cb:e8:16:bd: 76:ef:0a:1c:2b:c3:76:47:d5:98:32:a3:3d:2a:8c: 97:77:6e:5a:c9:c7:26:59:5b:a6:a5:d2:e6:96:71: 10:6d:c9:9a:f5:46:61:b3:bd:a6:6b:ad:bb:dd:b2: cf:36:30:d9:c6:02:41:46:c0:1f:09:54:c4:bd:16: 7b:cf:b5:e4:c3:a8:1a:c0:8d:30:d0:52:9e:d7:e1: f5:b4:1c:f4:d5:86:45:d7:bc:4c:e1:39:b8:63:6a: 78:bd:6a:c5:46:36:c7:98:f1:de:28:1d:07:57:11: 6e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:93:68:6A:D6:25:97:14:71:CB:3A:01:3C:FD:16:96:70:8F:6A:C5 X509v3 Authority Key Identifier: keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:2e:fc:37:29:67:6b:76:29:0b:e6:85:20:04:6a:b4:ea:7a: f6:1e:9c:6c:76:d8:e6:e9:c8:17:3e:6a:e4:ab:19:73:cd:bd: 6e:0d:1b:e4:8a:4f:98:b0:37:c3:55:84:b2:d8:1b:f9:54:95: 5c:ef:c5:a3:82:f9:18:3c:21:d8:8a:0a:49:1f:a7:0a:c9:a4: a4:cf:7c:e3:42:e1:74:89:ea:41:c1:dc:8b:43:73:1c:34:45: 23:ed:2e:9c:bc:69:c2:cd:25:a9:e3:68:79:39:0c:25:c8:88: 4d:36:00:1d:50:ad:f6:4f:a4:da:bb:62:99:ab:55:85:fc:ec: b5:93:99:0e:b2:86:5f:c5:9e:34:ba:64:6b:dc:21:ef:c7:98: 1e:0e:d3:14:31:15:b6:ec:3f:cb:93:4d:ba:46:8a:c0:81:18: de:c2:e7:6a:e4:9b:bc:f5:97:88:37:12:bc:b5:8e:1b:85:cc: ed:02:f1:b6:d2:97:17:09:29:2f:de:6e:2d:8f:2f:b3:91:12: fc:04:43:f6:95:31:e5:9c:f7:52:bf:e3:37:04:63:f6:9b:89: 82:5c:31:b6:2a:32:01:89:52:49:e2:52:12:88:88:a4:95:e6: 8e:fc:1a:98:16:5f:1a:d1:55:0b:68:9c:b2:d3:b5:ac:30:f9: 39:d1:f1:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsYUHZFARdq9v8skEUdrhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NjZmYzZmMWI4ZTJiNjA0ZjdmYjczYzI5ZmQ1ZDY4OWEw ZWE4MWQwHhcNMjUxMjE4MjMwMDMwWhcNMjUxMjE5MjMwMDMwWjAzMTEwLwYDVQQD EyhlMDkzNjg2YWQ2MjU5NzE0NzFjYjNhMDEzY2ZkMTY5NjcwOGY2YWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ic5U4kZeDEG9OGwAb/CFdIM6wE9 AMoHbmRGnZouFtXUgXX0dg4QrUJpHvIx396v/XR+LYsH2yRV6WAjO1/bRCMGj2G5 DkArQOu3jPUSQRcGmd3FXBflm6MVn3Qvh8Oj918/N+/TLSSTwEMDsJRFWE+7TSto Vfi42dZ45NZX+RtvuNDZPcwTIorrveiVX4Ih0MvoFr127wocK8N2R9WYMqM9KoyX d25ayccmWVumpdLmlnEQbcma9UZhs72ma6273bLPNjDZxgJBRsAfCVTEvRZ7z7Xk w6gawI0w0FKe1+H1tBz01YZF17xM4Tm4Y2p4vWrFRjbHmPHeKB0HVxFutQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCTaGrWJZcUccs6ATz9FpZwj2rFMB8GA1UdIwQY MBaAFNdm/G8bjitgT3+3PCn9XWiaDqgdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMzgyOWEtOTUyNy00NDRiLWJkNzIt M2VmM2ZkOTY5OTU3LzEvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9mMzgyOWEtOTUyNy00NDRiLWJkNzItM2VmM2ZkOTY5OTU3 LzEvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJS78Nyln a3YpC+aFIARqtOp69h6cbHbY5unIFz5q5KsZc829bg0b5IpPmLA3w1WEstgb+VSV XO/Fo4L5GDwh2IoKSR+nCsmkpM9840LhdInqQcHci0NzHDRFI+0unLxpws0lqeNo eTkMJciITTYAHVCt9k+k2rtimatVhfzstZOZDrKGX8WeNLpka9wh78eYHg7TFDEV tuw/y5NNukaKwIEY3sLnauSbvPWXiDcSvLWOG4XM7QLxttKXFwkpL95uLY8vs5ES /ARD9pUx5Zz3Ur/jNwRj9puJglwxtioyAYlSSeJSEoiIpJXmjvwamBZfGtFVC2ic stO1rDD5OdHxGg== -----END CERTIFICATE-----Generated at Fri Dec 19 06:44:36 2025 by rpki-client