This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft File: 82ct8ORpiLvu2b5UENoSo_Fw1pE.mft (raw, json) Hash identifier: 4J8ipPZ4FO/0+VSrhQ+jUgZIV1/1JntqpK/CTMQro2o= Subject key identifier: 3D:EA:A4:B9:55:44:7E:8F:A9:23:02:29:2C:15:90:07:48:17:D2:93 Authority key identifier: F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91 Certificate issuer: /CN=f3672df0e46988bbeed9be5410da12a3f170d691 Certificate serial: 019B0E9344228F5FDEBEDB0EAA4789670841 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 18:01:30 +0000 Manifest this update: Thu 11 Dec 2025 18:01:30 +0000 Manifest next update: Fri 12 Dec 2025 18:01:30 +0000 Files and hashes: 1: 82ct8ORpiLvu2b5UENoSo_Fw1pE.crl (hash: uFe3zjew6mMaF/www1A4O2RbT26MLJnfIw/GSP0Smhw=) 2: qF15Fek2B8QG87gZ7XIr-H3O168.roa (hash: 5FnSKwJ5Mf9Vo3kgskFawnnVLq6cD4vo+8P1ZuvgDrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:44:22:8f:5f:de:be:db:0e:aa:47:89:67:08:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3672df0e46988bbeed9be5410da12a3f170d691 Validity Not Before: Dec 11 18:01:30 2025 GMT Not After : Dec 12 18:01:30 2025 GMT Subject: CN=3deaa4b955447e8fa92302292c1590074817d293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:00:fa:03:37:d5:76:85:a4:84:13:e5:9b:af: 40:5a:a7:34:3d:a7:ec:9f:b1:26:85:76:30:2d:66: cf:bd:0d:cb:c8:37:bb:08:5b:f7:40:03:3a:cf:ed: 0c:69:84:28:cb:8c:21:e1:52:6d:58:d6:ea:a2:a4: f5:5a:c9:31:b4:73:cf:1e:54:42:49:58:0b:06:c4: 7a:12:11:64:3f:59:64:fc:53:3c:9d:60:e8:fb:35: 94:4f:1f:13:04:58:66:47:5a:ca:de:65:ca:95:e6: 45:3f:73:5c:ec:2e:00:5d:50:cf:6e:aa:75:63:1c: bd:7a:51:7a:33:29:b2:31:be:4a:22:d8:20:e2:f0: b6:62:d1:83:db:a0:80:7c:20:42:06:b8:01:54:a2: b4:ef:66:ab:91:d8:a8:dd:7e:57:87:b6:b2:a1:f6: e0:cf:cc:9c:63:d1:5d:db:46:18:51:5c:ce:16:a6: 92:6d:1c:90:2c:b4:a3:3a:f9:2b:c3:3b:05:bd:0c: 83:6a:1a:5b:e3:ed:72:fd:de:1f:2f:8e:2d:50:a6: e0:ef:2c:c4:f3:a9:6d:1d:f5:a6:4f:ed:89:ac:82: 18:d3:ea:95:5b:8c:9a:54:90:bd:f9:6d:ff:d0:a4: c2:45:ad:87:66:b9:d2:d6:56:d2:c1:2d:f2:f3:fd: ff:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EA:A4:B9:55:44:7E:8F:A9:23:02:29:2C:15:90:07:48:17:D2:93 X509v3 Authority Key Identifier: keyid:F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:04:13:92:d1:61:60:d4:95:f8:2b:74:e0:f9:77:54:9c:f7: b3:63:87:f9:37:99:1b:42:93:71:57:fa:00:72:92:8e:5e:9e: 52:c4:06:bc:3c:f7:85:81:cd:1f:17:75:15:e0:c2:40:0c:5e: d0:5a:fa:d4:45:c0:c8:47:95:84:f6:4e:e7:9f:26:b2:96:46: be:23:a4:5b:3b:1c:c2:ba:8e:8d:c9:67:d9:94:64:26:75:e2: c8:34:d0:2d:ff:31:a0:ac:32:a5:3b:7c:26:b4:bb:db:c0:36: 82:73:47:4b:a7:86:bd:88:cc:6b:e7:bd:ea:ba:ec:ec:5b:40: 30:af:53:58:87:01:72:24:ba:18:66:6c:ba:1b:73:68:3c:97: 6e:95:b7:29:eb:f6:b5:cd:51:77:cf:8d:b1:1f:3d:6e:2f:62: 91:8b:22:11:56:38:41:aa:b9:44:01:77:cc:61:e5:1c:09:b2: f9:de:e6:24:86:03:16:08:6d:7c:b1:59:48:54:18:37:97:b0: f8:05:1f:47:2e:70:85:23:53:bc:f9:22:43:4f:7d:1f:e7:28: 91:48:68:50:d5:41:96:b1:83:4b:42:00:e5:d3:a9:76:ed:a9: 68:f7:f5:01:26:43:bf:cd:08:a5:29:79:5a:11:fe:14:b9:5e: 33:cd:5b:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk0Qij1/evtsOqkeJZwhBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNjcyZGYwZTQ2OTg4YmJlZWQ5YmU1NDEwZGExMmEzZjE3 MGQ2OTEwHhcNMjUxMjExMTgwMTMwWhcNMjUxMjEyMTgwMTMwWjAzMTEwLwYDVQQD EygzZGVhYTRiOTU1NDQ3ZThmYTkyMzAyMjkyYzE1OTAwNzQ4MTdkMjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQD6AzfVdoWkhBPlm69AWqc0Pafs n7EmhXYwLWbPvQ3LyDe7CFv3QAM6z+0MaYQoy4wh4VJtWNbqoqT1WskxtHPPHlRC SVgLBsR6EhFkP1lk/FM8nWDo+zWUTx8TBFhmR1rK3mXKleZFP3Nc7C4AXVDPbqp1 Yxy9elF6MymyMb5KItgg4vC2YtGD26CAfCBCBrgBVKK072arkdio3X5Xh7ayofbg z8ycY9Fd20YYUVzOFqaSbRyQLLSjOvkrwzsFvQyDahpb4+1y/d4fL44tUKbg7yzE 86ltHfWmT+2JrIIY0+qVW4yaVJC9+W3/0KTCRa2HZrnS1lbSwS3y8/3/QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3qpLlVRH6PqSMCKSwVkAdIF9KTMB8GA1UdIwQY MBaAFPNnLfDkaYi77tm+VBDaEqPxcNaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODJjdDhPUnBpTHZ1MmI1VUVOb1NvX0Z3MXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81NjVmODktNjIwOC00NzFhLWI2OWMt M2UyMjE5OGFlYjUyLzEvODJjdDhPUnBpTHZ1MmI1VUVOb1NvX0Z3MXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC81NjVmODktNjIwOC00NzFhLWI2OWMtM2UyMjE5OGFlYjUy LzEvODJjdDhPUnBpTHZ1MmI1VUVOb1NvX0Z3MXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgQTktFh YNSV+Ct04Pl3VJz3s2OH+TeZG0KTcVf6AHKSjl6eUsQGvDz3hYHNHxd1FeDCQAxe 0Fr61EXAyEeVhPZO558mspZGviOkWzscwrqOjcln2ZRkJnXiyDTQLf8xoKwypTt8 JrS728A2gnNHS6eGvYjMa+e96rrs7FtAMK9TWIcBciS6GGZsuhtzaDyXbpW3Kev2 tc1Rd8+NsR89bi9ikYsiEVY4Qaq5RAF3zGHlHAmy+d7mJIYDFghtfLFZSFQYN5ew +AUfRy5whSNTvPkiQ099H+cokUhoUNVBlrGDS0IA5dOpdu2paPf1ASZDv80IpSl5 WhH+FLleM81bPw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:29:27 2025 by rpki-client