This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft File: d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft (raw, json) Hash identifier: gyfdp35fwvtVXRG3or5l4zX+etJekFK0OKJey+oINiA= Subject key identifier: 34:EF:E5:D8:E6:5A:E9:10:E2:43:9B:85:A4:7E:AC:B4:FC:92:93:BC Authority key identifier: 77:C1:55:21:FE:D9:0D:11:4E:76:35:31:0B:30:7F:55:3F:57:D2:6C Certificate issuer: /CN=77c15521fed90d114e7635310b307f553f57d26c Certificate serial: 019B19BC2A1AC46341E8B2A73D332C24B156 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft Manifest number: 0F5F Signing time: Sat 13 Dec 2025 22:02:00 +0000 Manifest this update: Sat 13 Dec 2025 22:02:00 +0000 Manifest next update: Sun 14 Dec 2025 22:02:00 +0000 Files and hashes: 1: d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl (hash: ruFqSSXhz+ozxLqDMZYma96JPMk3S1hRNDeUHigtwGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:2a:1a:c4:63:41:e8:b2:a7:3d:33:2c:24:b1:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c15521fed90d114e7635310b307f553f57d26c Validity Not Before: Dec 13 22:02:00 2025 GMT Not After : Dec 14 22:02:00 2025 GMT Subject: CN=34efe5d8e65ae910e2439b85a47eacb4fc9293bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cd:ff:e7:fd:58:4c:51:3c:3a:0a:b0:bd:f2: d7:e8:07:08:36:02:53:96:d8:71:8f:e6:d9:42:53: 12:c7:77:d3:d2:e7:bc:7c:5e:76:07:c4:07:ea:25: 14:11:6d:59:29:a6:b7:eb:51:18:58:e5:dd:9c:3f: ea:4e:c7:d4:d1:00:03:f0:9e:14:8c:c9:9c:0f:28: c4:8f:c3:01:31:b6:2b:f5:08:ad:37:5d:d1:9e:88: b7:7a:ee:87:99:3e:68:fb:67:04:38:4f:ad:2f:c7: 81:95:f0:5e:75:0b:1e:04:84:ab:6f:f2:8c:64:20: 27:19:5e:e0:ae:c2:78:09:3f:34:bc:09:d1:f4:65: 46:09:a8:ea:f8:5e:81:5b:a6:7b:a9:91:08:7d:c3: 1e:9d:9e:18:a6:56:aa:a1:dd:02:00:1a:2c:76:87: a4:a4:27:20:d1:af:d3:09:75:32:8c:d7:7c:80:f8: 16:3f:40:ef:9f:b7:86:81:b9:83:9c:e3:9f:42:c5: 56:b9:fb:f8:75:39:7b:12:f0:44:fa:71:df:43:74: af:9d:f2:3b:94:e1:1d:bc:87:aa:58:9b:32:80:73: d4:18:4c:bb:54:14:87:8e:6c:2a:45:c3:7e:f0:16: 63:36:f3:89:fa:d5:63:19:6d:36:53:24:c3:ea:11: 3d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:EF:E5:D8:E6:5A:E9:10:E2:43:9B:85:A4:7E:AC:B4:FC:92:93:BC X509v3 Authority Key Identifier: keyid:77:C1:55:21:FE:D9:0D:11:4E:76:35:31:0B:30:7F:55:3F:57:D2:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:04:a9:7b:35:2d:1a:3c:20:ee:c7:0b:04:e3:b3:2a:4f:3e: 45:56:53:f1:cf:7b:5c:b5:ba:a7:ed:33:5b:b9:fd:28:7b:1c: b6:81:1a:82:26:ba:43:1b:fb:92:0e:b0:30:54:9c:a0:2b:dd: fa:75:a3:6c:b9:c8:bc:ac:6d:78:3c:7d:e7:51:89:a1:63:5e: b9:91:66:94:34:65:2c:62:85:47:e9:d3:39:fd:ff:95:6f:b3: f0:f9:03:53:d4:60:76:dd:65:b2:46:77:25:26:26:6b:85:ec: 74:65:a9:a1:24:e9:32:7c:5f:c8:4e:9f:0c:8c:95:55:be:03: b8:af:bf:0c:f6:90:8f:f6:0a:56:7f:81:46:54:29:a9:76:92: c7:61:35:8a:8c:d5:cd:89:9f:12:e1:6d:78:a5:70:9d:c1:27: 7a:99:b8:9d:1c:6e:9b:1e:0a:22:15:81:95:35:26:d8:be:d6: 20:fe:00:a0:63:42:74:04:65:65:5f:61:c5:c0:ab:e3:9d:dd: 58:f6:50:82:0a:3c:d4:48:93:80:33:38:61:40:79:00:70:86: 26:7e:97:25:c3:9f:c7:c3:16:cf:30:6b:06:c3:b8:7a:72:97: 59:f2:7d:8f:3f:83:f5:e9:49:8f:00:36:29:49:c7:ab:d3:11: d6:0b:7d:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvCoaxGNB6LKnPTMsJLFWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzE1NTIxZmVkOTBkMTE0ZTc2MzUzMTBiMzA3ZjU1M2Y1 N2QyNmMwHhcNMjUxMjEzMjIwMjAwWhcNMjUxMjE0MjIwMjAwWjAzMTEwLwYDVQQD EygzNGVmZTVkOGU2NWFlOTEwZTI0MzliODVhNDdlYWNiNGZjOTI5M2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc3/5/1YTFE8OgqwvfLX6AcINgJT lthxj+bZQlMSx3fT0ue8fF52B8QH6iUUEW1ZKaa361EYWOXdnD/qTsfU0QAD8J4U jMmcDyjEj8MBMbYr9QitN13Rnoi3eu6HmT5o+2cEOE+tL8eBlfBedQseBISrb/KM ZCAnGV7grsJ4CT80vAnR9GVGCajq+F6BW6Z7qZEIfcMenZ4Yplaqod0CABosdoek pCcg0a/TCXUyjNd8gPgWP0Dvn7eGgbmDnOOfQsVWufv4dTl7EvBE+nHfQ3SvnfI7 lOEdvIeqWJsygHPUGEy7VBSHjmwqRcN+8BZjNvOJ+tVjGW02UyTD6hE9fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTv5djmWukQ4kObhaR+rLT8kpO8MB8GA1UdIwQY MBaAFHfBVSH+2Q0RTnY1MQswf1U/V9JsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhGVklmN1pEUkZPZGpVeEN6Ql9WVDlYMG13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wZWRiMzgtYzBmOC00NDFiLWFjYmYt NjFiMGUzNjljOGZkLzEvZDhGVklmN1pEUkZPZGpVeEN6Ql9WVDlYMG13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8wZWRiMzgtYzBmOC00NDFiLWFjYmYtNjFiMGUzNjljOGZk LzEvZDhGVklmN1pEUkZPZGpVeEN6Ql9WVDlYMG13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQSpezUt Gjwg7scLBOOzKk8+RVZT8c97XLW6p+0zW7n9KHsctoEagia6Qxv7kg6wMFScoCvd +nWjbLnIvKxteDx951GJoWNeuZFmlDRlLGKFR+nTOf3/lW+z8PkDU9Rgdt1lskZ3 JSYma4XsdGWpoSTpMnxfyE6fDIyVVb4DuK+/DPaQj/YKVn+BRlQpqXaSx2E1iozV zYmfEuFteKVwncEnepm4nRxumx4KIhWBlTUm2L7WIP4AoGNCdARlZV9hxcCr453d WPZQggo81EiTgDM4YUB5AHCGJn6XJcOfx8MWzzBrBsO4enKXWfJ9jz+D9elJjwA2 KUnHq9MR1gt9Ow== -----END CERTIFICATE-----Generated at Sun Dec 14 03:42:32 2025 by rpki-client