This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft File: d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json) Hash identifier: 5I0U/O5luXDjrUB1ZUkMXHgo017GWr8rlckyrMThwzU= Subject key identifier: 83:DC:E8:73:9B:3B:2B:E6:71:E7:E8:E1:BF:D4:BF:03:E6:11:DC:7D Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46 Certificate issuer: /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46 Certificate serial: 019B1426928A923DF8F203AD59D0CA5C81F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft Manifest number: 02F9 Signing time: Fri 12 Dec 2025 20:00:30 +0000 Manifest this update: Fri 12 Dec 2025 20:00:30 +0000 Manifest next update: Sat 13 Dec 2025 20:00:30 +0000 Files and hashes: 1: 2IggjZcKQnsJ27bFYIHqEpYv-GQ.roa (hash: QiDI9ap52s0p2XMZDDr7ZxsLONOENyLmIWJ6ECFI2k0=) 2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: Cc2EgfLLuUW4M8FdqsY9DyebcSLNp+gYdlmu9y6v0mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 16:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:14:26:92:8a:92:3d:f8:f2:03:ad:59:d0:ca:5c:81:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46 Validity Not Before: Dec 12 20:00:30 2025 GMT Not After : Dec 13 20:00:30 2025 GMT Subject: CN=83dce8739b3b2be671e7e8e1bfd4bf03e611dc7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ce:26:53:f1:34:26:30:73:e9:29:f8:35:79: a7:64:bc:1a:7d:59:b1:22:f8:30:61:a6:a1:bf:db: 00:d0:76:a4:94:24:f6:3e:0a:83:9c:ae:c6:47:1f: b0:1b:09:56:e2:f8:b4:1f:8e:f4:b2:ba:02:e2:6a: d8:bf:14:81:54:bf:ff:17:41:0e:be:b3:ba:51:ba: b3:28:71:3d:e3:27:85:0a:5d:b0:fb:7d:46:f1:09: 28:8b:26:8b:8f:ec:02:74:c1:65:18:cf:bf:79:a9: cb:f9:36:2f:d7:75:27:d1:c6:58:ed:5e:02:65:82: a0:66:88:e8:83:9a:2b:eb:2b:12:93:02:cb:6a:45: 48:49:60:83:75:c8:1e:d7:86:51:7c:51:9e:a3:c2: 16:ae:c1:9b:8e:3c:cb:9e:ae:f0:a7:0b:b6:94:47: 15:c6:4d:e8:39:98:fd:fc:4f:8e:ce:14:93:e9:fd: 09:e7:45:bb:c0:10:dc:56:4c:a2:a5:b6:aa:ea:a1: 80:26:eb:71:74:f4:c9:a5:29:04:d0:86:b1:a1:5e: 4f:ad:08:3f:f7:dd:85:91:20:7d:61:f1:1b:55:82: f3:5a:e3:41:a7:62:64:e5:bd:f6:0c:f8:c6:2e:b2: 9d:e0:67:40:91:a2:c9:01:c1:04:24:b3:f9:a5:51: 5a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DC:E8:73:9B:3B:2B:E6:71:E7:E8:E1:BF:D4:BF:03:E6:11:DC:7D X509v3 Authority Key Identifier: keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:58:49:3c:28:1e:2b:12:9c:10:be:8d:0d:6c:84:20:50:4a: c6:3d:27:1d:3c:3d:d9:eb:1f:0d:00:97:3e:89:ea:cb:b5:70: da:16:a8:bc:aa:dc:dd:09:43:2b:dc:31:8e:cd:8f:8e:64:83: ea:b6:6a:d2:b1:ae:3d:cd:8c:77:83:b7:e5:38:d7:8d:f9:a1: 4d:f2:ce:53:db:49:d6:66:98:a1:5d:a7:e6:04:99:0a:58:a6: 99:bb:37:29:c5:d3:57:d1:0a:da:86:08:6b:bf:ee:2f:fb:c0: d3:a7:f3:60:71:7c:ac:39:fe:37:9e:08:d6:49:2c:7f:1a:4b: 5e:63:9b:05:8a:31:a3:66:4c:39:f5:80:a9:e8:3b:af:49:38: 64:98:9e:96:0a:d2:1e:51:ce:24:00:1f:c4:3d:b5:56:37:0f: e7:3a:e6:c3:9e:4b:ed:fe:32:f5:08:7e:e1:7b:a6:fd:b7:3e: 32:97:8c:a8:90:6d:b8:44:ab:65:5d:4f:64:56:30:05:43:57: ce:8c:45:99:09:cf:83:f7:68:57:cb:4c:50:e6:bf:f7:80:44: 11:fc:f0:19:53:8a:23:11:5d:99:d8:b6:4d:16:fd:a3:7c:1f: f9:18:95:eb:97:f8:d7:36:ed:5c:09:da:c5:e7:b1:4b:5d:45: fa:e0:5a:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsUJpKKkj348gOtWdDKXIHwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzhkOTRiZGYzN2UwZjkwMGNkNmE4YzQyMmNkYjE0ZDk3 Y2ViNDYwHhcNMjUxMjEyMjAwMDMwWhcNMjUxMjEzMjAwMDMwWjAzMTEwLwYDVQQD Eyg4M2RjZTg3MzliM2IyYmU2NzFlN2U4ZTFiZmQ0YmYwM2U2MTFkYzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4s4mU/E0JjBz6Sn4NXmnZLwafVmx IvgwYaahv9sA0HaklCT2PgqDnK7GRx+wGwlW4vi0H470sroC4mrYvxSBVL//F0EO vrO6UbqzKHE94yeFCl2w+31G8QkoiyaLj+wCdMFlGM+/eanL+TYv13Un0cZY7V4C ZYKgZojog5or6ysSkwLLakVISWCDdcge14ZRfFGeo8IWrsGbjjzLnq7wpwu2lEcV xk3oOZj9/E+OzhST6f0J50W7wBDcVkyipbaq6qGAJutxdPTJpSkE0IaxoV5PrQg/ 992FkSB9YfEbVYLzWuNBp2Jk5b32DPjGLrKd4GdAkaLJAcEEJLP5pVFaUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPc6HObOyvmcefo4b/UvwPmEdx9MB8GA1UdIwQY MBaAFHfI2UvfN+D5AM1qjEIs2xTZfOtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82Y2U1M2MtNzY3MC00N2E3LTgxYWUt NTRjMGFlNjE3NmQ0LzEvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82Y2U1M2MtNzY3MC00N2E3LTgxYWUtNTRjMGFlNjE3NmQ0 LzEvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtVhJPCge KxKcEL6NDWyEIFBKxj0nHTw92esfDQCXPonqy7Vw2haovKrc3QlDK9wxjs2PjmSD 6rZq0rGuPc2Md4O35TjXjfmhTfLOU9tJ1maYoV2n5gSZClimmbs3KcXTV9EK2oYI a7/uL/vA06fzYHF8rDn+N54I1kksfxpLXmObBYoxo2ZMOfWAqeg7r0k4ZJielgrS HlHOJAAfxD21VjcP5zrmw55L7f4y9Qh+4Xum/bc+MpeMqJBtuESrZV1PZFYwBUNX zoxFmQnPg/doV8tMUOa/94BEEfzwGVOKIxFdmdi2TRb9o3wf+RiV65f41zbtXAna xeexS11F+uBaig== -----END CERTIFICATE-----Generated at Sat Dec 13 02:21:55 2025 by rpki-client