This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft File: R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft (raw, json) Hash identifier: fP//m96LQgKTLJg/rIjNIQcsiN1OfOmFZ0W/uDvsWkc= Subject key identifier: 54:4B:7E:94:92:35:95:86:88:51:2C:7A:CA:AC:D8:81:88:D7:7C:C2 Authority key identifier: 47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF Certificate issuer: /CN=47e05df247174cd350b1af37833327c7702b8fff Certificate serial: 019B108131814E1D976354D9CA3499A7E772 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft Manifest number: 071D Signing time: Fri 12 Dec 2025 03:01:00 +0000 Manifest this update: Fri 12 Dec 2025 03:01:00 +0000 Manifest next update: Sat 13 Dec 2025 03:01:00 +0000 Files and hashes: 1: DcGW9RVJN1HDfDOegRPFfnj3g48.roa (hash: rUGaeOJ+LXvEthDAQG+r5QtUQxI1CT1RFQ8J8YnH+rY=) 2: R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl (hash: Eg2CbdVhFdDuS+c4qayZxk+YqtVtrC1MBmzuHAP5Hu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:31:81:4e:1d:97:63:54:d9:ca:34:99:a7:e7:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47e05df247174cd350b1af37833327c7702b8fff Validity Not Before: Dec 12 03:01:00 2025 GMT Not After : Dec 13 03:01:00 2025 GMT Subject: CN=544b7e949235958688512c7acaacd88188d77cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ce:bc:93:e4:a4:78:79:c2:34:4d:09:80:b2: d9:83:2d:29:4d:1a:36:52:77:47:4a:f1:9a:50:45: 1d:81:d8:3c:3b:2c:e5:9a:45:b5:d8:db:b2:57:18: 49:de:87:3b:45:28:02:15:c3:da:82:e8:00:1c:13: 37:9e:03:87:44:94:cf:e0:31:b2:1a:68:75:4a:9a: 47:54:60:32:a1:fe:b2:b6:9b:83:f6:fa:d2:a1:48: 1e:8b:19:57:98:9d:1d:0c:10:57:29:cd:f7:d0:55: e8:74:29:27:b9:a4:9c:21:cb:f8:20:6e:c4:e0:21: df:24:4b:f1:38:44:ec:61:67:2b:3a:f1:70:38:c7: 2f:35:32:fb:d5:f3:55:11:b9:a9:dd:fb:36:a4:99: 1a:8b:fb:fc:7c:30:ba:ef:76:ba:2e:00:26:da:17: 51:d2:4c:1e:6b:96:11:1b:3d:2d:25:1e:bd:bd:cb: 83:f1:78:28:99:f5:1b:ca:39:e9:4d:ae:18:16:9f: d2:b0:69:3d:6e:ff:f4:e7:59:f4:76:cf:f3:3b:5c: e4:4e:37:65:81:b3:07:5b:6c:47:62:90:a8:b4:b5: c8:4e:e5:81:73:32:12:0f:15:0b:97:22:42:0c:03: fd:94:7c:2a:48:41:f7:18:34:08:b2:12:88:3f:bf: 0d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4B:7E:94:92:35:95:86:88:51:2C:7A:CA:AC:D8:81:88:D7:7C:C2 X509v3 Authority Key Identifier: keyid:47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:4d:6f:34:5a:06:fa:8f:0f:58:8c:25:e1:0b:f5:63:59:2b: 42:d3:6d:c6:ca:6a:85:ad:31:23:18:84:54:46:86:d9:5b:67: 0c:ce:38:37:7c:69:58:aa:ad:c5:66:56:fc:83:ed:f4:5d:ef: 82:89:fb:00:40:e6:d2:97:0f:54:e4:7e:9f:a9:d0:72:03:d2: 92:1e:20:81:71:fc:e3:f7:e0:42:0c:30:38:9d:e4:57:a3:5c: 09:4e:c8:13:8f:c0:11:9b:cd:e2:67:d3:dd:af:c5:f4:77:ef: 40:d9:af:0f:c9:c1:a7:d4:ed:d8:84:b6:86:49:f0:dd:79:ff: 0b:50:02:e6:1b:89:72:29:fd:e8:1e:42:52:ae:25:1e:05:60: 6f:77:85:0d:6c:09:3c:ca:4f:a0:a2:1e:ae:7b:2c:21:2c:23: 3b:75:3c:a4:89:51:0e:f9:d2:f8:38:c3:26:eb:8c:32:7c:14: a6:72:8e:fb:b5:59:e8:8f:f3:58:19:6d:c0:e8:0e:04:c3:49: ca:42:26:c8:4d:88:7e:3e:99:f8:1a:32:8f:71:9c:1a:6b:0f: d8:af:9c:7b:28:e9:bf:0e:62:c9:18:d6:4d:a1:c4:81:c1:44: f5:f3:77:13:a6:34:72:a2:ed:4d:6a:5c:c8:67:0a:86:26:d3: 12:e1:de:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgTGBTh2XY1TZyjSZp+dyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZTA1ZGYyNDcxNzRjZDM1MGIxYWYzNzgzMzMyN2M3NzAy YjhmZmYwHhcNMjUxMjEyMDMwMTAwWhcNMjUxMjEzMDMwMTAwWjAzMTEwLwYDVQQD Eyg1NDRiN2U5NDkyMzU5NTg2ODg1MTJjN2FjYWFjZDg4MTg4ZDc3Y2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM68k+SkeHnCNE0JgLLZgy0pTRo2 UndHSvGaUEUdgdg8OyzlmkW12NuyVxhJ3oc7RSgCFcPagugAHBM3ngOHRJTP4DGy Gmh1SppHVGAyof6ytpuD9vrSoUgeixlXmJ0dDBBXKc330FXodCknuaScIcv4IG7E 4CHfJEvxOETsYWcrOvFwOMcvNTL71fNVEbmp3fs2pJkai/v8fDC673a6LgAm2hdR 0kwea5YRGz0tJR69vcuD8XgomfUbyjnpTa4YFp/SsGk9bv/051n0ds/zO1zkTjdl gbMHW2xHYpCotLXITuWBczISDxULlyJCDAP9lHwqSEH3GDQIshKIP78NCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRLfpSSNZWGiFEsesqs2IGI13zCMB8GA1UdIwQY MBaAFEfgXfJHF0zTULGvN4MzJ8dwK4//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUi1CZDhrY1hUTk5Rc2E4M2d6TW54M0Fyal84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8zOGMyZTEtOGEzZi00MGIxLTgzNTMt YWVjOTZmNDMxMDE4LzEvUi1CZDhrY1hUTk5Rc2E4M2d6TW54M0Fyal84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8zOGMyZTEtOGEzZi00MGIxLTgzNTMtYWVjOTZmNDMxMDE4 LzEvUi1CZDhrY1hUTk5Rc2E4M2d6TW54M0Fyal84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPE1vNFoG +o8PWIwl4Qv1Y1krQtNtxspqha0xIxiEVEaG2VtnDM44N3xpWKqtxWZW/IPt9F3v gon7AEDm0pcPVOR+n6nQcgPSkh4ggXH84/fgQgwwOJ3kV6NcCU7IE4/AEZvN4mfT 3a/F9HfvQNmvD8nBp9Tt2IS2hknw3Xn/C1AC5huJcin96B5CUq4lHgVgb3eFDWwJ PMpPoKIernssISwjO3U8pIlRDvnS+DjDJuuMMnwUpnKO+7VZ6I/zWBltwOgOBMNJ ykImyE2Ifj6Z+Boyj3GcGmsP2K+ceyjpvw5iyRjWTaHEgcFE9fN3E6Y0cqLtTWpc yGcKhibTEuHenw== -----END CERTIFICATE-----Generated at Fri Dec 12 07:55:22 2025 by rpki-client