This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft File: d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft (raw, json) Hash identifier: pCDAPYjRScMsMqXL0MQfU0ah19IGitK/XYCTK2XUxcQ= Subject key identifier: 37:65:73:04:2B:11:E7:E6:B2:79:22:22:AB:CC:48:8C:8F:CB:3D:B3 Authority key identifier: 77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E Certificate issuer: /CN=77c7b457f9af042924142373ce090f7fa876257e Certificate serial: 019B255258B286379060600B621F8CB91CA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft Manifest number: 103C Signing time: Tue 16 Dec 2025 04:01:51 +0000 Manifest this update: Tue 16 Dec 2025 04:01:51 +0000 Manifest next update: Wed 17 Dec 2025 04:01:51 +0000 Files and hashes: 1: d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl (hash: 4fHOXs4iPBTW5B0zg/962ZRUGXwY7rP7vIRQglOhUFY=) 2: gLKpyPGbqCEdbx2uKWZ-HtuhLy0.roa (hash: f77sZOCl1dYzZqqQSp/e70T40ZHDdgkRvhdb7798S4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:58:b2:86:37:90:60:60:0b:62:1f:8c:b9:1c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c7b457f9af042924142373ce090f7fa876257e Validity Not Before: Dec 16 04:01:51 2025 GMT Not After : Dec 17 04:01:51 2025 GMT Subject: CN=376573042b11e7e6b2792222abcc488c8fcb3db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:26:8f:c2:2e:d1:db:57:a7:35:9a:4f:73:f1: 57:cf:69:96:8c:22:f9:17:9b:ea:1d:06:5f:fc:3e: b9:32:52:c1:7f:9c:49:74:f3:20:6b:3e:a8:3d:66: ba:bd:87:27:f8:7b:d6:0e:37:fa:6e:7e:02:d8:e6: 8c:0c:7e:ed:2d:5b:e0:2b:9a:ee:2e:53:b4:5c:4a: 21:70:a3:49:6d:21:ff:dc:21:11:e2:2f:5f:af:03: 46:52:9f:91:d3:8e:84:6a:a6:7d:05:4d:b4:79:9c: 12:26:d4:77:5f:fa:a1:df:b6:b1:0c:2a:76:92:5f: ce:4a:87:5e:ab:d1:90:94:ad:60:49:95:45:ce:a8: 90:b2:6e:3a:87:19:af:d4:48:5d:03:c7:58:61:5a: 9c:f1:d3:c8:14:41:d4:90:20:ed:9d:88:14:36:f5: e6:21:6b:29:90:e1:40:f9:da:86:b3:df:5b:b3:31: 08:46:61:bc:04:25:be:51:d2:99:a8:1f:a6:01:81: fa:65:c2:dd:1d:a3:2a:28:a5:50:b9:7b:78:b2:cb: ac:d0:36:f2:18:ad:e9:44:e0:46:07:f4:d8:bc:37: f4:09:f6:25:ac:8f:e6:38:58:37:60:d0:c3:6b:25: 12:b7:d3:8e:06:b1:32:d5:f2:b0:77:09:aa:9b:ed: b4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:65:73:04:2B:11:E7:E6:B2:79:22:22:AB:CC:48:8C:8F:CB:3D:B3 X509v3 Authority Key Identifier: keyid:77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ad:bd:9b:7b:e3:19:96:76:e3:18:f0:dd:73:70:78:d5:cb: 31:49:85:f2:3f:51:ac:ad:bb:28:16:40:2a:92:0a:9f:37:73: ae:00:62:47:ab:e8:81:c0:2d:2b:00:22:e1:11:43:04:30:b9: cc:52:24:df:88:54:cc:5f:19:98:ed:85:b6:56:9c:e7:a8:31: c2:f7:3d:fe:1a:49:d4:40:c0:a0:7d:42:35:f6:aa:59:ee:e3: c2:a7:ce:ab:4a:65:21:19:39:36:15:38:de:e6:df:01:ba:0a: 9b:ec:1b:fb:de:45:f3:ca:be:62:64:c7:d7:92:35:f3:0d:b7: 76:d2:d8:f5:94:46:72:34:2d:bd:df:d3:f4:bd:37:08:6c:5b: 23:a2:94:19:98:d3:23:12:9a:f6:10:42:65:3c:cd:47:86:97: 0e:05:62:df:4e:21:51:23:72:b3:5a:bf:ce:18:b0:da:9f:93: 53:bb:aa:fb:e3:a8:64:13:10:a3:2a:2b:85:30:5e:9a:43:27: 63:ca:cb:80:43:19:8e:5c:6e:24:14:f1:3d:78:84:fd:cd:7f: e2:0d:12:b0:aa:2b:a6:9b:a1:4e:70:d6:39:7b:78:57:49:8d: 99:a2:03:c4:a0:81:a1:f6:f2:a5:64:79:84:57:18:8d:e8:75: 82:15:99:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUliyhjeQYGALYh+MuRymMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzdiNDU3ZjlhZjA0MjkyNDE0MjM3M2NlMDkwZjdmYTg3 NjI1N2UwHhcNMjUxMjE2MDQwMTUxWhcNMjUxMjE3MDQwMTUxWjAzMTEwLwYDVQQD EygzNzY1NzMwNDJiMTFlN2U2YjI3OTIyMjJhYmNjNDg4YzhmY2IzZGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCaPwi7R21enNZpPc/FXz2mWjCL5 F5vqHQZf/D65MlLBf5xJdPMgaz6oPWa6vYcn+HvWDjf6bn4C2OaMDH7tLVvgK5ru LlO0XEohcKNJbSH/3CER4i9frwNGUp+R046EaqZ9BU20eZwSJtR3X/qh37axDCp2 kl/OSodeq9GQlK1gSZVFzqiQsm46hxmv1EhdA8dYYVqc8dPIFEHUkCDtnYgUNvXm IWspkOFA+dqGs99bszEIRmG8BCW+UdKZqB+mAYH6ZcLdHaMqKKVQuXt4ssus0Dby GK3pROBGB/TYvDf0CfYlrI/mOFg3YNDDayUSt9OOBrEy1fKwdwmqm+20SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdlcwQrEefmsnkiIqvMSIyPyz2zMB8GA1UdIwQY MBaAFHfHtFf5rwQpJBQjc84JD3+odiV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhlMFZfbXZCQ2trRkNOenpna1BmNmgySlg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZDBiN2QtZGI5Ni00Mzg3LTkzZWMt ODQ2OWNmNjU5MTAxLzEvZDhlMFZfbXZCQ2trRkNOenpna1BmNmgySlg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS81ZDBiN2QtZGI5Ni00Mzg3LTkzZWMtODQ2OWNmNjU5MTAx LzEvZDhlMFZfbXZCQ2trRkNOenpna1BmNmgySlg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe629m3vj GZZ24xjw3XNweNXLMUmF8j9RrK27KBZAKpIKnzdzrgBiR6vogcAtKwAi4RFDBDC5 zFIk34hUzF8ZmO2Ftlac56gxwvc9/hpJ1EDAoH1CNfaqWe7jwqfOq0plIRk5NhU4 3ubfAboKm+wb+95F88q+YmTH15I18w23dtLY9ZRGcjQtvd/T9L03CGxbI6KUGZjT IxKa9hBCZTzNR4aXDgVi304hUSNys1q/zhiw2p+TU7uq++OoZBMQoyorhTBemkMn Y8rLgEMZjlxuJBTxPXiE/c1/4g0SsKorppuhTnDWOXt4V0mNmaIDxKCBofbypWR5 hFcYjeh1ghWZxQ== -----END CERTIFICATE-----Generated at Tue Dec 16 12:33:26 2025 by rpki-client