This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft File: 80fO2aDtf5RLn078OFd7OObRxnM.mft (raw, json) Hash identifier: CEYMKneCBnqWhwlfiOrg5t35UB+DtOcgAwUvTUYa1ac= Subject key identifier: 76:52:1B:9F:59:BF:CC:BD:31:30:33:23:84:DC:78:59:0E:81:F5:13 Authority key identifier: F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73 Certificate issuer: /CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673 Certificate serial: 019B2E8BAED3F07CAB4B0DE2519242A09FEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft Manifest number: 0D32 Signing time: Wed 17 Dec 2025 23:01:04 +0000 Manifest this update: Wed 17 Dec 2025 23:01:04 +0000 Manifest next update: Thu 18 Dec 2025 23:01:04 +0000 Files and hashes: 1: 80fO2aDtf5RLn078OFd7OObRxnM.crl (hash: Ok3pcW/mtRIRtToosrUr5dCJLCiusjzb5y2HvZBFnmQ=) 2: ZyBaJPQxm3-XH0gFju5MJYC4JWg.roa (hash: ySj8+X0dnc9ap4EhtEfAJ9xZUfiKRhH4fcuhqGb+r4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:ae:d3:f0:7c:ab:4b:0d:e2:51:92:42:a0:9f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673 Validity Not Before: Dec 17 23:01:04 2025 GMT Not After : Dec 18 23:01:04 2025 GMT Subject: CN=76521b9f59bfccbd3130332384dc78590e81f513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c6:74:32:2c:f7:49:4c:31:05:a5:ea:46:32: 61:43:01:3c:ff:4b:34:b7:86:2f:9f:0d:d5:8a:5f: 3d:29:10:4a:a8:86:18:3a:2f:e4:0c:9f:0a:2d:5a: 5c:05:6b:22:88:5d:1c:a0:77:7e:e0:00:18:85:d7: ae:a4:60:5f:06:fe:07:6c:7e:07:d0:df:de:0e:a4: ff:ad:56:53:a6:8f:9e:e6:fc:55:24:5c:34:e9:d0: 3f:02:34:42:3b:bb:64:36:b4:14:0d:f4:dc:7f:3a: c4:91:8d:28:4b:6a:f8:1c:bd:ef:c1:7c:5f:3c:44: 41:66:99:7e:bd:c4:4f:1b:77:af:f7:4e:bf:a5:3a: cd:06:ee:2d:1f:f7:a9:d1:ab:03:a9:8a:8d:5d:bd: 65:3f:4f:8a:6f:c9:d0:6f:08:96:da:5d:e3:bd:06: 58:5d:8a:b6:ad:3e:78:a2:c7:d0:e4:3c:4a:0c:a9: 88:e2:7f:25:0a:63:b7:ef:26:09:68:08:bf:73:61: db:21:88:04:49:21:d3:b1:c6:16:b5:0a:a8:34:32: 77:b7:07:f5:84:67:4a:b2:27:1d:87:6f:6a:dd:1e: 34:a1:84:77:f6:e0:aa:72:7c:f9:a5:6e:43:a7:62: 94:c3:3d:3f:11:12:88:8b:ec:78:24:d8:ef:2e:55: ca:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:52:1B:9F:59:BF:CC:BD:31:30:33:23:84:DC:78:59:0E:81:F5:13 X509v3 Authority Key Identifier: keyid:F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e3:58:8b:37:0a:82:9b:a5:94:8d:b9:d4:56:1c:e7:cf:6e: f6:c2:27:52:04:8e:3e:54:40:b7:b3:1a:a0:df:da:72:38:50: 78:2f:23:9f:83:be:8c:11:cc:2c:9d:0c:44:4c:1d:f5:cd:b3: c4:f5:c2:33:24:15:18:78:c5:b7:bd:ce:70:d3:cd:45:d4:98: 2c:d3:c1:7b:85:15:e1:22:a0:14:43:0d:bb:01:1e:34:93:91: 17:7c:a4:bc:26:6b:7e:69:d2:a7:3c:99:f2:84:2c:68:ff:df: 90:e8:76:ff:c6:6a:4a:3e:ea:e3:c7:ed:73:45:27:db:12:6a: 74:9c:26:6a:36:72:50:09:7d:99:b5:57:f4:d5:21:5f:f3:0d: 8c:42:60:f6:73:d0:48:ed:01:af:8b:dc:fb:63:ec:6b:a6:6a: 58:db:d0:56:f9:5c:51:1c:56:5d:3a:6e:b4:8f:61:2d:0e:75: da:85:b5:ac:81:5d:7e:04:62:04:14:6d:a9:7b:57:70:34:83: 64:2c:26:1d:82:e2:b1:7e:e5:6f:e7:73:38:a6:34:f1:02:4d: 84:24:7d:37:22:12:16:53:00:01:be:a4:db:35:ca:98:9d:59: 08:9d:42:89:0e:54:c6:12:c3:3c:ff:f5:78:c0:2a:07:fd:18: b5:f2:02:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui67T8HyrSw3iUZJCoJ/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNDdjZWQ5YTBlZDdmOTQ0YjlmNGVmYzM4NTc3YjM4ZTZk MWM2NzMwHhcNMjUxMjE3MjMwMTA0WhcNMjUxMjE4MjMwMTA0WjAzMTEwLwYDVQQD Eyg3NjUyMWI5ZjU5YmZjY2JkMzEzMDMzMjM4NGRjNzg1OTBlODFmNTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cZ0Miz3SUwxBaXqRjJhQwE8/0s0 t4Yvnw3Vil89KRBKqIYYOi/kDJ8KLVpcBWsiiF0coHd+4AAYhdeupGBfBv4HbH4H 0N/eDqT/rVZTpo+e5vxVJFw06dA/AjRCO7tkNrQUDfTcfzrEkY0oS2r4HL3vwXxf PERBZpl+vcRPG3ev906/pTrNBu4tH/ep0asDqYqNXb1lP0+Kb8nQbwiW2l3jvQZY XYq2rT54osfQ5DxKDKmI4n8lCmO37yYJaAi/c2HbIYgESSHTscYWtQqoNDJ3twf1 hGdKsicdh29q3R40oYR39uCqcnz5pW5Dp2KUwz0/ERKIi+x4JNjvLlXKfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZSG59Zv8y9MTAzI4TceFkOgfUTMB8GA1UdIwQY MBaAFPNHztmg7X+US59O/DhXezjm0cZzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODBmTzJhRHRmNVJMbjA3OE9GZDdPT2JSeG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wODk2MDMtYjViZS00ZmZhLWEyYjIt MjMyYjRiNDY1N2U5LzEvODBmTzJhRHRmNVJMbjA3OE9GZDdPT2JSeG5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8wODk2MDMtYjViZS00ZmZhLWEyYjItMjMyYjRiNDY1N2U5 LzEvODBmTzJhRHRmNVJMbjA3OE9GZDdPT2JSeG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeNYizcK gpullI251FYc589u9sInUgSOPlRAt7MaoN/acjhQeC8jn4O+jBHMLJ0MREwd9c2z xPXCMyQVGHjFt73OcNPNRdSYLNPBe4UV4SKgFEMNuwEeNJORF3ykvCZrfmnSpzyZ 8oQsaP/fkOh2/8ZqSj7q48ftc0Un2xJqdJwmajZyUAl9mbVX9NUhX/MNjEJg9nPQ SO0Br4vc+2Psa6ZqWNvQVvlcURxWXTputI9hLQ512oW1rIFdfgRiBBRtqXtXcDSD ZCwmHYLisX7lb+dzOKY08QJNhCR9NyISFlMAAb6k2zXKmJ1ZCJ1CiQ5UxhLDPP/1 eMAqB/0YtfICxQ== -----END CERTIFICATE-----Generated at Thu Dec 18 05:28:45 2025 by rpki-client