This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft File: d8Bx2YnlMJrDyzwLCNOsslIRErY.mft (raw, json) Hash identifier: 4eTZgdaF2WAamJ5ZmYmh80kBBsdjKQCyhEoryr3bIxs= Subject key identifier: EC:61:E3:13:A0:C9:38:6E:63:A2:49:2F:70:BA:22:76:7A:3A:A1:A5 Authority key identifier: 77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6 Certificate issuer: /CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6 Certificate serial: 019B48F014BD058FF4558FA50F22E591A48F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft Manifest number: 13B5 Signing time: Tue 23 Dec 2025 02:00:52 +0000 Manifest this update: Tue 23 Dec 2025 02:00:52 +0000 Manifest next update: Wed 24 Dec 2025 02:00:52 +0000 Files and hashes: 1: Le5vpyY48HdbIpkDIdpXFhjYz0Q.roa (hash: Myyoy3T8AQaNeHj3CEH6lMEU7kAImPu/7Rglv2KrnL4=) 2: d8Bx2YnlMJrDyzwLCNOsslIRErY.crl (hash: czn8S8VS9Jl4b0Vd6eWCD/pCXssv45J7tuuIseMckwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:14:bd:05:8f:f4:55:8f:a5:0f:22:e5:91:a4:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6 Validity Not Before: Dec 23 02:00:52 2025 GMT Not After : Dec 24 02:00:52 2025 GMT Subject: CN=ec61e313a0c9386e63a2492f70ba22767a3aa1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fd:74:00:82:35:84:a4:9d:d1:7b:bd:bf:37: 66:ea:59:1c:18:b3:8e:eb:c5:3f:53:cb:f3:20:4f: 91:e1:de:a7:ec:03:ea:3c:f9:2d:dd:ba:7c:4e:0b: db:8d:72:bf:79:dd:df:bb:85:66:10:0e:f3:10:3a: da:cb:7f:21:59:a7:d2:c2:a2:84:a9:21:44:88:52: 7d:42:8f:c3:65:ea:8e:4a:33:ac:00:71:d3:9f:f8: cc:0d:ca:7f:f3:bb:29:37:84:93:92:b6:90:19:27: e4:b6:12:77:68:f7:6f:84:bf:1d:08:e7:02:7e:96: cc:c5:e3:58:a8:b8:5d:77:7e:f2:3a:44:d8:a2:28: f5:ae:d0:b7:5e:f3:05:0f:c4:a9:09:ce:98:4f:4c: 4a:11:20:9e:a6:91:04:b1:a8:ea:1b:cf:b3:1e:33: 36:cb:25:d5:bb:a8:a4:04:0f:b1:f8:13:1f:28:e7: 78:b6:8e:1d:3a:d7:e2:b6:30:98:a7:32:a1:00:26: 77:98:3b:49:b2:1a:d0:36:69:d6:db:25:f5:47:e7: 19:cb:8a:ac:c6:f9:b8:de:3d:3a:b1:3e:29:6a:19: cf:7d:3c:7a:08:79:a7:ca:4b:13:7c:d2:81:cc:52: 17:6e:36:a2:fb:ea:78:68:8c:83:80:7d:ae:a2:61: ef:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:61:E3:13:A0:C9:38:6E:63:A2:49:2F:70:BA:22:76:7A:3A:A1:A5 X509v3 Authority Key Identifier: keyid:77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:ff:23:f8:ba:eb:16:a7:9a:7d:51:e9:cf:cb:f8:e9:b5:98: ff:6f:69:e3:86:4a:9c:5b:35:ab:7a:25:f2:42:65:df:42:24: 64:f5:97:1c:57:e0:b9:b4:7a:a0:33:10:c1:7b:c7:a8:a3:94: e8:db:92:9b:06:61:06:14:bd:7a:31:34:a1:7b:98:89:a7:d7: 3e:80:d2:69:1d:40:b0:cf:ea:bd:6e:bc:f4:31:a3:ec:ea:39: 98:af:c9:f4:d6:14:b0:70:8c:31:70:39:f3:5c:66:85:e6:49: d7:dd:53:89:9b:3c:25:e6:ff:7e:8d:0d:b7:ef:50:b5:c4:67: 52:68:66:75:79:5a:07:51:05:fe:9e:c3:28:9e:f2:b8:f3:fe: ba:bd:71:6d:7a:60:7c:41:50:23:1c:99:bf:c0:75:df:37:03: b1:40:8d:94:02:a1:c4:31:08:f8:fe:61:e5:68:f8:f7:c8:31: 07:8a:7b:d3:19:7d:7f:af:71:02:43:f6:b5:eb:66:56:8a:ac: f3:0e:35:06:d7:c2:c5:e1:c8:2a:b6:c8:52:7e:c0:e5:d1:b0: 09:5a:23:d0:4d:8c:4f:61:60:ed:f7:c0:b1:0d:8a:21:04:27: de:7c:fc:b8:a0:09:f9:92:36:d5:4c:85:fc:c9:09:41:1b:6a: b0:af:32:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8BS9BY/0VY+lDyLlkaSPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzA3MWQ5ODllNTMwOWFjM2NiM2MwYjA4ZDNhY2IyNTIx MTEyYjYwHhcNMjUxMjIzMDIwMDUyWhcNMjUxMjI0MDIwMDUyWjAzMTEwLwYDVQQD EyhlYzYxZTMxM2EwYzkzODZlNjNhMjQ5MmY3MGJhMjI3NjdhM2FhMWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4P10AII1hKSd0Xu9vzdm6lkcGLOO 68U/U8vzIE+R4d6n7APqPPkt3bp8TgvbjXK/ed3fu4VmEA7zEDray38hWafSwqKE qSFEiFJ9Qo/DZeqOSjOsAHHTn/jMDcp/87spN4STkraQGSfkthJ3aPdvhL8dCOcC fpbMxeNYqLhdd37yOkTYoij1rtC3XvMFD8SpCc6YT0xKESCeppEEsajqG8+zHjM2 yyXVu6ikBA+x+BMfKOd4to4dOtfitjCYpzKhACZ3mDtJshrQNmnW2yX1R+cZy4qs xvm43j06sT4pahnPfTx6CHmnyksTfNKBzFIXbjai++p4aIyDgH2uomHvfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxh4xOgyThuY6JJL3C6InZ6OqGlMB8GA1UdIwQY MBaAFHfAcdmJ5TCaw8s8CwjTrLJSERK2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhCeDJZbmxNSnJEeXp3TENOT3NzbElSRXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84NDRiZmUtZWMxOC00MTdlLThmNWEt NWNjNGRlZDlhN2QyLzEvZDhCeDJZbmxNSnJEeXp3TENOT3NzbElSRXJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi84NDRiZmUtZWMxOC00MTdlLThmNWEtNWNjNGRlZDlhN2Qy LzEvZDhCeDJZbmxNSnJEeXp3TENOT3NzbElSRXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkf8j+Lrr FqeafVHpz8v46bWY/29p44ZKnFs1q3ol8kJl30IkZPWXHFfgubR6oDMQwXvHqKOU 6NuSmwZhBhS9ejE0oXuYiafXPoDSaR1AsM/qvW689DGj7Oo5mK/J9NYUsHCMMXA5 81xmheZJ191TiZs8Jeb/fo0Nt+9QtcRnUmhmdXlaB1EF/p7DKJ7yuPP+ur1xbXpg fEFQIxyZv8B13zcDsUCNlAKhxDEI+P5h5Wj498gxB4p70xl9f69xAkP2tetmVoqs 8w41BtfCxeHIKrbIUn7A5dGwCVoj0E2MT2Fg7ffAsQ2KIQQn3nz8uKAJ+ZI21UyF /MkJQRtqsK8yfQ== -----END CERTIFICATE-----Generated at Tue Dec 23 05:01:41 2025 by rpki-client