This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft File: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft (raw, json) Hash identifier: bKfjMBzoBZmc6sKbFq0ywBCFW0K8rQkxNFZhUIrzCqY= Subject key identifier: 07:1E:D7:5C:A1:57:54:A9:2F:00:A0:0B:56:B3:3A:6D:C3:5C:1D:8C Authority key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74 Certificate issuer: /CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174 Certificate serial: 019B2250CB8914293ED41A5B30A4465598FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft Manifest number: 05D6 Signing time: Mon 15 Dec 2025 14:01:18 +0000 Manifest this update: Mon 15 Dec 2025 14:01:18 +0000 Manifest next update: Tue 16 Dec 2025 14:01:18 +0000 Files and hashes: 1: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl (hash: w/9HLtvyEnIogBlEkILRYUwR9XJ34RDGCrAYUhab2No=) 2: i40en23OGg_DEWIRxhMGmgEox1s.roa (hash: iWUkdAfgE1mLIKUO/1DuqvBR2l5IncPfNwSFVOKSJKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:cb:89:14:29:3e:d4:1a:5b:30:a4:46:55:98:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174 Validity Not Before: Dec 15 14:01:18 2025 GMT Not After : Dec 16 14:01:18 2025 GMT Subject: CN=071ed75ca15754a92f00a00b56b33a6dc35c1d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fe:33:cd:30:8c:40:7a:e9:86:05:ac:fe:64: a8:07:46:59:80:44:13:c6:97:c7:5d:92:68:34:12: 66:2c:f6:c7:df:ea:aa:6c:8c:86:68:39:03:f6:c1: b7:80:fa:da:be:41:1c:7c:8c:47:30:37:32:e1:4b: b9:90:0a:fa:68:a8:34:78:02:43:84:75:d5:0d:52: 4a:22:7f:ca:b8:f9:d5:e8:50:31:08:ff:d7:f2:26: a4:14:21:e3:b0:a4:53:b2:c7:2e:80:26:a2:79:ac: b5:db:e9:b0:53:06:e0:f3:26:a7:81:b5:6d:29:b5: 27:ad:c7:b5:9c:d6:8b:ae:87:44:84:79:ef:fc:63: 70:4b:49:a6:07:31:dc:3f:e9:bc:dd:cf:c0:c9:ac: 27:cd:88:76:f4:c8:72:6c:1c:c9:4c:60:01:9a:bc: c8:44:01:1b:1c:01:4d:8b:42:22:88:7f:8a:cb:ac: 44:ce:61:0f:b6:5f:bd:1f:1a:93:d2:d6:7f:0e:9a: e6:5f:82:f5:a9:28:67:8f:47:fc:23:b6:0b:7b:f0: c2:67:c1:41:c3:91:5a:7c:fb:bf:98:40:49:b0:7c: 62:35:24:1b:ed:5c:f5:85:de:d9:53:6d:17:4c:7d: 65:6a:dd:62:d9:22:00:01:6e:ea:77:b9:7b:eb:9c: 25:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1E:D7:5C:A1:57:54:A9:2F:00:A0:0B:56:B3:3A:6D:C3:5C:1D:8C X509v3 Authority Key Identifier: keyid:F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:d5:cf:46:24:f0:c9:4c:1b:f9:f4:b3:a4:19:32:23:75:07: be:4a:a8:e5:63:9a:34:f7:34:52:47:fc:e7:63:df:89:09:df: 71:ca:87:27:7f:51:99:88:39:77:18:9e:05:f8:9c:d7:42:9f: 81:08:e4:fd:05:b2:7f:ea:b9:ea:d1:f8:84:06:94:2f:2b:d1: c4:7e:fc:cf:34:3f:2e:32:99:50:85:13:39:91:09:85:f9:cb: aa:0c:fa:d8:81:f8:4c:9f:03:95:97:ef:bf:60:e5:48:21:eb: ac:b2:70:52:25:54:41:4a:50:36:19:34:bd:23:cb:e9:06:49: e3:df:c3:7e:db:4b:35:ac:20:fc:bf:41:b7:ae:3a:66:c4:b2: 45:9f:a1:1a:0c:11:5a:ce:41:60:db:20:ec:12:18:02:6a:6e: fc:9c:a1:1d:7d:b1:f0:25:4c:53:0e:e4:7d:a5:6f:43:5e:47: 5a:8d:42:e0:6c:e4:f9:af:6c:e3:8e:24:71:1c:b3:95:5d:b2: be:3d:1e:69:a8:6d:e6:5f:29:36:8a:69:46:1b:e1:e9:c7:04: d2:49:50:4a:e1:cf:3e:77:75:b5:b5:17:80:ca:b2:69:13:c8: a5:b5:2e:9f:3c:df:07:da:f1:7d:7c:57:fa:a1:0d:6e:38:e6: 93:0d:a6:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUMuJFCk+1BpbMKRGVZj/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwM2VkNGZlZGY1NmQwYjAyYjE3MmM4Zjg5ZWMzNzY1MTBj ZDMxNzQwHhcNMjUxMjE1MTQwMTE4WhcNMjUxMjE2MTQwMTE4WjAzMTEwLwYDVQQD EygwNzFlZDc1Y2ExNTc1NGE5MmYwMGEwMGI1NmIzM2E2ZGMzNWMxZDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv4zzTCMQHrphgWs/mSoB0ZZgEQT xpfHXZJoNBJmLPbH3+qqbIyGaDkD9sG3gPravkEcfIxHMDcy4Uu5kAr6aKg0eAJD hHXVDVJKIn/KuPnV6FAxCP/X8iakFCHjsKRTsscugCaieay12+mwUwbg8yangbVt KbUnrce1nNaLrodEhHnv/GNwS0mmBzHcP+m83c/AyawnzYh29MhybBzJTGABmrzI RAEbHAFNi0IiiH+Ky6xEzmEPtl+9HxqT0tZ/DprmX4L1qShnj0f8I7YLe/DCZ8FB w5FafPu/mEBJsHxiNSQb7Vz1hd7ZU20XTH1lat1i2SIAAW7qd7l765wlZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAce11yhV1SpLwCgC1azOm3DXB2MMB8GA1UdIwQY MBaAFPA+1P7fVtCwKxcsj4nsN2UQzTF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNjM5NTAtNzZlOC00ZjJiLTg3MzEt ZmI0ZmQwN2UyNmEwLzEvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lNjM5NTAtNzZlOC00ZjJiLTg3MzEtZmI0ZmQwN2UyNmEw LzEvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApdXPRiTw yUwb+fSzpBkyI3UHvkqo5WOaNPc0Ukf852PfiQnfccqHJ39RmYg5dxieBfic10Kf gQjk/QWyf+q56tH4hAaULyvRxH78zzQ/LjKZUIUTOZEJhfnLqgz62IH4TJ8DlZfv v2DlSCHrrLJwUiVUQUpQNhk0vSPL6QZJ49/DfttLNawg/L9Bt646ZsSyRZ+hGgwR Ws5BYNsg7BIYAmpu/JyhHX2x8CVMUw7kfaVvQ15HWo1C4Gzk+a9s444kcRyzlV2y vj0eaaht5l8pNoppRhvh6ccE0klQSuHPPnd1tbUXgMqyaRPIpbUunzzfB9rxfXxX +qENbjjmkw2mxQ== -----END CERTIFICATE-----Generated at Mon Dec 15 20:08:21 2025 by rpki-client