This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft File: 08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json) Hash identifier: t2t6AGq+t0Rm/u1eEg9fAxKde0nKBnSM2GuTuCUjlo8= Subject key identifier: DC:69:73:00:01:EA:9A:DD:1F:90:82:2A:0D:63:E7:45:0F:8A:89:95 Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD Certificate issuer: /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd Certificate serial: 019AF31B7E42E1C675609C0BD57AAEE9ACB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:00:56 +0000 Manifest this update: Sat 06 Dec 2025 10:00:56 +0000 Manifest next update: Sun 07 Dec 2025 10:00:56 +0000 Files and hashes: 1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: XrAAvCOOJa0TAe5AVnrzvFQxkvv6yXqulyCsQOvtzfM=) 2: vhpsA1QTyqlbOgTgwwiSOvjLosU.roa (hash: oOzCVm5vsYLrY+U1GpoNLtBM7Fbrqb31l0clRbwWzyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:7e:42:e1:c6:75:60:9c:0b:d5:7a:ae:e9:ac:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd Validity Not Before: Dec 6 10:00:56 2025 GMT Not After : Dec 7 10:00:56 2025 GMT Subject: CN=dc69730001ea9add1f90822a0d63e7450f8a8995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:03:31:55:ce:b0:c3:54:db:c0:4e:f9:f2:1f: d6:45:40:eb:19:44:8b:82:1a:6a:9d:d9:da:6f:9d: 5d:6a:ea:b1:96:d5:6b:b4:72:14:f4:96:ed:f4:02: a0:9b:a7:b1:0c:1a:c1:ed:f1:14:bb:30:bf:1f:d6: d4:09:b8:f9:ef:fe:14:c9:18:1f:b5:54:af:53:53: a4:6d:94:55:ec:75:ba:31:73:c2:98:0f:25:a9:96: e9:c7:63:ed:08:9d:12:89:f4:c5:21:4c:72:7b:82: de:ac:1b:80:a4:b2:dc:91:6e:96:30:7e:d0:45:3f: d1:4e:c3:7a:47:68:39:b0:24:c8:5d:de:d0:18:02: f7:5f:1c:21:d0:7d:fa:59:4e:cc:f7:36:9f:27:26: 33:41:79:83:d2:4d:33:be:c3:ed:99:e9:12:94:34: 0a:0f:96:d8:09:d2:39:fd:42:c0:f3:10:5a:9c:8b: c6:8d:a5:7e:95:14:9c:06:e1:ca:3f:7b:77:ee:39: a5:d5:3b:82:d2:39:7b:db:fe:22:3d:aa:99:d9:ae: 5d:bc:31:67:93:7b:3d:2c:d8:17:c8:94:7d:b2:4b: ea:92:6d:a6:73:af:06:d0:1f:c6:15:df:4b:2f:24: 01:b3:62:cd:82:ee:9f:3e:b0:db:1c:63:8d:00:7a: db:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:69:73:00:01:EA:9A:DD:1F:90:82:2A:0D:63:E7:45:0F:8A:89:95 X509v3 Authority Key Identifier: keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:77:47:e2:c5:60:2f:13:b3:7e:3e:69:6a:bc:44:69:f9:48: d3:85:a6:9f:ed:6d:19:d0:16:56:53:5b:21:a6:20:aa:10:5d: 70:15:6e:b3:ce:af:6e:48:ae:35:f8:d3:7a:09:2d:4e:0b:c2: c8:6d:98:25:11:18:da:76:2c:46:07:b4:ae:f2:4e:16:69:d6: 9a:a6:18:96:26:88:2c:51:2a:d4:01:9a:9e:84:87:c6:07:be: 4a:e3:13:3a:e0:bc:ff:09:db:74:24:f9:a5:59:ae:7f:3f:e5: 6e:48:a0:4a:9b:a8:d7:8f:44:48:21:64:3b:6d:de:9a:ab:c5: ea:aa:a0:a4:33:b8:9c:c9:bb:16:4a:25:8b:85:c2:e7:bd:6b: a7:6c:1e:55:1c:ed:01:36:b0:f5:c2:5e:0a:e8:39:27:8a:d1: 9b:4d:15:79:03:51:db:8f:f1:65:7b:f8:f8:32:08:80:21:db: a3:34:d1:9f:8e:ae:da:7c:f0:af:b0:9b:dc:b2:b0:72:ad:6c: 29:78:ae:3e:6b:90:d4:22:4f:9d:68:77:fb:6d:7e:fa:15:d6: 4f:29:11:8f:f9:df:9c:36:c6:71:d5:6d:55:3c:b1:49:42:fa: 27:e9:64:24:33:4c:89:e0:e5:ad:9e:1d:bc:ee:c8:1e:35:e9: 1e:46:14:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG35C4cZ1YJwL1Xqu6ayyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYzBkNWIxMDZiODFhOTI5MjRlYTJiYzUxMzlmYmI1ZWUx MTg2ZGQwHhcNMjUxMjA2MTAwMDU2WhcNMjUxMjA3MTAwMDU2WjAzMTEwLwYDVQQD EyhkYzY5NzMwMDAxZWE5YWRkMWY5MDgyMmEwZDYzZTc0NTBmOGE4OTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AMxVc6ww1TbwE758h/WRUDrGUSL ghpqndnab51dauqxltVrtHIU9Jbt9AKgm6exDBrB7fEUuzC/H9bUCbj57/4UyRgf tVSvU1OkbZRV7HW6MXPCmA8lqZbpx2PtCJ0SifTFIUxye4LerBuApLLckW6WMH7Q RT/RTsN6R2g5sCTIXd7QGAL3Xxwh0H36WU7M9zafJyYzQXmD0k0zvsPtmekSlDQK D5bYCdI5/ULA8xBanIvGjaV+lRScBuHKP3t37jml1TuC0jl72/4iPaqZ2a5dvDFn k3s9LNgXyJR9skvqkm2mc68G0B/GFd9LLyQBs2LNgu6fPrDbHGONAHrbuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxpcwAB6prdH5CCKg1j50UPiomVMB8GA1UdIwQY MBaAFNPA1bEGuBqSkk6ivFE5+7XuEYbdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xOWY0ZDQtNWMxZS00MjFmLTlmNTYt YmM1MTA0YTM4NWUyLzEvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8xOWY0ZDQtNWMxZS00MjFmLTlmNTYtYmM1MTA0YTM4NWUy LzEvMDhEVnNRYTRHcEtTVHFLOFVUbjd0ZTRSaHQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHdH4sVg LxOzfj5parxEaflI04Wmn+1tGdAWVlNbIaYgqhBdcBVus86vbkiuNfjTegktTgvC yG2YJREY2nYsRge0rvJOFmnWmqYYliaILFEq1AGanoSHxge+SuMTOuC8/wnbdCT5 pVmufz/lbkigSpuo149ESCFkO23emqvF6qqgpDO4nMm7Fkoli4XC571rp2weVRzt ATaw9cJeCug5J4rRm00VeQNR24/xZXv4+DIIgCHbozTRn46u2nzwr7Cb3LKwcq1s KXiuPmuQ1CJPnWh3+21++hXWTykRj/nfnDbGcdVtVTyxSUL6J+lkJDNMieDlrZ4d vO7IHjXpHkYUVw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:25 2025 by rpki-client