This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft File: V8dqgOwpEqVok1y1e2plDwPf2NI.mft (raw, json) Hash identifier: PHC/42fJSdazGAuoFlFIhRyoEgB0imQ2v0C6a+87ibA= Subject key identifier: 34:17:C4:BE:A7:34:6B:AC:42:8F:49:69:2E:DE:C7:8A:2D:6A:FA:5E Authority key identifier: 57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2 Certificate issuer: /CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2 Certificate serial: 019AF3528CB5769699AECBECA2FB00EE6053 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft Manifest number: 0D8E Signing time: Sat 06 Dec 2025 11:01:04 +0000 Manifest this update: Sat 06 Dec 2025 11:01:04 +0000 Manifest next update: Sun 07 Dec 2025 11:01:04 +0000 Files and hashes: 1: V8dqgOwpEqVok1y1e2plDwPf2NI.crl (hash: 1nBPw3Jdh9sIjCZvXbpYL/WnOSqDp5vZQer7i4kz6+M=) 2: c0WcDmEa-I3e6oejtEWp5xBEKhk.roa (hash: gv5nn6HuxLobRhPQtfW9QLB/XRSSApZbiTBp/n9p8eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:8c:b5:76:96:99:ae:cb:ec:a2:fb:00:ee:60:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2 Validity Not Before: Dec 6 11:01:04 2025 GMT Not After : Dec 7 11:01:04 2025 GMT Subject: CN=3417c4bea7346bac428f49692edec78a2d6afa5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:be:d7:d3:7a:96:f5:99:94:0e:c0:b2:72:55: c9:b9:f8:eb:65:a0:6d:ce:4c:c4:eb:8d:b2:e6:0f: a7:43:ad:af:31:1e:27:ae:33:f3:01:59:0c:0d:02: fc:05:b6:66:dd:d8:0e:65:e1:ec:8e:bf:53:89:7d: 74:43:b9:ba:74:e9:37:e3:23:4b:b0:74:7e:b5:da: 6c:59:ea:fe:03:b8:90:37:4c:7d:61:f2:4e:db:ec: a8:54:58:6a:8c:5d:18:6e:87:21:59:7a:a6:12:62: 32:9f:2d:3f:ae:a0:5b:75:d8:d5:b1:b1:ca:3e:84: 0a:a7:0a:13:5a:1f:a9:3c:01:38:16:85:df:36:96: ca:2a:2c:5d:d9:eb:18:bd:6e:03:6b:79:20:d4:3f: ae:3c:89:ef:74:3a:7c:60:f1:fe:d7:32:b0:ce:a0: c6:fc:af:2c:89:7d:9b:fd:9f:39:cc:cf:d6:e3:47: 35:d1:53:19:14:35:9d:f5:10:63:03:ba:2d:18:26: 56:ec:80:22:5b:70:43:12:fb:0b:61:39:45:81:04: e4:85:e3:79:11:42:af:5a:ad:fc:55:b3:5f:9f:48: 6e:ab:fa:98:4c:af:d3:91:b0:4c:b8:60:29:e5:e8: 51:af:fa:c1:5c:24:fa:c9:3e:76:91:42:6a:7b:0b: c9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:17:C4:BE:A7:34:6B:AC:42:8F:49:69:2E:DE:C7:8A:2D:6A:FA:5E X509v3 Authority Key Identifier: keyid:57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:97:96:1c:47:0d:4f:72:33:5b:b3:4a:a9:8d:7f:38:91:a2: 6a:83:4f:a7:20:7b:51:65:e0:bd:87:a1:91:2d:9c:be:76:3f: 1d:64:f2:07:8b:8d:42:b9:d2:63:b9:18:c3:9b:58:92:47:1c: 49:02:29:cc:01:4d:ee:b8:17:9d:f1:ba:ea:98:85:18:62:37: af:e9:ad:ba:b0:42:c5:95:9f:32:ca:92:bc:1f:0b:f1:3a:a8: 91:fa:da:4c:d3:e3:bf:ce:5f:8f:32:d5:1b:61:b7:db:db:27: 39:ee:b4:3d:43:f3:09:cf:c3:d1:22:30:84:b6:59:83:a1:b9: 4e:97:78:e4:d7:b2:34:ea:4d:63:84:7b:5c:4c:1e:c6:64:c1: 42:be:1c:b7:1c:de:37:ea:95:ee:29:d5:11:b1:e2:e6:4b:82: b7:3e:5f:5c:02:dd:ec:2c:67:49:45:34:ff:72:7f:cd:f3:a9: d0:74:28:31:eb:18:33:68:cd:2d:91:35:74:5d:39:3d:d2:2b: e3:45:96:d1:88:d0:b4:63:52:82:ea:fd:a4:98:6d:6b:45:19: 54:dd:27:6b:66:aa:e3:17:c1:2f:14:9d:50:7f:94:68:4e:ea: e4:11:14:c7:63:d6:af:ce:8d:5d:98:1e:5a:d8:21:97:00:bf: ca:9a:b8:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUoy1dpaZrsvsovsA7mBTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3Yzc2YTgwZWMyOTEyYTU2ODkzNWNiNTdiNmE2NTBmMDNk ZmQ4ZDIwHhcNMjUxMjA2MTEwMTA0WhcNMjUxMjA3MTEwMTA0WjAzMTEwLwYDVQQD EygzNDE3YzRiZWE3MzQ2YmFjNDI4ZjQ5NjkyZWRlYzc4YTJkNmFmYTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb7X03qW9ZmUDsCyclXJufjrZaBt zkzE642y5g+nQ62vMR4nrjPzAVkMDQL8BbZm3dgOZeHsjr9TiX10Q7m6dOk34yNL sHR+tdpsWer+A7iQN0x9YfJO2+yoVFhqjF0YbochWXqmEmIyny0/rqBbddjVsbHK PoQKpwoTWh+pPAE4FoXfNpbKKixd2esYvW4Da3kg1D+uPInvdDp8YPH+1zKwzqDG /K8siX2b/Z85zM/W40c10VMZFDWd9RBjA7otGCZW7IAiW3BDEvsLYTlFgQTkheN5 EUKvWq38VbNfn0huq/qYTK/TkbBMuGAp5ehRr/rBXCT6yT52kUJqewvJMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQXxL6nNGusQo9JaS7ex4otavpeMB8GA1UdIwQY MBaAFFfHaoDsKRKlaJNctXtqZQ8D39jSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhkcWdPd3BFcVZvazF5MWUycGxEd1BmMk5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80MGU1ZjQtZDA1Ni00NGYyLTg5OWUt MjI4NmI4OWU3YTdlLzEvVjhkcWdPd3BFcVZvazF5MWUycGxEd1BmMk5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS80MGU1ZjQtZDA1Ni00NGYyLTg5OWUtMjI4NmI4OWU3YTdl LzEvVjhkcWdPd3BFcVZvazF5MWUycGxEd1BmMk5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJeWHEcN T3IzW7NKqY1/OJGiaoNPpyB7UWXgvYehkS2cvnY/HWTyB4uNQrnSY7kYw5tYkkcc SQIpzAFN7rgXnfG66piFGGI3r+mturBCxZWfMsqSvB8L8TqokfraTNPjv85fjzLV G2G329snOe60PUPzCc/D0SIwhLZZg6G5Tpd45NeyNOpNY4R7XEwexmTBQr4ctxze N+qV7inVEbHi5kuCtz5fXALd7CxnSUU0/3J/zfOp0HQoMesYM2jNLZE1dF05PdIr 40WW0YjQtGNSgur9pJhta0UZVN0na2aq4xfBLxSdUH+UaE7q5BEUx2PWr86NXZge WtghlwC/ypq41Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:03:53 2025 by rpki-client