This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json) Hash identifier: w7J2Q41klJtFq/y5YFVOxu5zu1k4gdmHds17Duuv8V8= Subject key identifier: 2D:6E:E2:E0:75:79:66:8A:DC:AD:D7:59:40:D2:5D:91:6D:D1:09:B9 Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2 Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2 Certificate serial: 019AF16423ABF8E1E705947022F8297DC273 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft Manifest number: 1205 Signing time: Sat 06 Dec 2025 02:01:03 +0000 Manifest this update: Sat 06 Dec 2025 02:01:03 +0000 Manifest next update: Sun 07 Dec 2025 02:01:03 +0000 Files and hashes: 1: KzHfiiDg2EcCwKAmppKJC7QdUFA.roa (hash: QZ0RWt1gfijBZB5RL8yUAfB/DWbprl5d1kxp7e8kc3g=) 2: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: ljXUcRTvjk0uCGbD22LnkCl6lVkBQAbGEz+xuCFch3I=) 3: kuAnd9NqWnoBzCTnx0XxXmRi7Z4.roa (hash: gmNwgm6wcIRoGUSbEH7MItCnGX2M/c/Toez7Z0Fqses=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:23:ab:f8:e1:e7:05:94:70:22:f8:29:7d:c2:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2 Validity Not Before: Dec 6 02:01:03 2025 GMT Not After : Dec 7 02:01:03 2025 GMT Subject: CN=2d6ee2e07579668adcadd75940d25d916dd109b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:58:b9:c1:59:10:9d:4f:51:11:8f:de:f5: c5:2a:6a:a0:45:74:15:dc:98:2d:46:37:ad:01:da: 29:27:84:f5:78:d2:66:4c:fa:2a:06:23:c3:c3:6b: bf:7d:0c:43:d8:8c:ec:57:35:16:b8:a8:c1:75:5c: 06:3b:8d:c2:c5:2e:a8:f9:40:04:e6:cc:c5:0e:07: fb:09:1d:7a:77:1c:8f:25:65:18:6e:de:e1:0a:ab: 5e:43:7d:e2:45:6d:c9:2e:67:69:08:14:36:66:6f: df:00:56:63:51:7c:3f:e9:b1:b8:84:fc:29:86:0f: 80:73:ae:93:c6:0b:98:5b:15:22:61:3e:f1:07:fb: d0:1f:b3:4f:b3:fb:e2:04:90:c3:d5:64:a0:a3:ac: a1:59:86:be:5e:a8:83:db:78:ab:a7:3b:c2:cc:cf: 8b:dd:e3:af:ce:0e:1f:93:c2:48:31:6f:35:de:26: bb:63:e0:37:94:96:e8:7b:a7:cc:10:92:10:c3:bb: 69:79:7e:f3:ba:a0:fe:cc:7e:81:da:75:16:ad:d0: b4:dc:6b:6d:eb:4e:fe:fb:c8:ed:a1:76:4b:2d:8d: a5:24:64:97:bb:cf:5b:65:4e:48:b1:58:a7:4c:50: 87:a6:8a:8e:0e:08:ba:c3:40:0c:5d:f3:3e:d1:5e: 6e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6E:E2:E0:75:79:66:8A:DC:AD:D7:59:40:D2:5D:91:6D:D1:09:B9 X509v3 Authority Key Identifier: keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ac:de:01:7c:35:5e:a5:ec:88:ed:b5:49:8a:86:05:ad:ce: ec:d6:3e:e9:7f:86:ea:f0:fb:cb:bd:26:0b:ec:e6:be:07:d8: 14:fe:8b:66:06:ac:e0:96:37:72:8d:ec:4d:d8:1c:7e:19:c8: 2f:35:d5:7d:8c:de:9b:3e:3a:26:03:eb:b1:7b:7c:f1:da:89: a7:10:10:27:f4:18:95:a1:3d:45:3a:90:84:43:71:0b:6e:3c: d5:eb:8f:cc:42:9d:6a:be:c8:8d:85:8f:c3:41:e0:39:f7:6a: 69:b7:0a:f1:b9:c6:f7:9d:37:84:a9:dc:20:0d:4f:ea:41:9c: 7b:d9:e6:db:9b:ee:cb:58:40:6a:b9:9d:85:54:9a:6b:3e:bd: d9:7f:e4:44:38:8b:e2:32:34:e1:f1:1b:5a:3d:22:f0:77:59: 99:cd:85:47:85:46:78:af:e5:c5:9e:19:cd:18:f2:a2:7f:33: 35:25:35:45:ed:1c:40:c6:b0:50:7d:a1:25:a3:77:01:d9:4b: b5:eb:12:6d:3a:89:55:85:20:24:4b:29:03:1c:5b:34:d6:bf: f7:24:e6:8b:ee:81:20:f9:4c:98:e5:1a:15:72:5c:75:94:d2: 8c:22:e0:75:48:21:29:bb:6b:03:38:ff:a0:4d:db:82:e0:04: 65:8c:d2:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCOr+OHnBZRwIvgpfcJzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzZmYjY1NTQ2MWQ3M2ZjZjIxZTg2MTJjMzE4NzA2YTA4 OWE1YzIwHhcNMjUxMjA2MDIwMTAzWhcNMjUxMjA3MDIwMTAzWjAzMTEwLwYDVQQD EygyZDZlZTJlMDc1Nzk2NjhhZGNhZGQ3NTk0MGQyNWQ5MTZkZDEwOWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0xYucFZEJ1PURGP3vXFKmqgRXQV 3JgtRjetAdopJ4T1eNJmTPoqBiPDw2u/fQxD2IzsVzUWuKjBdVwGO43CxS6o+UAE 5szFDgf7CR16dxyPJWUYbt7hCqteQ33iRW3JLmdpCBQ2Zm/fAFZjUXw/6bG4hPwp hg+Ac66TxguYWxUiYT7xB/vQH7NPs/viBJDD1WSgo6yhWYa+XqiD23irpzvCzM+L 3eOvzg4fk8JIMW813ia7Y+A3lJboe6fMEJIQw7tpeX7zuqD+zH6B2nUWrdC03Gtt 607++8jtoXZLLY2lJGSXu89bZU5IsVinTFCHpoqODgi6w0AMXfM+0V5u8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1u4uB1eWaK3K3XWUDSXZFt0Qm5MB8GA1UdIwQY MBaAFHfG+2VUYdc/zyHoYSwxhwagiaXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2Yt YWIzMDgxYjJhYmE0LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2YtYWIzMDgxYjJhYmE0 LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqzeAXw1 XqXsiO21SYqGBa3O7NY+6X+G6vD7y70mC+zmvgfYFP6LZgas4JY3co3sTdgcfhnI LzXVfYzemz46JgPrsXt88dqJpxAQJ/QYlaE9RTqQhENxC2481euPzEKdar7IjYWP w0HgOfdqabcK8bnG9503hKncIA1P6kGce9nm25vuy1hAarmdhVSaaz692X/kRDiL 4jI04fEbWj0i8HdZmc2FR4VGeK/lxZ4ZzRjyon8zNSU1Re0cQMawUH2hJaN3AdlL tesSbTqJVYUgJEspAxxbNNa/9yTmi+6BIPlMmOUaFXJcdZTSjCLgdUghKbtrAzj/ oE3bguAEZYzSJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:11 2025 by rpki-client