This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft File: mD8bE53ySgXC5SVgUrAhJRfkc1E.mft (raw, json) Hash identifier: v67UEkBKIcQGq7cwDFitiRy7Hc4z450vXIcJKhiDfUM= Subject key identifier: F9:FF:2B:30:E2:45:28:B5:99:4A:C8:86:B2:B3:03:0B:D9:5B:A4:F1 Authority key identifier: 98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51 Certificate issuer: /CN=983f1b139df24a05c2e5256052b0212517e47351 Certificate serial: 019AF46501CD1F3732EF69B33C5209697043 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft Manifest number: 0364 Signing time: Sat 06 Dec 2025 16:00:51 +0000 Manifest this update: Sat 06 Dec 2025 16:00:51 +0000 Manifest next update: Sun 07 Dec 2025 16:00:51 +0000 Files and hashes: 1: mD8bE53ySgXC5SVgUrAhJRfkc1E.crl (hash: eBmtmhk41PB+QwZPOrXTc/RHbQ6F88YMPu5zvvhlXuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:01:cd:1f:37:32:ef:69:b3:3c:52:09:69:70:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983f1b139df24a05c2e5256052b0212517e47351 Validity Not Before: Dec 6 16:00:51 2025 GMT Not After : Dec 7 16:00:51 2025 GMT Subject: CN=f9ff2b30e24528b5994ac886b2b3030bd95ba4f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b8:41:94:0f:a7:a1:08:c7:a6:3a:9d:c7:63: 0f:9d:dc:33:3a:3f:2e:54:ef:0f:cf:97:47:7f:8d: 79:88:20:9e:83:d9:f4:7d:db:7f:dd:f7:35:d8:67: c0:e5:9c:c0:62:c1:de:dd:b1:c7:b3:b4:5d:e3:c6: 47:5f:00:47:d4:49:8d:23:fd:ba:7c:70:d2:66:af: 9b:51:41:5a:5f:b9:5f:4e:af:5d:74:d7:95:78:31: f2:28:5f:3d:1a:f2:9a:23:27:35:d8:cd:8e:9d:da: 02:1f:c8:08:fd:07:68:d6:be:e4:00:54:ee:15:65: 68:ec:da:7e:94:e3:59:eb:b0:ad:99:80:7a:00:d3: 7a:92:d7:0f:9d:c9:bb:16:88:be:d0:7e:e7:4c:8d: 91:9d:04:9a:55:2b:a2:b8:76:2b:5c:0d:4f:34:fd: d3:13:d3:a3:2c:cf:7c:15:0e:30:5b:82:21:68:00: b7:e7:6f:cc:dd:89:5e:75:68:73:80:bf:1e:7e:b1: 14:3b:91:52:21:17:af:46:6f:4f:c2:f7:73:a9:c8: fe:3d:da:5b:ff:c1:78:6c:85:8a:37:1a:f7:1b:8e: 3d:64:4e:0a:48:5b:c9:83:dc:05:bd:58:5f:c5:e1: fe:bf:21:9f:79:d4:77:6b:2d:2e:09:07:26:2f:ed: 03:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FF:2B:30:E2:45:28:B5:99:4A:C8:86:B2:B3:03:0B:D9:5B:A4:F1 X509v3 Authority Key Identifier: keyid:98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:57:e0:16:63:34:fa:15:c7:26:ac:3a:ca:72:a0:33:6f:22: 76:d9:23:d6:ec:dc:d1:84:39:93:49:d9:d0:62:7c:f1:0f:06: cd:fa:d1:ad:8f:7d:24:4e:57:d5:06:2f:be:6d:7f:2a:4c:fd: fe:5e:ff:6b:c5:0f:b7:12:bf:2a:da:f7:f4:20:dd:2f:88:53: 5b:d8:2b:4d:ac:fb:9c:a4:72:a1:a5:59:af:f3:5c:2a:30:f7: 47:58:a8:0d:92:30:1b:39:89:b9:00:16:b7:e2:c3:9c:19:c9: 40:b6:15:0a:15:92:ca:b5:74:17:07:95:2e:6e:e3:ec:b7:44: a9:57:19:9f:04:0e:22:b0:07:fb:9e:5a:5a:ce:bb:a3:de:44: 45:43:46:71:33:a3:05:d3:4e:fa:90:91:0f:76:bc:6d:56:7d: 83:48:a1:57:4a:0d:db:84:79:c7:c9:56:e3:37:07:7d:78:a3: 9c:d4:69:de:f3:16:8a:54:9d:01:ac:c5:2f:e5:27:a1:91:bb: f0:61:40:6c:4a:97:e7:2a:a8:6f:cb:97:4d:b2:37:2f:9d:42: 52:fd:b2:72:25:ef:ea:69:0e:3c:59:30:68:9e:cd:51:60:09: d7:17:05:4c:7b:8b:86:b2:dc:6e:8d:ae:bd:c3:bc:f9:d2:a2: e8:a4:63:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZQHNHzcy72mzPFIJaXBDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4M2YxYjEzOWRmMjRhMDVjMmU1MjU2MDUyYjAyMTI1MTdl NDczNTEwHhcNMjUxMjA2MTYwMDUxWhcNMjUxMjA3MTYwMDUxWjAzMTEwLwYDVQQD EyhmOWZmMmIzMGUyNDUyOGI1OTk0YWM4ODZiMmIzMDMwYmQ5NWJhNGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LhBlA+noQjHpjqdx2MPndwzOj8u VO8Pz5dHf415iCCeg9n0fdt/3fc12GfA5ZzAYsHe3bHHs7Rd48ZHXwBH1EmNI/26 fHDSZq+bUUFaX7lfTq9ddNeVeDHyKF89GvKaIyc12M2OndoCH8gI/Qdo1r7kAFTu FWVo7Np+lONZ67CtmYB6ANN6ktcPncm7Foi+0H7nTI2RnQSaVSuiuHYrXA1PNP3T E9OjLM98FQ4wW4IhaAC352/M3YledWhzgL8efrEUO5FSIRevRm9Pwvdzqcj+Pdpb /8F4bIWKNxr3G449ZE4KSFvJg9wFvVhfxeH+vyGfedR3ay0uCQcmL+0DhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPn/KzDiRSi1mUrIhrKzAwvZW6TxMB8GA1UdIwQY MBaAFJg/GxOd8koFwuUlYFKwISUX5HNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUQ4YkU1M3lTZ1hDNVNWZ1VyQWhKUmZrYzFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jMmNjNWYtMjVhNi00MmJiLWE5NzAt ZWY5NjQ0MzEyZGRiLzEvbUQ4YkU1M3lTZ1hDNVNWZ1VyQWhKUmZrYzFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9jMmNjNWYtMjVhNi00MmJiLWE5NzAtZWY5NjQ0MzEyZGRi LzEvbUQ4YkU1M3lTZ1hDNVNWZ1VyQWhKUmZrYzFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwlfgFmM0 +hXHJqw6ynKgM28idtkj1uzc0YQ5k0nZ0GJ88Q8GzfrRrY99JE5X1QYvvm1/Kkz9 /l7/a8UPtxK/Ktr39CDdL4hTW9grTaz7nKRyoaVZr/NcKjD3R1ioDZIwGzmJuQAW t+LDnBnJQLYVChWSyrV0FweVLm7j7LdEqVcZnwQOIrAH+55aWs67o95ERUNGcTOj BdNO+pCRD3a8bVZ9g0ihV0oN24R5x8lW4zcHfXijnNRp3vMWilSdAazFL+UnoZG7 8GFAbEqX5yqob8uXTbI3L51CUv2yciXv6mkOPFkwaJ7NUWAJ1xcFTHuLhrLcbo2u vcO8+dKi6KRjGg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:42 2025 by rpki-client