This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft File: dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft (raw, json) Hash identifier: MtlPiWq9BqXfdE5noovGZ4CN0vNFng8Tk+U3BOmKUN4= Subject key identifier: DA:D9:D4:AD:B0:72:79:94:DD:97:B8:46:E8:A0:4F:47:20:AD:3F:7D Authority key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62 Certificate issuer: /CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62 Certificate serial: 019AF19AD8CA53A51D761AAA46B2A430EE32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft Manifest number: 0A57 Signing time: Sat 06 Dec 2025 03:00:48 +0000 Manifest this update: Sat 06 Dec 2025 03:00:48 +0000 Manifest next update: Sun 07 Dec 2025 03:00:48 +0000 Files and hashes: 1: dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl (hash: tNykvmjofCbEhjeg0M4856iBDobMEs7m6gvYnpVR4GU=) 2: dqNNte5TVfV2tDh9E3yBjcN5L9k.roa (hash: ZCWWVAbkz+YG+QqwhLTaaD7cWJwvtiRAyhgAtKdQ9Ro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d8:ca:53:a5:1d:76:1a:aa:46:b2:a4:30:ee:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62 Validity Not Before: Dec 6 03:00:48 2025 GMT Not After : Dec 7 03:00:48 2025 GMT Subject: CN=dad9d4adb0727994dd97b846e8a04f4720ad3f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:08:b2:5b:e2:23:78:3e:19:14:18:33:eb:e6: 78:62:ee:b7:75:20:e8:a2:b9:70:08:4a:1c:18:a6: c5:6f:5a:2c:c7:7b:a5:cf:70:ce:1f:e6:b1:12:78: 24:9d:f7:b8:2e:58:c8:6b:86:00:3f:6a:5d:3f:5f: 86:bd:67:80:8f:95:7c:8f:d1:07:9c:c4:5e:c4:a5: 43:da:16:b7:b5:8e:61:67:d5:a3:3d:32:2d:9b:6a: 2f:22:10:63:02:45:84:7e:6c:b3:71:5f:e9:cf:0a: bc:77:fe:70:d6:f2:fc:3e:1f:85:7c:30:91:3d:4b: 0e:72:a7:19:eb:39:79:c6:96:40:94:80:8c:09:cb: c2:ee:b2:5c:32:44:25:53:60:69:9c:0d:c3:cf:a9: 7b:e9:ac:fd:cf:33:80:bb:0f:0e:27:cf:f5:c7:b7: ba:e1:0f:a9:4d:08:3c:cc:7f:44:c2:71:5f:b2:6b: 89:7c:c3:82:15:f7:77:97:0f:e1:29:2f:b3:0b:1b: af:0c:b8:c5:01:42:15:4b:ba:bf:48:9c:9c:74:bf: 23:1c:0f:97:84:0d:7d:eb:06:eb:66:6c:f1:e2:5f: 0b:cb:cf:5f:44:39:7d:8d:b5:4e:59:e5:4a:ba:ee: 33:30:60:9a:c9:ef:0a:b9:9a:56:8e:c7:d2:82:b1: 08:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D9:D4:AD:B0:72:79:94:DD:97:B8:46:E8:A0:4F:47:20:AD:3F:7D X509v3 Authority Key Identifier: keyid:74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:23:bf:28:c0:d3:96:64:c6:48:e8:e6:2d:54:e7:cd:fc:58: 23:a9:7c:6a:b0:e6:06:31:24:a7:29:48:ec:8a:5c:78:f1:8e: 9b:d1:69:78:56:45:6a:8b:7e:f8:48:1e:e4:43:c6:8d:0c:6f: ca:80:07:be:bc:da:8c:b6:57:67:ff:bb:46:89:d0:21:5e:91: bd:e2:b2:91:ea:59:27:44:cb:2f:8a:6a:9b:3c:a9:d3:3f:4f: 75:b6:d9:cc:ea:b6:1e:2f:9d:50:79:03:ab:17:51:a7:25:7e: 28:29:6e:2c:02:4e:98:6b:9a:7c:4a:dc:1a:ef:3a:77:f7:cd: 5f:dd:db:26:eb:f7:9b:ed:ea:f6:f4:0b:36:e6:02:ee:ca:5c: fe:5c:1f:1c:b0:8f:d8:96:ff:46:11:2f:fe:f3:86:76:f7:df: 71:f6:1a:1c:03:b5:1e:4e:5c:61:ae:65:11:f8:bb:fb:4b:29: bb:23:8b:32:99:62:9d:1a:e5:a9:e5:5a:aa:b4:37:6f:dd:09: 47:15:cb:c3:03:2a:2a:83:48:ea:e9:06:23:d2:a6:0f:23:cc: 99:a0:3c:68:85:da:a1:9d:76:ad:7e:e8:00:56:ce:60:a3:67: 8f:00:e8:8c:de:b0:75:65:a6:58:44:95:df:fb:95:d7:0c:41: 7e:5a:bb:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtjKU6UddhqqRrKkMO4yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YmYwN2YwNGNjNzZhOTBhZDk3ZjlmMTc0OWZhYmNmMDVj MzVkNjIwHhcNMjUxMjA2MDMwMDQ4WhcNMjUxMjA3MDMwMDQ4WjAzMTEwLwYDVQQD EyhkYWQ5ZDRhZGIwNzI3OTk0ZGQ5N2I4NDZlOGEwNGY0NzIwYWQzZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2giyW+IjeD4ZFBgz6+Z4Yu63dSDo orlwCEocGKbFb1osx3ulz3DOH+axEngknfe4LljIa4YAP2pdP1+GvWeAj5V8j9EH nMRexKVD2ha3tY5hZ9WjPTItm2ovIhBjAkWEfmyzcV/pzwq8d/5w1vL8Ph+FfDCR PUsOcqcZ6zl5xpZAlICMCcvC7rJcMkQlU2BpnA3Dz6l76az9zzOAuw8OJ8/1x7e6 4Q+pTQg8zH9EwnFfsmuJfMOCFfd3lw/hKS+zCxuvDLjFAUIVS7q/SJycdL8jHA+X hA196wbrZmzx4l8Ly89fRDl9jbVOWeVKuu4zMGCaye8KuZpWjsfSgrEIwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrZ1K2wcnmU3Ze4RuigT0cgrT99MB8GA1UdIwQY MBaAFHS/B/BMx2qQrZf58XSfq88Fw11iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hMGIzOTUtNjFmZi00NTdkLThmZjgt ZWMwODQxMzdlMjQyLzEvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hMGIzOTUtNjFmZi00NTdkLThmZjgtZWMwODQxMzdlMjQy LzEvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAViO/KMDT lmTGSOjmLVTnzfxYI6l8arDmBjEkpylI7IpcePGOm9FpeFZFaot++Ege5EPGjQxv yoAHvrzajLZXZ/+7RonQIV6RveKykepZJ0TLL4pqmzyp0z9PdbbZzOq2Hi+dUHkD qxdRpyV+KCluLAJOmGuafErcGu86d/fNX93bJuv3m+3q9vQLNuYC7spc/lwfHLCP 2Jb/RhEv/vOGdvffcfYaHAO1Hk5cYa5lEfi7+0spuyOLMplinRrlqeVaqrQ3b90J RxXLwwMqKoNI6ukGI9KmDyPMmaA8aIXaoZ12rX7oAFbOYKNnjwDojN6wdWWmWESV 3/uV1wxBflq7Yw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:31 2025 by rpki-client