This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft File: 82ct8ORpiLvu2b5UENoSo_Fw1pE.mft (raw, json) Hash identifier: 06UKCRUyy9PQzi9Iizd7eBo+RjhwP0aqgxbQsLHadCk= Subject key identifier: 50:52:55:C5:5A:98:63:67:FA:39:8D:0E:57:8B:79:BB:56:AA:FC:EF Authority key identifier: F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91 Certificate issuer: /CN=f3672df0e46988bbeed9be5410da12a3f170d691 Certificate serial: 019AF57823D85FA00CB7B7C1EB21E2F102B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 21:01:22 +0000 Manifest this update: Sat 06 Dec 2025 21:01:22 +0000 Manifest next update: Sun 07 Dec 2025 21:01:22 +0000 Files and hashes: 1: 82ct8ORpiLvu2b5UENoSo_Fw1pE.crl (hash: lx1kCbEEBbJm/8PlowIfmbRAhaiBEgcq1CA3/oIQRAY=) 2: qF15Fek2B8QG87gZ7XIr-H3O168.roa (hash: 5FnSKwJ5Mf9Vo3kgskFawnnVLq6cD4vo+8P1ZuvgDrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:23:d8:5f:a0:0c:b7:b7:c1:eb:21:e2:f1:02:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3672df0e46988bbeed9be5410da12a3f170d691 Validity Not Before: Dec 6 21:01:22 2025 GMT Not After : Dec 7 21:01:22 2025 GMT Subject: CN=505255c55a986367fa398d0e578b79bb56aafcef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b5:d2:64:79:61:e6:ae:0f:7f:97:eb:f3:35: 12:99:ba:11:32:6e:a5:78:7f:c3:6a:f3:d2:0e:f5: 1c:6c:18:ca:75:73:7b:07:3c:9b:35:59:85:09:1e: 0e:be:25:0a:4c:96:fc:db:05:09:f2:01:f5:3d:a3: b3:2a:58:a2:c7:51:22:7a:7e:cd:a8:70:da:88:e3: 53:0a:12:1b:73:59:fa:4b:bf:32:14:cc:51:db:7c: e0:25:88:c1:f1:b4:13:07:ba:52:75:4b:50:d1:4e: ce:ac:be:bf:ba:13:70:9e:3d:06:09:13:9f:94:00: 08:89:e8:84:1c:b4:c9:9a:25:a5:38:b0:11:a8:c7: 36:88:8f:d3:79:fc:ce:ef:95:5e:e7:87:1c:25:08: 80:20:f4:af:88:00:3a:2f:b2:59:08:11:9d:38:ed: 5d:74:68:37:af:7f:13:04:62:b4:80:e0:d5:ce:e3: f5:73:af:88:9e:09:c0:ae:37:88:33:c1:89:2f:74: 98:41:a6:90:da:0f:0f:32:ba:6c:20:be:53:0d:93: 0e:3b:96:f3:38:e2:8a:8f:e0:83:cb:cd:55:1d:ae: 3f:9e:0f:34:63:27:4d:95:0c:3b:c3:e3:c0:7b:1b: 82:40:fb:9e:a5:dc:c5:b2:ee:dc:7b:3b:6e:cb:cb: 85:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:52:55:C5:5A:98:63:67:FA:39:8D:0E:57:8B:79:BB:56:AA:FC:EF X509v3 Authority Key Identifier: keyid:F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:28:9c:49:4a:ea:70:53:a5:75:09:39:b9:40:35:e7:85:26: bb:d9:d0:d1:d0:39:82:d6:58:b6:d3:1b:49:c8:f7:da:a6:11: 0b:e0:f0:ec:27:f2:90:48:0e:4a:30:08:5b:cc:39:f1:8d:b0: c3:5b:33:82:5e:1f:3b:2d:84:c6:90:52:22:aa:70:25:55:90: 35:5a:e2:d2:90:e6:15:dc:0b:e2:dd:c0:aa:80:55:4d:12:25: ac:ee:ac:bd:35:11:6b:db:2c:b7:a5:4c:42:89:97:ba:59:fa: 4a:77:f0:ce:74:d6:4c:62:b0:3f:1d:e9:40:09:7a:e9:db:9b: a3:3d:e9:92:44:7b:c8:79:44:9d:4c:fc:e8:51:86:72:f6:aa: 2d:bf:f8:bc:f1:e3:4c:d6:e3:32:17:75:ce:b5:b2:10:30:a6: 49:b7:ec:4e:a3:01:8c:ab:ae:25:17:15:24:7b:ec:8e:95:5d: 33:d2:e9:17:92:b9:f1:89:6b:67:a1:50:c0:c3:84:82:19:d4: 4b:b7:d5:7e:54:85:5f:49:3f:89:68:67:bb:e8:f9:35:87:2f: f6:fd:ca:45:5c:14:1f:b2:30:09:9d:9a:08:b1:70:b2:7a:44: 05:36:b5:9a:86:a5:5a:ca:6c:04:f7:e2:4a:30:ea:27:a4:b4: f9:e0:75:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eCPYX6AMt7fB6yHi8QK5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNjcyZGYwZTQ2OTg4YmJlZWQ5YmU1NDEwZGExMmEzZjE3 MGQ2OTEwHhcNMjUxMjA2MjEwMTIyWhcNMjUxMjA3MjEwMTIyWjAzMTEwLwYDVQQD Eyg1MDUyNTVjNTVhOTg2MzY3ZmEzOThkMGU1NzhiNzliYjU2YWFmY2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LXSZHlh5q4Pf5fr8zUSmboRMm6l eH/DavPSDvUcbBjKdXN7BzybNVmFCR4OviUKTJb82wUJ8gH1PaOzKliix1Eien7N qHDaiONTChIbc1n6S78yFMxR23zgJYjB8bQTB7pSdUtQ0U7OrL6/uhNwnj0GCROf lAAIieiEHLTJmiWlOLARqMc2iI/TefzO75Ve54ccJQiAIPSviAA6L7JZCBGdOO1d dGg3r38TBGK0gODVzuP1c6+IngnArjeIM8GJL3SYQaaQ2g8PMrpsIL5TDZMOO5bz OOKKj+CDy81VHa4/ng80YydNlQw7w+PAexuCQPuepdzFsu7ceztuy8uFewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBSVcVamGNn+jmNDleLebtWqvzvMB8GA1UdIwQY MBaAFPNnLfDkaYi77tm+VBDaEqPxcNaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODJjdDhPUnBpTHZ1MmI1VUVOb1NvX0Z3MXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81NjVmODktNjIwOC00NzFhLWI2OWMt M2UyMjE5OGFlYjUyLzEvODJjdDhPUnBpTHZ1MmI1VUVOb1NvX0Z3MXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC81NjVmODktNjIwOC00NzFhLWI2OWMtM2UyMjE5OGFlYjUy LzEvODJjdDhPUnBpTHZ1MmI1VUVOb1NvX0Z3MXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCicSUrq cFOldQk5uUA154Umu9nQ0dA5gtZYttMbScj32qYRC+Dw7CfykEgOSjAIW8w58Y2w w1szgl4fOy2ExpBSIqpwJVWQNVri0pDmFdwL4t3AqoBVTRIlrO6svTURa9sst6VM QomXuln6SnfwznTWTGKwPx3pQAl66duboz3pkkR7yHlEnUz86FGGcvaqLb/4vPHj TNbjMhd1zrWyEDCmSbfsTqMBjKuuJRcVJHvsjpVdM9LpF5K58YlrZ6FQwMOEghnU S7fVflSFX0k/iWhnu+j5NYcv9v3KRVwUH7IwCZ2aCLFwsnpEBTa1moalWspsBPfi SjDqJ6S0+eB1cQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:19 2025 by rpki-client