This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft File: drC8_CzbBSuJ4pylp1u-8pIsgMM.mft (raw, json) Hash identifier: cyWhRAGIHCMzbYJ/8XvmsD+c37CyP69oZ0aU09OaWvQ= Subject key identifier: 4F:57:51:EC:19:ED:DF:29:4E:CF:7A:F8:5C:95:B9:C7:92:8B:F9:35 Authority key identifier: 76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3 Certificate issuer: /CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3 Certificate serial: 019AF19ABC1718CB5F7F75882A85FA3BC3A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:00:40 +0000 Manifest this update: Sat 06 Dec 2025 03:00:40 +0000 Manifest next update: Sun 07 Dec 2025 03:00:40 +0000 Files and hashes: 1: TxShveMXkagPpI8acAIIbuuHf-w.roa (hash: Yj05HPe3EYjPmxF4dbUmE24GvdhxKQjouYz6ySk5apU=) 2: drC8_CzbBSuJ4pylp1u-8pIsgMM.crl (hash: AaRJBYIXG0fRiHRmxLAE1G45Kkp9/YFID3PruD+gkks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:bc:17:18:cb:5f:7f:75:88:2a:85:fa:3b:c3:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3 Validity Not Before: Dec 6 03:00:40 2025 GMT Not After : Dec 7 03:00:40 2025 GMT Subject: CN=4f5751ec19eddf294ecf7af85c95b9c7928bf935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:43:74:db:83:af:81:2f:ba:1a:4d:73:0c:36: 12:0f:73:e3:28:f4:94:c0:df:62:84:c4:ea:3f:94: 70:86:d3:ba:a2:a8:18:c0:95:5f:e3:c9:3a:2b:66: 4d:6d:44:8f:c5:c4:a9:4d:8e:99:b7:d7:9f:f4:d4: 44:2a:df:e1:7b:80:44:79:57:f3:de:7b:5b:ef:eb: 66:33:64:e4:70:5d:cd:e2:21:9d:fe:20:ac:a2:1e: 74:e6:ad:4b:0f:6d:54:dc:39:f4:cc:c6:bb:8c:16: c0:e8:98:58:43:68:69:a5:d8:87:a1:96:ad:6a:bf: a5:e7:ef:66:01:ed:71:e3:d1:e8:9a:cb:0e:52:27: 55:9d:6c:26:58:a1:cb:00:ac:5a:72:48:c8:6a:d4: ff:05:65:3a:cc:cd:f0:44:f9:26:57:26:45:ad:cc: 52:b2:11:99:3b:cf:25:ca:d0:af:f4:38:14:fc:e5: 1f:95:99:86:4d:19:76:b3:94:59:3b:dc:ea:61:fb: 31:c9:e3:c3:62:a6:d7:9c:ec:6b:e2:0e:f7:12:60: 87:1e:93:53:b4:56:09:1d:9e:ff:a8:e7:05:9b:bb: c7:9a:f1:9d:ed:fa:6f:5a:78:b8:a9:1f:79:99:ee: 3f:16:49:6d:88:0d:8d:ff:85:98:aa:98:3f:31:bd: 16:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:57:51:EC:19:ED:DF:29:4E:CF:7A:F8:5C:95:B9:C7:92:8B:F9:35 X509v3 Authority Key Identifier: keyid:76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:74:ed:93:fd:ff:82:67:39:ab:dc:1d:de:64:7a:b3:83:52: 69:1a:03:b6:27:36:ef:49:8c:58:47:51:28:d6:50:24:63:77: 09:32:5e:fb:d8:9f:b4:7e:5f:b6:2c:ba:58:ec:4c:c2:f5:fa: fd:8a:ee:a7:61:36:c9:a4:b0:28:4d:72:c3:01:cd:0a:ae:32: a1:3c:f1:f3:93:6e:fb:11:5b:c6:2e:8b:4d:1d:07:ad:0d:2a: 64:34:1a:40:af:f1:7d:09:c3:c2:b5:15:cc:86:38:fa:68:a2: 88:40:b1:7b:ad:c6:d0:b8:e6:7b:b4:ff:0c:da:95:55:17:d8: 32:e3:17:f9:d4:21:1c:b8:8e:e4:92:3a:fb:cd:92:44:71:4a: 06:e6:4e:9e:1a:0c:e6:79:2c:55:37:b6:3c:c4:ef:45:98:84: 2f:ff:37:5d:78:d7:76:b8:9c:71:e4:95:4a:3d:25:8d:27:71: 64:4b:34:6c:a9:1c:56:5b:28:b9:ff:d1:d2:c1:c6:cf:00:fb: b8:06:86:93:10:0d:0a:50:5f:a8:30:27:e9:e1:42:ae:6b:58: ae:e8:3d:05:bd:11:63:5d:3c:18:1b:4a:83:ec:15:2c:cd:7f: 12:9d:bb:12:0a:e1:76:1c:9a:aa:d3:17:33:57:55:32:4f:4c: d6:54:17:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrwXGMtff3WIKoX6O8OjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YjBiY2ZjMmNkYjA1MmI4OWUyOWNhNWE3NWJiZWYyOTIy YzgwYzMwHhcNMjUxMjA2MDMwMDQwWhcNMjUxMjA3MDMwMDQwWjAzMTEwLwYDVQQD Eyg0ZjU3NTFlYzE5ZWRkZjI5NGVjZjdhZjg1Yzk1YjljNzkyOGJmOTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEN024OvgS+6Gk1zDDYSD3PjKPSU wN9ihMTqP5RwhtO6oqgYwJVf48k6K2ZNbUSPxcSpTY6Zt9ef9NREKt/he4BEeVfz 3ntb7+tmM2TkcF3N4iGd/iCsoh505q1LD21U3Dn0zMa7jBbA6JhYQ2hppdiHoZat ar+l5+9mAe1x49HomssOUidVnWwmWKHLAKxackjIatT/BWU6zM3wRPkmVyZFrcxS shGZO88lytCv9DgU/OUflZmGTRl2s5RZO9zqYfsxyePDYqbXnOxr4g73EmCHHpNT tFYJHZ7/qOcFm7vHmvGd7fpvWni4qR95me4/FkltiA2N/4WYqpg/Mb0WcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9XUewZ7d8pTs96+FyVuceSi/k1MB8GA1UdIwQY MBaAFHawvPws2wUrieKcpadbvvKSLIDDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHJDOF9DemJCU3VKNHB5bHAxdS04cElzZ01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mYTlkODYtY2EyNS00ZDY5LWEwZjQt MTA5YzJhZTU5MzE2LzEvZHJDOF9DemJCU3VKNHB5bHAxdS04cElzZ01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9mYTlkODYtY2EyNS00ZDY5LWEwZjQtMTA5YzJhZTU5MzE2 LzEvZHJDOF9DemJCU3VKNHB5bHAxdS04cElzZ01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnTtk/3/ gmc5q9wd3mR6s4NSaRoDtic270mMWEdRKNZQJGN3CTJe+9iftH5ftiy6WOxMwvX6 /Yrup2E2yaSwKE1ywwHNCq4yoTzx85Nu+xFbxi6LTR0HrQ0qZDQaQK/xfQnDwrUV zIY4+miiiECxe63G0Ljme7T/DNqVVRfYMuMX+dQhHLiO5JI6+82SRHFKBuZOnhoM 5nksVTe2PMTvRZiEL/83XXjXdricceSVSj0ljSdxZEs0bKkcVlsouf/R0sHGzwD7 uAaGkxANClBfqDAn6eFCrmtYrug9Bb0RY108GBtKg+wVLM1/Ep27EgrhdhyaqtMX M1dVMk9M1lQXEg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:03 2025 by rpki-client