This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft File: d8pTqKWgOwVcs_NA_L64XXrUh6g.mft (raw, json) Hash identifier: unM92NvXmu+0g+6MZDM/2ukNMTDpCL/zI2xkAIA0BTo= Subject key identifier: 02:A3:D1:B1:2E:DF:50:83:2A:57:6E:F2:83:13:09:09:B9:75:80:F1 Authority key identifier: 77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8 Certificate issuer: /CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8 Certificate serial: 019AF3BFFB5964C02051881090736F7BAF74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft Manifest number: 0B8C Signing time: Sat 06 Dec 2025 13:00:36 +0000 Manifest this update: Sat 06 Dec 2025 13:00:36 +0000 Manifest next update: Sun 07 Dec 2025 13:00:36 +0000 Files and hashes: 1: 9zwR0ItkTBE3NBrhNXLgD19Ygh0.roa (hash: 668uqZpsKXpsQP4NHjfvBq7qiMq3YrFIWJSOqGsUVvE=) 2: d8pTqKWgOwVcs_NA_L64XXrUh6g.crl (hash: /CmUQ38sWpsW1FKjEsWwb13ofuoYRFLXvTP5uuBFx7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:fb:59:64:c0:20:51:88:10:90:73:6f:7b:af:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8 Validity Not Before: Dec 6 13:00:36 2025 GMT Not After : Dec 7 13:00:36 2025 GMT Subject: CN=02a3d1b12edf50832a576ef283130909b97580f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3d:93:dd:ce:2a:5d:27:db:7b:a3:92:46:bc: dc:dd:4a:54:3b:22:42:42:4e:6a:af:5e:0a:6f:2e: 14:76:f8:30:21:a8:63:4d:08:74:3c:4d:4f:43:d0: 30:40:5b:7c:44:fb:2b:3c:cb:35:71:a3:5c:84:8c: 22:a0:68:9f:39:63:49:5d:cb:5e:f6:b0:e2:80:c6: 5e:7c:55:f4:ea:ba:f5:99:7e:22:51:a9:fc:91:04: df:fe:10:dc:e3:4d:ac:d9:f4:ba:ac:ff:9b:17:d4: e0:8a:5d:74:70:51:b5:d0:50:91:e8:ac:1a:6c:9d: b0:ae:5a:d5:71:ba:7f:ac:61:85:40:7e:1f:ff:22: fd:3f:0f:e5:c1:73:8c:01:6c:14:67:a1:3f:d9:bb: f0:85:78:10:9a:ae:d3:97:b1:b3:b8:51:cc:4e:d0: e5:dd:26:9c:2d:e2:7d:63:b3:7f:fb:3e:c7:26:19: 26:39:8b:a1:ea:f8:f3:32:19:48:db:a8:85:f2:63: 3f:b1:a5:59:e8:c4:34:af:dd:ed:07:d8:6f:d5:ae: 55:85:92:19:10:76:9d:e7:37:01:27:50:18:f8:da: c7:c6:67:c3:42:52:9a:0f:3d:87:8c:82:36:95:d6: 02:02:5c:43:7d:23:28:47:83:18:44:15:da:f2:2d: fd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A3:D1:B1:2E:DF:50:83:2A:57:6E:F2:83:13:09:09:B9:75:80:F1 X509v3 Authority Key Identifier: keyid:77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f9:28:68:01:da:cc:68:f3:6c:e0:5d:82:5f:5c:8e:fd:d5: bd:e1:09:17:03:1b:e9:42:34:a9:9e:23:c0:ea:fe:5d:a7:94: 22:65:e6:e7:72:0e:a8:15:57:10:ff:9a:fc:e0:8d:bf:dd:9a: 64:ff:bb:ca:65:16:dc:1c:cc:f5:4b:24:59:52:d2:c6:af:a8: 7e:fc:1a:71:3c:94:60:86:0d:2c:7e:31:fc:af:9d:ed:eb:f0: 8a:45:0b:07:96:d0:ec:ab:e2:41:8f:67:09:e1:4b:1a:6f:0e: cd:d9:b5:f7:6b:73:a2:b1:57:b3:83:0b:7f:81:78:f2:06:9a: 03:62:fd:37:1b:05:55:11:af:01:50:5e:76:d2:51:42:6b:2a: 07:f3:ad:d8:98:59:55:cc:b2:ee:20:d6:72:dc:6c:31:9b:ea: c7:30:db:f5:30:61:8d:e3:2d:0d:c8:62:67:e0:3e:02:e6:f4: 2b:11:e1:41:0d:d5:c6:96:a1:d7:b7:e7:95:bc:3b:9b:bb:4d: a8:8a:08:0e:f5:26:57:b1:92:53:fd:3c:21:7b:92:80:8d:c4: 07:03:46:14:65:81:55:8a:45:69:76:eb:72:96:6d:64:41:1e: 81:04:9d:83:53:a7:c3:4e:fb:1e:13:ab:9e:21:e8:20:a9:d7: c5:1c:46:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv/tZZMAgUYgQkHNve690MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3Y2E1M2E4YTVhMDNiMDU1Y2IzZjM0MGZjYmViODVkN2Fk NDg3YTgwHhcNMjUxMjA2MTMwMDM2WhcNMjUxMjA3MTMwMDM2WjAzMTEwLwYDVQQD EygwMmEzZDFiMTJlZGY1MDgzMmE1NzZlZjI4MzEzMDkwOWI5NzU4MGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD2T3c4qXSfbe6OSRrzc3UpUOyJC Qk5qr14Kby4UdvgwIahjTQh0PE1PQ9AwQFt8RPsrPMs1caNchIwioGifOWNJXcte 9rDigMZefFX06rr1mX4iUan8kQTf/hDc402s2fS6rP+bF9Tgil10cFG10FCR6Kwa bJ2wrlrVcbp/rGGFQH4f/yL9Pw/lwXOMAWwUZ6E/2bvwhXgQmq7Tl7GzuFHMTtDl 3SacLeJ9Y7N/+z7HJhkmOYuh6vjzMhlI26iF8mM/saVZ6MQ0r93tB9hv1a5VhZIZ EHad5zcBJ1AY+NrHxmfDQlKaDz2HjII2ldYCAlxDfSMoR4MYRBXa8i398QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKj0bEu31CDKldu8oMTCQm5dYDxMB8GA1UdIwQY MBaAFHfKU6iloDsFXLPzQPy+uF161IeoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhwVHFLV2dPd1Zjc19OQV9MNjRYWHJVaDZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wZDc5YTQtODhhZS00MmU0LTkyOGMt Y2MzZTc4ZjYyZGMyLzEvZDhwVHFLV2dPd1Zjc19OQV9MNjRYWHJVaDZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8wZDc5YTQtODhhZS00MmU0LTkyOGMtY2MzZTc4ZjYyZGMy LzEvZDhwVHFLV2dPd1Zjc19OQV9MNjRYWHJVaDZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/koaAHa zGjzbOBdgl9cjv3VveEJFwMb6UI0qZ4jwOr+XaeUImXm53IOqBVXEP+a/OCNv92a ZP+7ymUW3BzM9UskWVLSxq+ofvwacTyUYIYNLH4x/K+d7evwikULB5bQ7KviQY9n CeFLGm8Ozdm192tzorFXs4MLf4F48gaaA2L9NxsFVRGvAVBedtJRQmsqB/Ot2JhZ Vcyy7iDWctxsMZvqxzDb9TBhjeMtDchiZ+A+Aub0KxHhQQ3Vxpah17fnlbw7m7tN qIoIDvUmV7GSU/08IXuSgI3EBwNGFGWBVYpFaXbrcpZtZEEegQSdg1Onw077HhOr niHoIKnXxRxGvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:04:58 2025 by rpki-client