This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft File: D8T3CpLUasAsjf5_l1vkir1i56Q.mft (raw, json) Hash identifier: tYv9vGvGqZp8zrFOQxySCWgsxeyh5n4r2yBN2Vb0weM= Subject key identifier: FC:BF:1F:B2:84:D6:A5:5A:4E:F2:94:48:E9:33:23:C5:2E:CD:54:A0 Authority key identifier: 0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4 Certificate issuer: /CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4 Certificate serial: 019AF1D22FC3E22D2403F8AC5FF6E6C4DAB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:01:14 +0000 Manifest this update: Sat 06 Dec 2025 04:01:14 +0000 Manifest next update: Sun 07 Dec 2025 04:01:14 +0000 Files and hashes: 1: D8T3CpLUasAsjf5_l1vkir1i56Q.crl (hash: ytKeX39ZwJrh/fvRZqPquSDNl9FILnyDjXQx0MA614c=) 2: KV7Ah7ECaAsyXag5Rq5pooWC9JA.roa (hash: VgR4uMVD7rCZUo7Z3bX/mNyr94Jdnu1Q2sOy20+13Cw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:2f:c3:e2:2d:24:03:f8:ac:5f:f6:e6:c4:da:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4 Validity Not Before: Dec 6 04:01:14 2025 GMT Not After : Dec 7 04:01:14 2025 GMT Subject: CN=fcbf1fb284d6a55a4ef29448e93323c52ecd54a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fc:af:58:71:cb:8c:fb:e9:ef:21:ed:03:fc: a2:d6:52:b6:8d:33:d0:20:12:71:5b:b2:56:54:61: 59:70:67:d7:0b:ea:fc:27:9e:63:ea:eb:48:e9:64: af:73:97:e2:04:29:0d:2a:ce:0f:6d:79:c6:31:1f: f7:ff:fa:e0:a0:ef:25:81:f0:b8:d7:02:fa:66:37: 35:f9:a5:53:35:9c:22:a8:8f:b7:81:21:01:6c:13: 64:64:ac:0b:6b:0a:6e:f0:3b:5f:7d:39:0e:19:0e: 37:98:4c:32:b9:e3:2c:e6:6e:35:8c:85:06:3b:8a: 1d:30:86:84:00:32:76:44:6b:cc:9e:cc:fc:a9:c5: 8f:9f:6b:75:fb:7f:84:ed:33:90:b2:24:59:0f:7d: 12:e6:58:f7:37:b9:62:cf:4c:54:a1:c3:04:e6:70: f8:bb:eb:17:1c:3d:b2:19:af:ae:77:f0:fe:ae:9d: 7e:ae:f6:28:99:9d:63:a0:a6:53:3c:73:26:f4:c9: be:8b:1b:3e:73:94:59:c1:99:c8:98:54:0c:90:f8: b2:8b:a4:76:b7:d4:6c:43:8f:48:de:73:e5:ce:08: 27:fe:02:94:71:14:5d:59:79:20:04:19:4d:bb:1d: cd:6a:a9:49:13:06:04:28:78:5b:72:91:b8:18:9f: cc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BF:1F:B2:84:D6:A5:5A:4E:F2:94:48:E9:33:23:C5:2E:CD:54:A0 X509v3 Authority Key Identifier: keyid:0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:87:db:81:78:48:4d:fe:e3:15:17:46:22:03:9b:ad:a4:53: 88:ea:f7:7a:25:62:e3:2b:b0:d7:80:7f:9e:7d:e5:7f:b8:e7: d9:eb:56:da:22:22:aa:5d:bd:56:03:7a:1b:84:d2:e3:12:57: 13:3a:c0:85:08:95:0a:64:fe:73:9d:bc:67:c7:25:ee:dd:2d: 37:21:43:57:6c:0d:29:7d:67:f3:32:e5:7b:5f:04:16:92:92: 95:3c:c6:7f:d8:6b:2e:70:9e:96:10:a5:27:d5:24:da:f8:d3: e9:14:f0:a9:00:ff:f5:05:85:05:e0:5f:5b:ef:62:82:ae:82: 3d:77:88:52:39:26:f1:40:98:7f:44:73:2b:2f:3e:5f:e2:ab: 1a:9b:64:32:df:79:13:34:96:cc:f0:dc:93:95:a4:c9:f5:66: e6:73:35:68:3f:cb:5a:c9:80:ea:15:c3:2c:5a:74:68:17:af: d4:08:c5:e3:ee:ef:dd:b2:ba:af:6f:77:23:32:a1:0a:b1:20: 8a:5f:a0:f4:6c:f7:41:20:a1:90:03:ea:a5:ad:68:6b:7d:9f: 71:d4:35:64:67:da:dc:76:09:da:50:c8:65:11:24:67:2d:a8: 61:c7:e0:db:5e:56:94:a4:7a:4d:6d:9e:fa:6c:cb:20:06:4a: 89:62:39:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0i/D4i0kA/isX/bmxNqzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmYzRmNzBhOTJkNDZhYzAyYzhkZmU3Zjk3NWJlNDhhYmQ2 MmU3YTQwHhcNMjUxMjA2MDQwMTE0WhcNMjUxMjA3MDQwMTE0WjAzMTEwLwYDVQQD EyhmY2JmMWZiMjg0ZDZhNTVhNGVmMjk0NDhlOTMzMjNjNTJlY2Q1NGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PyvWHHLjPvp7yHtA/yi1lK2jTPQ IBJxW7JWVGFZcGfXC+r8J55j6utI6WSvc5fiBCkNKs4PbXnGMR/3//rgoO8lgfC4 1wL6Zjc1+aVTNZwiqI+3gSEBbBNkZKwLawpu8DtffTkOGQ43mEwyueMs5m41jIUG O4odMIaEADJ2RGvMnsz8qcWPn2t1+3+E7TOQsiRZD30S5lj3N7liz0xUocME5nD4 u+sXHD2yGa+ud/D+rp1+rvYomZ1joKZTPHMm9Mm+ixs+c5RZwZnImFQMkPiyi6R2 t9RsQ49I3nPlzggn/gKUcRRdWXkgBBlNux3NaqlJEwYEKHhbcpG4GJ/MTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPy/H7KE1qVaTvKUSOkzI8UuzVSgMB8GA1UdIwQY MBaAFA/E9wqS1GrALI3+f5db5Iq9YuekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDhUM0NwTFVhc0FzamY1X2wxdmtpcjFpNTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS80NmU0MDAtODdmYS00OWU5LTkxOTgt NjViODZhMDM1YTA4LzEvRDhUM0NwTFVhc0FzamY1X2wxdmtpcjFpNTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS80NmU0MDAtODdmYS00OWU5LTkxOTgtNjViODZhMDM1YTA4 LzEvRDhUM0NwTFVhc0FzamY1X2wxdmtpcjFpNTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIfbgXhI Tf7jFRdGIgObraRTiOr3eiVi4yuw14B/nn3lf7jn2etW2iIiql29VgN6G4TS4xJX EzrAhQiVCmT+c528Z8cl7t0tNyFDV2wNKX1n8zLle18EFpKSlTzGf9hrLnCelhCl J9Uk2vjT6RTwqQD/9QWFBeBfW+9igq6CPXeIUjkm8UCYf0RzKy8+X+KrGptkMt95 EzSWzPDck5WkyfVm5nM1aD/LWsmA6hXDLFp0aBev1AjF4+7v3bK6r293IzKhCrEg il+g9Gz3QSChkAPqpa1oa32fcdQ1ZGfa3HYJ2lDIZREkZy2oYcfg215WlKR6TW2e +mzLIAZKiWI5fA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:19 2025 by rpki-client