This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft File: eD8ukq1ZxwyM3CiygCniKXBcbJE.mft (raw, json) Hash identifier: pTtGR+vpsnBjJR7+BVu3TUgQbLcNSo9HuswPA32TxxY= Subject key identifier: F4:5E:83:4F:41:FA:AE:71:EF:4B:E3:81:D2:EC:01:1C:1C:7B:0E:F4 Authority key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91 Certificate issuer: /CN=783f2e92ad59c70c8cdc28b28029e229705c6c91 Certificate serial: 019B3A8FEB970CC190E5A2E1FC656BC48303 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft Manifest number: 0C78 Signing time: Sat 20 Dec 2025 07:01:09 +0000 Manifest this update: Sat 20 Dec 2025 07:01:09 +0000 Manifest next update: Sun 21 Dec 2025 07:01:09 +0000 Files and hashes: 1: WCZTQxU946nlR7ch0PPIZ_wC2wE.roa (hash: gB/77HCksF53BORp9peHh3slxdDcnobCSMUhewaJyNA=) 2: eD8ukq1ZxwyM3CiygCniKXBcbJE.crl (hash: 39LI9YBHehSaXfFEaXqyFUAmFH+60QSNhHMlkBHGhDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:eb:97:0c:c1:90:e5:a2:e1:fc:65:6b:c4:83:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91 Validity Not Before: Dec 20 07:01:09 2025 GMT Not After : Dec 21 07:01:09 2025 GMT Subject: CN=f45e834f41faae71ef4be381d2ec011c1c7b0ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8e:23:2e:98:3b:33:ad:a8:0d:0e:04:2f:04: 21:e6:6f:8c:10:ea:e7:a3:42:cb:19:84:48:23:10: dc:ad:b8:48:11:0e:d9:f9:75:76:aa:8c:51:c6:2b: d2:3b:c8:79:89:cf:56:e4:8e:a5:5d:c2:ce:9c:52: cf:45:e1:4d:f6:bd:31:c5:92:1c:27:b9:5c:6e:b0: df:fd:b3:28:7d:df:4e:02:a1:f9:1b:1d:92:85:8a: 7c:ea:7c:bf:92:c7:6c:f7:7f:d3:54:a5:f0:3e:90: 37:4b:d5:da:8a:16:c0:87:b2:3f:4b:22:01:98:64: 68:99:ba:a5:40:77:4a:0d:6e:5a:a5:ec:ec:6a:fa: f1:a6:ec:2c:01:e4:5d:72:b0:84:af:51:2c:f1:92: 7b:87:c2:0b:41:65:9a:26:79:57:3c:22:6e:31:54: b1:19:22:3a:6c:7c:93:03:2d:44:d0:9f:c2:ed:25: 63:5e:2e:2a:10:31:d2:60:45:cb:27:df:40:d1:55: c4:d3:ee:3f:ff:14:03:8f:39:eb:8a:66:5b:d7:b1: d6:9e:1c:7a:fa:e6:b8:6e:a6:b6:1b:f5:6a:80:e4: 84:84:c7:41:d4:66:dd:1b:0f:bb:f4:c1:13:0a:ab: 57:69:be:aa:36:58:ba:62:d8:49:73:3c:7d:19:8e: d9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5E:83:4F:41:FA:AE:71:EF:4B:E3:81:D2:EC:01:1C:1C:7B:0E:F4 X509v3 Authority Key Identifier: keyid:78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:db:a9:26:63:85:0a:d0:da:31:cc:42:ad:9e:86:4a:5d:b3: 2f:7f:53:a1:8a:2b:8c:df:23:63:eb:c2:b9:35:ed:93:46:b9: cd:a0:61:3e:9b:ab:7d:6f:e5:93:8b:b8:43:0d:0f:44:fb:5d: f3:71:e8:2f:72:4e:1d:2c:e7:30:9d:01:b9:0d:c4:cf:f1:23: 55:18:3a:af:2d:9e:3d:44:a3:27:a0:60:b3:f6:90:e7:de:d8: e0:0a:87:fa:27:e2:26:94:aa:e0:30:eb:24:47:15:ac:ea:f1: 45:12:4d:b6:15:b9:c3:a5:49:e1:f8:79:94:26:ba:9b:bb:18: 1f:16:72:48:b0:80:77:a9:49:0e:b5:0b:94:1b:06:f5:1c:ba: 95:31:ee:79:43:c1:1d:e6:67:58:ff:d9:ee:78:a8:cb:f4:6e: 96:11:34:88:91:33:b0:4f:ff:55:54:5d:42:bc:40:2b:1a:c5: 00:a1:88:42:c9:5e:93:58:78:f8:d9:56:2f:93:68:e7:0d:40: ae:ac:25:ef:35:fc:a6:21:54:7c:37:33:99:d0:fe:dd:fa:b0: de:c4:65:74:f9:23:99:f7:dd:9f:1c:38:4a:db:5e:53:21:61: 62:5d:f7:20:ac:ef:a8:45:db:c8:76:2e:e8:59:24:7c:29:43: 0b:5e:76:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j+uXDMGQ5aLh/GVrxIMDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4M2YyZTkyYWQ1OWM3MGM4Y2RjMjhiMjgwMjllMjI5NzA1 YzZjOTEwHhcNMjUxMjIwMDcwMTA5WhcNMjUxMjIxMDcwMTA5WjAzMTEwLwYDVQQD EyhmNDVlODM0ZjQxZmFhZTcxZWY0YmUzODFkMmVjMDExYzFjN2IwZWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo4jLpg7M62oDQ4ELwQh5m+MEOrn o0LLGYRIIxDcrbhIEQ7Z+XV2qoxRxivSO8h5ic9W5I6lXcLOnFLPReFN9r0xxZIc J7lcbrDf/bMofd9OAqH5Gx2ShYp86ny/ksds93/TVKXwPpA3S9XaihbAh7I/SyIB mGRombqlQHdKDW5apezsavrxpuwsAeRdcrCEr1Es8ZJ7h8ILQWWaJnlXPCJuMVSx GSI6bHyTAy1E0J/C7SVjXi4qEDHSYEXLJ99A0VXE0+4//xQDjznrimZb17HWnhx6 +ua4bqa2G/VqgOSEhMdB1GbdGw+79METCqtXab6qNli6YthJczx9GY7ZJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPReg09B+q5x70vjgdLsARwcew70MB8GA1UdIwQY MBaAFHg/LpKtWccMjNwosoAp4ilwXGyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81N2I0MTQtNTA5MS00NjU3LWE5YjQt ZTlhZjU2NmYyYzE0LzEvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81N2I0MTQtNTA5MS00NjU3LWE5YjQtZTlhZjU2NmYyYzE0 LzEvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNupJmOF CtDaMcxCrZ6GSl2zL39ToYorjN8jY+vCuTXtk0a5zaBhPpurfW/lk4u4Qw0PRPtd 83HoL3JOHSznMJ0BuQ3Ez/EjVRg6ry2ePUSjJ6Bgs/aQ597Y4AqH+ifiJpSq4DDr JEcVrOrxRRJNthW5w6VJ4fh5lCa6m7sYHxZySLCAd6lJDrULlBsG9Ry6lTHueUPB HeZnWP/Z7nioy/RulhE0iJEzsE//VVRdQrxAKxrFAKGIQslek1h4+NlWL5No5w1A rqwl7zX8piFUfDczmdD+3fqw3sRldPkjmffdnxw4StteUyFhYl33IKzvqEXbyHYu 6FkkfClDC152OQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:52:43 2025 by rpki-client