This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft File: eD8ukq1ZxwyM3CiygCniKXBcbJE.mft (raw, json) Hash identifier: WS4eXwhFce1x4kO1h/OLtnH+SHZLZEJtbTE11cb04gY= Subject key identifier: 04:04:56:4C:43:30:63:E5:BC:B0:59:2A:78:82:D8:F5:D6:D4:81:6B Authority key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91 Certificate issuer: /CN=783f2e92ad59c70c8cdc28b28029e229705c6c91 Certificate serial: 019B085A3E818A649C105B2367A51916AB04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft Manifest number: 0C5E Signing time: Wed 10 Dec 2025 13:01:30 +0000 Manifest this update: Wed 10 Dec 2025 13:01:30 +0000 Manifest next update: Thu 11 Dec 2025 13:01:30 +0000 Files and hashes: 1: WCZTQxU946nlR7ch0PPIZ_wC2wE.roa (hash: gB/77HCksF53BORp9peHh3slxdDcnobCSMUhewaJyNA=) 2: eD8ukq1ZxwyM3CiygCniKXBcbJE.crl (hash: ZeJ3RpWC0limb/FG6du22jxFpyFTukMtJDvghvqFb7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:5a:3e:81:8a:64:9c:10:5b:23:67:a5:19:16:ab:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91 Validity Not Before: Dec 10 13:01:30 2025 GMT Not After : Dec 11 13:01:30 2025 GMT Subject: CN=0404564c433063e5bcb0592a7882d8f5d6d4816b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:75:3e:64:5e:31:af:b8:de:ab:0d:8b:03:54: 91:e5:7a:fb:f3:e2:02:27:e4:40:88:fd:ef:5c:f5: 38:ae:bc:88:59:1d:81:d4:e1:ee:5c:f1:9a:7d:98: f3:1f:3e:fd:09:36:d4:16:57:d1:82:6e:6c:56:41: 99:dd:40:da:e6:e0:9b:62:4a:b8:9c:92:4f:79:f9: 84:1a:c8:7d:35:c2:23:97:56:f7:50:48:23:bc:13: e3:5c:9e:d7:13:6b:2d:7b:c9:11:49:85:cb:8f:03: ba:56:10:c8:e7:0f:be:a4:71:a5:ee:4a:e5:b1:76: 84:5b:da:76:95:67:06:6e:df:d7:fb:05:0f:b5:9d: ec:1e:a2:df:ba:ba:55:e3:47:f3:7b:bc:be:79:32: bd:7a:0a:a9:98:eb:fc:1e:92:2a:9f:82:74:15:dc: e3:a1:38:a3:37:62:5a:b4:84:63:4a:d9:e5:08:62: c3:11:b9:75:63:91:fe:f0:e1:a2:4f:21:1b:b7:d5: d3:4a:4c:77:34:18:61:dd:07:9a:ac:bb:95:33:f7: 5c:bb:9b:a5:07:a3:9f:6b:36:c3:13:94:e5:a0:6c: d6:87:60:08:54:62:43:d1:fb:a9:81:c8:db:54:a4: 81:f1:22:24:ca:c9:4a:19:65:88:3b:bd:f1:e6:5c: 27:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:04:56:4C:43:30:63:E5:BC:B0:59:2A:78:82:D8:F5:D6:D4:81:6B X509v3 Authority Key Identifier: keyid:78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:9b:0c:50:c9:c7:2f:95:fa:6a:23:a1:ba:74:69:7f:68:a9: 50:64:1a:45:30:7f:cf:7c:47:2f:84:9f:58:f5:f1:ce:3c:b8: 99:8d:80:9e:6c:7f:9c:6b:dd:2e:7c:c4:41:51:79:de:7a:95: f5:77:04:f0:c8:f0:37:76:59:8b:d2:1f:07:2e:12:8e:eb:59: 1f:c3:d5:95:e4:03:28:9f:bb:76:c9:a6:c4:70:99:75:7d:22: 24:d3:34:37:1e:e9:fa:cc:94:5f:cd:cd:d8:ff:4f:45:13:31: 47:95:c1:69:cd:bc:3c:ec:4e:87:2d:54:c1:cd:80:d6:0f:98: 47:16:24:04:00:47:81:e5:31:1b:6f:ab:db:a9:f2:36:79:c9: 2e:e2:89:49:f5:1e:e7:a5:fb:6a:73:71:68:5a:d6:35:5f:a3: 63:10:63:3d:50:99:86:8b:01:9c:a3:9a:00:91:fb:50:4f:d6: fd:5a:e4:4b:cc:e5:9d:25:48:e4:c3:a3:c8:6f:85:7e:5a:5e: ae:71:b0:95:20:3d:8d:a1:d3:2a:f8:c9:5f:84:e7:6c:1d:54: 4a:ab:cb:26:69:64:d0:d0:9e:24:37:f5:35:d8:aa:f1:7c:21: 87:b3:5f:d3:f8:c7:bd:2b:5d:57:7d:4b:a8:94:e7:82:58:44: 06:4f:55:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIWj6BimScEFsjZ6UZFqsEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4M2YyZTkyYWQ1OWM3MGM4Y2RjMjhiMjgwMjllMjI5NzA1 YzZjOTEwHhcNMjUxMjEwMTMwMTMwWhcNMjUxMjExMTMwMTMwWjAzMTEwLwYDVQQD EygwNDA0NTY0YzQzMzA2M2U1YmNiMDU5MmE3ODgyZDhmNWQ2ZDQ4MTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXU+ZF4xr7jeqw2LA1SR5Xr78+IC J+RAiP3vXPU4rryIWR2B1OHuXPGafZjzHz79CTbUFlfRgm5sVkGZ3UDa5uCbYkq4 nJJPefmEGsh9NcIjl1b3UEgjvBPjXJ7XE2ste8kRSYXLjwO6VhDI5w++pHGl7krl sXaEW9p2lWcGbt/X+wUPtZ3sHqLfurpV40fze7y+eTK9egqpmOv8HpIqn4J0Fdzj oTijN2JatIRjStnlCGLDEbl1Y5H+8OGiTyEbt9XTSkx3NBhh3QearLuVM/dcu5ul B6OfazbDE5TloGzWh2AIVGJD0fupgcjbVKSB8SIkyslKGWWIO73x5lwniQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQEVkxDMGPlvLBZKniC2PXW1IFrMB8GA1UdIwQY MBaAFHg/LpKtWccMjNwosoAp4ilwXGyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81N2I0MTQtNTA5MS00NjU3LWE5YjQt ZTlhZjU2NmYyYzE0LzEvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81N2I0MTQtNTA5MS00NjU3LWE5YjQtZTlhZjU2NmYyYzE0 LzEvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5sMUMnH L5X6aiOhunRpf2ipUGQaRTB/z3xHL4SfWPXxzjy4mY2Anmx/nGvdLnzEQVF53nqV 9XcE8MjwN3ZZi9IfBy4SjutZH8PVleQDKJ+7dsmmxHCZdX0iJNM0Nx7p+syUX83N 2P9PRRMxR5XBac28POxOhy1Uwc2A1g+YRxYkBABHgeUxG2+r26nyNnnJLuKJSfUe 56X7anNxaFrWNV+jYxBjPVCZhosBnKOaAJH7UE/W/VrkS8zlnSVI5MOjyG+Fflpe rnGwlSA9jaHTKvjJX4TnbB1USqvLJmlk0NCeJDf1Ndiq8Xwhh7Nf0/jHvStdV31L qJTnglhEBk9V8w== -----END CERTIFICATE-----Generated at Wed Dec 10 18:07:39 2025 by rpki-client