This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft File: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json) Hash identifier: cMQAfumNb23v5iLMkKujfLduWEh3OiMYAyFq7GvQkg4= Subject key identifier: 0B:08:71:03:70:3D:83:DA:0B:D4:15:AE:7E:93:67:CC:29:B0:3B:71 Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5 Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5 Certificate serial: 019AF2402248A8B92957103431B5CB951540 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 06:01:20 +0000 Manifest this update: Sat 06 Dec 2025 06:01:20 +0000 Manifest next update: Sun 07 Dec 2025 06:01:20 +0000 Files and hashes: 1: _Q5q23PPHO-mRvT-qL8ygRyZcq8.roa (hash: MlSwzzd2g428PzEfHlimkQJSWkAp7XxXXCW+AJUIUOw=) 2: jyrC-t0H_GkAg2c88y9tSfnyeDQ.roa (hash: QuK2j2bldMS2fMD4ill15moXvawQIfM3BSjaK9rkpUw=) 3: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: 6NB5jYLW+HO4JA2qbDTLwXdQF8It37aeO/gL4RNG86w=) 4: rZAA3Y495kRkRNDpWyGUUlyfTzU.roa (hash: Fgv+FkEtI7c1vlophMoAf5XyRQp0aEoHwM68DDPsUbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:22:48:a8:b9:29:57:10:34:31:b5:cb:95:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5 Validity Not Before: Dec 6 06:01:20 2025 GMT Not After : Dec 7 06:01:20 2025 GMT Subject: CN=0b087103703d83da0bd415ae7e9367cc29b03b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a3:4d:c6:20:bc:cb:1b:ca:92:6c:d4:8b:a3: 88:e3:ff:63:78:94:a2:02:20:ff:ea:e6:41:9e:58: 67:a5:78:b5:b2:19:30:cf:45:e9:ee:85:d5:70:37: 58:2d:22:1d:5f:56:2b:a4:2b:88:8c:24:74:36:2a: 62:50:50:f9:65:a6:ee:80:1f:a3:65:de:c0:84:5d: 2a:2a:91:f5:bd:09:e5:ed:72:e6:22:8d:6e:0c:c5: 9e:fc:2e:f5:93:b2:f5:f9:6c:ce:3b:36:53:a4:95: 79:7f:49:2d:0c:c7:0d:b0:9d:6f:a7:9d:e0:23:97: 07:15:6f:54:55:62:b0:20:94:b9:6b:d9:a3:45:a3: 26:01:46:60:21:cc:71:40:e9:f0:67:6c:ea:5d:e7: bd:47:bc:57:b3:c4:0d:19:26:1f:df:3f:7f:a4:74: 3c:32:c3:68:c9:79:89:ba:7d:47:86:68:1b:92:7c: 3c:81:34:fa:8f:21:3e:9f:6a:61:2e:af:3e:4d:4e: de:3a:3a:05:8d:2e:f2:d2:60:f5:4c:dd:52:03:a0: 01:af:a3:ac:d0:9f:be:a7:7f:c8:47:3e:4a:46:0d: 9d:db:e7:8d:21:7b:55:56:39:ed:2a:c5:45:20:23: 36:d6:0f:23:5b:6b:fc:67:2c:5a:98:97:4a:50:41: a8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:08:71:03:70:3D:83:DA:0B:D4:15:AE:7E:93:67:CC:29:B0:3B:71 X509v3 Authority Key Identifier: keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:d7:c8:7f:95:8a:1b:6c:bb:5e:65:b7:3d:f0:ca:5d:19:d2: e2:ee:7a:07:3f:75:ab:85:7a:dc:92:6f:39:cf:d1:df:da:36: ca:42:ca:8f:df:66:76:05:e5:43:e7:10:10:2a:49:71:d2:55: a2:68:8f:9e:56:cf:9a:b7:5e:e9:24:58:9f:d7:81:1d:36:a7: 5e:2f:13:6c:be:bb:67:a6:17:28:07:e0:2d:ae:3a:71:08:2c: 86:9b:42:34:34:2c:d0:56:a4:0b:cd:87:0d:a0:90:d9:de:e3: 07:1a:30:65:f3:53:46:d2:00:63:3b:a7:18:5e:20:4c:92:57: 4a:40:05:01:e7:0b:c4:82:67:77:4a:22:3d:2d:06:f3:dd:85: 64:71:a8:c8:04:5b:ae:f1:e1:9a:62:93:12:5d:66:0c:b5:a2: f5:a9:b5:ec:b6:9a:d0:12:ae:e5:a5:c4:25:2d:99:03:c5:39: f8:ef:3f:64:6d:5e:b6:cd:f9:36:9a:a7:c5:8e:d1:d1:71:89: 1b:cc:3e:bd:8b:5e:9f:df:e1:16:8c:8b:d9:89:77:dd:24:57: 12:95:7f:ca:ad:44:96:22:38:52:d7:c1:49:d2:1f:21:ca:8d: 90:f7:d8:ba:b9:2f:28:d0:ff:6a:60:75:e0:8b:33:b1:5f:d8: 26:9a:22:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCJIqLkpVxA0MbXLlRVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTc3YzcwOGFmMGJhMWY4MTU0OWM5Zjg3MDg5NTU5Mzkw MTY3YTUwHhcNMjUxMjA2MDYwMTIwWhcNMjUxMjA3MDYwMTIwWjAzMTEwLwYDVQQD EygwYjA4NzEwMzcwM2Q4M2RhMGJkNDE1YWU3ZTkzNjdjYzI5YjAzYjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qNNxiC8yxvKkmzUi6OI4/9jeJSi AiD/6uZBnlhnpXi1shkwz0Xp7oXVcDdYLSIdX1YrpCuIjCR0NipiUFD5ZabugB+j Zd7AhF0qKpH1vQnl7XLmIo1uDMWe/C71k7L1+WzOOzZTpJV5f0ktDMcNsJ1vp53g I5cHFW9UVWKwIJS5a9mjRaMmAUZgIcxxQOnwZ2zqXee9R7xXs8QNGSYf3z9/pHQ8 MsNoyXmJun1Hhmgbknw8gTT6jyE+n2phLq8+TU7eOjoFjS7y0mD1TN1SA6ABr6Os 0J++p3/IRz5KRg2d2+eNIXtVVjntKsVFICM21g8jW2v8ZyxamJdKUEGoIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsIcQNwPYPaC9QVrn6TZ8wpsDtxMB8GA1UdIwQY MBaAFKynfHCK8LofgVScn4cIlVk5AWelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktkOGNJcnd1aC1CVkp5Zmh3aVZXVGtCWjZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84ZmU3ZDgtMDE3Yi00MWFhLWE5MWYt MjhiMTllM2ZkNGE2LzEvcktkOGNJcnd1aC1CVkp5Zmh3aVZXVGtCWjZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84ZmU3ZDgtMDE3Yi00MWFhLWE5MWYtMjhiMTllM2ZkNGE2 LzEvcktkOGNJcnd1aC1CVkp5Zmh3aVZXVGtCWjZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtfIf5WK G2y7XmW3PfDKXRnS4u56Bz91q4V63JJvOc/R39o2ykLKj99mdgXlQ+cQECpJcdJV omiPnlbPmrde6SRYn9eBHTanXi8TbL67Z6YXKAfgLa46cQgshptCNDQs0FakC82H DaCQ2d7jBxowZfNTRtIAYzunGF4gTJJXSkAFAecLxIJnd0oiPS0G892FZHGoyARb rvHhmmKTEl1mDLWi9am17Laa0BKu5aXEJS2ZA8U5+O8/ZG1ets35NpqnxY7R0XGJ G8w+vYten9/hFoyL2Yl33SRXEpV/yq1EliI4UtfBSdIfIcqNkPfYurkvKND/amB1 4IszsV/YJpoihg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:18:02 2025 by rpki-client