This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft File: d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json) Hash identifier: w4zF7tYWHj8JZ+wSQ9t87HC3SbM54G4dGS1l4ffR9jw= Subject key identifier: C5:5C:7F:B1:7D:86:3B:B4:02:10:2A:F6:6B:04:7E:EB:92:1F:89:AE Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46 Certificate issuer: /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46 Certificate serial: 019AF1644778DDB697A3F0212EC8FC50C99C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft Manifest number: 02E7 Signing time: Sat 06 Dec 2025 02:01:12 +0000 Manifest this update: Sat 06 Dec 2025 02:01:12 +0000 Manifest next update: Sun 07 Dec 2025 02:01:12 +0000 Files and hashes: 1: 2IggjZcKQnsJ27bFYIHqEpYv-GQ.roa (hash: QiDI9ap52s0p2XMZDDr7ZxsLONOENyLmIWJ6ECFI2k0=) 2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: awyL2c7iB8cmQykmK3qXTrE3AOVwCcTxUXMFjeDKuUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:47:78:dd:b6:97:a3:f0:21:2e:c8:fc:50:c9:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46 Validity Not Before: Dec 6 02:01:12 2025 GMT Not After : Dec 7 02:01:12 2025 GMT Subject: CN=c55c7fb17d863bb402102af66b047eeb921f89ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:69:27:a0:e6:c9:1e:f1:d4:d1:98:c9:95:43: 9b:78:24:ef:01:c9:a7:71:3a:98:e6:53:ae:ff:f5: 02:81:57:9e:2a:e3:fd:fe:e0:31:ef:5a:66:33:e1: 02:e4:de:15:57:11:51:6f:db:35:1c:8d:9d:94:32: 37:45:41:ed:70:8f:13:cb:3c:c1:dc:7b:07:d8:d1: 06:50:0f:26:65:4f:e9:a1:ee:c1:21:27:c3:8b:a9: cc:65:98:06:6a:07:49:c9:64:3f:44:60:34:3e:01: fb:6b:31:ce:57:94:a4:c3:31:0e:a7:ff:a7:5c:2b: ae:ba:2e:fb:ef:b1:cb:82:a2:13:e1:9f:56:c3:bb: e6:49:4c:06:21:92:55:05:af:ca:14:3f:a6:d9:be: 09:a6:8d:31:ea:80:42:08:bb:55:21:26:9c:e4:2f: f4:d2:46:80:36:a2:db:a3:de:61:0e:51:1b:e2:e5: ed:50:00:4b:20:e1:be:62:e7:4f:c2:95:dd:5f:12: 0e:39:e7:de:79:d3:d5:be:fb:1c:49:65:af:59:49: 7d:17:f5:f9:46:67:ba:e3:06:f7:f1:9b:21:dd:fe: d4:63:cb:e5:8a:10:ee:cb:50:52:4d:9c:3a:74:3c: 2b:f7:07:fa:b1:34:0b:6a:24:48:92:3d:46:8b:5a: 2c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5C:7F:B1:7D:86:3B:B4:02:10:2A:F6:6B:04:7E:EB:92:1F:89:AE X509v3 Authority Key Identifier: keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f9:7c:4f:d8:49:bc:bc:22:00:43:7d:9a:4d:45:01:e5:ea: 89:01:1e:d9:be:01:73:42:f7:40:f2:34:62:11:f7:69:07:b5: 3a:46:71:57:24:7f:86:a9:9e:53:d7:ce:e3:dd:8d:6c:53:89: ab:cf:7e:5c:d8:81:c9:dc:57:c2:c7:df:7a:8b:86:f7:70:22: 2d:92:65:53:44:8e:64:c6:f0:93:a0:87:02:a6:d7:4c:4e:1e: 9f:ca:bd:83:76:0f:59:d5:be:f4:c2:9a:0c:53:1c:fc:f9:d4: f0:04:96:8c:78:4e:46:37:e9:51:63:51:c7:d0:71:70:28:98: 4c:a2:91:d6:b1:b1:ff:89:be:84:f9:14:53:ef:5e:9c:36:43: 91:6e:54:a6:ae:0d:31:a3:78:f8:7e:04:5d:56:4f:5a:2e:97: bb:fb:1f:b4:89:48:f3:6c:1f:f5:50:5d:a9:56:fa:96:25:b8: 76:81:fa:e4:e0:06:f7:fd:71:a0:18:0a:87:72:57:1b:75:08: f9:f4:51:db:ed:ac:80:d3:b0:e5:13:ae:2c:1a:a0:3f:0c:40: 25:4b:2f:3f:0c:7d:ef:1f:1e:43:32:28:e6:5e:03:71:f3:82: 98:3d:4d:d7:38:27:8b:b5:4e:0b:e0:4a:eb:c8:f7:c2:71:e4: 23:85:5e:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEd43baXo/AhLsj8UMmcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzhkOTRiZGYzN2UwZjkwMGNkNmE4YzQyMmNkYjE0ZDk3 Y2ViNDYwHhcNMjUxMjA2MDIwMTEyWhcNMjUxMjA3MDIwMTEyWjAzMTEwLwYDVQQD EyhjNTVjN2ZiMTdkODYzYmI0MDIxMDJhZjY2YjA0N2VlYjkyMWY4OWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GknoObJHvHU0ZjJlUObeCTvAcmn cTqY5lOu//UCgVeeKuP9/uAx71pmM+EC5N4VVxFRb9s1HI2dlDI3RUHtcI8TyzzB 3HsH2NEGUA8mZU/poe7BISfDi6nMZZgGagdJyWQ/RGA0PgH7azHOV5SkwzEOp/+n XCuuui7777HLgqIT4Z9Ww7vmSUwGIZJVBa/KFD+m2b4Jpo0x6oBCCLtVISac5C/0 0kaANqLbo95hDlEb4uXtUABLIOG+YudPwpXdXxIOOefeedPVvvscSWWvWUl9F/X5 Rme64wb38Zsh3f7UY8vlihDuy1BSTZw6dDwr9wf6sTQLaiRIkj1Gi1osGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVcf7F9hju0AhAq9msEfuuSH4muMB8GA1UdIwQY MBaAFHfI2UvfN+D5AM1qjEIs2xTZfOtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82Y2U1M2MtNzY3MC00N2E3LTgxYWUt NTRjMGFlNjE3NmQ0LzEvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82Y2U1M2MtNzY3MC00N2E3LTgxYWUtNTRjMGFlNjE3NmQ0 LzEvZDhqWlM5ODM0UGtBeldxTVFpemJGTmw4NjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfl8T9hJ vLwiAEN9mk1FAeXqiQEe2b4Bc0L3QPI0YhH3aQe1OkZxVyR/hqmeU9fO492NbFOJ q89+XNiBydxXwsffeouG93AiLZJlU0SOZMbwk6CHAqbXTE4en8q9g3YPWdW+9MKa DFMc/PnU8ASWjHhORjfpUWNRx9BxcCiYTKKR1rGx/4m+hPkUU+9enDZDkW5Upq4N MaN4+H4EXVZPWi6Xu/sftIlI82wf9VBdqVb6liW4doH65OAG9/1xoBgKh3JXG3UI +fRR2+2sgNOw5ROuLBqgPwxAJUsvPwx97x8eQzIo5l4DcfOCmD1N1zgni7VOC+BK 68j3wnHkI4VeUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:42 2025 by rpki-client