This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft File: d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft (raw, json) Hash identifier: u8ksxpBnRAoT9YfcjR0CNFBkEXEJw9udd9MD1kZTULo= Subject key identifier: E3:84:A9:75:B5:AC:58:5B:98:9A:6B:FD:C0:4E:57:1D:BF:BA:69:B6 Authority key identifier: 77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E Certificate issuer: /CN=77c7b457f9af042924142373ce090f7fa876257e Certificate serial: 019AF12DE157313744B4ED8F2329B0461520 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft Manifest number: 1021 Signing time: Sat 06 Dec 2025 01:01:47 +0000 Manifest this update: Sat 06 Dec 2025 01:01:47 +0000 Manifest next update: Sun 07 Dec 2025 01:01:47 +0000 Files and hashes: 1: d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl (hash: goM33lb5bBSURRIfvLIxDvWoWR7d+3+7p8/JURaksNI=) 2: gLKpyPGbqCEdbx2uKWZ-HtuhLy0.roa (hash: f77sZOCl1dYzZqqQSp/e70T40ZHDdgkRvhdb7798S4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e1:57:31:37:44:b4:ed:8f:23:29:b0:46:15:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c7b457f9af042924142373ce090f7fa876257e Validity Not Before: Dec 6 01:01:47 2025 GMT Not After : Dec 7 01:01:47 2025 GMT Subject: CN=e384a975b5ac585b989a6bfdc04e571dbfba69b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:eb:b3:64:58:38:a1:9e:81:1f:c2:4e:1f:de: 17:fc:94:23:7d:d6:46:10:40:38:1c:87:06:43:91: 65:7a:31:d7:9c:7a:2a:80:57:cd:b3:3f:ce:37:8c: 81:72:f6:b9:0f:4b:d3:62:e9:13:4b:4c:62:cc:9d: 6f:bd:64:78:1c:b2:2a:40:52:d3:4d:f0:e5:a1:0f: e0:0b:f7:b9:c0:0b:c9:33:31:3c:39:b4:3b:7e:40: 31:90:3a:58:3e:3d:ef:d6:ec:80:2d:c5:aa:aa:61: b0:d1:68:0a:6d:8f:03:c2:ac:85:cc:e9:99:98:c9: b5:76:5b:49:87:cf:40:4b:48:b2:d1:3f:5a:f2:be: 71:3a:d6:8d:11:d1:74:d2:2b:f6:8d:ca:3b:c6:b0: 9c:6b:61:92:dd:f0:bd:e3:af:4b:f5:de:47:b0:e0: eb:e1:2e:3c:fe:01:10:3a:55:b5:ff:34:c8:2c:8c: 67:a3:97:24:e6:fe:e0:4a:74:a9:e6:ed:c9:32:e9: 3f:07:35:a6:2d:bf:7a:8d:2b:5b:3e:d6:2c:ce:e1: 64:2c:ad:b2:81:f6:60:c3:96:79:a4:6d:9a:29:2c: b5:51:b7:3c:99:a0:81:54:67:c7:96:ed:16:13:8b: 3f:6e:2b:96:50:e6:f5:9f:b6:1c:72:62:ac:ea:c3: 06:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:84:A9:75:B5:AC:58:5B:98:9A:6B:FD:C0:4E:57:1D:BF:BA:69:B6 X509v3 Authority Key Identifier: keyid:77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:12:f8:43:88:b3:1b:5e:d2:61:84:c0:56:7e:74:72:9b:89: 9c:5a:58:bb:30:99:aa:95:e6:11:ed:7f:44:32:76:6d:ab:89: 09:0e:4a:d1:c2:da:23:f2:ac:f4:0f:41:5a:c3:60:70:09:9b: e2:25:f5:07:c2:ff:84:f9:7f:fc:66:1c:66:36:e2:cd:68:ba: b2:d8:27:bc:00:26:02:a9:68:af:95:93:67:4c:3b:0f:2b:c3: 45:38:f0:f2:a1:62:86:4a:f9:16:6e:08:39:7b:e5:60:61:af: 1e:9d:1b:f0:0e:ca:aa:2f:78:1b:56:01:27:69:c7:6a:f9:aa: 2b:f2:17:d7:aa:f1:02:c8:c1:e1:49:79:db:c7:2c:56:fd:43: a6:5e:32:d1:b4:da:7b:41:b9:44:eb:fa:ad:d0:ea:c4:2b:d9: 7c:00:de:1d:20:a2:91:17:70:11:99:e1:30:e9:a7:32:68:9d: 94:6c:97:c5:4b:54:92:af:1f:21:ab:89:c6:0d:c6:0b:95:d0: 1c:04:62:54:b3:74:c0:a8:35:dd:8e:ea:8f:54:4a:44:9c:d4: fb:e7:d5:70:e1:73:7a:41:69:1f:66:c4:c9:92:d5:08:8a:e1: ff:3b:6c:a5:2c:2a:f1:d0:de:50:14:b7:e8:64:b8:65:db:98: 1a:92:1b:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeFXMTdEtO2PIymwRhUgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzdiNDU3ZjlhZjA0MjkyNDE0MjM3M2NlMDkwZjdmYTg3 NjI1N2UwHhcNMjUxMjA2MDEwMTQ3WhcNMjUxMjA3MDEwMTQ3WjAzMTEwLwYDVQQD EyhlMzg0YTk3NWI1YWM1ODViOTg5YTZiZmRjMDRlNTcxZGJmYmE2OWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OuzZFg4oZ6BH8JOH94X/JQjfdZG EEA4HIcGQ5FlejHXnHoqgFfNsz/ON4yBcva5D0vTYukTS0xizJ1vvWR4HLIqQFLT TfDloQ/gC/e5wAvJMzE8ObQ7fkAxkDpYPj3v1uyALcWqqmGw0WgKbY8DwqyFzOmZ mMm1dltJh89AS0iy0T9a8r5xOtaNEdF00iv2jco7xrCca2GS3fC9469L9d5HsODr 4S48/gEQOlW1/zTILIxno5ck5v7gSnSp5u3JMuk/BzWmLb96jStbPtYszuFkLK2y gfZgw5Z5pG2aKSy1Ubc8maCBVGfHlu0WE4s/biuWUOb1n7YccmKs6sMGhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOEqXW1rFhbmJpr/cBOVx2/umm2MB8GA1UdIwQY MBaAFHfHtFf5rwQpJBQjc84JD3+odiV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhlMFZfbXZCQ2trRkNOenpna1BmNmgySlg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZDBiN2QtZGI5Ni00Mzg3LTkzZWMt ODQ2OWNmNjU5MTAxLzEvZDhlMFZfbXZCQ2trRkNOenpna1BmNmgySlg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS81ZDBiN2QtZGI5Ni00Mzg3LTkzZWMtODQ2OWNmNjU5MTAx LzEvZDhlMFZfbXZCQ2trRkNOenpna1BmNmgySlg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBL4Q4iz G17SYYTAVn50cpuJnFpYuzCZqpXmEe1/RDJ2bauJCQ5K0cLaI/Ks9A9BWsNgcAmb 4iX1B8L/hPl//GYcZjbizWi6stgnvAAmAqlor5WTZ0w7DyvDRTjw8qFihkr5Fm4I OXvlYGGvHp0b8A7Kqi94G1YBJ2nHavmqK/IX16rxAsjB4Ul528csVv1Dpl4y0bTa e0G5ROv6rdDqxCvZfADeHSCikRdwEZnhMOmnMmidlGyXxUtUkq8fIauJxg3GC5XQ HARiVLN0wKg13Y7qj1RKRJzU++fVcOFzekFpH2bEyZLVCIrh/ztspSwq8dDeUBS3 6GS4ZduYGpIbXw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:17 2025 by rpki-client