This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft File: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft (raw, json) Hash identifier: ikLY9l0NPmngRxOhJTTCjQBje4unPK0AAORXO/5scJg= Subject key identifier: F7:DC:5A:BD:B0:73:71:83:87:88:3B:70:13:21:16:7B:7B:CC:6A:8E Authority key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74 Certificate issuer: /CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174 Certificate serial: 019AF209410079CA2475C432C48F432CA78C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft Manifest number: 05BD Signing time: Sat 06 Dec 2025 05:01:23 +0000 Manifest this update: Sat 06 Dec 2025 05:01:23 +0000 Manifest next update: Sun 07 Dec 2025 05:01:23 +0000 Files and hashes: 1: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl (hash: iptYQJW5h8ttyapNQikCNHnjVI3RFTNUh3SA0BNLCk4=) 2: i40en23OGg_DEWIRxhMGmgEox1s.roa (hash: iWUkdAfgE1mLIKUO/1DuqvBR2l5IncPfNwSFVOKSJKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:41:00:79:ca:24:75:c4:32:c4:8f:43:2c:a7:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174 Validity Not Before: Dec 6 05:01:23 2025 GMT Not After : Dec 7 05:01:23 2025 GMT Subject: CN=f7dc5abdb073718387883b701321167b7bcc6a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:eb:58:f5:ff:6b:25:12:3c:62:af:20:25: 75:33:83:35:bb:a9:71:f7:04:5a:56:a0:36:53:6c: 07:ec:2f:88:69:83:50:bc:c3:05:b9:45:26:75:74: 3b:92:05:ec:e1:4b:df:fe:c6:56:c0:0d:d2:2f:d3: 98:ff:f2:bc:69:40:78:35:d8:08:ae:42:1c:74:66: cc:10:f6:40:b9:67:ac:2c:1b:3c:76:f2:20:70:b4: 43:af:e0:5e:bc:9f:02:b1:c7:b9:7f:7b:3c:3a:80: f8:5c:b7:69:34:23:9a:bc:8a:ab:18:e4:28:5c:91: f7:17:cc:f5:5f:5d:83:0b:21:78:e5:4b:f9:8b:2d: b2:a5:f7:17:42:57:1f:ef:55:80:12:42:15:81:bc: f7:e3:a2:11:6c:70:8e:0b:de:a2:ba:47:50:ea:43: f7:c8:8b:42:05:bc:8b:62:4e:cd:88:91:f7:0f:fd: b1:a7:98:5e:e3:cb:97:1e:6f:de:79:0b:06:b3:67: 1a:bb:da:88:f0:7e:b2:be:80:21:d0:fe:ec:17:3e: b3:da:9f:2f:ca:48:1f:50:63:d8:42:0d:4b:ca:21: 8a:98:32:f6:fa:48:d7:75:46:c8:31:9d:ee:55:7e: 8c:3d:7e:7a:ea:4d:ad:6c:6f:55:2d:3b:f2:67:be: d0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DC:5A:BD:B0:73:71:83:87:88:3B:70:13:21:16:7B:7B:CC:6A:8E X509v3 Authority Key Identifier: keyid:F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:32:4a:e1:e9:f8:b8:2d:8f:70:75:96:c0:9b:c7:d6:bd:56: 2a:3b:b4:30:24:0e:86:87:f5:72:f1:06:2d:e5:5f:0f:e4:94: 6b:d2:88:9a:6f:b6:60:05:8f:af:52:e6:9e:f9:61:aa:e5:43: e2:3e:a1:e1:9c:3a:ee:0e:d7:cc:ff:95:d5:08:06:a2:65:ac: da:a5:a3:ea:ff:a4:03:c3:2c:f8:b2:73:3f:50:de:fe:e6:ce: ee:cf:3e:de:5a:7b:72:e3:d0:bc:6b:67:77:b0:b0:90:a6:86: ec:4e:24:a7:08:51:7d:30:88:7f:b7:c4:62:95:90:2a:30:75: a4:c1:66:92:5d:02:87:cb:ea:40:ef:24:fe:bf:1b:4d:1a:0b: 12:cb:a0:4f:56:b5:78:30:92:b7:ca:91:05:ef:98:3f:90:46: a6:b2:b4:9c:06:0b:c7:15:b3:40:3d:6b:af:d1:d1:74:17:93: 12:4f:37:2d:72:0c:bc:db:8d:72:66:6a:7a:d9:52:ed:65:5c: b7:ea:23:34:ee:14:83:36:90:a5:20:b4:99:a4:17:3d:a2:10: 42:30:43:33:d4:ae:6b:1c:d6:ae:31:0a:f6:da:79:24:81:67: 45:55:a7:f3:ae:a1:f5:85:a7:5c:57:39:19:6a:6d:34:c6:d3: a0:c7:8a:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUEAecokdcQyxI9DLKeMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwM2VkNGZlZGY1NmQwYjAyYjE3MmM4Zjg5ZWMzNzY1MTBj ZDMxNzQwHhcNMjUxMjA2MDUwMTIzWhcNMjUxMjA3MDUwMTIzWjAzMTEwLwYDVQQD EyhmN2RjNWFiZGIwNzM3MTgzODc4ODNiNzAxMzIxMTY3YjdiY2M2YThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKXrWPX/ayUSPGKvICV1M4M1u6lx 9wRaVqA2U2wH7C+IaYNQvMMFuUUmdXQ7kgXs4Uvf/sZWwA3SL9OY//K8aUB4NdgI rkIcdGbMEPZAuWesLBs8dvIgcLRDr+BevJ8Csce5f3s8OoD4XLdpNCOavIqrGOQo XJH3F8z1X12DCyF45Uv5iy2ypfcXQlcf71WAEkIVgbz346IRbHCOC96iukdQ6kP3 yItCBbyLYk7NiJH3D/2xp5he48uXHm/eeQsGs2cau9qI8H6yvoAh0P7sFz6z2p8v ykgfUGPYQg1LyiGKmDL2+kjXdUbIMZ3uVX6MPX566k2tbG9VLTvyZ77QzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfcWr2wc3GDh4g7cBMhFnt7zGqOMB8GA1UdIwQY MBaAFPA+1P7fVtCwKxcsj4nsN2UQzTF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNjM5NTAtNzZlOC00ZjJiLTg3MzEt ZmI0ZmQwN2UyNmEwLzEvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lNjM5NTAtNzZlOC00ZjJiLTg3MzEtZmI0ZmQwN2UyNmEw LzEvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtTJK4en4 uC2PcHWWwJvH1r1WKju0MCQOhof1cvEGLeVfD+SUa9KImm+2YAWPr1LmnvlhquVD 4j6h4Zw67g7XzP+V1QgGomWs2qWj6v+kA8Ms+LJzP1De/ubO7s8+3lp7cuPQvGtn d7CwkKaG7E4kpwhRfTCIf7fEYpWQKjB1pMFmkl0Ch8vqQO8k/r8bTRoLEsugT1a1 eDCSt8qRBe+YP5BGprK0nAYLxxWzQD1rr9HRdBeTEk83LXIMvNuNcmZqetlS7WVc t+ojNO4UgzaQpSC0maQXPaIQQjBDM9SuaxzWrjEK9tp5JIFnRVWn866h9YWnXFc5 GWptNMbToMeKUA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:16 2025 by rpki-client