This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft File: 8fF-vMKlJa_PySIYFZyvUogpeNI.mft (raw, json) Hash identifier: VntI48oSbvHs9EVNFdnuR+TjscgoyC1DEYhXxvdJ/kc= Subject key identifier: 3D:E8:8F:55:08:44:07:E0:D8:8B:18:78:91:6F:D4:68:EF:70:EA:3F Authority key identifier: F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2 Certificate issuer: /CN=f1f17ebcc2a525afcfc92218159caf52882978d2 Certificate serial: 019B3D5980C3B5DF02B9E8ACD086C8FF1A0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft Manifest number: 07E8 Signing time: Sat 20 Dec 2025 20:00:34 +0000 Manifest this update: Sat 20 Dec 2025 20:00:34 +0000 Manifest next update: Sun 21 Dec 2025 20:00:34 +0000 Files and hashes: 1: 8fF-vMKlJa_PySIYFZyvUogpeNI.crl (hash: 1GeqxVdpfrR1GqknczOPTiCP8i58D3DIdb2YS0tnFkA=) 2: xG5nFDK1Nyvy5vl4sT_P7td-s98.roa (hash: 9ZslVC10Wq5A6L0EoqSP1oGGII0oefI9/cuRC4XS49Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:80:c3:b5:df:02:b9:e8:ac:d0:86:c8:ff:1a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f17ebcc2a525afcfc92218159caf52882978d2 Validity Not Before: Dec 20 20:00:34 2025 GMT Not After : Dec 21 20:00:34 2025 GMT Subject: CN=3de88f55084407e0d88b1878916fd468ef70ea3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a3:d0:22:34:85:6e:a7:d9:ec:42:05:53:f3: 16:33:8d:f3:33:c9:b2:a2:d4:40:6a:99:c8:db:95: f4:db:ba:83:40:52:f3:1e:92:f7:6b:ec:46:2a:bf: f1:f6:60:06:4e:56:21:16:85:cc:21:8d:9a:d0:6f: 0f:d1:86:36:6e:b4:97:71:23:8e:b9:c2:43:64:0f: 14:5c:ce:5a:b4:4b:d5:47:c3:8f:4d:51:79:97:5e: 08:87:ea:b3:90:dc:ff:92:c9:62:5a:fa:ce:61:86: 7f:9c:d4:6e:d4:f9:4d:95:09:f1:5f:36:ee:c6:8f: 3b:c6:37:bf:e3:f8:d8:4f:03:c7:6e:4b:fd:ed:2d: bb:c6:ad:52:6b:6e:ca:74:a6:e2:41:1a:eb:43:cd: fa:04:6d:70:72:d4:54:1a:aa:2b:48:ea:76:ed:40: 6f:03:ce:d2:11:59:91:62:30:d4:b1:97:c6:7f:de: 23:7e:e9:12:b1:bd:7b:6d:50:3b:38:35:9b:11:ef: 70:b5:b1:c4:07:82:8e:27:d8:6c:84:4d:d5:b7:1f: 9c:79:c8:9f:c1:1d:d5:9e:93:c5:50:fe:0f:4b:a3: d4:cf:85:5d:89:2f:c1:67:ca:16:69:14:4d:cf:6a: 6c:6f:8c:47:1b:85:e3:00:e5:5e:1b:94:b4:40:ff: 33:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E8:8F:55:08:44:07:E0:D8:8B:18:78:91:6F:D4:68:EF:70:EA:3F X509v3 Authority Key Identifier: keyid:F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:00:e0:16:0c:ac:3c:83:86:54:6b:07:d3:20:48:00:b1:7c: aa:1d:fb:96:9e:ec:e7:57:9f:59:d1:78:3b:2e:96:e6:34:c4: 01:e0:b3:fa:05:4a:8a:56:2c:fc:b6:cc:82:6e:7f:e4:9d:c9: b9:c2:41:71:fc:b4:1d:a0:02:30:f3:b3:a4:08:a5:b1:1c:63: c3:71:29:97:92:db:56:89:d0:8b:6b:15:fe:f5:dd:d4:73:3c: fe:30:be:8f:53:a5:28:c5:77:42:c8:26:9f:74:8c:48:5b:f6: a0:56:c9:fc:8a:92:65:a1:8b:06:dc:eb:4e:22:ad:23:35:94: b4:34:b8:d2:47:f6:c2:fd:35:55:fb:68:62:06:0d:9d:b0:f3: e4:3f:0c:32:f1:77:08:14:ef:7d:4c:37:c6:07:be:7d:f1:d0: 19:06:14:cf:cf:e5:28:06:9b:b5:49:77:c9:ef:4d:7b:40:d1: 69:51:f9:5a:34:79:c9:ee:98:2b:5d:e9:a4:61:2b:d3:cc:62: 55:7d:95:b2:56:6c:6b:fc:24:3e:3f:92:90:b7:6d:5f:1e:de: 6c:26:75:8c:df:bb:15:1e:e4:3b:cb:bf:e5:3f:f4:a7:35:ee: 55:3d:85:27:55:4f:a7:cc:d2:1f:2b:f6:61:c1:c9:66:f6:6e: 03:f9:22:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WYDDtd8Cueis0IbI/xoMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjE3ZWJjYzJhNTI1YWZjZmM5MjIxODE1OWNhZjUyODgy OTc4ZDIwHhcNMjUxMjIwMjAwMDM0WhcNMjUxMjIxMjAwMDM0WjAzMTEwLwYDVQQD EygzZGU4OGY1NTA4NDQwN2UwZDg4YjE4Nzg5MTZmZDQ2OGVmNzBlYTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaPQIjSFbqfZ7EIFU/MWM43zM8my otRAapnI25X027qDQFLzHpL3a+xGKr/x9mAGTlYhFoXMIY2a0G8P0YY2brSXcSOO ucJDZA8UXM5atEvVR8OPTVF5l14Ih+qzkNz/ksliWvrOYYZ/nNRu1PlNlQnxXzbu xo87xje/4/jYTwPHbkv97S27xq1Sa27KdKbiQRrrQ836BG1wctRUGqorSOp27UBv A87SEVmRYjDUsZfGf94jfukSsb17bVA7ODWbEe9wtbHEB4KOJ9hshE3Vtx+cecif wR3VnpPFUP4PS6PUz4VdiS/BZ8oWaRRNz2psb4xHG4XjAOVeG5S0QP8zfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3oj1UIRAfg2IsYeJFv1GjvcOo/MB8GA1UdIwQY MBaAFPHxfrzCpSWvz8kiGBWcr1KIKXjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hNzJkYTEtYWY4MS00Nzg3LWEwODUt ZmYzNGE4YWU5MDFhLzEvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hNzJkYTEtYWY4MS00Nzg3LWEwODUtZmYzNGE4YWU5MDFh LzEvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwDgFgys PIOGVGsH0yBIALF8qh37lp7s51efWdF4Oy6W5jTEAeCz+gVKilYs/LbMgm5/5J3J ucJBcfy0HaACMPOzpAilsRxjw3Epl5LbVonQi2sV/vXd1HM8/jC+j1OlKMV3Qsgm n3SMSFv2oFbJ/IqSZaGLBtzrTiKtIzWUtDS40kf2wv01VftoYgYNnbDz5D8MMvF3 CBTvfUw3xge+ffHQGQYUz8/lKAabtUl3ye9Ne0DRaVH5WjR5ye6YK13ppGEr08xi VX2VslZsa/wkPj+SkLdtXx7ebCZ1jN+7FR7kO8u/5T/0pzXuVT2FJ1VPp8zSHyv2 YcHJZvZuA/kiNg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:15:05 2025 by rpki-client