This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft File: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft (raw, json) Hash identifier: Kg0Ou8sn1q62lBh8J3gVEof+EOAvILXywWLwa3Undbs= Subject key identifier: 6A:CF:EE:B0:39:3F:DA:AB:E0:D3:35:BC:0D:6B:A1:09:A1:07:CC:90 Authority key identifier: F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15 Certificate issuer: /CN=f04e3c322db11c10491e5e835fc66efd42e59015 Certificate serial: 019B4438E5AE137F9C3D11A7B37A2FDE8551 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft Manifest number: 1789 Signing time: Mon 22 Dec 2025 04:02:18 +0000 Manifest this update: Mon 22 Dec 2025 04:02:18 +0000 Manifest next update: Tue 23 Dec 2025 04:02:18 +0000 Files and hashes: 1: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl (hash: TWRnofmmJcACtYvH3t5f9P7szGwkpTLZ8Djj9tQZTPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:e5:ae:13:7f:9c:3d:11:a7:b3:7a:2f:de:85:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04e3c322db11c10491e5e835fc66efd42e59015 Validity Not Before: Dec 22 04:02:18 2025 GMT Not After : Dec 23 04:02:18 2025 GMT Subject: CN=6acfeeb0393fdaabe0d335bc0d6ba109a107cc90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:21:1a:87:a3:ab:07:c0:bf:14:3e:92:b9:70: b0:8c:18:ac:4d:3f:c3:08:f5:9c:d3:cc:98:65:76: 11:17:18:7d:72:5f:0a:6e:98:41:a1:1a:66:6e:0e: a2:2e:29:33:f2:8a:73:a0:49:66:32:0f:25:3a:c4: 3f:8b:31:72:0d:64:b6:54:5d:3b:c7:16:70:7a:a6: 64:da:70:e3:b0:72:75:e7:4a:c3:78:e8:00:64:22: b7:c2:3e:de:10:1c:f7:62:6c:01:77:fe:dd:b3:7f: f0:ac:8c:70:57:71:dc:df:6d:00:c0:71:74:92:4d: 5b:a9:a6:c4:99:17:fe:20:b7:d0:10:df:88:21:9d: 85:bb:fe:d6:d0:56:d4:e0:ef:47:64:e5:0d:94:d8: e6:07:c8:b1:66:a5:1b:c3:0e:e0:f7:7d:87:3f:b3: bb:ec:83:18:d2:93:fa:a5:f8:04:8d:7f:47:8c:d6: 84:00:01:1d:c1:d3:87:85:13:7c:e8:c1:87:85:9a: 62:76:c7:63:71:da:0d:22:e4:2c:fb:f9:f7:84:c5: 79:46:c3:f7:6c:24:e2:e9:68:98:a0:0c:ff:c4:3d: 93:4b:2f:fc:67:98:c7:71:47:9f:f7:14:75:0a:8e: f9:12:74:4a:d0:e9:0c:a2:eb:c2:ea:5d:48:ab:b9: 65:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CF:EE:B0:39:3F:DA:AB:E0:D3:35:BC:0D:6B:A1:09:A1:07:CC:90 X509v3 Authority Key Identifier: keyid:F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ab:47:81:bc:7e:1d:06:4f:8f:c1:74:5e:cc:9b:00:88:5c: 76:b0:03:e2:52:67:ce:19:71:01:34:21:ef:e6:7a:e5:f9:dc: 07:bd:df:a0:6d:9c:e0:4b:4a:a6:2e:36:d0:ed:6e:7e:15:4f: cd:81:a4:33:ed:d1:58:bc:75:7d:db:28:9f:23:c7:ae:bc:62: 8d:28:35:c5:c7:62:39:d3:1c:ec:48:29:1b:b0:c1:0e:15:68: 47:46:e4:c4:40:84:38:80:87:90:e7:22:48:62:14:4a:a2:ec: f1:3b:78:2a:b1:97:da:ec:6a:93:a7:26:06:e8:d7:57:ec:f4: 81:5f:b9:11:7f:26:ef:ee:30:e4:75:5e:47:7e:f8:69:ef:42: cd:bd:e9:a7:2f:b8:3f:e5:90:fd:e6:38:14:83:fa:c0:4e:ae: 99:0b:82:a1:5f:1f:fb:a0:c9:9e:e3:58:3f:d6:87:00:b7:8c: d2:7b:3f:37:7f:fd:88:ee:e4:07:98:95:42:9d:2d:35:ea:45: b5:26:3a:0e:3b:06:6f:8d:cc:0a:6e:31:e6:c9:a7:ae:63:c4: c4:c3:3a:40:90:e5:c6:eb:3f:c6:18:35:ea:c9:c9:5c:4c:e5: 09:08:ae:6b:50:55:93:bf:37:95:7b:30:b7:28:bb:fb:76:a5: cb:67:b5:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOOWuE3+cPRGns3ov3oVRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGUzYzMyMmRiMTFjMTA0OTFlNWU4MzVmYzY2ZWZkNDJl NTkwMTUwHhcNMjUxMjIyMDQwMjE4WhcNMjUxMjIzMDQwMjE4WjAzMTEwLwYDVQQD Eyg2YWNmZWViMDM5M2ZkYWFiZTBkMzM1YmMwZDZiYTEwOWExMDdjYzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SEah6OrB8C/FD6SuXCwjBisTT/D CPWc08yYZXYRFxh9cl8KbphBoRpmbg6iLikz8opzoElmMg8lOsQ/izFyDWS2VF07 xxZweqZk2nDjsHJ150rDeOgAZCK3wj7eEBz3YmwBd/7ds3/wrIxwV3Hc320AwHF0 kk1bqabEmRf+ILfQEN+IIZ2Fu/7W0FbU4O9HZOUNlNjmB8ixZqUbww7g932HP7O7 7IMY0pP6pfgEjX9HjNaEAAEdwdOHhRN86MGHhZpidsdjcdoNIuQs+/n3hMV5RsP3 bCTi6WiYoAz/xD2TSy/8Z5jHcUef9xR1Co75EnRK0OkMouvC6l1Iq7ll+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrP7rA5P9qr4NM1vA1roQmhB8yQMB8GA1UdIwQY MBaAFPBOPDItsRwQSR5eg1/Gbv1C5ZAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEU0OE1pMnhIQkJKSGw2RFg4WnVfVUxsa0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mNzZkNGYtZjQxZi00OTA1LWJlYzct ZTY3MGUzZGQ1YzIxLzEvOEU0OE1pMnhIQkJKSGw2RFg4WnVfVUxsa0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9mNzZkNGYtZjQxZi00OTA1LWJlYzctZTY3MGUzZGQ1YzIx LzEvOEU0OE1pMnhIQkJKSGw2RFg4WnVfVUxsa0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6tHgbx+ HQZPj8F0XsybAIhcdrAD4lJnzhlxATQh7+Z65fncB73foG2c4EtKpi420O1ufhVP zYGkM+3RWLx1fdsonyPHrrxijSg1xcdiOdMc7EgpG7DBDhVoR0bkxECEOICHkOci SGIUSqLs8Tt4KrGX2uxqk6cmBujXV+z0gV+5EX8m7+4w5HVeR374ae9Czb3ppy+4 P+WQ/eY4FIP6wE6umQuCoV8f+6DJnuNYP9aHALeM0ns/N3/9iO7kB5iVQp0tNepF tSY6DjsGb43MCm4x5smnrmPExMM6QJDlxus/xhg16snJXEzlCQiua1BVk783lXsw tyi7+3aly2e1/A== -----END CERTIFICATE-----Generated at Mon Dec 22 07:55:36 2025 by rpki-client