This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft File: 8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft (raw, json) Hash identifier: ouo7uNZhzti8PLCyP3MuHr6r/b5IsT31BjYT54/RMZ8= Subject key identifier: 9A:65:DE:B9:5C:F8:E1:D4:30:95:89:90:6D:08:5D:3E:D2:5D:E1:BD Authority key identifier: F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC Certificate issuer: /CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc Certificate serial: 019B424A437825B0E5155BB319AFFD0524CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft Manifest number: 16E4 Signing time: Sun 21 Dec 2025 19:02:01 +0000 Manifest this update: Sun 21 Dec 2025 19:02:01 +0000 Manifest next update: Mon 22 Dec 2025 19:02:01 +0000 Files and hashes: 1: 8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl (hash: vb/bzYbV0o/c8ZaLIj3PcScrv9lZyH1DVLXGoHqdRQo=) 2: C3nJIzqXqtfT9J07ejsBxjCr7Es.roa (hash: 0iPZreySqxS1TmgmvlfhSgIdLiwkUUv4lfeOkL5knpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:43:78:25:b0:e5:15:5b:b3:19:af:fd:05:24:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc Validity Not Before: Dec 21 19:02:01 2025 GMT Not After : Dec 22 19:02:01 2025 GMT Subject: CN=9a65deb95cf8e1d4309589906d085d3ed25de1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d5:c6:08:46:ec:79:d5:56:00:1c:a7:88:46: 36:fb:73:a4:c0:79:64:bc:14:5c:4a:8e:7c:47:39: e2:40:9a:6c:a9:54:d7:c3:19:28:09:69:6c:dc:7b: 36:96:ff:67:58:23:04:a0:93:c1:30:ee:ba:2a:90: a5:d5:d2:a2:bd:da:78:ce:b4:d5:57:40:4d:02:dd: 22:ea:a5:66:69:f1:46:84:e8:a9:94:8e:ec:01:3b: 1e:42:cd:20:c7:d8:69:bf:a6:22:5a:0b:58:85:47: 09:d2:e3:eb:1a:cf:35:70:d8:62:1d:01:0e:b4:84: a3:ff:d5:a7:2a:4e:d7:1c:c0:ea:36:e0:d2:b4:eb: 85:0d:41:c1:68:10:32:2c:55:32:04:04:ee:4e:49: 72:cf:30:85:fb:7c:74:70:d1:0d:f3:bd:50:9b:f5: d0:b6:2b:5a:60:18:7e:60:59:c2:9e:e1:0d:e7:59: b3:38:12:20:2a:38:6c:df:74:33:a4:92:58:5f:d4: 90:42:3f:d8:ee:3b:8f:ee:89:7d:9e:66:90:6a:19: cf:97:1d:74:93:48:9a:e5:21:2c:75:47:93:16:7b: 7c:0c:2d:6d:d2:d5:c3:39:60:c5:ed:c7:3a:8f:bb: 7f:d3:ff:7a:29:6c:66:a1:e7:96:a8:55:ef:3d:cc: 12:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:65:DE:B9:5C:F8:E1:D4:30:95:89:90:6D:08:5D:3E:D2:5D:E1:BD X509v3 Authority Key Identifier: keyid:F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7b:1b:da:36:b8:d2:64:27:73:42:06:7d:96:6f:26:cd:c6: 6e:70:34:75:32:2a:2f:61:11:64:f8:ce:0d:c7:35:5b:b8:ac: 8e:47:63:fc:ae:3e:20:40:9c:40:6c:e0:a5:69:8b:2d:05:03: 4c:6e:6e:ec:6d:55:0c:99:24:2c:42:a4:29:46:4b:03:b5:ea: 53:c0:59:8e:d3:3d:a6:17:b3:fc:c6:90:86:ef:fd:18:b7:53: 3d:4d:f1:61:0f:a7:02:38:19:70:e6:2b:af:57:0a:82:eb:08: 82:8a:c4:1b:c7:11:84:47:9e:bc:2a:47:ae:0c:56:1d:c0:16: be:e4:15:0d:91:c1:13:fe:c5:29:ad:a8:0b:8f:97:f9:90:da: cf:e4:14:6e:59:6d:eb:ef:e8:db:04:61:ea:6e:89:6d:4b:75: 4e:68:04:62:c1:00:58:96:8c:13:e1:ef:de:29:61:1b:3a:80: ea:13:cd:1c:57:ac:fe:56:1b:9a:ce:8a:f9:43:0c:44:64:88: 54:81:f9:1b:13:32:2d:3f:d3:0c:78:33:8f:0f:f1:3c:b1:ee: bf:4e:85:3e:ac:c0:c7:d0:0c:2b:e9:68:56:42:53:34:f8:c0: aa:a9:3d:e7:ba:9b:1d:a1:83:19:68:16:b9:24:f9:00:65:6a: d8:ac:47:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSkN4JbDlFVuzGa/9BSTLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZWY2YTZjZmNlMzQzZjkxNGM5YWQ5NGMzNDEwZGEwMGE3 Y2QxY2MwHhcNMjUxMjIxMTkwMjAxWhcNMjUxMjIyMTkwMjAxWjAzMTEwLwYDVQQD Eyg5YTY1ZGViOTVjZjhlMWQ0MzA5NTg5OTA2ZDA4NWQzZWQyNWRlMWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtXGCEbsedVWAByniEY2+3OkwHlk vBRcSo58RzniQJpsqVTXwxkoCWls3Hs2lv9nWCMEoJPBMO66KpCl1dKivdp4zrTV V0BNAt0i6qVmafFGhOiplI7sATseQs0gx9hpv6YiWgtYhUcJ0uPrGs81cNhiHQEO tISj/9WnKk7XHMDqNuDStOuFDUHBaBAyLFUyBATuTklyzzCF+3x0cNEN871Qm/XQ titaYBh+YFnCnuEN51mzOBIgKjhs33QzpJJYX9SQQj/Y7juP7ol9nmaQahnPlx10 k0ia5SEsdUeTFnt8DC1t0tXDOWDF7cc6j7t/0/96KWxmoeeWqFXvPcwS2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpl3rlc+OHUMJWJkG0IXT7SXeG9MB8GA1UdIwQY MBaAFPPvamz840P5FMmtlMNBDaAKfNHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOC05cWJQempRX2tVeWEyVXcwRU5vQXA4MGN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85MzNlZGMtMjMwZi00YmZjLWJjNDct MmM0NzYzZDY0ZDQzLzEvOC05cWJQempRX2tVeWEyVXcwRU5vQXA4MGN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi85MzNlZGMtMjMwZi00YmZjLWJjNDctMmM0NzYzZDY0ZDQz LzEvOC05cWJQempRX2tVeWEyVXcwRU5vQXA4MGN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHsb2ja4 0mQnc0IGfZZvJs3GbnA0dTIqL2ERZPjODcc1W7isjkdj/K4+IECcQGzgpWmLLQUD TG5u7G1VDJkkLEKkKUZLA7XqU8BZjtM9phez/MaQhu/9GLdTPU3xYQ+nAjgZcOYr r1cKgusIgorEG8cRhEeevCpHrgxWHcAWvuQVDZHBE/7FKa2oC4+X+ZDaz+QUbllt 6+/o2wRh6m6JbUt1TmgEYsEAWJaME+Hv3ilhGzqA6hPNHFes/lYbms6K+UMMRGSI VIH5GxMyLT/TDHgzjw/xPLHuv06FPqzAx9AMK+loVkJTNPjAqqk957qbHaGDGWgW uST5AGVq2KxHJQ== -----END CERTIFICATE-----Generated at Sun Dec 21 20:33:07 2025 by rpki-client