This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft File: 8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json) Hash identifier: Wq5PnJ/jHgPo+p8bu/+Q6itfq9/PHODdrHJyILlv+rQ= Subject key identifier: 39:6C:35:56:46:5F:07:0F:02:84:09:60:B7:5D:B8:87:C1:28:75:F0 Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A Certificate issuer: /CN=f06de29e9356df44707c8396d918e6b289129c4a Certificate serial: 019B4EBB9D176208B35E53DE76CB5165C1A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft Manifest number: 02F4 Signing time: Wed 24 Dec 2025 05:01:16 +0000 Manifest this update: Wed 24 Dec 2025 05:01:16 +0000 Manifest next update: Thu 25 Dec 2025 05:01:16 +0000 Files and hashes: 1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: 99Y7q/oy2PnFXv45MJCVTpveB/SXxvUpsrovTakcOFc=) 2: FruHS8sKA0UVPBPUKiJYlzj46rI.roa (hash: If8vnhAP47c8P1zX/kOfX6rctIeesg8CbkDyipSuox4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:9d:17:62:08:b3:5e:53:de:76:cb:51:65:c1:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a Validity Not Before: Dec 24 05:01:16 2025 GMT Not After : Dec 25 05:01:16 2025 GMT Subject: CN=396c3556465f070f02840960b75db887c12875f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:60:8a:0b:90:b0:ac:b5:ba:36:00:50:ae:a6: 5c:58:9a:6b:26:0e:e9:0a:a6:ef:b7:b5:d3:e2:f9: af:a8:6b:87:a1:7c:73:05:c5:1f:5d:4c:54:82:8d: 8a:ad:4b:43:79:7a:b7:ea:c6:ce:25:ab:ad:2b:18: ad:c4:a3:a8:24:16:e1:7f:28:31:08:43:c0:af:08: be:58:30:98:2e:5c:cb:6e:7a:ee:1e:b2:73:75:ed: 29:a4:0b:f7:a4:c2:6a:ce:87:30:4b:1a:46:eb:55: 28:49:88:85:09:04:e9:58:61:d8:ee:84:af:ce:bf: b3:bb:2f:24:d7:3d:91:76:8d:dc:a2:79:95:64:60: 2f:64:60:59:4d:3d:14:f1:7f:dd:ef:4a:f4:be:e3: 97:51:de:d6:f4:32:33:10:f3:69:a8:02:25:97:f3: d8:a9:1d:0e:44:bb:fa:8d:f7:c3:2a:fe:c2:84:d9: d8:ed:16:c6:11:0d:4b:b6:0b:a0:6f:45:b2:fa:3b: c7:59:19:63:b5:82:13:12:06:ff:dc:87:4f:88:0e: 82:0c:85:7c:3d:0a:33:91:59:1c:8a:0c:ff:4d:5c: df:08:5e:1e:6d:e4:7d:a0:02:a0:a8:5a:0d:89:0d: ff:ef:b3:25:a4:6b:e8:a3:85:3c:40:52:15:d8:d9: a8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6C:35:56:46:5F:07:0F:02:84:09:60:B7:5D:B8:87:C1:28:75:F0 X509v3 Authority Key Identifier: keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6f:52:51:65:4d:09:78:23:99:ad:28:04:05:84:2e:3b:95: 4a:c1:84:6b:3c:c4:c4:a1:a1:4c:df:a8:fa:ef:7d:b9:39:a8: 64:7a:e3:90:87:11:f1:a0:72:0c:53:93:e7:9a:bb:a8:6f:d7: 35:dc:69:c9:c9:17:54:ce:73:44:7f:0d:c9:22:f2:43:f7:24: 32:61:9c:c1:63:2f:b5:e4:62:1b:de:8b:43:c6:ae:57:db:b9: 5b:08:a3:9f:2b:02:65:b5:d3:51:5b:30:27:66:24:73:19:c8: 24:2c:52:c4:b9:cd:af:0f:e0:73:d0:be:cc:b3:77:1b:1c:02: 88:d4:1e:0b:47:c7:59:70:d7:cc:c6:34:89:ee:27:27:fd:2c: 5f:6c:d9:41:73:a5:1f:ea:4b:42:63:6d:7a:71:b2:92:55:b0: 93:05:34:d4:2e:d5:83:a7:e7:2c:af:d7:85:87:38:c3:30:28: 96:06:f0:b8:3e:13:98:4a:ba:c7:3f:75:b4:56:e2:6f:a3:77: 51:2a:55:4b:9a:08:4b:3a:a2:52:02:d5:df:dc:d7:ed:29:c2: be:65:43:a3:77:eb:6b:3b:49:1c:ac:c8:bd:5c:1f:dc:b4:f0: 34:28:21:95:4f:80:17:b9:e8:b4:5c:2a:98:b2:53:33:9b:ca: ef:b8:5b:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu50XYgizXlPedstRZcGjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNmRlMjllOTM1NmRmNDQ3MDdjODM5NmQ5MThlNmIyODkx MjljNGEwHhcNMjUxMjI0MDUwMTE2WhcNMjUxMjI1MDUwMTE2WjAzMTEwLwYDVQQD EygzOTZjMzU1NjQ2NWYwNzBmMDI4NDA5NjBiNzVkYjg4N2MxMjg3NWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWCKC5CwrLW6NgBQrqZcWJprJg7p Cqbvt7XT4vmvqGuHoXxzBcUfXUxUgo2KrUtDeXq36sbOJautKxitxKOoJBbhfygx CEPArwi+WDCYLlzLbnruHrJzde0ppAv3pMJqzocwSxpG61UoSYiFCQTpWGHY7oSv zr+zuy8k1z2Rdo3conmVZGAvZGBZTT0U8X/d70r0vuOXUd7W9DIzEPNpqAIll/PY qR0ORLv6jffDKv7ChNnY7RbGEQ1Ltgugb0Wy+jvHWRljtYITEgb/3IdPiA6CDIV8 PQozkVkcigz/TVzfCF4ebeR9oAKgqFoNiQ3/77MlpGvoo4U8QFIV2NmotQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlsNVZGXwcPAoQJYLdduIfBKHXwMB8GA1UdIwQY MBaAFPBt4p6TVt9EcHyDltkY5rKJEpxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lNDRkNTgtMTVkNS00OGM3LWJlMjEt ZjgxNmQzYmU0MDEyLzEvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lNDRkNTgtMTVkNS00OGM3LWJlMjEtZjgxNmQzYmU0MDEy LzEvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGm9SUWVN CXgjma0oBAWELjuVSsGEazzExKGhTN+o+u99uTmoZHrjkIcR8aByDFOT55q7qG/X NdxpyckXVM5zRH8NySLyQ/ckMmGcwWMvteRiG96LQ8auV9u5WwijnysCZbXTUVsw J2YkcxnIJCxSxLnNrw/gc9C+zLN3GxwCiNQeC0fHWXDXzMY0ie4nJ/0sX2zZQXOl H+pLQmNtenGyklWwkwU01C7Vg6fnLK/XhYc4wzAolgbwuD4TmEq6xz91tFbib6N3 USpVS5oISzqiUgLV39zX7SnCvmVDo3fraztJHKzIvVwf3LTwNCghlU+AF7notFwq mLJTM5vK77hb+A== -----END CERTIFICATE-----Generated at Wed Dec 24 08:47:24 2025 by rpki-client