This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft File: 8_N8e7MVIGk0AdPGVyftXKpx3kM.mft (raw, json) Hash identifier: g0z9bO4FvGAbh1mPhupfJ3qOeXu42eIPbkOErdPBKfw= Subject key identifier: DE:E7:1A:90:CB:18:76:E1:EE:1E:FE:69:4A:40:F2:70:31:08:0E:DE Authority key identifier: F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43 Certificate issuer: /CN=f3f37c7bb31520693401d3c65727ed5caa71de43 Certificate serial: 019B32D83B00F6784ED08BF6192B6252C74F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 19:03:10 +0000 Manifest this update: Thu 18 Dec 2025 19:03:10 +0000 Manifest next update: Fri 19 Dec 2025 19:03:10 +0000 Files and hashes: 1: 8_N8e7MVIGk0AdPGVyftXKpx3kM.crl (hash: ee1XT8IDQORKnQPQrHsiAk2Ig1bBPu7vfx2LTrX58Zs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d8:3b:00:f6:78:4e:d0:8b:f6:19:2b:62:52:c7:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3f37c7bb31520693401d3c65727ed5caa71de43 Validity Not Before: Dec 18 19:03:10 2025 GMT Not After : Dec 19 19:03:10 2025 GMT Subject: CN=dee71a90cb1876e1ee1efe694a40f27031080ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:eb:47:1e:1c:34:85:19:3a:61:1b:ad:31:d9: 59:b6:dc:2e:94:08:e4:1d:92:7e:2b:52:aa:a8:d7: 9a:16:b1:3e:fa:5a:71:92:ad:5d:6f:dc:91:a4:8c: 1b:22:77:55:2e:32:c8:68:f1:3a:5a:2c:50:6d:5e: d7:18:bf:62:9c:c4:59:58:86:e1:12:10:ab:bc:01: 16:a6:77:bf:a5:b4:4b:3c:16:25:7b:d6:fa:a1:8a: 7a:7e:85:9c:fc:39:a1:51:01:5e:2a:08:2a:f1:77: eb:de:b9:d2:d0:85:66:c8:05:aa:fb:d8:6b:f3:49: ff:2c:46:0c:2f:29:47:b6:7b:de:cb:96:f3:06:44: cf:1d:c2:8b:7a:8e:e1:ca:51:fd:5f:42:43:37:d8: 3b:8a:ff:9b:c1:43:a9:98:17:82:ff:d5:af:af:f7: 55:25:98:ea:02:b2:f9:67:5d:b7:18:66:bd:b5:d4: ee:3a:c7:1d:4c:1a:58:1b:fd:06:c9:0f:a0:ed:0f: bb:40:b3:e0:2e:a4:40:bd:01:96:ea:9f:71:86:e5: e9:0b:fa:c0:41:db:47:4c:04:63:9d:f3:9e:05:ff: 27:08:3b:04:12:e2:f9:d2:e9:2b:9b:ce:ce:54:6e: 26:ce:0e:c5:a6:7f:8e:0a:f2:ea:e1:d4:17:d2:cb: 5b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E7:1A:90:CB:18:76:E1:EE:1E:FE:69:4A:40:F2:70:31:08:0E:DE X509v3 Authority Key Identifier: keyid:F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d0:b9:6c:b8:28:4f:1c:b9:94:e7:34:77:91:4a:ac:fc:65: 60:06:fd:59:05:ef:cb:54:52:e5:b9:6f:3a:dc:f9:89:a0:4b: 4d:b5:3d:ab:09:1b:bb:c9:8a:9e:52:17:0f:59:7a:6c:0e:36: 30:2e:ac:a6:b0:8a:e8:ff:c8:00:fe:25:77:ea:44:9e:be:6a: 84:e7:9c:fd:da:58:c0:3a:b0:2c:39:48:86:e3:9a:29:f3:b1: 92:14:68:f2:bc:83:70:b0:60:fa:01:4e:26:89:8c:e4:9d:e6: 3e:16:95:06:f8:03:08:c7:46:24:67:39:b9:1d:6b:f5:9d:19: c9:df:06:84:49:44:05:70:1c:37:88:db:b4:10:d1:e6:03:e8: ba:b9:bd:f7:55:d4:c0:38:8d:44:cf:62:6e:29:f8:48:f0:b9: 3f:ca:40:cb:46:9a:48:bf:c8:ab:e6:05:52:ce:9d:61:72:5a: 42:8f:7e:82:39:04:f8:09:04:62:56:18:dc:dc:e3:5b:3f:a8: e0:c3:92:62:ba:9b:77:53:59:c8:d1:9b:a9:dc:88:21:71:03: b3:da:ae:4e:4d:8c:75:62:00:f8:ff:6e:22:21:e0:a5:93:e9: b6:e4:c9:47:af:02:fe:88:df:74:b0:36:d1:85:52:15:70:6d: 21:9f:0d:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy2DsA9nhO0Iv2GStiUsdPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZjM3YzdiYjMxNTIwNjkzNDAxZDNjNjU3MjdlZDVjYWE3 MWRlNDMwHhcNMjUxMjE4MTkwMzEwWhcNMjUxMjE5MTkwMzEwWjAzMTEwLwYDVQQD EyhkZWU3MWE5MGNiMTg3NmUxZWUxZWZlNjk0YTQwZjI3MDMxMDgwZWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqutHHhw0hRk6YRutMdlZttwulAjk HZJ+K1KqqNeaFrE++lpxkq1db9yRpIwbIndVLjLIaPE6WixQbV7XGL9inMRZWIbh EhCrvAEWpne/pbRLPBYle9b6oYp6foWc/DmhUQFeKggq8Xfr3rnS0IVmyAWq+9hr 80n/LEYMLylHtnvey5bzBkTPHcKLeo7hylH9X0JDN9g7iv+bwUOpmBeC/9Wvr/dV JZjqArL5Z123GGa9tdTuOscdTBpYG/0GyQ+g7Q+7QLPgLqRAvQGW6p9xhuXpC/rA QdtHTARjnfOeBf8nCDsEEuL50ukrm87OVG4mzg7Fpn+OCvLq4dQX0stbFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7nGpDLGHbh7h7+aUpA8nAxCA7eMB8GA1UdIwQY MBaAFPPzfHuzFSBpNAHTxlcn7Vyqcd5DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOF9OOGU3TVZJR2swQWRQR1Z5ZnRYS3B4M2tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xYjdmOTgtNjM2OS00Njc2LTkyYzMt ZDM1ZThmYjQ2ZWJmLzEvOF9OOGU3TVZJR2swQWRQR1Z5ZnRYS3B4M2tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xYjdmOTgtNjM2OS00Njc2LTkyYzMtZDM1ZThmYjQ2ZWJm LzEvOF9OOGU3TVZJR2swQWRQR1Z5ZnRYS3B4M2tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdC5bLgo Txy5lOc0d5FKrPxlYAb9WQXvy1RS5blvOtz5iaBLTbU9qwkbu8mKnlIXD1l6bA42 MC6sprCK6P/IAP4ld+pEnr5qhOec/dpYwDqwLDlIhuOaKfOxkhRo8ryDcLBg+gFO JomM5J3mPhaVBvgDCMdGJGc5uR1r9Z0Zyd8GhElEBXAcN4jbtBDR5gPourm991XU wDiNRM9ibin4SPC5P8pAy0aaSL/Iq+YFUs6dYXJaQo9+gjkE+AkEYlYY3NzjWz+o 4MOSYrqbd1NZyNGbqdyIIXEDs9quTk2MdWIA+P9uIiHgpZPptuTJR68C/ojfdLA2 0YVSFXBtIZ8NDA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:47:44 2025 by rpki-client