This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft File: 08ixCjj4HGTiASB7_DVEwpcq9fM.mft (raw, json) Hash identifier: WmGeOReYpi7T6zKuSMwh1ujaq2Kv0GX4N+8TsqOSv0Q= Subject key identifier: 04:46:52:1F:28:4F:D2:A3:82:4B:FD:31:40:D4:CD:52:1B:FF:7F:3E Authority key identifier: D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3 Certificate issuer: /CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3 Certificate serial: 019B2B1D749E5C3187792B9AE553B24E9C90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft Manifest number: 113F Signing time: Wed 17 Dec 2025 07:01:49 +0000 Manifest this update: Wed 17 Dec 2025 07:01:49 +0000 Manifest next update: Thu 18 Dec 2025 07:01:49 +0000 Files and hashes: 1: 08ixCjj4HGTiASB7_DVEwpcq9fM.crl (hash: gztX8rQz0bcxjnqBOxbUzSpyW0x2fF0SDEaD0XLebqs=) 2: 0hYdVdTdrSs-d6BXtENWomMQM6A.roa (hash: Qi+45gX4AdRetJwFY+wBMXn8X8pOs16SCJ6qQzqdA+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:74:9e:5c:31:87:79:2b:9a:e5:53:b2:4e:9c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3 Validity Not Before: Dec 17 07:01:49 2025 GMT Not After : Dec 18 07:01:49 2025 GMT Subject: CN=0446521f284fd2a3824bfd3140d4cd521bff7f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f9:1d:fe:c6:2f:fa:e9:be:be:96:5d:ba:5f: 57:fc:8e:05:4a:ee:f0:c2:a8:e4:3c:fd:25:80:e3: b6:12:c5:33:99:a8:b2:77:a4:28:e5:22:2b:a1:fa: 53:36:8f:2f:92:a2:83:b5:75:e2:07:b2:52:bf:10: 8d:db:f5:6f:51:a2:8c:da:e0:32:2d:83:d0:6e:43: b8:77:cf:46:30:08:00:1e:05:f5:65:ec:56:aa:34: df:d8:d5:c6:e2:34:11:f6:7d:3f:78:21:ea:91:2f: 6c:2d:13:51:72:45:72:79:cc:27:54:27:ec:f0:3b: b6:16:7a:47:07:3f:48:23:d1:33:92:41:ef:1b:7c: e3:cd:89:89:a3:a1:de:fe:36:74:1c:d5:66:89:67: 66:31:16:90:eb:1f:84:c4:34:cb:a2:c1:97:06:4e: 67:37:e1:f0:90:93:cd:3a:e9:63:5b:7b:6d:ed:5c: 23:8c:5b:84:b8:35:17:16:8d:d8:71:3c:00:2f:4e: f9:8a:c5:56:04:c5:ea:ec:51:b0:a7:42:51:46:5e: 76:c7:f5:76:da:2a:47:cc:26:97:c9:d6:98:15:a0: e9:93:38:b6:5d:62:c7:56:6a:80:f9:1a:e1:fb:53: 57:69:e8:e8:66:ea:1d:28:5d:62:da:72:18:9d:ef: 85:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:46:52:1F:28:4F:D2:A3:82:4B:FD:31:40:D4:CD:52:1B:FF:7F:3E X509v3 Authority Key Identifier: keyid:D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:eb:82:a0:a5:15:f3:1a:8d:2b:3a:a1:46:56:9e:ce:c7:64: a5:a7:e1:4a:5d:f7:3c:26:57:8c:2b:2c:1e:81:1f:94:3f:6d: 49:45:77:09:33:8e:c6:bb:a1:72:fb:a6:06:82:76:03:95:c6: 64:98:d5:5d:22:22:c6:27:6d:ec:1e:26:45:a1:f1:04:0a:1b: 31:39:5a:3c:eb:06:9b:b8:48:9b:3c:7a:65:96:de:fc:d2:8e: 63:5e:83:2b:c0:5b:fe:dd:40:fa:2e:a1:bd:2d:ee:54:ea:9d: 20:5e:16:81:cd:4d:28:27:cd:52:56:19:b2:1e:fa:45:2d:af: af:ff:4a:e9:e9:7a:ec:ed:a9:0f:12:71:cf:c3:91:c2:63:c3: f2:05:0c:26:b2:7f:a0:4f:a3:4a:c2:5f:83:58:3d:bc:2c:a0: fb:e7:ec:a8:20:07:28:3e:9a:3a:30:00:7e:26:a0:80:4e:44: a5:6e:64:83:61:51:a4:f9:cf:85:60:c0:25:45:eb:e1:28:83: e3:62:4d:6e:56:26:f3:b4:b5:fb:8a:90:c6:36:01:2b:28:be: 43:98:2e:64:81:ce:60:1e:46:f7:89:6a:83:48:e1:68:f5:17: 21:13:ca:05:35:8a:d8:9c:94:b3:c6:3c:47:2d:fb:10:06:f5: 24:97:8b:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHXSeXDGHeSua5VOyTpyQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYzhiMTBhMzhmODFjNjRlMjAxMjA3YmZjMzU0NGMyOTcy YWY1ZjMwHhcNMjUxMjE3MDcwMTQ5WhcNMjUxMjE4MDcwMTQ5WjAzMTEwLwYDVQQD EygwNDQ2NTIxZjI4NGZkMmEzODI0YmZkMzE0MGQ0Y2Q1MjFiZmY3ZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/kd/sYv+um+vpZdul9X/I4FSu7w wqjkPP0lgOO2EsUzmaiyd6Qo5SIrofpTNo8vkqKDtXXiB7JSvxCN2/VvUaKM2uAy LYPQbkO4d89GMAgAHgX1ZexWqjTf2NXG4jQR9n0/eCHqkS9sLRNRckVyecwnVCfs 8Du2FnpHBz9II9EzkkHvG3zjzYmJo6He/jZ0HNVmiWdmMRaQ6x+ExDTLosGXBk5n N+HwkJPNOuljW3tt7VwjjFuEuDUXFo3YcTwAL075isVWBMXq7FGwp0JRRl52x/V2 2ipHzCaXydaYFaDpkzi2XWLHVmqA+Rrh+1NXaejoZuodKF1i2nIYne+FAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARGUh8oT9Kjgkv9MUDUzVIb/38+MB8GA1UdIwQY MBaAFNPIsQo4+Bxk4gEge/w1RMKXKvXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDhpeENqajRIR1RpQVNCN19EVkV3cGNxOWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82NGQ0ZDAtNmM5OC00ZWVjLWJiYTEt MzdhYTM1ZTY5ZGMxLzEvMDhpeENqajRIR1RpQVNCN19EVkV3cGNxOWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS82NGQ0ZDAtNmM5OC00ZWVjLWJiYTEtMzdhYTM1ZTY5ZGMx LzEvMDhpeENqajRIR1RpQVNCN19EVkV3cGNxOWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeuCoKUV 8xqNKzqhRlaezsdkpafhSl33PCZXjCssHoEflD9tSUV3CTOOxruhcvumBoJ2A5XG ZJjVXSIixidt7B4mRaHxBAobMTlaPOsGm7hImzx6ZZbe/NKOY16DK8Bb/t1A+i6h vS3uVOqdIF4Wgc1NKCfNUlYZsh76RS2vr/9K6el67O2pDxJxz8ORwmPD8gUMJrJ/ oE+jSsJfg1g9vCyg++fsqCAHKD6aOjAAfiaggE5EpW5kg2FRpPnPhWDAJUXr4SiD 42JNblYm87S1+4qQxjYBKyi+Q5guZIHOYB5G94lqg0jhaPUXIRPKBTWK2JyUs8Y8 Ry37EAb1JJeLew== -----END CERTIFICATE-----Generated at Wed Dec 17 13:29:01 2025 by rpki-client