This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft File: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft (raw, json) Hash identifier: /HoPIbwwJkXELSuHt6S+SOuL+cdrAQCYqdetSx3dobE= Subject key identifier: 83:4B:16:73:2E:93:2A:8C:54:01:B2:D6:62:B6:D1:7E:8D:32:FC:43 Authority key identifier: F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27 Certificate issuer: /CN=f1307479f991b5043b7d37f7f8fd90466a2abf27 Certificate serial: 019B50E0A8BCCC7661C19D542F2925B7BC31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft Manifest number: 0937 Signing time: Wed 24 Dec 2025 15:00:59 +0000 Manifest this update: Wed 24 Dec 2025 15:00:59 +0000 Manifest next update: Thu 25 Dec 2025 15:00:59 +0000 Files and hashes: 1: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl (hash: +C6XE1R0nEycE3i01mvVtINUGWX/KII5buwak1jBHzw=) 2: DReP9bc0zwfbsr8Nie7Lz--WV3I.roa (hash: bjq88usQ48nTatb5B4QsLmgQZv99AHE50C/OVUr97Og=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:a8:bc:cc:76:61:c1:9d:54:2f:29:25:b7:bc:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1307479f991b5043b7d37f7f8fd90466a2abf27 Validity Not Before: Dec 24 15:00:59 2025 GMT Not After : Dec 25 15:00:59 2025 GMT Subject: CN=834b16732e932a8c5401b2d662b6d17e8d32fc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:46:ef:da:0b:17:bb:a9:50:6b:6f:f7:f9:32: 87:7b:34:e2:9f:75:a3:a0:c1:66:e7:f2:47:2d:3b: cf:ad:13:c7:de:37:41:6b:86:d0:d0:f9:db:e3:e8: 2e:50:53:65:a0:ff:06:5d:b4:cf:a0:ce:a4:f9:58: 0e:a4:0d:de:03:b3:e2:9e:41:b8:ef:71:0c:7f:af: 7b:b6:06:f7:9a:8c:20:c5:df:56:30:d1:58:1a:04: 89:b7:5a:70:d4:39:f6:73:4f:78:34:2e:91:cb:e8: c4:83:e4:c8:23:08:a6:13:7c:96:29:97:c1:85:38: a6:21:e0:90:a9:87:01:37:b2:d5:48:3f:5b:36:fb: 55:73:91:5a:16:f3:4a:fe:cc:67:69:22:45:53:f1: 62:61:20:22:95:59:e8:8e:c1:99:6d:12:3d:e0:49: 34:2b:e2:16:22:04:c3:cc:d4:39:9b:fd:0b:de:d2: a4:db:93:46:27:9f:2a:7f:fb:36:74:07:f8:41:2e: c5:d1:4b:bd:8d:5b:d0:e6:5e:08:7f:7e:a8:9b:84: e2:32:7e:30:89:82:2f:2e:13:6a:dd:0f:b1:52:95: e4:38:7c:17:2b:a1:7d:9f:81:b7:fc:e2:e0:0c:06: ea:24:11:3f:26:83:0d:2a:55:a7:9f:e5:2c:2c:53: 9c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4B:16:73:2E:93:2A:8C:54:01:B2:D6:62:B6:D1:7E:8D:32:FC:43 X509v3 Authority Key Identifier: keyid:F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:5e:0b:fd:6a:10:b6:c7:64:a2:47:3f:07:c6:ac:a5:38:76: c1:b8:31:fb:95:7c:dd:27:5d:c6:06:f2:3d:16:61:64:b3:4e: e5:b8:07:d5:44:f5:dd:95:4f:8c:bf:05:ba:55:7c:09:06:86: 53:88:61:28:32:d1:82:07:cf:a1:d8:2a:c2:9b:23:93:23:bb: 5a:01:51:a8:5a:f4:c9:a3:48:b0:89:14:d5:0a:96:25:d9:63: 71:14:15:2a:81:15:6c:4d:15:db:f4:3a:c5:79:0d:aa:2c:db: 1d:f8:b0:f5:3a:93:93:4f:f3:88:85:cc:f9:a5:16:22:8b:32: a8:67:b9:58:a3:23:9a:00:96:62:ce:ff:65:6c:d4:1d:6b:8b: ca:f1:d1:d0:67:5b:6e:a7:f1:e1:15:4c:66:3c:23:0c:9a:85: ca:ed:1e:bb:9c:1b:6c:41:c6:85:39:47:ae:68:91:19:5a:6f: fb:e9:0d:f9:0b:0f:25:6f:74:42:ca:18:2e:e5:7a:fb:ea:49: f0:01:d2:a6:53:66:da:fa:90:76:b0:b7:0c:a6:41:e4:63:df: e4:a9:07:db:63:da:e9:75:73:6d:e2:68:e3:e7:63:b9:25:01: fe:99:fd:90:a8:d4:3f:b3:54:2e:37:52:a8:5c:4d:cc:62:5f: 8b:84:a8:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4Ki8zHZhwZ1ULyklt7wxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzA3NDc5Zjk5MWI1MDQzYjdkMzdmN2Y4ZmQ5MDQ2NmEy YWJmMjcwHhcNMjUxMjI0MTUwMDU5WhcNMjUxMjI1MTUwMDU5WjAzMTEwLwYDVQQD Eyg4MzRiMTY3MzJlOTMyYThjNTQwMWIyZDY2MmI2ZDE3ZThkMzJmYzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20bv2gsXu6lQa2/3+TKHezTin3Wj oMFm5/JHLTvPrRPH3jdBa4bQ0Pnb4+guUFNloP8GXbTPoM6k+VgOpA3eA7PinkG4 73EMf697tgb3mowgxd9WMNFYGgSJt1pw1Dn2c094NC6Ry+jEg+TIIwimE3yWKZfB hTimIeCQqYcBN7LVSD9bNvtVc5FaFvNK/sxnaSJFU/FiYSAilVnojsGZbRI94Ek0 K+IWIgTDzNQ5m/0L3tKk25NGJ58qf/s2dAf4QS7F0Uu9jVvQ5l4If36om4TiMn4w iYIvLhNq3Q+xUpXkOHwXK6F9n4G3/OLgDAbqJBE/JoMNKlWnn+UsLFOc7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINLFnMukyqMVAGy1mK20X6NMvxDMB8GA1UdIwQY MBaAFPEwdHn5kbUEO3039/j9kEZqKr8nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRCMGVmbVJ0UVE3ZlRmMy1QMlFSbW9xdnljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy81NGQ0NDUtYTMwNy00OTg3LThiNjgt YjZhYTBiODkyMGU1LzEvOFRCMGVmbVJ0UVE3ZlRmMy1QMlFSbW9xdnljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy81NGQ0NDUtYTMwNy00OTg3LThiNjgtYjZhYTBiODkyMGU1 LzEvOFRCMGVmbVJ0UVE3ZlRmMy1QMlFSbW9xdnljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZV4L/WoQ tsdkokc/B8aspTh2wbgx+5V83SddxgbyPRZhZLNO5bgH1UT13ZVPjL8FulV8CQaG U4hhKDLRggfPodgqwpsjkyO7WgFRqFr0yaNIsIkU1QqWJdljcRQVKoEVbE0V2/Q6 xXkNqizbHfiw9TqTk0/ziIXM+aUWIosyqGe5WKMjmgCWYs7/ZWzUHWuLyvHR0Gdb bqfx4RVMZjwjDJqFyu0eu5wbbEHGhTlHrmiRGVpv++kN+QsPJW90QsoYLuV6++pJ 8AHSplNm2vqQdrC3DKZB5GPf5KkH22Pa6XVzbeJo4+djuSUB/pn9kKjUP7NULjdS qFxNzGJfi4So7w== -----END CERTIFICATE-----Generated at Wed Dec 24 21:47:41 2025 by rpki-client