This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft File: 8IcQ5uJObWm9XESv6vDunGftOgY.mft (raw, json) Hash identifier: S9Gn7X/1wItMlhlQrmEITEKATpHJ3YjUeUFBarVPN58= Subject key identifier: 4A:86:13:9B:FE:3A:22:1A:7C:6D:EE:6A:1F:49:DB:50:9C:83:86:FD Authority key identifier: F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06 Certificate issuer: /CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06 Certificate serial: 019B3EDA90C95F7DA58DB84B2922254CA36A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 03:01:09 +0000 Manifest this update: Sun 21 Dec 2025 03:01:09 +0000 Manifest next update: Mon 22 Dec 2025 03:01:09 +0000 Files and hashes: 1: 8IcQ5uJObWm9XESv6vDunGftOgY.crl (hash: J2Jyd3d1fMQwiZEJuMotkIiveQQW5g0ADHTNCaV4PL0=) 2: GSeC1Rl6mpKFcoTMI2ji-UCz9Y4.roa (hash: PbjkP2/mvOpx2a2PbKu6Uf4IiG6ZwqTripEFW9PTXoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:90:c9:5f:7d:a5:8d:b8:4b:29:22:25:4c:a3:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06 Validity Not Before: Dec 21 03:01:09 2025 GMT Not After : Dec 22 03:01:09 2025 GMT Subject: CN=4a86139bfe3a221a7c6dee6a1f49db509c8386fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d8:c7:df:3e:0b:af:1f:de:97:86:02:f6:29: 23:6d:ad:ee:38:f5:5d:32:68:6e:e7:ec:3a:06:08: 0b:14:e3:48:e5:ac:1a:13:03:19:07:e1:62:49:32: 2c:1a:a1:20:2d:db:ee:fe:56:86:81:76:af:e5:1e: 86:e5:91:e4:29:f9:a1:40:8b:fd:2e:85:27:04:9c: bf:1e:30:55:54:d9:2c:75:3e:b4:a8:f7:dc:67:a2: 77:f3:e3:ac:e2:a9:0e:1a:ad:90:64:af:02:8b:ad: b8:93:75:01:b0:5b:24:fd:f0:e4:90:d5:b5:36:fc: 30:d8:dd:50:6d:ea:db:58:5b:d1:67:aa:68:8c:3f: 09:47:49:b6:94:93:21:75:e8:98:02:fc:23:0e:39: e7:3d:5d:80:2b:ae:d6:51:6b:00:b9:4d:9a:d7:7f: 89:c3:57:98:9e:9b:79:1c:c0:d9:bd:1d:4c:01:c4: a2:ef:81:f3:8a:24:32:fa:b0:60:62:09:2b:b2:cf: cd:11:af:f2:5d:86:e7:a2:75:94:04:13:98:33:2f: c4:6a:2d:d1:1a:25:7c:f1:5a:1a:49:9e:a0:e8:a9: 72:0e:b5:ce:b3:47:f0:d2:a1:04:13:6a:ca:7a:39: 93:a1:66:3a:ae:2b:c0:30:ca:46:ca:34:5e:20:eb: 34:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:86:13:9B:FE:3A:22:1A:7C:6D:EE:6A:1F:49:DB:50:9C:83:86:FD X509v3 Authority Key Identifier: keyid:F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:2b:52:7f:3c:6d:55:41:d5:46:f4:9a:02:2b:48:cf:bf:90: 5c:85:5c:e4:56:9e:3b:51:96:4f:78:e9:e6:51:04:70:a2:05: e9:a3:aa:94:b5:97:0f:28:76:a9:7b:95:94:ab:ab:44:01:fa: 77:ec:37:34:63:1f:9b:50:c4:7e:c9:5e:1b:e8:27:f5:04:9c: f7:99:82:43:f5:9d:dc:20:a6:e6:b3:fe:c5:07:58:04:d9:ff: 51:14:b6:69:63:2d:f6:e0:6f:41:63:3f:d8:1e:88:7b:14:48: c0:70:96:ce:83:d0:2e:c4:f3:ad:17:ba:4b:61:99:d4:b0:8f: a5:f9:83:94:9e:df:d1:42:ba:c7:e7:4e:38:73:29:71:36:96: 5d:80:37:fe:73:44:e6:9e:9c:01:6e:21:9f:62:0a:b8:23:a9: 94:47:d4:a2:c3:03:a0:32:28:97:83:f3:84:a5:ef:4e:d4:d3: 0a:cb:e0:b8:7e:fc:de:5b:c6:2f:f7:2b:48:83:e7:ef:dd:99: 5b:04:21:48:b1:de:26:b3:52:fe:67:89:e1:51:d0:5d:b6:94: fe:f9:ab:db:94:61:74:09:12:56:06:80:d8:82:36:a9:75:e1: 05:bc:f8:b5:30:ff:57:47:1b:0e:c7:89:d3:7b:42:3f:fd:20: 3b:85:1a:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2pDJX32ljbhLKSIlTKNqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwODcxMGU2ZTI0ZTZkNjliZDVjNDRhZmVhZjBlZTljNjdl ZDNhMDYwHhcNMjUxMjIxMDMwMTA5WhcNMjUxMjIyMDMwMTA5WjAzMTEwLwYDVQQD Eyg0YTg2MTM5YmZlM2EyMjFhN2M2ZGVlNmExZjQ5ZGI1MDljODM4NmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9jH3z4Lrx/el4YC9ikjba3uOPVd Mmhu5+w6BggLFONI5awaEwMZB+FiSTIsGqEgLdvu/laGgXav5R6G5ZHkKfmhQIv9 LoUnBJy/HjBVVNksdT60qPfcZ6J38+Os4qkOGq2QZK8Ci624k3UBsFsk/fDkkNW1 Nvww2N1QberbWFvRZ6pojD8JR0m2lJMhdeiYAvwjDjnnPV2AK67WUWsAuU2a13+J w1eYnpt5HMDZvR1MAcSi74HziiQy+rBgYgkrss/NEa/yXYbnonWUBBOYMy/Eai3R GiV88VoaSZ6g6KlyDrXOs0fw0qEEE2rKejmToWY6rivAMMpGyjReIOs0pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqGE5v+OiIafG3uah9J21Ccg4b9MB8GA1UdIwQY MBaAFPCHEObiTm1pvVxEr+rw7pxn7ToGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEljUTV1Sk9iV205WEVTdjZ2RHVuR2Z0T2dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi83YmJhZDQtZTE1YS00YmZkLWFiMzIt NzZlODY1ZTJjNGJkLzEvOEljUTV1Sk9iV205WEVTdjZ2RHVuR2Z0T2dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi83YmJhZDQtZTE1YS00YmZkLWFiMzItNzZlODY1ZTJjNGJk LzEvOEljUTV1Sk9iV205WEVTdjZ2RHVuR2Z0T2dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCtSfzxt VUHVRvSaAitIz7+QXIVc5FaeO1GWT3jp5lEEcKIF6aOqlLWXDyh2qXuVlKurRAH6 d+w3NGMfm1DEfsleG+gn9QSc95mCQ/Wd3CCm5rP+xQdYBNn/URS2aWMt9uBvQWM/ 2B6IexRIwHCWzoPQLsTzrRe6S2GZ1LCPpfmDlJ7f0UK6x+dOOHMpcTaWXYA3/nNE 5p6cAW4hn2IKuCOplEfUosMDoDIol4PzhKXvTtTTCsvguH783lvGL/crSIPn792Z WwQhSLHeJrNS/meJ4VHQXbaU/vmr25RhdAkSVgaA2II2qXXhBbz4tTD/V0cbDseJ 03tCP/0gO4Uakg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:52:18 2025 by rpki-client