This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json) Hash identifier: wcg91UmNXmKyW6Vh7NyxoyB4QEt9X0/mklN18g0D/Yk= Subject key identifier: B3:92:49:D3:5B:35:D7:52:C8:ED:BD:55:C8:4D:5A:7C:E7:69:A5:80 Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42 Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742 Certificate serial: 019B6241E91404FED6E67A4D5008DED4D589 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft Manifest number: 0DF7 Signing time: Sun 28 Dec 2025 00:00:45 +0000 Manifest this update: Sun 28 Dec 2025 00:00:45 +0000 Manifest next update: Mon 29 Dec 2025 00:00:45 +0000 Files and hashes: 1: 4eZ-orLf3Sw1i9FoVC_BgUuV6yY.roa (hash: Hm2QNZ0IWwgkGkpS2MI3Rx4rLkOrxRzbQrRfD6XRt60=) 2: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: j9UCRQcCpDCt+yUoeWlTBFci1rjkLfYt3oUFjHxukeA=) 3: PvG7RaoFWA1C7HlDkfB4Ix4UWSE.roa (hash: 3vQKjjJTEuiCPTgwApvaXGsOiHre5b8+kVP9FzsOJUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:41:e9:14:04:fe:d6:e6:7a:4d:50:08:de:d4:d5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742 Validity Not Before: Dec 28 00:00:45 2025 GMT Not After : Dec 29 00:00:45 2025 GMT Subject: CN=b39249d35b35d752c8edbd55c84d5a7ce769a580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fd:59:55:b3:ec:1b:ab:6d:00:4f:7a:f7:85: 6c:18:a2:17:87:2f:56:10:2c:4b:bf:db:f7:59:2a: 81:4c:5e:43:ec:63:7d:1e:eb:50:0a:bf:e1:34:c2: 61:14:42:5c:b7:90:45:b5:b7:cc:6f:69:c4:0e:29: f3:2d:51:02:b0:0a:14:3c:02:98:f6:e9:73:c9:cd: d1:dd:df:9e:92:f4:6c:06:58:e0:8d:1c:48:51:96: 0e:ef:57:08:43:a8:45:41:85:86:b2:08:d6:55:f2: d8:84:a7:c8:ad:d0:c3:a1:2a:fd:7b:ac:b7:26:d5: 46:48:2f:cd:bc:8d:5e:76:8b:7f:1a:24:db:96:7e: fc:68:36:78:09:0a:29:25:8a:a3:7b:13:94:8a:1b: 2e:66:20:18:e1:98:b7:40:49:c0:b9:04:fb:90:a2: 1a:b6:bc:c7:05:20:ca:97:5a:9b:29:92:74:6a:c7: 45:25:67:f7:f1:9a:6b:2a:3d:84:f2:d6:c2:b6:0a: 9d:35:d3:2a:cd:98:60:6e:64:eb:c5:76:1b:3a:0e: dc:92:41:48:ff:58:f7:8a:f4:0b:39:73:dc:c2:ec: cd:a8:1a:3b:48:a2:eb:d1:30:1b:6d:bd:cf:67:b7: 14:56:2f:f6:95:95:86:74:90:f6:ee:8e:41:37:b2: 3f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:92:49:D3:5B:35:D7:52:C8:ED:BD:55:C8:4D:5A:7C:E7:69:A5:80 X509v3 Authority Key Identifier: keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:94:a2:85:01:44:39:0c:34:1e:43:3f:da:d0:5d:21:77:a9: e1:b8:ea:62:84:4c:e8:e3:28:0b:b0:be:6d:35:b6:57:2c:74: 24:07:a3:6b:b3:13:e6:3f:03:ab:09:27:43:d4:45:4d:d1:c8: 69:33:c9:11:95:b8:02:92:1f:00:44:d8:11:71:52:10:4a:96: da:3e:6b:87:2a:8d:08:2f:38:33:94:72:f5:9c:0e:c5:05:da: ef:fa:4b:a4:f0:53:98:11:2e:89:ca:94:ed:cf:a0:e8:a1:dd: 49:92:2f:49:10:e2:2a:4c:ec:9e:58:ef:38:d7:96:09:4f:85: 2a:b4:70:85:ce:7d:76:b7:7b:52:4b:d8:f6:5a:6c:e8:95:82: 2e:f2:f0:7d:4b:06:87:8f:46:0a:2c:2d:3a:4a:e8:9d:4f:18: 0c:f6:db:3a:d8:fc:fe:37:2a:cc:16:5d:bf:67:05:dc:14:7c: 14:97:d7:ff:82:10:b6:fd:1e:ae:39:a0:a2:c5:cc:62:18:09: 0c:d2:4a:c5:23:5d:db:d3:c0:77:85:dc:b9:7d:9e:49:2e:0f: bc:b1:97:9a:40:e2:18:fa:71:ab:01:22:d0:2f:89:79:23:e8: 17:3e:cf:a8:54:a1:59:bd:5b:37:e7:4e:70:c9:fe:55:51:6e: 8f:92:e6:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiQekUBP7W5npNUAje1NWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyN2M5M2RkYjFhMTcxNTFjNTZmMjJkY2FmMzFkZDgyMjk0 NjM3NDIwHhcNMjUxMjI4MDAwMDQ1WhcNMjUxMjI5MDAwMDQ1WjAzMTEwLwYDVQQD EyhiMzkyNDlkMzViMzVkNzUyYzhlZGJkNTVjODRkNWE3Y2U3NjlhNTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP1ZVbPsG6ttAE9694VsGKIXhy9W ECxLv9v3WSqBTF5D7GN9HutQCr/hNMJhFEJct5BFtbfMb2nEDinzLVECsAoUPAKY 9ulzyc3R3d+ekvRsBljgjRxIUZYO71cIQ6hFQYWGsgjWVfLYhKfIrdDDoSr9e6y3 JtVGSC/NvI1edot/GiTbln78aDZ4CQopJYqjexOUihsuZiAY4Zi3QEnAuQT7kKIa trzHBSDKl1qbKZJ0asdFJWf38ZprKj2E8tbCtgqdNdMqzZhgbmTrxXYbOg7ckkFI /1j3ivQLOXPcwuzNqBo7SKLr0TAbbb3PZ7cUVi/2lZWGdJD27o5BN7I/WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOSSdNbNddSyO29VchNWnznaaWAMB8GA1UdIwQY MBaAFPJ8k92xoXFRxW8i3K8x3YIpRjdCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5Mjkt MzZlMGM4YWZlMjZhLzEvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5MjktMzZlMGM4YWZlMjZh LzEvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZSihQFE OQw0HkM/2tBdIXep4bjqYoRM6OMoC7C+bTW2Vyx0JAeja7MT5j8DqwknQ9RFTdHI aTPJEZW4ApIfAETYEXFSEEqW2j5rhyqNCC84M5Ry9ZwOxQXa7/pLpPBTmBEuicqU 7c+g6KHdSZIvSRDiKkzsnljvONeWCU+FKrRwhc59drd7UkvY9lps6JWCLvLwfUsG h49GCiwtOkronU8YDPbbOtj8/jcqzBZdv2cF3BR8FJfX/4IQtv0erjmgosXMYhgJ DNJKxSNd29PAd4XcuX2eSS4PvLGXmkDiGPpxqwEi0C+JeSPoFz7PqFShWb1bN+dO cMn+VVFuj5LmeA== -----END CERTIFICATE-----Generated at Sun Dec 28 08:07:56 2025 by rpki-client