This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft File: C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json) Hash identifier: c+eWf66T4zD2q1IcGhma7C3HA1QIRuNF1KzLZcu49TE= Subject key identifier: C6:D1:9E:FB:6B:23:01:A5:14:19:DD:61:D3:CC:3C:FB:D9:04:7E:73 Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1 Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1 Certificate serial: 019B620B1723FD3EB8E07AF33309367FEA10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft Manifest number: 0C08 Signing time: Sat 27 Dec 2025 23:00:52 +0000 Manifest this update: Sat 27 Dec 2025 23:00:52 +0000 Manifest next update: Sun 28 Dec 2025 23:00:52 +0000 Files and hashes: 1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: FZSDS3xrUfry2qj9cOwK4Y+uTbMRpjnXWAMKG1PCIT4=) 2: xPUzYHJ2p6sBXOjKUulEgLqlcBc.roa (hash: ygZqht59F65fKs2o1JfQZNtwvL5DudVBMCJ5Le5stTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 23:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:0b:17:23:fd:3e:b8:e0:7a:f3:33:09:36:7f:ea:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1 Validity Not Before: Dec 27 23:00:52 2025 GMT Not After : Dec 28 23:00:52 2025 GMT Subject: CN=c6d19efb6b2301a51419dd61d3cc3cfbd9047e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8f:31:b4:1e:46:84:6a:1b:54:f4:a5:5b:6a: 8b:b5:e4:fe:d0:72:40:99:26:64:a2:20:fd:fe:d9: 3d:cc:73:83:db:0a:89:94:31:a9:66:e6:12:e6:9b: 9e:b0:20:4e:14:17:70:f1:f8:09:20:ec:5f:cd:f3: 53:01:c4:22:c1:2a:91:83:9a:76:d3:81:42:62:ff: d4:f9:8e:d0:00:49:5f:21:27:62:9f:89:55:bb:04: de:7c:2e:a3:5b:44:0d:6c:0f:bd:47:a1:06:8c:67: 9b:f0:98:e5:20:e0:c8:6c:6c:91:4f:fc:5b:ee:76: 85:98:5f:47:22:34:1b:48:a9:71:f0:aa:a3:81:be: e5:fa:bd:5b:01:a5:db:c2:61:ba:6a:28:46:b4:fc: 6f:ab:d4:ce:4a:85:4a:b9:8e:ba:04:53:58:c8:15: 5e:3f:9d:f7:48:0b:0b:5d:ad:85:8c:91:e6:8e:64: 0b:59:dc:a2:c7:e5:18:d1:e3:28:79:69:e1:5f:dc: 44:2e:f6:fe:c3:bb:e9:df:47:20:12:af:83:54:c9: 08:1a:4e:b2:91:b7:26:52:55:83:ca:7c:b7:03:4c: 0b:60:43:e8:b4:92:4c:78:35:8b:5e:99:a4:6a:76: d2:9e:7b:90:f8:d7:54:43:d0:08:22:94:b0:9e:1e: 78:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D1:9E:FB:6B:23:01:A5:14:19:DD:61:D3:CC:3C:FB:D9:04:7E:73 X509v3 Authority Key Identifier: keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:1c:02:72:f6:f6:09:5d:2a:27:c2:71:39:d7:b3:d4:9b:0d: ec:a9:40:64:9c:c0:35:12:0f:9b:c0:e7:f3:2f:ca:e5:72:83: 7e:dc:c1:42:0d:c1:d1:cc:e4:1a:7a:af:b3:5a:ef:22:09:16: 85:af:57:0d:b1:96:83:92:d6:58:41:d5:84:d3:99:2b:74:0f: ff:59:25:a3:31:25:f8:64:4b:87:f8:01:09:6c:59:6a:f9:c2: b6:3d:0b:e9:2b:1d:69:04:1d:60:07:b7:9c:8e:10:dc:e1:cb: 05:4d:e9:0f:89:6a:e0:56:8d:d8:9a:b2:d2:89:c3:7c:7c:aa: 11:10:00:79:b8:54:67:80:46:b3:32:8d:1e:2e:f9:2d:72:15: 32:48:29:53:7a:86:da:0f:82:01:21:ee:b6:c8:9e:f2:ff:03: 12:34:8b:a0:64:5b:81:df:7b:04:92:ed:9a:91:cb:f6:52:bc: e9:dc:6b:28:59:f1:4d:fb:a0:31:a6:91:1b:6d:a8:38:a9:54: 4e:6a:5a:b4:3f:70:dd:76:03:d8:3b:57:94:94:be:22:29:79: 8b:67:07:d6:15:c8:e1:b5:8d:13:10:d0:9c:12:97:79:f5:6e: d9:5e:ac:10:ac:31:6e:1f:b2:3a:c7:82:36:9d:e3:32:6f:a0: 77:89:b7:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiCxcj/T644HrzMwk2f+oQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYzcxZGYxNmRkMGI0N2NkMGFmOTcxZjE0ZDFkY2E2ZDgy MDZiYjEwHhcNMjUxMjI3MjMwMDUyWhcNMjUxMjI4MjMwMDUyWjAzMTEwLwYDVQQD EyhjNmQxOWVmYjZiMjMwMWE1MTQxOWRkNjFkM2NjM2NmYmQ5MDQ3ZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo8xtB5GhGobVPSlW2qLteT+0HJA mSZkoiD9/tk9zHOD2wqJlDGpZuYS5puesCBOFBdw8fgJIOxfzfNTAcQiwSqRg5p2 04FCYv/U+Y7QAElfISdin4lVuwTefC6jW0QNbA+9R6EGjGeb8JjlIODIbGyRT/xb 7naFmF9HIjQbSKlx8Kqjgb7l+r1bAaXbwmG6aihGtPxvq9TOSoVKuY66BFNYyBVe P533SAsLXa2FjJHmjmQLWdyix+UY0eMoeWnhX9xELvb+w7vp30cgEq+DVMkIGk6y kbcmUlWDyny3A0wLYEPotJJMeDWLXpmkanbSnnuQ+NdUQ9AIIpSwnh54PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbRnvtrIwGlFBndYdPMPPvZBH5zMB8GA1UdIwQY MBaAFAvHHfFt0LR80K+XHxTR3KbYIGuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hY2RhNWUtNGQyZC00Zjg2LWExN2It NWI0OTNhYTA3MjY4LzEvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9hY2RhNWUtNGQyZC00Zjg2LWExN2ItNWI0OTNhYTA3MjY4 LzEvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxwCcvb2 CV0qJ8JxOdez1JsN7KlAZJzANRIPm8Dn8y/K5XKDftzBQg3B0czkGnqvs1rvIgkW ha9XDbGWg5LWWEHVhNOZK3QP/1klozEl+GRLh/gBCWxZavnCtj0L6SsdaQQdYAe3 nI4Q3OHLBU3pD4lq4FaN2Jqy0onDfHyqERAAebhUZ4BGszKNHi75LXIVMkgpU3qG 2g+CASHutsie8v8DEjSLoGRbgd97BJLtmpHL9lK86dxrKFnxTfugMaaRG22oOKlU TmpatD9w3XYD2DtXlJS+Iil5i2cH1hXI4bWNExDQnBKXefVu2V6sEKwxbh+yOseC Np3jMm+gd4m32Q== -----END CERTIFICATE-----Generated at Sun Dec 28 09:06:35 2025 by rpki-client