This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft File: 8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft (raw, json) Hash identifier: u1Umz28YdQEL/31SM/AKo7n26+eBrpzXfWsFrPR072U= Subject key identifier: FC:39:53:F7:12:92:F9:A2:DA:4B:DB:33:0E:E4:FE:13:6A:2D:AC:65 Authority key identifier: F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D Certificate issuer: /CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d Certificate serial: 019B35D757BA807CC571A796BF25BE433FA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft Manifest number: 0342 Signing time: Fri 19 Dec 2025 09:01:03 +0000 Manifest this update: Fri 19 Dec 2025 09:01:03 +0000 Manifest next update: Sat 20 Dec 2025 09:01:03 +0000 Files and hashes: 1: 8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl (hash: fcX0IX/XuO8aMZH6wDexayrIJ6U8qhbr41axkPo6yP8=) 2: vAn1hXUKdqSNmKMN5EpP_udaSvg.roa (hash: KSkyWrBwmDHasLhukMvu07oX0o0MiqrtLLWwQJGc7Qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:57:ba:80:7c:c5:71:a7:96:bf:25:be:43:3f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d Validity Not Before: Dec 19 09:01:03 2025 GMT Not After : Dec 20 09:01:03 2025 GMT Subject: CN=fc3953f71292f9a2da4bdb330ee4fe136a2dac65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a2:a3:a7:81:06:44:cc:c0:19:21:df:4a:d2: c0:c5:90:3c:a2:af:e7:1e:67:98:5f:d5:ba:29:bb: fc:06:d5:2c:be:9d:0a:6d:c6:59:7f:51:fa:5b:cb: 2d:6a:8c:64:d2:02:cf:5c:4c:b4:19:0d:0d:c2:f8: 9d:24:4d:ac:af:8c:78:c9:0c:6c:a1:bc:7f:a7:38: 82:83:b6:53:8f:0a:8f:14:13:72:ea:5a:42:e6:8e: c8:d2:6e:ee:b8:de:b6:a1:a7:0c:13:52:ec:a2:56: 03:99:01:b6:8a:b1:d3:77:46:2f:d8:85:6f:4e:a9: 2a:5c:a3:35:2e:98:cf:04:87:6b:dc:57:2a:7f:b4: a3:b7:ce:d5:48:ea:29:7e:5c:ac:cb:8f:a8:66:ff: 24:b4:05:df:3b:18:e0:43:8c:72:1b:7f:35:24:8f: e3:58:2b:a2:99:8c:5d:bd:4d:56:5d:c5:62:ae:4f: 36:af:49:64:e8:7b:3f:52:f3:58:4e:48:4b:aa:56: 27:27:e0:3b:f1:fb:5f:84:0f:64:09:ac:b1:20:73: 41:88:c5:52:ab:36:3c:47:e7:4c:dd:8d:76:ba:09: 68:7e:03:17:d9:59:31:b4:b3:cd:30:84:92:c6:49: 02:89:2e:56:80:6e:28:c8:cb:78:a4:84:12:7c:9a: 84:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:39:53:F7:12:92:F9:A2:DA:4B:DB:33:0E:E4:FE:13:6A:2D:AC:65 X509v3 Authority Key Identifier: keyid:F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:e7:28:3a:57:01:d9:a1:9d:9d:3f:ea:59:c6:0c:28:16:10: 48:e0:76:15:ec:4b:24:f2:2c:17:c2:f6:74:b4:48:23:76:16: e7:ad:d5:73:98:d1:c9:39:a3:c8:73:e2:e1:43:22:e4:ce:b1: 6c:05:ed:65:08:97:cd:9d:bb:dd:04:be:ad:1b:ef:84:45:ad: 2d:3b:55:e2:78:3d:2f:87:05:9c:65:40:9a:45:81:fd:d5:b6: ea:e3:21:84:fd:a6:c4:2e:5f:88:b9:82:8d:e9:f7:05:a0:1b: a6:a0:48:b0:45:72:52:bc:72:53:af:be:bd:c6:b4:e7:28:10: 8a:62:ec:cd:65:53:e5:98:ac:c4:65:6f:50:95:a1:8b:e1:f6: ff:15:4e:fc:05:cc:f4:a4:c0:bf:83:e2:72:a4:14:f5:2d:e1: 1c:3a:92:ae:f4:38:ae:61:e0:46:05:7e:0c:4d:ec:d7:35:f3: 52:92:99:ed:57:c3:fe:36:48:aa:d7:12:5c:99:7b:2f:3b:d8: 2e:61:17:38:63:bc:13:ba:7a:33:23:dd:13:9b:39:1a:89:7f: b6:ac:4d:b6:f8:44:5d:5a:0c:e0:74:7c:85:55:44:d8:2a:a4: 6c:60:df:fb:20:5a:9d:d1:e2:10:fd:b2:13:14:93:c6:23:5a: bc:30:35:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs111e6gHzFcaeWvyW+Qz+jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZDMyM2FkNDhmNWE0NWJiY2E5ZTg3OTg4M2ZhZTkzMTRi NThlOWQwHhcNMjUxMjE5MDkwMTAzWhcNMjUxMjIwMDkwMTAzWjAzMTEwLwYDVQQD EyhmYzM5NTNmNzEyOTJmOWEyZGE0YmRiMzMwZWU0ZmUxMzZhMmRhYzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aKjp4EGRMzAGSHfStLAxZA8oq/n HmeYX9W6Kbv8BtUsvp0KbcZZf1H6W8staoxk0gLPXEy0GQ0NwvidJE2sr4x4yQxs obx/pziCg7ZTjwqPFBNy6lpC5o7I0m7uuN62oacME1LsolYDmQG2irHTd0Yv2IVv TqkqXKM1LpjPBIdr3Fcqf7Sjt87VSOopflysy4+oZv8ktAXfOxjgQ4xyG381JI/j WCuimYxdvU1WXcVirk82r0lk6Hs/UvNYTkhLqlYnJ+A78ftfhA9kCayxIHNBiMVS qzY8R+dM3Y12uglofgMX2VkxtLPNMISSxkkCiS5WgG4oyMt4pIQSfJqEBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPw5U/cSkvmi2kvbMw7k/hNqLaxlMB8GA1UdIwQY MBaAFPDTI61I9aRbvKnoeYg/rpMUtY6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE5NanJVajFwRnU4cWVoNWlELXVreFMxanAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy83ZGUyZGYtMTBkYi00YmJlLTkwNTIt NWZhYmQ2ZGM1ZjkzLzEvOE5NanJVajFwRnU4cWVoNWlELXVreFMxanAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy83ZGUyZGYtMTBkYi00YmJlLTkwNTItNWZhYmQ2ZGM1Zjkz LzEvOE5NanJVajFwRnU4cWVoNWlELXVreFMxanAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASecoOlcB 2aGdnT/qWcYMKBYQSOB2FexLJPIsF8L2dLRII3YW563Vc5jRyTmjyHPi4UMi5M6x bAXtZQiXzZ273QS+rRvvhEWtLTtV4ng9L4cFnGVAmkWB/dW26uMhhP2mxC5fiLmC jen3BaAbpqBIsEVyUrxyU6++vca05ygQimLszWVT5ZisxGVvUJWhi+H2/xVO/AXM 9KTAv4PicqQU9S3hHDqSrvQ4rmHgRgV+DE3s1zXzUpKZ7VfD/jZIqtcSXJl7LzvY LmEXOGO8E7p6MyPdE5s5Gol/tqxNtvhEXVoM4HR8hVVE2CqkbGDf+yBandHiEP2y ExSTxiNavDA1ng== -----END CERTIFICATE-----Generated at Fri Dec 19 11:50:06 2025 by rpki-client