This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft File: 8DBljxbS2I00FkWS_NTeExMfFpU.mft (raw, json) Hash identifier: RS8RThrfZGLXXED2sL6j93XDhhYg2JVa0OB3Hm6SMVc= Subject key identifier: E5:9B:55:62:6D:BF:DD:BE:84:72:49:81:7B:FE:BD:DB:B5:48:2B:02 Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95 Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695 Certificate serial: 019B3A901DB60626B3B8DC0BB5876A6C11FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft Manifest number: 0D50 Signing time: Sat 20 Dec 2025 07:01:21 +0000 Manifest this update: Sat 20 Dec 2025 07:01:21 +0000 Manifest next update: Sun 21 Dec 2025 07:01:21 +0000 Files and hashes: 1: 12a0ipAHl5HJyqLJLtX-LoYRrXM.roa (hash: TnK4o3d13YBRBJ8LTBq2YYzMppBqNrf4+1qoGHx92pI=) 2: 8DBljxbS2I00FkWS_NTeExMfFpU.crl (hash: m3qrZ5PTfY/UQ1YVDmx2sZh02OhavxZcAxjhqfcVQGA=) 3: BqfUS67NwEGbDUdjYax38K2Njlg.roa (hash: FXBdDnrJbkKIYFCTwLmrjslC3wsmF26/kRrmIGLYDVE=) 4: ExI_XUjszL60Ie9A5TinBHd-jBM.roa (hash: Ih+JMM3ki467y9AI2VydiKfnBZRQqt/x3WLry7BgEoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:1d:b6:06:26:b3:b8:dc:0b:b5:87:6a:6c:11:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695 Validity Not Before: Dec 20 07:01:21 2025 GMT Not After : Dec 21 07:01:21 2025 GMT Subject: CN=e59b55626dbfddbe847249817bfebddbb5482b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4b:77:80:26:84:bd:d2:0d:96:28:26:02:0b: 4b:4d:76:40:2e:ba:e5:cf:9d:9c:7e:22:01:76:00: 4d:16:b8:ce:6a:50:a9:2c:91:ec:de:4d:38:43:ce: 02:84:72:c0:e7:ed:d0:0a:e5:d1:10:fe:50:5c:6e: a4:f2:9c:9d:e9:72:c8:98:9e:f9:d7:5c:b1:5c:f4: 8e:93:70:d5:83:6f:4f:5f:d6:ed:60:8f:88:2e:c9: 64:dc:1d:38:06:d6:98:95:f7:76:b1:63:c1:93:2d: ef:3e:da:e3:8f:c3:f5:be:3c:f9:aa:ca:55:89:04: a1:80:2c:8f:dc:9f:8e:59:93:67:b8:59:25:9e:eb: bd:28:8a:99:c8:41:24:24:f1:4f:55:00:c5:c0:88: dd:c3:6d:a9:cb:25:07:09:d9:2e:1b:03:d6:45:47: 0b:d6:a7:67:30:80:6b:09:80:f7:4b:08:26:fa:0b: 07:03:07:c8:73:ae:2c:95:34:08:6a:b0:e8:fc:a4: 17:04:6c:0e:3c:90:2a:e3:2a:c5:13:0a:d3:ab:43: b0:41:f8:9f:39:3e:f6:03:9d:b0:8a:45:d5:bf:3e: 69:f2:9a:66:47:a4:04:57:92:68:59:f4:97:41:57: a8:99:06:90:49:3c:bb:47:eb:b0:d4:ce:5f:57:d2: 4c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9B:55:62:6D:BF:DD:BE:84:72:49:81:7B:FE:BD:DB:B5:48:2B:02 X509v3 Authority Key Identifier: keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:fd:94:45:65:2b:9b:66:59:cb:71:0b:e3:61:39:fd:38:24: 9a:d6:12:0f:aa:9f:39:80:7c:78:28:2e:91:6e:3a:58:2e:8a: a5:b6:37:9c:bc:cc:61:55:11:7f:7d:00:0c:ec:93:57:d8:35: b1:3a:83:cc:93:0e:7b:3d:91:d8:a0:48:4c:23:f7:76:f1:dd: 58:30:59:4c:bf:b9:9d:26:03:59:2c:df:66:ee:25:ad:78:12: be:76:5c:68:ed:5a:03:97:1d:de:96:e8:90:25:39:9c:c2:87: 4b:e4:5f:d9:5d:67:74:c3:5c:27:84:72:94:78:4e:1b:31:1d: 6b:2d:27:1e:f0:0f:5c:f0:4f:d6:30:ce:06:da:54:bc:c5:8d: 60:9a:ff:c5:37:1f:f8:60:88:4a:5a:d5:2e:e0:01:af:c1:a3: de:9c:f6:5b:53:36:e4:23:a6:b8:17:93:52:3d:9e:68:6b:24: 62:20:df:ed:bf:e2:ce:55:16:b2:89:89:08:1f:be:c7:59:23: bd:6d:f2:62:60:85:3b:9e:e1:77:48:2b:b3:70:e5:2e:44:58: 98:4b:81:05:0c:84:47:16:f0:ed:62:8c:b3:32:bf:e5:55:66: a3:95:9e:43:35:63:a2:e2:62:2f:9f:a4:62:b9:35:82:7b:f1: 39:4a:e3:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kB22BiazuNwLtYdqbBH/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMzA2NThmMTZkMmQ4OGQzNDE2NDU5MmZjZDRkZTEzMTMx ZjE2OTUwHhcNMjUxMjIwMDcwMTIxWhcNMjUxMjIxMDcwMTIxWjAzMTEwLwYDVQQD EyhlNTliNTU2MjZkYmZkZGJlODQ3MjQ5ODE3YmZlYmRkYmI1NDgyYjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Et3gCaEvdINligmAgtLTXZALrrl z52cfiIBdgBNFrjOalCpLJHs3k04Q84ChHLA5+3QCuXREP5QXG6k8pyd6XLImJ75 11yxXPSOk3DVg29PX9btYI+ILslk3B04BtaYlfd2sWPBky3vPtrjj8P1vjz5qspV iQShgCyP3J+OWZNnuFklnuu9KIqZyEEkJPFPVQDFwIjdw22pyyUHCdkuGwPWRUcL 1qdnMIBrCYD3Swgm+gsHAwfIc64slTQIarDo/KQXBGwOPJAq4yrFEwrTq0OwQfif OT72A52wikXVvz5p8ppmR6QEV5JoWfSXQVeomQaQSTy7R+uw1M5fV9JMawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWbVWJtv92+hHJJgXv+vdu1SCsCMB8GA1UdIwQY MBaAFPAwZY8W0tiNNBZFkvzU3hMTHxaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYt ODk0ODA1Mjg5Y2MwLzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYtODk0ODA1Mjg5Y2Mw LzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFv2URWUr m2ZZy3EL42E5/TgkmtYSD6qfOYB8eCgukW46WC6KpbY3nLzMYVURf30ADOyTV9g1 sTqDzJMOez2R2KBITCP3dvHdWDBZTL+5nSYDWSzfZu4lrXgSvnZcaO1aA5cd3pbo kCU5nMKHS+Rf2V1ndMNcJ4RylHhOGzEday0nHvAPXPBP1jDOBtpUvMWNYJr/xTcf +GCISlrVLuABr8Gj3pz2W1M25COmuBeTUj2eaGskYiDf7b/izlUWsomJCB++x1kj vW3yYmCFO57hd0grs3DlLkRYmEuBBQyERxbw7WKMszK/5VVmo5WeQzVjouJiL5+k Yrk1gnvxOUrjdg== -----END CERTIFICATE-----Generated at Sat Dec 20 12:16:20 2025 by rpki-client