This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft File: 8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json) Hash identifier: SDb+Rt54dPlvRvwRzt56Qkq8R2bE0lxi62JG8YcNVc8= Subject key identifier: 27:39:D2:91:31:0B:87:C0:7B:39:4C:42:A4:32:F8:F3:99:43:CC:A1 Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae Certificate serial: 019B3D906386DC94CBD4A441262631A33052 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft Manifest number: 0707 Signing time: Sat 20 Dec 2025 21:00:31 +0000 Manifest this update: Sat 20 Dec 2025 21:00:31 +0000 Manifest next update: Sun 21 Dec 2025 21:00:31 +0000 Files and hashes: 1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: XkbJ0VbmLFkzwNjCSUxyyfsY/WSbzVZgI7a0o7FzEy4=) 2: yze2rcJ637RL8GZo48PGt4d8nY8.roa (hash: H8OFKVxMCjsZaNXr8DPY/I8jq0ZMaggP4bkjrXxk6OY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:63:86:dc:94:cb:d4:a4:41:26:26:31:a3:30:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae Validity Not Before: Dec 20 21:00:31 2025 GMT Not After : Dec 21 21:00:31 2025 GMT Subject: CN=2739d291310b87c07b394c42a432f8f39943cca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:55:12:d1:8b:9d:62:e6:eb:a0:fe:eb:ad:73: 7a:60:70:7b:30:5d:c8:6a:05:21:65:2c:ee:e1:42: 5f:b2:93:82:25:66:ba:dc:41:36:be:89:98:ac:ed: b6:22:04:92:65:ff:66:61:0c:8a:89:85:c3:e2:6f: ca:68:9d:85:6b:76:3a:a9:1a:78:eb:37:74:e8:50: e3:e5:ae:cd:8e:9b:63:29:50:2c:26:f2:98:3c:ce: 19:f9:da:38:3e:db:61:98:10:d1:fd:2f:df:77:08: 17:0b:c6:31:91:a8:7b:ac:b6:3b:8b:59:10:cb:35: 08:b7:63:b3:ca:83:d9:c0:b2:97:52:fc:1e:3b:12: d2:bd:e3:89:7b:e8:86:13:ba:7b:53:48:b8:7f:22: 31:33:75:29:a0:0e:88:82:3a:d8:54:02:2a:70:8d: bc:31:56:f9:b6:34:1f:9f:bb:0d:9b:f6:5c:31:29: f9:7c:a0:d5:be:3c:94:6b:66:cb:2a:2c:37:62:ae: 66:aa:f1:6b:06:98:14:88:7e:92:52:5d:7d:48:2c: 16:21:ae:ee:71:6d:50:2a:73:03:c8:2a:b1:0d:5a: ae:50:2e:d0:59:67:c7:48:e4:1d:1c:6f:90:eb:d9: a4:d1:2c:a5:bb:68:00:0e:a5:7f:87:ea:d6:33:60: 99:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:39:D2:91:31:0B:87:C0:7B:39:4C:42:A4:32:F8:F3:99:43:CC:A1 X509v3 Authority Key Identifier: keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:b9:25:b0:7d:d2:44:13:54:57:d2:0a:66:60:b9:69:be:34: 16:b4:99:fb:db:a9:41:ba:cc:e5:2e:96:45:05:94:d9:c4:fe: fd:8e:9d:6c:2e:4c:23:ea:1f:11:9d:fe:fc:3b:d1:79:b3:0a: aa:a4:d9:f5:39:7f:3c:57:cc:bd:51:30:70:dd:d0:97:35:7c: 37:20:72:dc:9b:02:a9:51:48:61:f8:b9:bf:f5:e5:0c:b3:80: 80:59:2e:0e:36:45:bf:1b:ff:48:cf:67:8a:3f:c0:51:4a:45: 30:e5:e0:4e:53:68:f0:35:ed:7b:46:2f:b2:ae:a0:d2:24:f2: 0b:1b:12:d3:c0:10:39:79:1d:56:cf:8e:65:bc:92:71:84:9d: 1e:57:40:0c:d2:b1:f2:8d:04:d1:77:6e:ad:cb:a4:58:d2:b4: 29:77:46:9c:0c:b2:ab:58:bb:52:37:25:09:c7:f7:03:cc:81: 6c:ae:d8:b7:34:47:e6:e7:ad:17:e3:7b:70:c3:ad:34:ae:aa: a1:7d:39:08:f2:ec:e1:ae:7d:2e:d0:4c:87:78:65:ef:98:45: f9:b5:27:de:5e:58:38:ad:de:42:76:6a:52:74:8a:ce:71:48: 1e:21:e0:00:8b:27:d6:58:a0:d5:33:a0:58:31:73:99:a9:94: 12:ba:ac:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kGOG3JTL1KRBJiYxozBSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxODUyNzBlODMxOTNkMzI2OWY3Y2RlOWRhMDgwOGIxZWZm NTUyYWUwHhcNMjUxMjIwMjEwMDMxWhcNMjUxMjIxMjEwMDMxWjAzMTEwLwYDVQQD EygyNzM5ZDI5MTMxMGI4N2MwN2IzOTRjNDJhNDMyZjhmMzk5NDNjY2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlUS0YudYubroP7rrXN6YHB7MF3I agUhZSzu4UJfspOCJWa63EE2vomYrO22IgSSZf9mYQyKiYXD4m/KaJ2Fa3Y6qRp4 6zd06FDj5a7NjptjKVAsJvKYPM4Z+do4PtthmBDR/S/fdwgXC8Yxkah7rLY7i1kQ yzUIt2OzyoPZwLKXUvweOxLSveOJe+iGE7p7U0i4fyIxM3UpoA6IgjrYVAIqcI28 MVb5tjQfn7sNm/ZcMSn5fKDVvjyUa2bLKiw3Yq5mqvFrBpgUiH6SUl19SCwWIa7u cW1QKnMDyCqxDVquUC7QWWfHSOQdHG+Q69mk0Sylu2gADqV/h+rWM2CZ/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCc50pExC4fAezlMQqQy+POZQ8yhMB8GA1UdIwQY MBaAFPGFJw6DGT0yaffN6doICLHv9VKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgt ZmVmOTZlOTVhYmEwLzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgtZmVmOTZlOTVhYmEw LzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrklsH3S RBNUV9IKZmC5ab40FrSZ+9upQbrM5S6WRQWU2cT+/Y6dbC5MI+ofEZ3+/DvRebMK qqTZ9Tl/PFfMvVEwcN3QlzV8NyBy3JsCqVFIYfi5v/XlDLOAgFkuDjZFvxv/SM9n ij/AUUpFMOXgTlNo8DXte0Yvsq6g0iTyCxsS08AQOXkdVs+OZbyScYSdHldADNKx 8o0E0XdurcukWNK0KXdGnAyyq1i7UjclCcf3A8yBbK7YtzRH5uetF+N7cMOtNK6q oX05CPLs4a59LtBMh3hl75hF+bUn3l5YOK3eQnZqUnSKznFIHiHgAIsn1lig1TOg WDFzmamUErqsxQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:27:04 2025 by rpki-client