This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft File: f8lWpStzUEpPH_NFRxmSl6f13p0.mft (raw, json) Hash identifier: 91m7Y9aRdcjcIKNIeoI+iuJ4c8XGe3m8iw7VPrTUIxw= Subject key identifier: 22:5F:59:B1:A2:FE:2D:03:99:87:37:45:03:2F:FE:7C:04:B6:2F:20 Authority key identifier: 7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D Certificate issuer: /CN=7fc956a52b73504a4f1ff34547199297a7f5de9d Certificate serial: 019B330D2BB33F824F5B00C7F06B530E0EDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft Manifest number: 0B36 Signing time: Thu 18 Dec 2025 20:00:59 +0000 Manifest this update: Thu 18 Dec 2025 20:00:59 +0000 Manifest next update: Fri 19 Dec 2025 20:00:59 +0000 Files and hashes: 1: f8lWpStzUEpPH_NFRxmSl6f13p0.crl (hash: Dd0As2U6CgI0gpJNxmpVjRRWTya9SbK1jvZeb9W5eCw=) 2: oABxc2AhceHbFWdSMSjl8hsmwIU.roa (hash: TEY8sctZHera/7HF2OtPuy78+8vJU3t66DtmPXEJjBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:2b:b3:3f:82:4f:5b:00:c7:f0:6b:53:0e:0e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fc956a52b73504a4f1ff34547199297a7f5de9d Validity Not Before: Dec 18 20:00:59 2025 GMT Not After : Dec 19 20:00:59 2025 GMT Subject: CN=225f59b1a2fe2d0399873745032ffe7c04b62f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bc:6c:a1:4a:0f:30:b0:9b:57:5b:f9:21:16: 00:d0:2e:07:7a:2f:bc:2e:04:ce:7b:ee:da:25:71: 40:d8:95:07:11:dc:d1:05:a1:90:f3:11:8d:a6:31: 5f:0a:29:79:1e:81:05:03:02:5b:ac:31:58:4d:c8: 05:62:84:b7:cb:cd:14:fa:89:28:e8:13:9e:2d:81: c8:81:3e:a9:13:58:88:79:5b:4e:c5:90:6b:68:ac: fa:33:48:6f:8a:a8:63:b7:2b:6e:fe:1a:55:d5:51: 73:06:06:0f:aa:b9:1a:e5:68:05:eb:91:ce:e7:00: 79:25:58:42:2d:3a:1c:e9:ff:ed:70:81:34:d0:b0: c9:94:6c:ac:f1:41:1c:40:d9:d7:d4:ac:09:b4:29: 47:bf:d5:a3:de:75:56:be:62:0e:88:0a:3a:f1:09: f0:10:ae:59:f9:25:c7:54:f5:84:5b:f7:51:d6:25: ff:9f:9f:82:03:34:2a:c0:9c:be:e8:16:48:0b:0d: 2c:47:97:af:1f:0a:be:c5:54:8e:67:a9:b7:c9:c3: 20:e0:3d:c2:b8:a0:b5:74:0a:22:75:7b:7d:1b:15: d9:90:14:03:73:2b:07:1a:5b:6c:d5:0e:ee:51:8d: 83:40:96:23:be:7f:f0:75:73:aa:ee:f4:57:6b:1c: fc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5F:59:B1:A2:FE:2D:03:99:87:37:45:03:2F:FE:7C:04:B6:2F:20 X509v3 Authority Key Identifier: keyid:7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:1d:3b:13:1c:c4:b4:b8:cc:da:15:cc:66:28:af:4b:e5:3d: 4f:15:3b:06:7d:52:88:67:da:8a:fd:79:88:01:89:3a:ff:0b: 90:04:71:78:39:82:b5:00:24:2b:f7:c6:bc:f9:5a:a9:6a:63: 57:19:7c:61:6d:91:78:cc:7d:31:75:7b:64:c4:fa:dd:f5:e6: 6c:7d:3e:ae:bb:9e:38:cb:6a:24:92:93:8d:8d:40:66:00:18: bb:a6:02:18:d3:e4:19:22:de:4d:45:cf:7b:98:1c:de:c3:73: 92:1c:3d:fd:d8:0e:e7:2c:7a:ad:f6:cb:dc:f1:d0:59:37:57: 34:d0:b7:cf:1e:52:7d:bd:45:eb:53:0f:7e:dc:5c:4b:4a:9f: b6:c2:4d:8d:4a:4e:e5:57:00:dc:9c:2b:7a:87:af:c3:5a:b5: 09:f0:65:4f:06:c4:cd:4e:d0:ae:a6:3b:db:8c:69:ce:50:6f: 9b:aa:81:d2:21:8a:e7:58:b4:4e:6f:78:fc:e3:94:7f:03:a8: c0:fd:be:28:26:04:06:fa:21:6e:c3:fa:2a:a9:ad:1b:6d:25: a3:57:dc:f5:0d:72:d4:4a:8c:6f:24:64:1f:08:80:65:0c:de: 58:80:4d:76:68:7a:17:f9:96:69:17:b1:2b:d9:3d:d2:89:d9: 28:e9:7a:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDSuzP4JPWwDH8GtTDg7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmYzk1NmE1MmI3MzUwNGE0ZjFmZjM0NTQ3MTk5Mjk3YTdm NWRlOWQwHhcNMjUxMjE4MjAwMDU5WhcNMjUxMjE5MjAwMDU5WjAzMTEwLwYDVQQD EygyMjVmNTliMWEyZmUyZDAzOTk4NzM3NDUwMzJmZmU3YzA0YjYyZjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7xsoUoPMLCbV1v5IRYA0C4Hei+8 LgTOe+7aJXFA2JUHEdzRBaGQ8xGNpjFfCil5HoEFAwJbrDFYTcgFYoS3y80U+oko 6BOeLYHIgT6pE1iIeVtOxZBraKz6M0hviqhjtytu/hpV1VFzBgYPqrka5WgF65HO 5wB5JVhCLToc6f/tcIE00LDJlGys8UEcQNnX1KwJtClHv9Wj3nVWvmIOiAo68Qnw EK5Z+SXHVPWEW/dR1iX/n5+CAzQqwJy+6BZICw0sR5evHwq+xVSOZ6m3ycMg4D3C uKC1dAoidXt9GxXZkBQDcysHGlts1Q7uUY2DQJYjvn/wdXOq7vRXaxz8PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJfWbGi/i0DmYc3RQMv/nwEti8gMB8GA1UdIwQY MBaAFH/JVqUrc1BKTx/zRUcZkpen9d6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83MWFiNjktNjk2NS00YjcwLTk2OGQt YmI1N2E0ZWY3MTUzLzEvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS83MWFiNjktNjk2NS00YjcwLTk2OGQtYmI1N2E0ZWY3MTUz LzEvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbR07ExzE tLjM2hXMZiivS+U9TxU7Bn1SiGfaiv15iAGJOv8LkARxeDmCtQAkK/fGvPlaqWpj Vxl8YW2ReMx9MXV7ZMT63fXmbH0+rrueOMtqJJKTjY1AZgAYu6YCGNPkGSLeTUXP e5gc3sNzkhw9/dgO5yx6rfbL3PHQWTdXNNC3zx5Sfb1F61MPftxcS0qftsJNjUpO 5VcA3Jwreoevw1q1CfBlTwbEzU7QrqY724xpzlBvm6qB0iGK51i0Tm94/OOUfwOo wP2+KCYEBvohbsP6KqmtG20lo1fc9Q1y1EqMbyRkHwiAZQzeWIBNdmh6F/mWaRex K9k90onZKOl60w== -----END CERTIFICATE-----Generated at Thu Dec 18 22:12:15 2025 by rpki-client