This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft File: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft (raw, json) Hash identifier: bWi0RNNZIk97HVMlBSOXdhs9S0Arp7ClLNn0SB58rDU= Subject key identifier: 32:24:07:CE:4D:C2:9E:56:BF:3D:F6:9B:07:7B:54:97:73:02:D8:4C Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4 Certificate issuer: /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4 Certificate serial: 019B51F38DE92562529E4AB4285995D12C82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft Manifest number: 0F17 Signing time: Wed 24 Dec 2025 20:01:14 +0000 Manifest this update: Wed 24 Dec 2025 20:01:14 +0000 Manifest next update: Thu 25 Dec 2025 20:01:14 +0000 Files and hashes: 1: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl (hash: 5UMmuLoIZd7CZfdDLKcBzzSBKLhGqgvYcH2/D6wzmH8=) 2: GGAjioujqBIqTrQAhNRgglPPRkE.roa (hash: 1FpErs46KltIuhJLiOWBLzSL1Xf0hQCI/1w1QmIm60Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:8d:e9:25:62:52:9e:4a:b4:28:59:95:d1:2c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4 Validity Not Before: Dec 24 20:01:14 2025 GMT Not After : Dec 25 20:01:14 2025 GMT Subject: CN=322407ce4dc29e56bf3df69b077b54977302d84c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ec:c3:91:e6:29:61:e3:9c:0c:5a:78:82:6d: c0:37:a0:36:cc:32:28:46:5a:9b:bb:ff:f4:66:d5: fe:7b:95:b3:05:33:61:a4:39:a6:1e:f8:5c:07:b0: 30:d2:30:94:be:3b:9e:0a:ac:f5:c4:37:6f:fa:20: 45:03:fc:c8:33:df:f7:3d:93:e4:ff:7b:c4:03:2d: 2c:1a:07:f7:80:0a:7b:d4:de:cc:78:78:00:84:80: 8f:95:9d:93:2c:fd:37:28:47:d0:cc:ec:fc:af:9a: 71:1f:67:bc:7a:46:6f:87:10:5d:5c:46:94:d0:49: b6:57:0d:ba:e0:d8:7c:48:fc:97:1f:1d:c5:f4:1c: 10:3f:ae:f5:95:d0:df:66:f2:9d:7a:1d:1a:0e:ce: aa:66:fd:c0:d7:0f:72:23:b8:33:f9:0f:ea:b7:ca: 38:cf:f4:16:45:62:e2:71:c5:b1:3e:76:19:96:ae: 6a:2c:e5:6d:e5:cd:50:c2:5f:ec:44:28:6e:25:a5: dc:82:f3:75:63:a5:2f:24:d9:9e:b7:24:eb:b4:74: 95:30:65:23:5d:38:8f:75:63:74:ed:66:74:da:8b: 37:18:16:00:42:d5:7a:0e:b2:de:e6:b6:a5:2b:05: 74:b8:02:9f:f4:4e:c5:6d:27:70:4e:bc:4e:4d:a6: 8e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:24:07:CE:4D:C2:9E:56:BF:3D:F6:9B:07:7B:54:97:73:02:D8:4C X509v3 Authority Key Identifier: keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:59:d2:f4:6b:65:e0:2a:b4:6c:79:1c:17:d3:29:66:2f:26: 47:50:2c:33:a2:30:dc:4d:89:74:79:1c:90:6f:88:aa:91:aa: f5:75:17:e9:d0:c6:3f:fc:9a:df:c3:8e:63:b4:55:86:55:4c: f4:b1:1a:96:0b:c6:ae:86:49:de:1b:18:0f:8f:c7:3f:e0:c5: b9:b8:08:ea:d4:65:a5:d6:a5:fc:30:4d:f9:de:c4:7f:83:eb: 21:e8:80:80:ba:46:af:ad:4f:f9:4c:5c:6e:6d:bf:ac:9e:f9: 5b:69:8d:b4:b6:6f:b6:b6:18:63:41:12:12:de:0c:6c:66:be: f3:8f:c5:2e:70:4a:a7:a7:df:02:90:e9:84:02:73:0a:61:78: a7:5e:5f:e8:35:f6:5e:00:f3:0d:32:55:25:7b:de:f3:ab:e3: 96:cc:8a:28:cf:18:c5:de:d3:36:55:82:49:67:07:ab:37:cf: bf:82:cd:b2:40:3b:42:3d:f7:fb:25:d5:d7:cc:54:8f:57:fd: 7a:68:3b:2c:12:72:da:28:81:a8:cc:63:15:2d:cc:0b:89:2e: 90:1b:6c:98:25:b3:b8:47:61:cd:91:87:ed:92:3d:e6:4d:ab: ff:28:38:b4:aa:b1:52:f4:38:80:72:80:16:8b:bd:5e:af:76: 3a:08:82:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR843pJWJSnkq0KFmV0SyCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYjk4ZjU4NGJjMTIzNDc4MGEyYzQ3ZmM4ODMyNGQ0OWVl MGU2ZjQwHhcNMjUxMjI0MjAwMTE0WhcNMjUxMjI1MjAwMTE0WjAzMTEwLwYDVQQD EygzMjI0MDdjZTRkYzI5ZTU2YmYzZGY2OWIwNzdiNTQ5NzczMDJkODRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOzDkeYpYeOcDFp4gm3AN6A2zDIo Rlqbu//0ZtX+e5WzBTNhpDmmHvhcB7Aw0jCUvjueCqz1xDdv+iBFA/zIM9/3PZPk /3vEAy0sGgf3gAp71N7MeHgAhICPlZ2TLP03KEfQzOz8r5pxH2e8ekZvhxBdXEaU 0Em2Vw264Nh8SPyXHx3F9BwQP671ldDfZvKdeh0aDs6qZv3A1w9yI7gz+Q/qt8o4 z/QWRWLiccWxPnYZlq5qLOVt5c1Qwl/sRChuJaXcgvN1Y6UvJNmetyTrtHSVMGUj XTiPdWN07WZ02os3GBYAQtV6DrLe5ralKwV0uAKf9E7FbSdwTrxOTaaOgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIkB85Nwp5Wvz32mwd7VJdzAthMMB8GA1UdIwQY MBaAFPK5j1hLwSNHgKLEf8iDJNSe4Ob0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYt NGVjMWFiZTA4NWVmLzEvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYtNGVjMWFiZTA4NWVm LzEvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2FnS9Gtl 4Cq0bHkcF9MpZi8mR1AsM6Iw3E2JdHkckG+IqpGq9XUX6dDGP/ya38OOY7RVhlVM 9LEalgvGroZJ3hsYD4/HP+DFubgI6tRlpdal/DBN+d7Ef4PrIeiAgLpGr61P+Uxc bm2/rJ75W2mNtLZvtrYYY0ESEt4MbGa+84/FLnBKp6ffApDphAJzCmF4p15f6DX2 XgDzDTJVJXve86vjlsyKKM8Yxd7TNlWCSWcHqzfPv4LNskA7Qj33+yXV18xUj1f9 emg7LBJy2iiBqMxjFS3MC4kukBtsmCWzuEdhzZGH7ZI95k2r/yg4tKqxUvQ4gHKA Fou9Xq92OgiCQQ== -----END CERTIFICATE-----Generated at Thu Dec 25 03:27:57 2025 by rpki-client