This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft File: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft (raw, json) Hash identifier: yhAIB8jusSjYeDJIruINulBb26KueUWbDHbYQkKHDyI= Subject key identifier: 75:8F:43:6B:76:90:E6:43:4F:2A:FB:99:57:62:BF:52:0E:B8:8E:B6 Authority key identifier: F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57 Certificate issuer: /CN=f0f27aebf02abc355212afbf1621e3e0d4a76057 Certificate serial: 019B3F7F7934822546C9A030109C09BB1B73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft Manifest number: 055A Signing time: Sun 21 Dec 2025 06:01:17 +0000 Manifest this update: Sun 21 Dec 2025 06:01:17 +0000 Manifest next update: Mon 22 Dec 2025 06:01:17 +0000 Files and hashes: 1: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl (hash: 73bi4+fETVlfm5m+ZkjE2UDUjAIxqmxMuuhunpr/hA4=) 2: _MwQhKVnR_aG2vdLhL9GNdGXvOU.roa (hash: L7braIyd07lwFhqp60fjEjjTIhLctM+CjmNa1wVvJFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:79:34:82:25:46:c9:a0:30:10:9c:09:bb:1b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0f27aebf02abc355212afbf1621e3e0d4a76057 Validity Not Before: Dec 21 06:01:17 2025 GMT Not After : Dec 22 06:01:17 2025 GMT Subject: CN=758f436b7690e6434f2afb995762bf520eb88eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:87:2e:24:bd:9f:22:f9:58:a7:7c:b1:d9:d6: c0:1b:9c:af:00:3a:dd:bf:85:9e:2d:1b:d3:d3:6d: bb:19:7b:22:5b:f5:d7:f3:71:9c:1b:95:35:23:1f: e8:3d:fd:a6:06:d0:97:94:fb:99:55:2b:50:63:f0: a2:9a:33:75:04:4e:93:43:16:e5:e7:82:4b:e9:de: ea:56:8d:0b:b3:52:e6:4f:dd:04:6c:9f:18:e3:78: 77:c7:ef:8e:f6:6b:82:b8:6d:1e:b3:4f:1f:7a:5a: 7e:f4:6a:e2:66:68:0b:ad:ad:af:8f:d7:5f:00:9b: cf:b0:c8:08:eb:17:49:42:d0:c2:fe:31:ff:12:61: 92:f2:3c:a2:5f:da:a2:49:00:da:ef:1b:db:42:b6: 4e:a4:6c:06:41:df:38:5e:83:66:1a:c9:04:d8:95: 27:31:04:df:7c:c8:8f:10:93:11:dd:82:cd:6e:23: f7:8a:c5:a4:26:b6:4d:61:1d:89:e4:0e:c9:43:53: f7:11:9b:8e:0d:83:28:75:6b:a6:7f:20:ac:54:39: 21:e1:f7:7e:d5:a1:7a:73:2d:52:c7:7c:bd:a2:bd: 01:40:b7:17:a1:0e:75:ae:a9:0f:31:c0:3c:33:86: 49:45:50:00:f8:8e:6f:c2:e0:d9:61:b5:c3:c8:a2: 9c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8F:43:6B:76:90:E6:43:4F:2A:FB:99:57:62:BF:52:0E:B8:8E:B6 X509v3 Authority Key Identifier: keyid:F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:07:a9:81:c6:0b:18:5b:f7:ce:be:b9:11:71:16:b5:d0:07: f7:c0:3f:66:3a:84:fc:1f:f8:c1:26:a4:35:60:f7:5f:61:87: 00:0b:1e:39:4c:cc:a4:19:d3:57:65:cb:89:ef:dd:9e:8b:b9: c6:ff:c5:91:53:0e:28:f6:22:c1:96:4c:8c:b4:16:d9:4e:0f: 58:ff:27:37:d3:f6:ec:6a:9a:8d:40:05:a2:14:42:16:fe:66: 03:6a:cf:10:0e:58:06:14:22:6e:02:12:ff:5f:40:b5:2b:c0: 6c:04:84:3f:c0:43:46:41:c1:21:3f:2c:07:2d:e8:6e:ad:b4: 44:f6:a2:1d:aa:25:5b:c8:2b:c8:60:eb:ff:e2:31:27:94:80: dc:bb:8a:3f:c8:4b:36:64:16:27:7f:01:ab:de:93:ca:f2:26: eb:95:3b:88:df:0c:69:f1:2d:5b:b2:11:1a:23:69:fd:0b:13: 82:82:50:79:fc:8f:b1:a5:cf:03:bf:47:f3:5e:5a:38:29:45: d8:86:04:31:21:7d:44:b5:d5:b9:1f:0a:e1:80:73:28:cc:eb: 26:fb:03:7e:36:19:42:64:29:6b:63:02:61:30:b9:46:77:ee: 20:20:38:34:60:a3:af:7d:7e:5d:83:33:70:24:19:47:9a:6d: 2a:d4:18:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f3k0giVGyaAwEJwJuxtzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZjI3YWViZjAyYWJjMzU1MjEyYWZiZjE2MjFlM2UwZDRh NzYwNTcwHhcNMjUxMjIxMDYwMTE3WhcNMjUxMjIyMDYwMTE3WjAzMTEwLwYDVQQD Eyg3NThmNDM2Yjc2OTBlNjQzNGYyYWZiOTk1NzYyYmY1MjBlYjg4ZWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIcuJL2fIvlYp3yx2dbAG5yvADrd v4WeLRvT0227GXsiW/XX83GcG5U1Ix/oPf2mBtCXlPuZVStQY/CimjN1BE6TQxbl 54JL6d7qVo0Ls1LmT90EbJ8Y43h3x++O9muCuG0es08felp+9GriZmgLra2vj9df AJvPsMgI6xdJQtDC/jH/EmGS8jyiX9qiSQDa7xvbQrZOpGwGQd84XoNmGskE2JUn MQTffMiPEJMR3YLNbiP3isWkJrZNYR2J5A7JQ1P3EZuODYModWumfyCsVDkh4fd+ 1aF6cy1Sx3y9or0BQLcXoQ51rqkPMcA8M4ZJRVAA+I5vwuDZYbXDyKKc/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWPQ2t2kOZDTyr7mVdiv1IOuI62MB8GA1UdIwQY MBaAFPDyeuvwKrw1UhKvvxYh4+DUp2BXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFBKNjZfQXF2RFZTRXEtX0ZpSGo0TlNuWUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83OTEyYzYtYzlkNC00M2MyLTk2ODgt YzQ1ZjhlMjUxMjQ4LzEvOFBKNjZfQXF2RFZTRXEtX0ZpSGo0TlNuWUZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83OTEyYzYtYzlkNC00M2MyLTk2ODgtYzQ1ZjhlMjUxMjQ4 LzEvOFBKNjZfQXF2RFZTRXEtX0ZpSGo0TlNuWUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApAepgcYL GFv3zr65EXEWtdAH98A/ZjqE/B/4wSakNWD3X2GHAAseOUzMpBnTV2XLie/dnou5 xv/FkVMOKPYiwZZMjLQW2U4PWP8nN9P27GqajUAFohRCFv5mA2rPEA5YBhQibgIS /19AtSvAbASEP8BDRkHBIT8sBy3obq20RPaiHaolW8gryGDr/+IxJ5SA3LuKP8hL NmQWJ38Bq96TyvIm65U7iN8MafEtW7IRGiNp/QsTgoJQefyPsaXPA79H815aOClF 2IYEMSF9RLXVuR8K4YBzKMzrJvsDfjYZQmQpa2MCYTC5RnfuICA4NGCjr31+XYMz cCQZR5ptKtQYIA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:44:22 2025 by rpki-client