This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json) Hash identifier: FEKY7nli1DeQUSpCkZqGPDkFUNE4jWeaVCRWWiRj4z0= Subject key identifier: A5:E3:25:E5:0A:98:47:E7:8A:70:F7:F6:36:8C:A5:2C:29:D7:62:23 Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e Certificate serial: 019B33B221D6AC66C585B912D339EE796A4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft Manifest number: 122D Signing time: Thu 18 Dec 2025 23:01:10 +0000 Manifest this update: Thu 18 Dec 2025 23:01:10 +0000 Manifest next update: Fri 19 Dec 2025 23:01:10 +0000 Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: 2LQiyg6rhsJpxlttmLmSOa4sCXbzx/ZX21JU3HxjnKk=) 2: mre0Sbb8szBBX4GresgiiwdF634.roa (hash: KGpatw4GtK16xXPbD1RSTnF7RbGtyhCDwaJXsQ0f2K8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:21:d6:ac:66:c5:85:b9:12:d3:39:ee:79:6a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e Validity Not Before: Dec 18 23:01:10 2025 GMT Not After : Dec 19 23:01:10 2025 GMT Subject: CN=a5e325e50a9847e78a70f7f6368ca52c29d76223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cc:7d:94:eb:9f:1c:73:e6:41:ad:87:2a:83: 0a:f9:5a:42:b1:d6:95:22:5b:d9:07:dd:6b:ed:a7: 1c:3e:ac:ef:9f:d0:bf:94:12:ce:5f:7b:aa:ef:43: 51:8c:8b:43:8c:8d:e5:af:20:2b:01:35:d5:0d:b0: cc:7c:56:54:eb:94:68:b1:fa:45:a1:8a:97:89:c9: f7:f3:31:53:e8:8d:51:8c:16:ce:79:49:90:71:df: ea:0a:0e:22:67:8a:bc:98:0c:03:63:70:80:ed:59: 0b:47:c5:f9:7e:d8:75:3b:0e:34:c5:70:6d:6b:e4: ae:01:1e:96:3d:6a:1f:93:66:b7:00:a2:8a:3f:ff: 8b:41:37:f6:f7:b3:a9:b7:89:4a:97:64:7e:03:a9: d7:8e:f6:03:bd:93:a1:ba:9f:fd:30:00:bc:57:92: fa:ed:e2:de:f5:4c:ba:44:95:0a:b7:8c:e2:e5:d4: f1:f6:d6:80:16:e9:94:85:b5:8c:cc:7d:b7:c3:f0: 2f:c4:12:06:4b:e4:1c:a0:03:48:34:04:27:d2:e3: 25:43:3d:a4:1b:93:07:24:c7:c5:72:0b:52:7a:f9: 4b:4b:65:f1:24:f8:5f:a0:07:0e:ca:a5:5d:88:31: 25:eb:98:73:2e:19:b0:b4:0c:2f:57:12:6e:19:ad: 83:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E3:25:E5:0A:98:47:E7:8A:70:F7:F6:36:8C:A5:2C:29:D7:62:23 X509v3 Authority Key Identifier: keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:cc:25:17:de:3c:6f:8f:0c:6f:df:b3:60:e1:71:e5:8f:b8: 82:d2:c8:ae:52:de:46:dd:7c:a7:23:55:7c:a1:2d:e0:75:a8: 82:95:a0:1d:e4:f8:9e:8e:f3:f2:54:76:42:a8:83:fa:0f:97: e9:ad:aa:8e:34:3d:4f:83:98:ac:81:2f:7f:c6:4c:e7:c7:3a: 01:d7:21:95:d8:63:4f:03:9f:16:e2:ee:16:cc:8c:04:39:29: 17:e2:f7:4c:51:c5:6c:7e:b2:2a:d4:11:8f:68:1e:55:4e:45: 3f:9d:10:a6:08:f4:2f:60:72:09:0b:f6:e6:e1:35:e5:d2:78: d6:a8:11:ab:8a:47:ad:ea:04:4d:38:86:84:6f:4e:71:0f:c1: 3c:c3:e5:49:e3:b8:50:a1:26:84:fc:85:49:dc:b4:58:cb:06: f5:0c:e5:e3:c0:2d:cd:9c:16:43:eb:28:20:a2:a3:03:4b:07: 65:04:f1:6d:3d:9e:fe:88:1e:33:59:a3:67:b9:9c:fb:e0:ba: c7:db:92:c5:9e:17:8d:4e:bb:2b:df:02:4b:27:40:14:87:1c: 09:f8:ac:7f:c7:25:00:74:ef:6a:52:c5:b8:b2:6c:a3:ae:5c: fd:1e:ec:fd:8d:af:39:92:43:14:c6:d5:4f:50:99:d9:5f:20: 36:1c:85:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsiHWrGbFhbkS0znueWpMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyOGUwYjc1OGJlNzNhMWRkYmZiNTE3ZWU4YjVlNGY4NjNh MjFmOWUwHhcNMjUxMjE4MjMwMTEwWhcNMjUxMjE5MjMwMTEwWjAzMTEwLwYDVQQD EyhhNWUzMjVlNTBhOTg0N2U3OGE3MGY3ZjYzNjhjYTUyYzI5ZDc2MjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsx9lOufHHPmQa2HKoMK+VpCsdaV IlvZB91r7accPqzvn9C/lBLOX3uq70NRjItDjI3lryArATXVDbDMfFZU65RosfpF oYqXicn38zFT6I1RjBbOeUmQcd/qCg4iZ4q8mAwDY3CA7VkLR8X5fth1Ow40xXBt a+SuAR6WPWofk2a3AKKKP/+LQTf297Opt4lKl2R+A6nXjvYDvZOhup/9MAC8V5L6 7eLe9Uy6RJUKt4zi5dTx9taAFumUhbWMzH23w/AvxBIGS+QcoANINAQn0uMlQz2k G5MHJMfFcgtSevlLS2XxJPhfoAcOyqVdiDEl65hzLhmwtAwvVxJuGa2DbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXjJeUKmEfninD39jaMpSwp12IjMB8GA1UdIwQY MBaAFPKOC3WL5zod2/tRfui15Phjoh+eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG80TGRZdm5PaDNiLTFGLTZMWGstR09pSDU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wODEyOGEtNjkwYS00ZjA4LTg4NjUt NjllM2QwODY2ZWY2LzEvOG80TGRZdm5PaDNiLTFGLTZMWGstR09pSDU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wODEyOGEtNjkwYS00ZjA4LTg4NjUtNjllM2QwODY2ZWY2 LzEvOG80TGRZdm5PaDNiLTFGLTZMWGstR09pSDU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtswlF948 b48Mb9+zYOFx5Y+4gtLIrlLeRt18pyNVfKEt4HWogpWgHeT4no7z8lR2QqiD+g+X 6a2qjjQ9T4OYrIEvf8ZM58c6AdchldhjTwOfFuLuFsyMBDkpF+L3TFHFbH6yKtQR j2geVU5FP50Qpgj0L2ByCQv25uE15dJ41qgRq4pHreoETTiGhG9OcQ/BPMPlSeO4 UKEmhPyFSdy0WMsG9Qzl48AtzZwWQ+soIKKjA0sHZQTxbT2e/ogeM1mjZ7mc++C6 x9uSxZ4XjU67K98CSydAFIccCfisf8clAHTvalLFuLJso65c/R7s/Y2vOZJDFMbV T1CZ2V8gNhyFvA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:38 2025 by rpki-client