This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft File: 8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json) Hash identifier: 6psSWPYFdSkMJeKTlBnLcLQVb5mam4EX0/4zWQ/6PeA= Subject key identifier: 6A:9C:FF:53:17:1B:E8:9E:41:28:6B:31:DA:5D:6D:44:C8:32:B8:9A Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68 Certificate issuer: /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68 Certificate serial: 019B40FFB76E107CF03440213541F2A146CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft Manifest number: 13FE Signing time: Sun 21 Dec 2025 13:00:58 +0000 Manifest this update: Sun 21 Dec 2025 13:00:58 +0000 Manifest next update: Mon 22 Dec 2025 13:00:58 +0000 Files and hashes: 1: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: KKvqD8AHOT0pJUB+dHC5YwKJURqlqj2ukRojasTIOTI=) 2: xInS4OBZE4XZhCIYPtcEJ4L0sW0.roa (hash: KkBHzYhuSu08Rz0qev1AtQ0vsja7TfnwTOncPO/urxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:b7:6e:10:7c:f0:34:40:21:35:41:f2:a1:46:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68 Validity Not Before: Dec 21 13:00:58 2025 GMT Not After : Dec 22 13:00:58 2025 GMT Subject: CN=6a9cff53171be89e41286b31da5d6d44c832b89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5f:b6:a4:23:0d:35:3e:6e:8d:4e:5f:7d:ba: 74:44:f9:2e:8e:ee:a0:4c:31:f1:18:b6:67:b2:16: 82:df:f4:41:a7:9e:4d:75:f3:dc:9c:e9:79:fd:88: f4:3a:cc:1a:05:2a:56:10:48:98:85:be:97:a2:d2: 53:23:02:1b:73:83:ab:07:b7:71:91:17:fa:e1:84: cb:57:67:ba:40:1a:4f:a9:59:73:4e:f4:86:b5:d2: 7c:6f:67:20:f1:f9:32:da:75:f1:24:75:3d:f7:4e: bf:a1:c2:55:d4:17:2d:d0:ae:7c:b7:ca:89:bb:47: e5:ad:b8:36:54:fc:8b:24:28:4e:b0:93:22:85:87: c5:db:3f:91:69:e9:b3:38:d7:40:7c:13:50:5b:a2: 4d:43:38:9d:04:ec:15:70:c2:3c:7d:dd:34:05:4c: 55:53:89:d8:46:cf:a3:3c:73:36:78:c8:a8:7f:ae: 3d:8b:ab:0c:fd:de:0f:62:88:2d:f1:55:90:a1:b1: 0c:3e:ce:98:01:1e:47:3f:77:83:be:db:7d:36:bc: f5:43:2f:76:ef:1b:4e:97:4d:bb:18:a2:d1:bc:bd: 30:2a:fb:93:83:b3:7c:9c:6d:9f:0e:bd:28:32:d1: 54:1c:bc:67:d3:c0:df:28:89:af:78:7f:f3:b7:8b: e9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9C:FF:53:17:1B:E8:9E:41:28:6B:31:DA:5D:6D:44:C8:32:B8:9A X509v3 Authority Key Identifier: keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:2b:1a:ec:e1:f4:f8:6d:a2:9e:f2:77:20:60:1e:b4:da:00: 70:ed:fb:bc:99:a5:f2:fe:f5:d5:c4:52:3c:96:7e:31:97:2c: d2:49:2a:f0:cd:ae:8f:a6:35:54:83:e4:25:79:29:6c:6f:66: 88:c2:71:f8:53:17:f3:9e:da:b1:74:4d:3e:62:27:ea:59:4b: e9:98:eb:ba:bd:9e:c5:be:e3:23:c7:a1:88:2a:fc:4f:19:12: 27:ca:68:fd:13:14:e9:89:ea:df:bc:d0:7f:22:e6:cf:4e:43: 22:6a:ae:6a:4e:74:bf:37:cb:5a:a9:cd:58:58:09:bc:1e:e4: 0d:f5:ea:20:a3:36:c2:e3:1a:f3:62:d6:5c:ef:71:ef:cb:09: fc:64:c6:6c:ef:1c:ba:7e:c1:37:52:45:38:3e:7c:f6:64:2b: b2:df:ef:c2:d3:1c:20:39:16:7d:58:cc:6e:1e:f9:9a:b3:39: 47:a9:d0:91:c3:f0:30:ac:3e:63:2e:fd:e7:25:33:fb:0e:ee: 67:e3:c6:23:62:3a:d9:cc:63:26:2c:cf:8c:11:67:6f:df:6b: 40:d0:d4:8a:cb:9b:18:8c:88:b1:5b:c5:8b:28:1d:ea:4a:0e: eb:bf:69:17:81:f7:8a:88:0f:b5:9d:c3:b2:e0:ef:44:c1:cc: c7:e0:a0:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/7duEHzwNEAhNUHyoUbNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMTBjNTBkMmNjODdiZGJmYTViYjUxMWExOGEyMjc3YmEw MGJhNjgwHhcNMjUxMjIxMTMwMDU4WhcNMjUxMjIyMTMwMDU4WjAzMTEwLwYDVQQD Eyg2YTljZmY1MzE3MWJlODllNDEyODZiMzFkYTVkNmQ0NGM4MzJiODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF+2pCMNNT5ujU5ffbp0RPkuju6g TDHxGLZnshaC3/RBp55NdfPcnOl5/Yj0OswaBSpWEEiYhb6XotJTIwIbc4OrB7dx kRf64YTLV2e6QBpPqVlzTvSGtdJ8b2cg8fky2nXxJHU9906/ocJV1Bct0K58t8qJ u0flrbg2VPyLJChOsJMihYfF2z+RaemzONdAfBNQW6JNQzidBOwVcMI8fd00BUxV U4nYRs+jPHM2eMiof649i6sM/d4PYogt8VWQobEMPs6YAR5HP3eDvtt9Nrz1Qy92 7xtOl027GKLRvL0wKvuTg7N8nG2fDr0oMtFUHLxn08DfKImveH/zt4vpUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqc/1MXG+ieQShrMdpdbUTIMriaMB8GA1UdIwQY MBaAFPMQxQ0syHvb+lu1EaGKIne6ALpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZWE0YTQtMjc3NC00NTQ1LTgwNWYt MWU5ZjBiZGViNTMyLzEvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8wZWE0YTQtMjc3NC00NTQ1LTgwNWYtMWU5ZjBiZGViNTMy LzEvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzSsa7OH0 +G2invJ3IGAetNoAcO37vJml8v711cRSPJZ+MZcs0kkq8M2uj6Y1VIPkJXkpbG9m iMJx+FMX857asXRNPmIn6llL6Zjrur2exb7jI8ehiCr8TxkSJ8po/RMU6Ynq37zQ fyLmz05DImquak50vzfLWqnNWFgJvB7kDfXqIKM2wuMa82LWXO9x78sJ/GTGbO8c un7BN1JFOD589mQrst/vwtMcIDkWfVjMbh75mrM5R6nQkcPwMKw+Yy795yUz+w7u Z+PGI2I62cxjJizPjBFnb99rQNDUisubGIyIsVvFiygd6koO679pF4H3iogPtZ3D suDvRMHMx+CgSA== -----END CERTIFICATE-----Generated at Sun Dec 21 20:33:45 2025 by rpki-client