This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft File: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft (raw, json) Hash identifier: p8s4VmPBnDopn7BGKac1I2G1M3O4itMECs3dgXLbidc= Subject key identifier: AC:93:A7:52:B9:23:CA:FC:8E:2F:F9:19:CF:64:1A:35:DF:BE:9B:20 Authority key identifier: F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24 Certificate issuer: /CN=f260075c0944fb1634b628bb10b67f12c873e424 Certificate serial: 019B3FED4461DE8C955E6DAB5BA04581AA6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft Manifest number: DF Signing time: Sun 21 Dec 2025 08:01:12 +0000 Manifest this update: Sun 21 Dec 2025 08:01:12 +0000 Manifest next update: Mon 22 Dec 2025 08:01:12 +0000 Files and hashes: 1: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl (hash: CoxoCgEnNKMmxCRMywWFNboa4DHAhyAwy+I2nqYBklo=) 2: Xd7ijHjwtfXf4zZiE_HQf8TmqP0.roa (hash: w9B2n3G58lCmyJiIUIJesOdWt7RmGyJHNmHtEsf7LS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:44:61:de:8c:95:5e:6d:ab:5b:a0:45:81:aa:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f260075c0944fb1634b628bb10b67f12c873e424 Validity Not Before: Dec 21 08:01:12 2025 GMT Not After : Dec 22 08:01:12 2025 GMT Subject: CN=ac93a752b923cafc8e2ff919cf641a35dfbe9b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9f:95:bd:9f:ba:75:22:ef:0b:7f:f8:89:00: 91:f9:c6:db:c9:f4:eb:06:da:b1:61:87:6d:3e:5f: f6:08:14:74:37:9d:f0:9c:b5:85:34:8a:24:fe:80: 83:6f:7d:d6:a3:93:21:5e:ca:c8:71:50:5a:66:98: 77:80:bf:e1:c8:01:eb:ce:60:70:ed:64:46:fd:32: fd:96:34:0f:b6:21:e2:83:11:1c:b9:d6:89:18:c0: 9f:69:47:de:a5:bf:46:33:aa:b3:77:ca:2c:f5:76: 7d:8d:56:25:04:4c:b6:32:fe:06:e6:87:69:59:88: 9e:3e:ad:e3:70:f5:55:e3:8b:cc:cc:69:4e:8d:01: 4f:b4:0c:bc:82:cf:90:3a:51:75:82:d7:5f:58:4e: 00:0d:87:00:4f:ad:9f:1e:96:e9:7f:b0:1b:e6:f0: e6:d6:72:d2:a1:d6:e9:c0:54:ec:74:cf:b4:46:3f: f8:3a:6c:c4:d5:99:45:36:ab:ca:96:07:78:d6:3d: 1a:bd:4d:4d:65:3b:ac:8d:08:ef:55:60:17:33:91: de:54:c3:d6:38:94:85:9b:7f:a0:b2:30:1f:14:6d: 5e:77:a7:1f:73:ce:87:3e:c0:76:8e:d9:e6:9e:9f: d4:b6:f4:75:cc:dd:2d:d4:6c:4a:2f:0e:b3:c0:53: d1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:93:A7:52:B9:23:CA:FC:8E:2F:F9:19:CF:64:1A:35:DF:BE:9B:20 X509v3 Authority Key Identifier: keyid:F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2e:93:73:fd:ef:6c:5a:15:18:ef:39:24:44:f6:ea:a9:8a: 64:50:06:74:9d:ff:25:c1:85:9c:56:4e:9b:db:bc:66:55:7a: ca:41:56:de:e3:95:5e:39:a6:8b:c1:9b:eb:b1:d6:5a:8b:aa: ab:29:79:c0:7c:b7:74:b9:f1:db:50:b8:e8:14:81:3b:d8:8e: e1:47:18:9f:77:b4:8d:c6:ef:9e:f6:c2:d7:f1:2a:24:17:96: 9b:4b:d9:d9:52:64:62:4e:55:0d:4f:ac:b4:83:ad:12:1d:49: 15:24:a9:6d:b0:b3:92:e1:8d:57:75:5c:78:9c:2c:d2:9f:31: ca:86:ff:6e:ff:2b:1a:1f:f0:0f:a6:16:af:56:c5:eb:a9:03: d5:fa:4b:95:51:af:a5:ac:12:e0:34:9d:28:32:20:21:94:91: d3:0d:e9:af:15:4c:00:a8:0a:15:a1:7e:ec:35:29:89:49:27: 78:dd:83:52:8e:05:fa:20:ce:89:34:f3:a8:81:3d:f9:48:50: 9c:e0:05:db:4b:75:2a:96:5f:33:89:02:ae:9f:fe:0a:53:ab: 4f:e1:44:d1:6a:e0:33:64:27:2e:6e:af:a7:0d:3c:4f:b2:8b: a1:8d:3f:83:e0:b4:a6:a5:55:bf:84:99:29:89:44:93:91:c4: d2:f7:61:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7URh3oyVXm2rW6BFgaptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjAwNzVjMDk0NGZiMTYzNGI2MjhiYjEwYjY3ZjEyYzg3 M2U0MjQwHhcNMjUxMjIxMDgwMTEyWhcNMjUxMjIyMDgwMTEyWjAzMTEwLwYDVQQD EyhhYzkzYTc1MmI5MjNjYWZjOGUyZmY5MTljZjY0MWEzNWRmYmU5YjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0p+VvZ+6dSLvC3/4iQCR+cbbyfTr BtqxYYdtPl/2CBR0N53wnLWFNIok/oCDb33Wo5MhXsrIcVBaZph3gL/hyAHrzmBw 7WRG/TL9ljQPtiHigxEcudaJGMCfaUfepb9GM6qzd8os9XZ9jVYlBEy2Mv4G5odp WYiePq3jcPVV44vMzGlOjQFPtAy8gs+QOlF1gtdfWE4ADYcAT62fHpbpf7Ab5vDm 1nLSodbpwFTsdM+0Rj/4OmzE1ZlFNqvKlgd41j0avU1NZTusjQjvVWAXM5HeVMPW OJSFm3+gsjAfFG1ed6cfc86HPsB2jtnmnp/UtvR1zN0t1GxKLw6zwFPRqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyTp1K5I8r8ji/5Gc9kGjXfvpsgMB8GA1UdIwQY MBaAFPJgB1wJRPsWNLYouxC2fxLIc+QkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85ZDVjZTUtYjZjOS00OGRhLThlOGEt NmEzYmI5MjQ0M2ZjLzEvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy85ZDVjZTUtYjZjOS00OGRhLThlOGEtNmEzYmI5MjQ0M2Zj LzEvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfS6Tc/3v bFoVGO85JET26qmKZFAGdJ3/JcGFnFZOm9u8ZlV6ykFW3uOVXjmmi8Gb67HWWouq qyl5wHy3dLnx21C46BSBO9iO4UcYn3e0jcbvnvbC1/EqJBeWm0vZ2VJkYk5VDU+s tIOtEh1JFSSpbbCzkuGNV3VceJws0p8xyob/bv8rGh/wD6YWr1bF66kD1fpLlVGv pawS4DSdKDIgIZSR0w3prxVMAKgKFaF+7DUpiUkneN2DUo4F+iDOiTTzqIE9+UhQ nOAF20t1KpZfM4kCrp/+ClOrT+FE0WrgM2QnLm6vpw08T7KLoY0/g+C0pqVVv4SZ KYlEk5HE0vdh4w== -----END CERTIFICATE-----Generated at Sun Dec 21 15:02:11 2025 by rpki-client