This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft File: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft (raw, json) Hash identifier: uAKe338FteKhgRmO83yk+BqcuCjwglZxJv8cXDDw8NI= Subject key identifier: EB:B1:0A:46:7C:EF:12:18:D9:81:7F:65:59:20:56:88:66:7D:6F:15 Authority key identifier: F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86 Certificate issuer: /CN=f12b381e00d61621acc45cf18a3e70597d5b9186 Certificate serial: 019B747ED0BDD0E3FC2EC12E04C2A707A253 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft Manifest number: 1445 Signing time: Wed 31 Dec 2025 13:00:26 +0000 Manifest this update: Wed 31 Dec 2025 13:00:26 +0000 Manifest next update: Thu 01 Jan 2026 13:00:26 +0000 Files and hashes: 1: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl (hash: ZCK16IqjqfmAwKx86JzYs+ABKcggjI1qFsT3MytOywo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:7e:d0:bd:d0:e3:fc:2e:c1:2e:04:c2:a7:07:a2:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f12b381e00d61621acc45cf18a3e70597d5b9186 Validity Not Before: Dec 31 13:00:26 2025 GMT Not After : Jan 1 13:00:26 2026 GMT Subject: CN=ebb10a467cef1218d9817f6559205688667d6f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:94:b0:59:fa:5a:1e:9f:d4:21:b8:18:cb:b8: 60:f8:ba:67:4e:8a:2c:7e:c6:2c:f0:80:51:75:4b: a4:f3:e8:68:f1:6a:c7:8c:5b:2d:65:65:b8:eb:32: 8c:7c:9f:43:17:e0:6b:84:9d:3f:24:4b:af:bf:79: eb:35:3c:c2:2f:19:e1:42:9c:0b:d4:57:62:cd:86: d1:46:18:03:2e:c5:c3:c7:a7:fa:f7:2a:c5:65:8f: d1:92:94:35:4e:24:2b:a7:22:5f:c6:40:f8:b5:ac: eb:b0:85:bd:4f:9e:fd:02:9e:98:d2:1f:0e:59:15: eb:92:5d:91:24:02:e7:97:a8:31:18:8d:8f:99:ec: bb:5d:20:1a:4e:bd:4a:77:95:ac:db:cc:ca:ee:e1: 7a:60:e4:19:f7:6f:a0:1a:75:56:00:99:0f:50:83: e0:d4:85:3f:06:cf:a7:ff:ab:29:a1:dd:01:52:31: 07:1d:e5:eb:97:06:a8:aa:ff:a6:7f:21:1c:d3:b8: c9:d1:95:e0:a9:30:f1:0c:2d:d7:71:b3:5e:2c:20: e9:c0:e4:3f:57:9a:34:14:6f:90:ad:e5:ea:e2:7b: 6c:19:ef:6e:ea:45:55:15:a0:90:d8:06:67:3b:38: da:de:47:21:6e:25:ab:4e:dd:a1:09:c3:31:c1:5f: 98:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B1:0A:46:7C:EF:12:18:D9:81:7F:65:59:20:56:88:66:7D:6F:15 X509v3 Authority Key Identifier: keyid:F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:83:33:82:1a:6d:38:0f:4c:3b:f4:7e:0e:58:20:6b:47:c0: bc:f1:54:16:dd:45:e0:bd:47:24:75:4b:80:45:55:6d:55:7c: db:66:44:70:bf:e6:23:38:e2:13:06:e7:0f:e1:89:f6:08:2f: 8a:47:df:31:bb:a5:ce:14:9b:6f:0a:53:c3:de:39:ef:df:0a: fc:e6:8c:6d:c6:af:39:9d:e7:76:12:0a:42:4e:94:c0:0e:65: 61:e7:d5:e5:fd:17:6b:8b:8d:d1:74:8e:0d:69:78:af:40:3a: 6e:80:65:55:87:24:54:83:b3:56:5e:2a:23:b8:02:2c:6e:e8: 87:4c:9d:0f:99:25:3a:5f:83:a7:9a:d4:4d:2c:e1:ab:1b:83: 7d:a5:fd:33:00:45:9c:e6:87:81:97:b6:c7:c1:b5:c2:a9:42: eb:a1:bf:d4:d9:14:81:81:0c:24:92:b1:61:1e:f2:4e:c5:39: 04:8b:d0:90:81:73:27:86:c7:a1:4c:dc:ed:28:e8:2e:fd:7d: a3:1a:bd:14:d9:29:c4:a1:86:77:56:df:6e:2a:27:33:23:2b: 78:15:e6:0f:bc:c0:a9:65:02:d0:c4:0c:69:7a:a9:68:dd:e1: 52:cc:01:57:10:5e:0d:35:9e:ce:27:9c:e1:c5:e9:f8:4f:c4: fd:fa:fd:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt0ftC90OP8LsEuBMKnB6JTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMmIzODFlMDBkNjE2MjFhY2M0NWNmMThhM2U3MDU5N2Q1 YjkxODYwHhcNMjUxMjMxMTMwMDI2WhcNMjYwMTAxMTMwMDI2WjAzMTEwLwYDVQQD EyhlYmIxMGE0NjdjZWYxMjE4ZDk4MTdmNjU1OTIwNTY4ODY2N2Q2ZjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJSwWfpaHp/UIbgYy7hg+LpnToos fsYs8IBRdUuk8+ho8WrHjFstZWW46zKMfJ9DF+BrhJ0/JEuvv3nrNTzCLxnhQpwL 1FdizYbRRhgDLsXDx6f69yrFZY/RkpQ1TiQrpyJfxkD4tazrsIW9T579Ap6Y0h8O WRXrkl2RJALnl6gxGI2Pmey7XSAaTr1Kd5Ws28zK7uF6YOQZ92+gGnVWAJkPUIPg 1IU/Bs+n/6spod0BUjEHHeXrlwaoqv+mfyEc07jJ0ZXgqTDxDC3XcbNeLCDpwOQ/ V5o0FG+QreXq4ntsGe9u6kVVFaCQ2AZnOzja3kchbiWrTt2hCcMxwV+YpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuxCkZ87xIY2YF/ZVkgVohmfW8VMB8GA1UdIwQY MBaAFPErOB4A1hYhrMRc8Yo+cFl9W5GGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFNzNEhnRFdGaUdzeEZ6eGlqNXdXWDFia1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84YjJjOWYtMTVjZS00MzRlLWJlOTMt NWQ0MzZjZWY2MDhmLzEvOFNzNEhnRFdGaUdzeEZ6eGlqNXdXWDFia1lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS84YjJjOWYtMTVjZS00MzRlLWJlOTMtNWQ0MzZjZWY2MDhm LzEvOFNzNEhnRFdGaUdzeEZ6eGlqNXdXWDFia1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4Mzghpt OA9MO/R+Dlgga0fAvPFUFt1F4L1HJHVLgEVVbVV822ZEcL/mIzjiEwbnD+GJ9ggv ikffMbulzhSbbwpTw945798K/OaMbcavOZ3ndhIKQk6UwA5lYefV5f0Xa4uN0XSO DWl4r0A6boBlVYckVIOzVl4qI7gCLG7oh0ydD5klOl+Dp5rUTSzhqxuDfaX9MwBF nOaHgZe2x8G1wqlC66G/1NkUgYEMJJKxYR7yTsU5BIvQkIFzJ4bHoUzc7SjoLv19 oxq9FNkpxKGGd1bfbionMyMreBXmD7zAqWUC0MQMaXqpaN3hUswBVxBeDTWeziec 4cXp+E/E/fr9EQ== -----END CERTIFICATE-----Generated at Wed Dec 31 21:12:05 2025 by rpki-client