This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft File: 8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json) Hash identifier: 758FT66KAYUwlVIyf5oKPCZW7QOMlP2d2MNwjO2XnGU= Subject key identifier: 36:07:CB:8F:9D:42:7E:88:66:11:95:DD:71:7F:81:5E:B0:3C:0D:A8 Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92 Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992 Certificate serial: 019B45B817EC4624A483608D18B44195ACE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft Manifest number: 1080 Signing time: Mon 22 Dec 2025 11:00:51 +0000 Manifest this update: Mon 22 Dec 2025 11:00:51 +0000 Manifest next update: Tue 23 Dec 2025 11:00:51 +0000 Files and hashes: 1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: g9pX5/TP/dsmXxwyUuKL9k7UFmBrYMgJTVuLpTK7BFE=) 2: alsuRe4zIZd9zoPDISZt1Bveg70.roa (hash: EWpeZ5riJCjW/KG77BSV/gky0WcGkW9H+LHjXXYnpDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 11:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:17:ec:46:24:a4:83:60:8d:18:b4:41:95:ac:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992 Validity Not Before: Dec 22 11:00:51 2025 GMT Not After : Dec 23 11:00:51 2025 GMT Subject: CN=3607cb8f9d427e88661195dd717f815eb03c0da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:eb:da:e7:15:5c:f2:bc:26:71:18:68:9e:a2: ad:f2:8e:30:16:21:92:c8:43:7f:a1:4a:23:eb:38: 49:0f:60:e4:96:90:92:51:1b:1f:cb:72:2a:9b:96: 3b:79:36:71:bd:30:c1:ab:56:67:8e:94:84:31:ff: e2:66:f9:9b:19:68:1c:e9:c6:d1:06:05:02:0d:38: 7e:3f:ba:41:43:25:b8:f6:8c:27:2a:7c:ea:7c:ea: 56:19:46:22:d4:0d:ca:02:4b:01:c1:0a:5f:e0:88: 70:ca:84:a2:93:da:36:3f:da:c1:cb:3a:96:af:e8: 55:cd:b6:5c:c4:93:73:45:c0:be:e5:65:b5:03:f7: d1:47:00:d5:4c:b6:4e:88:f3:b5:73:56:96:23:58: 3e:8f:59:db:7e:87:0e:8d:f9:1b:b4:fb:82:86:10: 8b:3d:a6:4d:7d:ab:ac:d4:a6:aa:da:a3:6a:80:09: 4a:fb:8d:a6:4b:d0:6b:21:f0:25:8a:98:85:57:84: 68:ea:85:00:9c:ee:2c:7f:d8:6c:16:06:4e:e9:d1: 5f:f8:f9:e9:10:09:0e:5d:88:50:4d:3d:20:e7:44: 7d:a8:75:a6:ad:14:fb:d5:eb:d2:79:6f:b3:bb:4c: 34:f2:5e:be:e4:c9:35:bc:76:d4:f0:45:9d:e3:85: aa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:07:CB:8F:9D:42:7E:88:66:11:95:DD:71:7F:81:5E:B0:3C:0D:A8 X509v3 Authority Key Identifier: keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:0f:97:a5:6d:aa:bb:23:f0:78:70:5a:df:c9:35:76:4f:51: 00:37:d6:2c:73:32:21:e5:7d:6f:0f:22:2d:e7:4e:61:72:53: ba:2e:7d:90:62:7f:9d:f4:7d:8f:d0:c2:4f:63:45:eb:3b:96: 4e:66:af:3b:15:23:ae:b5:1b:fd:86:bc:97:3d:2e:7f:2b:bd: ee:c7:55:99:e6:d2:79:04:85:4e:31:e6:dc:90:60:44:42:c8: f9:f0:60:b4:03:1c:6b:ec:4a:25:aa:4d:c4:38:a4:7c:46:23: f3:f5:4f:1c:38:75:5a:f2:9d:1c:a9:74:0c:16:f5:7b:fc:23: 53:73:d3:ba:d3:8c:29:db:6a:68:86:7a:1d:4f:eb:dc:82:85: 17:bc:e8:cf:2c:76:66:32:47:2b:89:28:6e:77:7d:dc:05:cd: 7d:fc:b3:71:0d:a2:08:43:8e:ae:12:b8:80:eb:67:e8:8c:7d: 5d:08:37:df:71:bc:bd:d1:e3:6c:b5:af:c1:86:c8:58:25:16: 09:e4:70:27:3e:ea:cd:71:dd:32:a6:8c:39:f8:00:b2:36:f4: 0f:b0:05:03:43:66:a6:05:47:2d:40:06:2b:ef:e3:9a:57:e9: 57:2d:54:c1:8e:d5:16:cb:b6:6b:ed:73:30:72:32:6c:49:43: 22:1e:9a:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuBfsRiSkg2CNGLRBlazmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZDU5M2IxYzg3YjgxNzM5ZWM0MTkxMDI5NWJmMzg1ZjJj OWE5OTIwHhcNMjUxMjIyMTEwMDUxWhcNMjUxMjIzMTEwMDUxWjAzMTEwLwYDVQQD EygzNjA3Y2I4ZjlkNDI3ZTg4NjYxMTk1ZGQ3MTdmODE1ZWIwM2MwZGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOva5xVc8rwmcRhonqKt8o4wFiGS yEN/oUoj6zhJD2DklpCSURsfy3Iqm5Y7eTZxvTDBq1ZnjpSEMf/iZvmbGWgc6cbR BgUCDTh+P7pBQyW49ownKnzqfOpWGUYi1A3KAksBwQpf4IhwyoSik9o2P9rByzqW r+hVzbZcxJNzRcC+5WW1A/fRRwDVTLZOiPO1c1aWI1g+j1nbfocOjfkbtPuChhCL PaZNfaus1Kaq2qNqgAlK+42mS9BrIfAlipiFV4Ro6oUAnO4sf9hsFgZO6dFf+Pnp EAkOXYhQTT0g50R9qHWmrRT71evSeW+zu0w08l6+5Mk1vHbU8EWd44Wq4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYHy4+dQn6IZhGV3XF/gV6wPA2oMB8GA1UdIwQY MBaAFPLVk7HIe4FznsQZEClb84XyyamSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHRXVHNjaDdnWE9leEJrUUtWdnpoZkxKcVpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85MzkxYTYtZGQzZi00OTMzLTlkYTIt OWI4ZDY4ZWU4N2ZjLzEvOHRXVHNjaDdnWE9leEJrUUtWdnpoZkxKcVpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85MzkxYTYtZGQzZi00OTMzLTlkYTItOWI4ZDY4ZWU4N2Zj LzEvOHRXVHNjaDdnWE9leEJrUUtWdnpoZkxKcVpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQ+XpW2q uyPweHBa38k1dk9RADfWLHMyIeV9bw8iLedOYXJTui59kGJ/nfR9j9DCT2NF6zuW TmavOxUjrrUb/Ya8lz0ufyu97sdVmebSeQSFTjHm3JBgRELI+fBgtAMca+xKJapN xDikfEYj8/VPHDh1WvKdHKl0DBb1e/wjU3PTutOMKdtqaIZ6HU/r3IKFF7zozyx2 ZjJHK4kobnd93AXNffyzcQ2iCEOOrhK4gOtn6Ix9XQg333G8vdHjbLWvwYbIWCUW CeRwJz7qzXHdMqaMOfgAsjb0D7AFA0NmpgVHLUAGK+/jmlfpVy1UwY7VFsu2a+1z MHIybElDIh6aSQ== -----END CERTIFICATE-----Generated at Mon Dec 22 17:52:17 2025 by rpki-client