This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft File: t8wtor25e-kSotlC6-fq-kZR6IU.mft (raw, json) Hash identifier: jIokKsHYCEvHtyft1jbjyAsXuhDA9EecqR4ypVMHrpo= Subject key identifier: D9:AE:32:57:43:50:67:D8:C1:B6:C4:1B:D4:9E:F1:22:2C:92:76:21 Authority key identifier: B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85 Certificate issuer: /CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885 Certificate serial: 019B4EF222E3FC436EFA49D1A7F27A9B6759 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft Manifest number: 179A Signing time: Wed 24 Dec 2025 06:00:50 +0000 Manifest this update: Wed 24 Dec 2025 06:00:50 +0000 Manifest next update: Thu 25 Dec 2025 06:00:50 +0000 Files and hashes: 1: INh9G5iQoMvQ_1itqGn6rIFWztw.roa (hash: DlHpU6WxKqPj/r93yoW9dLdgNHjiaW8IJyXbLuzYYAg=) 2: t8wtor25e-kSotlC6-fq-kZR6IU.crl (hash: n6nq6aDlDoCug2L1VMJEDMKrcM18xFaM90pQRz3ws2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:22:e3:fc:43:6e:fa:49:d1:a7:f2:7a:9b:67:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885 Validity Not Before: Dec 24 06:00:50 2025 GMT Not After : Dec 25 06:00:50 2025 GMT Subject: CN=d9ae3257435067d8c1b6c41bd49ef1222c927621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c0:6c:d2:d3:10:f1:f7:a4:e3:f3:3f:b3:d3: cd:db:df:d6:a5:fe:a8:0b:a7:8a:ed:a8:45:42:73: fc:6c:f9:78:64:a8:d2:c0:bf:bf:97:e8:a5:97:46: 72:d6:b2:93:91:7d:fc:ce:1b:9c:9d:4e:08:af:fb: 9a:0a:8c:74:53:0f:e5:3e:dc:fa:ea:ac:87:6a:7a: a3:71:d6:82:0d:e8:15:6a:23:d0:8b:ab:6e:91:91: 92:1e:c2:c0:01:f4:9c:83:ca:c9:e4:67:ba:e5:a1: 03:4f:c5:04:4e:88:9e:c1:07:0c:88:8b:87:20:6f: 69:43:83:31:87:4b:c7:b5:a0:67:e5:c6:18:e7:b6: 64:58:35:3c:9d:f7:f7:df:dc:10:8f:6c:17:3e:7b: 90:63:35:f1:e1:fc:df:6e:43:63:94:7e:20:4a:aa: d4:e2:4b:b6:60:e7:15:9f:1e:63:a3:71:4b:60:7e: 7f:8e:c2:43:98:20:ec:35:d7:ec:d7:5f:18:de:4b: ff:ea:c0:ac:6c:a5:ba:c2:94:ba:cd:77:9a:d4:07: 3c:21:ed:4d:07:30:72:e1:b0:88:a0:d3:37:8e:82: 10:4a:b6:e7:3d:9f:86:fa:86:06:e0:78:e1:43:20: b4:a5:ea:08:78:c8:fd:56:db:e0:62:31:15:e6:83: 42:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AE:32:57:43:50:67:D8:C1:B6:C4:1B:D4:9E:F1:22:2C:92:76:21 X509v3 Authority Key Identifier: keyid:B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:8e:5e:31:1d:89:97:62:3a:3c:46:b2:30:c1:a7:d7:01:75: 34:4e:2c:31:d9:9e:cf:91:e4:6f:6c:ed:f9:50:be:c5:e4:55: 2b:11:ed:bd:c9:4f:a9:8f:68:3f:e9:41:c1:c5:14:13:72:28: 0c:bf:98:9c:d5:a5:e4:6d:35:76:a1:24:82:f5:f1:e9:33:99: ba:7b:4b:d0:99:27:2f:38:27:51:ba:e5:8a:b3:d9:2c:ee:1f: b9:7c:f6:94:03:bd:32:f8:1e:b6:12:77:84:5f:26:9d:22:56: 99:2b:0f:98:29:15:64:83:b1:ab:dc:5a:9e:0f:85:f2:d6:75: 2e:2e:71:fc:98:b0:75:ce:0d:20:39:6e:c2:b0:b6:66:9b:8d: 08:c7:8b:eb:f9:d1:41:3d:47:e2:35:88:c5:08:ee:a2:ac:05: b1:d0:bf:2c:3b:9f:ef:06:f4:37:2f:a4:f7:72:06:f5:f0:d0: f3:19:69:86:d4:6d:6c:15:c0:8c:0f:98:e2:6a:34:3c:50:b7: 07:9f:c1:eb:9f:dc:6a:3f:b4:1e:dd:11:e7:9d:be:6a:cf:e4: b4:54:7f:9c:ef:1f:18:b2:98:37:c2:75:08:59:94:8c:65:3b: 87:2a:8b:22:28:56:00:a9:77:ed:13:28:6a:f3:c0:21:23:6e: 97:a2:2a:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8iLj/ENu+knRp/J6m2dZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Y2MyZGEyYmRiOTdiZTkxMmEyZDk0MmViZTdlYWZhNDY1 MWU4ODUwHhcNMjUxMjI0MDYwMDUwWhcNMjUxMjI1MDYwMDUwWjAzMTEwLwYDVQQD EyhkOWFlMzI1NzQzNTA2N2Q4YzFiNmM0MWJkNDllZjEyMjJjOTI3NjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MBs0tMQ8fek4/M/s9PN29/Wpf6o C6eK7ahFQnP8bPl4ZKjSwL+/l+ill0Zy1rKTkX38zhucnU4Ir/uaCox0Uw/lPtz6 6qyHanqjcdaCDegVaiPQi6tukZGSHsLAAfScg8rJ5Ge65aEDT8UEToiewQcMiIuH IG9pQ4Mxh0vHtaBn5cYY57ZkWDU8nff339wQj2wXPnuQYzXx4fzfbkNjlH4gSqrU 4ku2YOcVnx5jo3FLYH5/jsJDmCDsNdfs118Y3kv/6sCsbKW6wpS6zXea1Ac8Ie1N BzBy4bCIoNM3joIQSrbnPZ+G+oYG4HjhQyC0peoIeMj9VtvgYjEV5oNCKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmuMldDUGfYwbbEG9Se8SIsknYhMB8GA1UdIwQY MBaAFLfMLaK9uXvpEqLZQuvn6vpGUeiFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDh3dG9yMjVlLWtTb3RsQzYtZnEta1pSNklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lZTZjNmEtZmI1NS00ZGM4LTlkY2Yt MjJlN2EzN2U4ZTM4LzEvdDh3dG9yMjVlLWtTb3RsQzYtZnEta1pSNklVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9lZTZjNmEtZmI1NS00ZGM4LTlkY2YtMjJlN2EzN2U4ZTM4 LzEvdDh3dG9yMjVlLWtTb3RsQzYtZnEta1pSNklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmY5eMR2J l2I6PEayMMGn1wF1NE4sMdmez5Hkb2zt+VC+xeRVKxHtvclPqY9oP+lBwcUUE3Io DL+YnNWl5G01dqEkgvXx6TOZuntL0JknLzgnUbrlirPZLO4fuXz2lAO9MvgethJ3 hF8mnSJWmSsPmCkVZIOxq9xang+F8tZ1Li5x/Jiwdc4NIDluwrC2ZpuNCMeL6/nR QT1H4jWIxQjuoqwFsdC/LDuf7wb0Ny+k93IG9fDQ8xlphtRtbBXAjA+Y4mo0PFC3 B5/B65/caj+0Ht0R552+as/ktFR/nO8fGLKYN8J1CFmUjGU7hyqLIihWAKl37RMo avPAISNul6IqWQ== -----END CERTIFICATE-----Generated at Wed Dec 24 14:46:01 2025 by rpki-client