This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft File: 8iL76FrkCNN3shfU66eziyS69d0.mft (raw, json) Hash identifier: GUWpnz75cKBle0XDvm8hEymsAL9ZfDKA0dvcaHZUwZM= Subject key identifier: AA:E9:BB:A2:63:8B:6B:76:1E:63:E9:C5:9E:4A:3B:89:CE:A7:C7:3C Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd Certificate serial: 019B300C32F6AA723BA77B7E6E3374A16EC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft Manifest number: 0E31 Signing time: Thu 18 Dec 2025 06:01:04 +0000 Manifest this update: Thu 18 Dec 2025 06:01:04 +0000 Manifest next update: Fri 19 Dec 2025 06:01:04 +0000 Files and hashes: 1: 5-tO1DtUPdvn-gHncHuAbgt6OiM.roa (hash: L6Z02H1tfyOJ9fsH+lsAomG7wfqgJlWMWjJh/1Ka9SI=) 2: 8iL76FrkCNN3shfU66eziyS69d0.crl (hash: GXc6CM/A9tqSKaLIWFF1jIMsIzK2zaEmAOhQ+Djwuu4=) 3: gPE9V0tO8JPLDv8MCZH-UuWvdnQ.roa (hash: 5qjlUc3/t7psPBo135Wzs5OYxrc/B+KKSYzn0gcEaGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:32:f6:aa:72:3b:a7:7b:7e:6e:33:74:a1:6e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd Validity Not Before: Dec 18 06:01:04 2025 GMT Not After : Dec 19 06:01:04 2025 GMT Subject: CN=aae9bba2638b6b761e63e9c59e4a3b89cea7c73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:85:53:ce:46:58:f6:f4:ba:8f:e7:ad:60:a6: e6:d4:7e:c4:f3:c2:c3:fc:e3:38:71:60:de:d7:3c: 59:89:35:ed:7c:bc:94:21:08:4a:39:e4:4d:dd:5b: 60:05:8a:2d:db:98:4e:28:c9:8f:6e:f2:79:d8:a4: bb:24:8f:02:51:55:b5:2d:cc:0d:d3:76:d7:97:90: 42:89:99:83:cd:9c:3c:9d:71:0b:24:43:da:30:ab: a3:ae:d6:be:6d:2a:52:dd:26:9f:11:3d:bf:be:f3: ee:7f:49:ea:7a:ac:e4:ef:b3:23:25:06:82:8f:6e: 9b:3c:49:15:33:66:fb:81:1f:ac:2a:a6:22:9d:fe: 2d:98:46:cb:3a:f4:e6:fa:19:04:bd:ea:7e:3a:b7: 83:c5:69:be:93:44:79:8f:0e:1e:85:a0:04:f3:f5: 34:6e:b9:09:4a:57:3f:af:71:af:b9:6e:35:90:00: e6:25:fb:f0:26:fb:01:7f:44:9d:b2:af:dd:f2:ad: 35:66:0e:60:87:f9:a5:5a:ba:a9:65:67:e2:a2:99: eb:48:2a:90:c5:98:db:c5:32:1e:bb:a5:ab:05:7b: 2f:6d:f7:b3:af:cc:1c:a0:04:50:68:b2:99:ea:ef: 80:3f:bc:4e:60:0c:19:f2:69:cf:5c:77:18:e5:de: 89:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E9:BB:A2:63:8B:6B:76:1E:63:E9:C5:9E:4A:3B:89:CE:A7:C7:3C X509v3 Authority Key Identifier: keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:b9:ce:0f:75:40:f5:ec:74:4b:b2:c9:a6:b4:fb:5a:0e:a7: ba:91:7f:e6:1c:f2:74:ab:6f:c7:46:5c:0f:4b:1e:7d:13:41: 1e:59:ff:70:92:aa:50:61:8f:9a:b4:fc:31:c3:b3:8c:d5:09: e3:d3:12:7b:45:ca:a6:98:1f:cc:a2:5f:d8:a3:09:07:04:bf: a1:89:f3:08:e8:11:a8:f4:cc:ba:0a:2d:c8:7d:80:47:ef:af: df:97:3a:43:b2:62:93:04:25:58:ff:15:69:4c:7d:5c:9c:76: 50:f3:e1:4f:3f:bf:da:29:2e:24:2d:24:ec:7b:82:03:f7:79: 3f:ac:6b:e3:c3:62:eb:4f:84:15:a6:17:4a:5c:f8:24:03:59: 6f:a0:30:f4:b9:86:d1:01:d9:4e:41:cd:85:c5:74:cc:ce:94: d5:85:79:9f:d1:7e:e7:d2:da:51:c3:89:a7:e5:a5:a1:c5:0e: 59:81:45:a5:e0:d8:98:65:70:5f:30:5e:fb:68:fa:38:a5:a0: 77:df:13:4d:72:7f:29:44:ab:b5:f5:a2:51:1b:94:9b:5f:be: a5:75:47:1c:cd:0b:e1:4b:cf:47:9d:dd:b3:40:34:2f:26:5a: 6a:10:ee:ab:8b:80:c6:b9:66:96:7b:a7:aa:a5:a1:ae:ff:6e: c7:51:45:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDDL2qnI7p3t+bjN0oW7GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMjJmYmU4NWFlNDA4ZDM3N2IyMTdkNGViYTdiMzhiMjRi YWY1ZGQwHhcNMjUxMjE4MDYwMTA0WhcNMjUxMjE5MDYwMTA0WjAzMTEwLwYDVQQD EyhhYWU5YmJhMjYzOGI2Yjc2MWU2M2U5YzU5ZTRhM2I4OWNlYTdjNzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4VTzkZY9vS6j+etYKbm1H7E88LD /OM4cWDe1zxZiTXtfLyUIQhKOeRN3VtgBYot25hOKMmPbvJ52KS7JI8CUVW1LcwN 03bXl5BCiZmDzZw8nXELJEPaMKujrta+bSpS3SafET2/vvPuf0nqeqzk77MjJQaC j26bPEkVM2b7gR+sKqYinf4tmEbLOvTm+hkEvep+OreDxWm+k0R5jw4ehaAE8/U0 brkJSlc/r3GvuW41kADmJfvwJvsBf0Sdsq/d8q01Zg5gh/mlWrqpZWfiopnrSCqQ xZjbxTIeu6WrBXsvbfezr8wcoARQaLKZ6u+AP7xOYAwZ8mnPXHcY5d6JPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrpu6Jji2t2HmPpxZ5KO4nOp8c8MB8GA1UdIwQY MBaAFPIi++ha5AjTd7IX1Ouns4skuvXdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xYWE4NzUtMDNiNS00YzE3LWJiMzkt YjBjMWUzMzA0ZTc0LzEvOGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8xYWE4NzUtMDNiNS00YzE3LWJiMzktYjBjMWUzMzA0ZTc0 LzEvOGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibnOD3VA 9ex0S7LJprT7Wg6nupF/5hzydKtvx0ZcD0sefRNBHln/cJKqUGGPmrT8McOzjNUJ 49MSe0XKppgfzKJf2KMJBwS/oYnzCOgRqPTMugotyH2AR++v35c6Q7JikwQlWP8V aUx9XJx2UPPhTz+/2ikuJC0k7HuCA/d5P6xr48Ni60+EFaYXSlz4JANZb6Aw9LmG 0QHZTkHNhcV0zM6U1YV5n9F+59LaUcOJp+WlocUOWYFFpeDYmGVwXzBe+2j6OKWg d98TTXJ/KUSrtfWiURuUm1++pXVHHM0L4UvPR53ds0A0LyZaahDuq4uAxrlmlnun qqWhrv9ux1FFLA== -----END CERTIFICATE-----Generated at Thu Dec 18 09:50:14 2025 by rpki-client