This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft File: 8SEJSHr0AKY-PLARo9VJ51H9LBg.mft (raw, json) Hash identifier: y5IrakU8PhrwNNfvZ8oaTy7F+whD/vkRD3GmcDBz65M= Subject key identifier: 0F:DE:A8:DD:08:B7:52:B0:D6:F9:80:4F:60:2B:0A:49:81:C9:C3:37 Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18 Certificate issuer: /CN=f12109487af400a63e3cb011a3d549e751fd2c18 Certificate serial: 019B657A3D969FBBDB9A2AE568FBFCF1CA7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft Manifest number: 0E7F Signing time: Sun 28 Dec 2025 15:01:08 +0000 Manifest this update: Sun 28 Dec 2025 15:01:08 +0000 Manifest next update: Mon 29 Dec 2025 15:01:08 +0000 Files and hashes: 1: 8SEJSHr0AKY-PLARo9VJ51H9LBg.crl (hash: b1iFAuR62NlFhEhUMIVbS6n6tmIQEf8IoeVfvhEOXrc=) 2: r15VgfDzfklLUPcVx6y07YzgPWU.roa (hash: px8SZ3fdpiQxLHW7vHT/LHov8V1krmhAYBpslqeJkek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:7a:3d:96:9f:bb:db:9a:2a:e5:68:fb:fc:f1:ca:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18 Validity Not Before: Dec 28 15:01:08 2025 GMT Not After : Dec 29 15:01:08 2025 GMT Subject: CN=0fdea8dd08b752b0d6f9804f602b0a4981c9c337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d5:bd:f3:6a:68:a3:35:15:62:c0:28:07:4b: 2a:e2:09:60:e8:e9:c4:9b:e2:b4:c8:77:b1:3a:ef: d1:c7:80:e1:07:fe:6e:13:e0:aa:ac:88:a4:c4:1d: d9:ae:73:08:ae:5e:d2:e6:f8:43:19:25:c2:be:7b: ad:22:14:d2:e3:3c:cf:75:a1:c0:f4:cc:04:e0:44: 02:ec:79:2d:c2:4f:c2:bb:88:e4:59:0e:b5:e2:50: 18:06:a8:57:a3:66:72:e9:9d:dc:81:2b:ed:c3:d7: 4e:05:62:1f:ba:be:65:9e:b5:0d:5f:3c:69:bb:db: 92:b8:a9:7a:a8:5f:2f:37:78:f0:74:3b:03:9d:7c: a7:0a:3e:89:e5:53:5d:ee:69:7c:5b:49:56:2a:80: 53:9e:c8:67:e1:16:b2:de:c0:54:c6:95:cd:1e:71: 0f:da:aa:16:42:3c:44:4e:13:c9:f5:d8:ff:4c:4f: c4:20:2f:ce:8f:70:ca:d0:cb:bb:74:cc:42:6b:5c: 98:82:2a:df:53:6d:e3:22:18:e8:6f:9b:86:ee:16: 0e:78:a4:a9:9a:6d:c8:ba:90:57:5a:38:be:cb:ec: e2:f1:ed:47:3e:0b:58:65:5a:96:c5:f4:ac:f9:91: 5a:af:33:63:8e:43:33:95:33:f9:a8:c2:af:aa:95: 2c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DE:A8:DD:08:B7:52:B0:D6:F9:80:4F:60:2B:0A:49:81:C9:C3:37 X509v3 Authority Key Identifier: keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:dd:90:88:9a:1b:b6:75:a2:c2:33:50:83:c3:2e:54:dc:73: f9:df:b2:93:22:20:f7:24:2c:13:b0:2c:3b:ca:d0:d0:10:e5: 46:3a:59:e8:b4:da:f3:64:ec:a3:c6:e2:19:40:f4:f0:91:34: ee:b5:0d:61:e3:77:01:22:8b:dc:74:8d:c6:7c:7f:be:02:c8: f8:42:bb:e8:b6:2f:52:43:8f:92:e4:10:48:66:a3:c9:50:3b: 07:85:a1:23:25:c2:c4:27:4d:e2:c9:e8:95:4e:bb:06:c3:c8: c5:53:90:a0:30:7c:03:3a:1e:c5:4e:ec:90:38:52:ab:ae:ec: d9:43:97:b1:f4:16:70:62:d2:9a:a8:9b:ea:89:cc:70:0b:ee: cc:7e:33:1c:8d:a2:ad:7f:af:d3:ed:b1:33:26:86:0c:84:c3: 30:32:66:80:3d:50:d2:68:ff:7d:79:8e:92:8c:0c:57:d9:b2: f5:f5:da:ab:56:d0:ae:55:20:b9:be:42:c4:dc:ce:b1:35:c3: cb:37:da:72:80:1a:b7:ef:d1:76:aa:ca:1e:fc:3a:ef:36:e8: 09:b5:c8:86:9d:79:ab:d8:c9:6e:c4:e7:1c:c3:4a:6b:81:98: 65:70:84:41:1f:0e:87:b9:c0:bd:57:97:4f:9a:7a:3f:52:51: 33:04:f0:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlej2Wn7vbmirlaPv88cp9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMjEwOTQ4N2FmNDAwYTYzZTNjYjAxMWEzZDU0OWU3NTFm ZDJjMTgwHhcNMjUxMjI4MTUwMTA4WhcNMjUxMjI5MTUwMTA4WjAzMTEwLwYDVQQD EygwZmRlYThkZDA4Yjc1MmIwZDZmOTgwNGY2MDJiMGE0OTgxYzljMzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNW982poozUVYsAoB0sq4glg6OnE m+K0yHexOu/Rx4DhB/5uE+CqrIikxB3ZrnMIrl7S5vhDGSXCvnutIhTS4zzPdaHA 9MwE4EQC7Hktwk/Cu4jkWQ614lAYBqhXo2Zy6Z3cgSvtw9dOBWIfur5lnrUNXzxp u9uSuKl6qF8vN3jwdDsDnXynCj6J5VNd7ml8W0lWKoBTnshn4Ray3sBUxpXNHnEP 2qoWQjxEThPJ9dj/TE/EIC/Oj3DK0Mu7dMxCa1yYgirfU23jIhjob5uG7hYOeKSp mm3IupBXWji+y+zi8e1HPgtYZVqWxfSs+ZFarzNjjkMzlTP5qMKvqpUsxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/eqN0It1Kw1vmAT2ArCkmBycM3MB8GA1UdIwQY MBaAFPEhCUh69ACmPjywEaPVSedR/SwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFNFSlNIcjBBS1ktUExBUm85Vko1MUg5TEJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83NWNkMTctMDQ0MS00YTRhLWI3ZWUt ZjA1ZWZhYjc0ZjczLzEvOFNFSlNIcjBBS1ktUExBUm85Vko1MUg5TEJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy83NWNkMTctMDQ0MS00YTRhLWI3ZWUtZjA1ZWZhYjc0Zjcz LzEvOFNFSlNIcjBBS1ktUExBUm85Vko1MUg5TEJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS92QiJob tnWiwjNQg8MuVNxz+d+ykyIg9yQsE7AsO8rQ0BDlRjpZ6LTa82Tso8biGUD08JE0 7rUNYeN3ASKL3HSNxnx/vgLI+EK76LYvUkOPkuQQSGajyVA7B4WhIyXCxCdN4sno lU67BsPIxVOQoDB8AzoexU7skDhSq67s2UOXsfQWcGLSmqib6onMcAvuzH4zHI2i rX+v0+2xMyaGDITDMDJmgD1Q0mj/fXmOkowMV9my9fXaq1bQrlUgub5CxNzOsTXD yzfacoAat+/RdqrKHvw67zboCbXIhp15q9jJbsTnHMNKa4GYZXCEQR8Oh7nAvVeX T5p6P1JRMwTwug== -----END CERTIFICATE-----Generated at Sun Dec 28 20:30:17 2025 by rpki-client