This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft File: 8rwR5uzToK8-5DlNy7ez75AYfTA.mft (raw, json) Hash identifier: uVDnNDmUYUTlONfwPTN7WPl3RC4sMMOyY4aIV7MeDrM= Subject key identifier: 85:23:76:3C:6A:65:2A:0D:3E:77:8B:B5:D9:D9:B9:82:D0:EB:E3:C0 Authority key identifier: F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30 Certificate issuer: /CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30 Certificate serial: 019B7DF000768D55011649B8C3E94DDC38C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft Manifest number: 0B2D Signing time: Fri 02 Jan 2026 09:00:39 +0000 Manifest this update: Fri 02 Jan 2026 09:00:39 +0000 Manifest next update: Sat 03 Jan 2026 09:00:39 +0000 Files and hashes: 1: 0GtHSCiaQJFiDwKeyKhxviPbL4M.roa (hash: nhw++IeOTGTOw+566EuGYf99+61Y7CRqE1zkmgOdkhw=) 2: 8rwR5uzToK8-5DlNy7ez75AYfTA.crl (hash: Em6HgREL8kwIClczGJmt8lEPzmylME+O99s88rv/jbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:f0:00:76:8d:55:01:16:49:b8:c3:e9:4d:dc:38:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30 Validity Not Before: Jan 2 09:00:39 2026 GMT Not After : Jan 3 09:00:39 2026 GMT Subject: CN=8523763c6a652a0d3e778bb5d9d9b982d0ebe3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6c:4b:0c:c9:8c:84:79:e0:bd:04:5a:63:a8: b3:6f:63:96:47:f1:2a:40:be:b8:ac:3a:be:4c:04: fc:be:5c:fa:d3:69:43:f4:78:ac:98:11:9f:44:38: fe:c2:31:f1:19:5b:dd:62:04:b4:62:2b:15:45:9d: 66:36:de:96:ac:f6:53:8b:ee:70:21:49:48:8d:5d: 1f:31:d5:e8:e8:a8:b9:5e:fe:43:4b:51:77:fb:4d: b2:10:87:44:6d:01:21:77:47:26:c6:49:9c:2b:c4: d3:5b:b2:75:c0:a1:5f:86:eb:61:45:bc:65:d9:f9: a5:fb:5b:5c:56:38:9e:40:76:90:c0:59:cb:ed:6b: 5e:aa:e5:2b:ab:35:6b:83:8b:9e:a6:87:1d:b2:82: cb:95:5c:3d:5a:a7:07:86:00:ec:27:97:ed:a9:b0: db:e9:c1:7a:de:61:91:1e:61:3d:8d:ad:18:c0:2a: 1d:12:ca:d3:39:f2:db:1a:b4:ce:ae:1a:26:d7:06: 47:d1:21:83:62:0a:b8:f2:18:a9:01:2f:cb:2b:cf: 0d:0c:c0:dc:17:88:af:e6:d7:e0:32:a7:ab:71:c1: b9:19:71:3f:ef:6c:bd:63:02:c1:3e:d5:04:7c:d1: cc:5f:d7:b2:e3:6a:46:3f:2f:8b:d2:0b:ae:a5:30: 3c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:23:76:3C:6A:65:2A:0D:3E:77:8B:B5:D9:D9:B9:82:D0:EB:E3:C0 X509v3 Authority Key Identifier: keyid:F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:b9:05:9a:57:a3:63:eb:52:0c:23:13:c8:1e:9b:33:d7:86: 1e:18:55:74:ac:43:09:1e:2b:2e:7f:a8:68:ba:52:38:43:66: 97:30:71:32:6b:06:32:92:67:91:0d:5a:ee:ed:6e:18:ab:b9: 05:c7:35:e1:c1:e0:1c:ea:9a:4e:e1:c5:2d:9b:22:01:be:6d: d8:c1:cd:cb:9a:46:d0:97:3b:6e:84:9b:d0:90:d8:42:7a:a2: 43:b5:b9:37:ef:82:f4:eb:a0:78:aa:a6:d9:d5:ab:08:ec:44: 95:59:70:8d:3e:f1:f5:8c:78:ef:12:6e:ce:1f:89:5f:11:5c: 5b:ab:fe:2c:f2:41:cf:3b:a6:a0:50:f4:5c:78:f1:68:15:8a: 27:df:26:ef:09:02:13:30:54:33:a0:26:3a:73:4b:9c:6a:c7: 42:46:4b:b5:68:89:af:ca:c6:fb:94:26:d7:c2:a5:f0:d8:86: e8:e0:a9:e1:3d:69:86:43:eb:a9:d6:d8:f2:63:95:59:71:d7: a9:8d:9d:22:f6:0c:bd:2c:c4:29:ba:55:35:b3:bb:4a:c2:23: 52:22:12:1b:c6:96:ae:72:63:af:92:0b:d5:e6:03:97:b7:5a: e7:9b:ff:4b:9f:f8:ab:7c:c7:68:cb:78:3c:ca:54:bc:e2:b6: e1:ed:a1:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt98AB2jVUBFkm4w+lN3DjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYmMxMWU2ZWNkM2EwYWYzZWU0Mzk0ZGNiYjdiM2VmOTAx ODdkMzAwHhcNMjYwMTAyMDkwMDM5WhcNMjYwMTAzMDkwMDM5WjAzMTEwLwYDVQQD Eyg4NTIzNzYzYzZhNjUyYTBkM2U3NzhiYjVkOWQ5Yjk4MmQwZWJlM2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmxLDMmMhHngvQRaY6izb2OWR/Eq QL64rDq+TAT8vlz602lD9HismBGfRDj+wjHxGVvdYgS0YisVRZ1mNt6WrPZTi+5w IUlIjV0fMdXo6Ki5Xv5DS1F3+02yEIdEbQEhd0cmxkmcK8TTW7J1wKFfhuthRbxl 2fml+1tcVjieQHaQwFnL7WtequUrqzVrg4uepocdsoLLlVw9WqcHhgDsJ5ftqbDb 6cF63mGRHmE9ja0YwCodEsrTOfLbGrTOrhom1wZH0SGDYgq48hipAS/LK88NDMDc F4iv5tfgMqerccG5GXE/72y9YwLBPtUEfNHMX9ey42pGPy+L0guupTA8tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUjdjxqZSoNPneLtdnZuYLQ6+PAMB8GA1UdIwQY MBaAFPK8Eebs06CvPuQ5Tcu3s++QGH0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHJ3UjV1elRvSzgtNURsTnk3ZXo3NUFZZlRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wZDIzNDQtOTlkNy00MzEzLWIxYjYt N2M0MjQ3YWU1YzFiLzEvOHJ3UjV1elRvSzgtNURsTnk3ZXo3NUFZZlRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8wZDIzNDQtOTlkNy00MzEzLWIxYjYtN2M0MjQ3YWU1YzFi LzEvOHJ3UjV1elRvSzgtNURsTnk3ZXo3NUFZZlRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLkFmlej Y+tSDCMTyB6bM9eGHhhVdKxDCR4rLn+oaLpSOENmlzBxMmsGMpJnkQ1a7u1uGKu5 Bcc14cHgHOqaTuHFLZsiAb5t2MHNy5pG0Jc7boSb0JDYQnqiQ7W5N++C9OugeKqm 2dWrCOxElVlwjT7x9Yx47xJuzh+JXxFcW6v+LPJBzzumoFD0XHjxaBWKJ98m7wkC EzBUM6AmOnNLnGrHQkZLtWiJr8rG+5Qm18Kl8NiG6OCp4T1phkPrqdbY8mOVWXHX qY2dIvYMvSzEKbpVNbO7SsIjUiISG8aWrnJjr5IL1eYDl7da55v/S5/4q3zHaMt4 PMpUvOK24e2hvA== -----END CERTIFICATE-----Generated at Fri Jan 2 11:31:02 2026 by rpki-client