This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft File: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft (raw, json) Hash identifier: z01gJeXLqZrLxx0eXEQ3bxhYfUjoZYh8Hfec2hpGY0Y= Subject key identifier: 68:E5:4C:D0:A2:3D:68:29:F3:26:95:D0:4A:7C:1E:04:E8:1A:54:E5 Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Certificate serial: 019B3D908A5A8947B2E53726362506E32885 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft Manifest number: 122C Signing time: Sat 20 Dec 2025 21:00:41 +0000 Manifest this update: Sat 20 Dec 2025 21:00:41 +0000 Manifest next update: Sun 21 Dec 2025 21:00:41 +0000 Files and hashes: 1: 5ZNnU0ul1PvuB6V3S-Y8qQNgW4Y.roa (hash: RgXKHj2HAygr87kEjLFNnsJCWJ6hg9g9jGeFNERw+T8=) 2: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl (hash: KM/8wS8jJX7QcQWDNGqy0b6BxH7CKMWTp88BnTtzA5Q=) 3: 9c9IMdwPViHHlGIXa-EYvM5rE2c.roa (hash: Y48jer5SEM8eKuN0ygvkfPpOfOkBQ0uV7/NANNuOcto=) 4: DYGgwKgBr-X-UJNWrHRoiByEE0k.roa (hash: 0UcPzEKGR92DACoKDDn5wkyZ0r0HCl4oapCFAXQREB8=) 5: Xi938_LG0fo08PcIDueZffuVF3Q.roa (hash: 5cOzoa9nCO1ZRf33mVdI0qSK+ZoAQbsBPtAf2Kylv28=) 6: oAsyO0CJws2AMTge7-6JSychHyY.roa (hash: OT9pAjZ/E5OdooOn7gC+YSxibLo6Rf5dBxQdNRyss9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:8a:5a:89:47:b2:e5:37:26:36:25:06:e3:28:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Validity Not Before: Dec 20 21:00:41 2025 GMT Not After : Dec 21 21:00:41 2025 GMT Subject: CN=68e54cd0a23d6829f32695d04a7c1e04e81a54e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:80:f3:4d:a0:74:00:ab:e5:d5:0f:9d:2b:fe: 20:ff:73:87:69:de:19:5a:46:58:1d:f8:fa:f9:d7: d2:94:29:19:86:e1:db:5c:41:c7:01:5c:f3:c8:4a: bc:84:f6:d2:b9:ce:83:67:48:b5:be:a8:84:f4:bd: 2e:79:01:eb:a3:0d:08:6f:01:d3:91:9c:08:10:b2: ca:a1:98:53:34:89:f0:3a:36:4e:1e:13:35:86:69: be:08:51:2a:43:a3:d8:c1:4a:5e:84:01:65:c5:78: c5:dd:c4:db:6d:0a:3c:d4:10:f4:88:cd:5a:66:3f: f9:69:11:77:96:63:e7:6a:19:4e:cb:c6:42:c2:cb: 12:7d:e2:09:59:94:42:9b:74:91:e8:bf:c4:31:a1: 58:36:24:41:8c:7d:2c:6d:33:6d:ed:87:84:12:03: 72:9c:d0:95:03:fe:51:30:f6:a0:fc:1f:fd:d7:3f: d0:d3:7d:93:c9:f9:15:87:8e:d4:67:c3:d2:d2:16: ed:8d:3f:01:5c:3d:53:aa:e5:70:c2:90:64:fd:b3: e0:ed:48:d4:68:62:de:4e:38:97:cb:33:54:d5:a2: e5:3f:a9:ab:9f:a6:62:32:67:12:13:e7:dc:c4:ed: 27:c7:ed:37:89:07:f7:e9:d4:dc:c7:49:1f:6b:c6: 2c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E5:4C:D0:A2:3D:68:29:F3:26:95:D0:4A:7C:1E:04:E8:1A:54:E5 X509v3 Authority Key Identifier: keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ea:70:90:a9:88:e3:d7:6a:84:b2:6a:c0:e1:83:9f:35:9f:a0: b9:1f:6c:e9:33:69:eb:2f:20:d2:67:32:53:1c:ed:8c:9d:16: e9:83:8e:fa:b9:a1:7e:31:b2:98:d4:04:73:de:87:50:b2:1b: 5e:03:de:43:fa:7f:9c:0c:94:c0:3f:b8:ca:20:dc:71:db:f4: 63:a8:40:96:f7:35:b3:7b:b2:37:2e:1e:83:06:f6:d0:7d:71: 1f:a0:59:c2:54:e6:f3:03:32:34:ce:a8:dd:ef:bc:8f:8e:6b: 37:b3:4f:a3:c5:d5:4e:58:07:41:49:c1:0d:1d:ad:32:76:53: 12:d8:26:df:f5:c4:8b:55:77:af:15:64:47:70:ea:6e:72:78: 0b:85:2a:2c:11:fd:38:6c:53:a3:e8:1b:1e:31:b7:92:6f:0b: 7b:a1:fc:2c:f7:5c:e1:cc:e6:3e:8a:82:06:0d:15:ca:36:02: 24:89:0a:0e:71:13:db:60:4f:f7:c7:51:b6:47:60:23:ea:00: 38:d0:e6:79:c3:2b:ab:ef:bf:f4:dc:69:9e:c6:1d:7c:ce:3c: 33:9f:cd:42:eb:01:20:f3:d4:bb:28:8e:f9:8a:aa:77:c2:59: cd:ee:58:d4:10:d4:6c:26:e7:2e:27:d0:e5:14:91:78:9c:57: 19:c5:d4:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kIpaiUey5TcmNiUG4yiFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYmQwMmVhNDRhOWJlZTM1YjYzZDFhYjNlMjViMTRmMTlh MzVhNTUwHhcNMjUxMjIwMjEwMDQxWhcNMjUxMjIxMjEwMDQxWjAzMTEwLwYDVQQD Eyg2OGU1NGNkMGEyM2Q2ODI5ZjMyNjk1ZDA0YTdjMWUwNGU4MWE1NGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4DzTaB0AKvl1Q+dK/4g/3OHad4Z WkZYHfj6+dfSlCkZhuHbXEHHAVzzyEq8hPbSuc6DZ0i1vqiE9L0ueQHrow0IbwHT kZwIELLKoZhTNInwOjZOHhM1hmm+CFEqQ6PYwUpehAFlxXjF3cTbbQo81BD0iM1a Zj/5aRF3lmPnahlOy8ZCwssSfeIJWZRCm3SR6L/EMaFYNiRBjH0sbTNt7YeEEgNy nNCVA/5RMPag/B/91z/Q032TyfkVh47UZ8PS0hbtjT8BXD1TquVwwpBk/bPg7UjU aGLeTjiXyzNU1aLlP6mrn6ZiMmcSE+fcxO0nx+03iQf36dTcx0kfa8YsMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjlTNCiPWgp8yaV0Ep8HgToGlTlMB8GA1UdIwQY MBaAFPG9AupEqb7jW2PRqz4lsU8Zo1pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEt ZmUwYTY1OGQ5ZGVkLzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEtZmUwYTY1OGQ5ZGVk LzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6nCQqYjj 12qEsmrA4YOfNZ+guR9s6TNp6y8g0mcyUxztjJ0W6YOO+rmhfjGymNQEc96HULIb XgPeQ/p/nAyUwD+4yiDccdv0Y6hAlvc1s3uyNy4egwb20H1xH6BZwlTm8wMyNM6o 3e+8j45rN7NPo8XVTlgHQUnBDR2tMnZTEtgm3/XEi1V3rxVkR3DqbnJ4C4UqLBH9 OGxTo+gbHjG3km8Le6H8LPdc4czmPoqCBg0VyjYCJIkKDnET22BP98dRtkdgI+oA ONDmecMrq++/9NxpnsYdfM48M5/NQusBIPPUuyiO+Yqqd8JZze5Y1BDUbCbnLifQ 5RSReJxXGcXUvQ== -----END CERTIFICATE-----Generated at Sun Dec 21 05:54:39 2025 by rpki-client