This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft File: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft (raw, json) Hash identifier: eldXC8o6MNwVFGaDkMJiQAXV1+R3QSwQt6i0tuvl7Fk= Subject key identifier: DF:1C:AA:C8:ED:DE:BE:A5:E1:93:36:AB:2C:84:B4:1D:70:8E:6A:73 Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E Certificate issuer: /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e Certificate serial: 019AF0F5DE32D14F1BD872140B0C24A857FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft Manifest number: 11ED Signing time: Sat 06 Dec 2025 00:00:36 +0000 Manifest this update: Sat 06 Dec 2025 00:00:36 +0000 Manifest next update: Sun 07 Dec 2025 00:00:36 +0000 Files and hashes: 1: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl (hash: JBb1g3B9/KXcgaWJQk51dibNg5SJrZiTHbIKe+5RDYs=) 2: VJ4tqhsbAxvbZbMk4UpOcvURbX8.roa (hash: rFhoSBbOl1/XJywdO7kEvMzIk6v7w1dBiBMHnGzvKJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:de:32:d1:4f:1b:d8:72:14:0b:0c:24:a8:57:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e Validity Not Before: Dec 6 00:00:36 2025 GMT Not After : Dec 7 00:00:36 2025 GMT Subject: CN=df1caac8eddebea5e19336ab2c84b41d708e6a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7a:a3:3b:33:10:ba:9c:76:bd:a2:ee:64:47: 01:00:01:65:92:40:43:f2:e2:3f:a4:5c:5f:7f:9a: 7c:90:b7:cb:cd:1a:20:4a:dd:7f:46:74:c3:83:b7: 0d:b1:d1:66:13:16:ff:48:b7:01:7a:f0:0d:6d:1c: a6:53:5b:50:10:a3:fc:3b:24:19:ae:9c:c3:6b:fb: 39:3b:59:42:be:15:fa:1c:3a:cd:07:11:2a:b7:a1: bc:63:0f:c2:22:7c:46:b3:3a:2b:01:cc:e7:5a:e1: 62:1f:22:04:93:cd:d2:3c:bd:2e:de:1b:4a:d0:04: 20:9d:cb:ba:8a:27:44:09:8a:67:0e:a6:91:c6:df: 48:16:e7:4a:1a:2b:2d:dc:bb:9f:22:7a:0f:ce:2d: a2:c0:69:aa:b8:15:29:b8:0f:6d:e6:a6:8d:b5:14: 62:f7:f3:7b:34:01:1e:92:1d:0c:77:de:82:32:08: 9c:2f:d7:d7:47:99:03:d6:68:be:c4:0d:a2:51:4e: b3:b2:7e:11:5d:d7:61:c8:11:69:ae:06:2b:7b:a3: 81:fe:89:8c:f5:a1:cc:c6:bf:85:2d:1c:51:08:61: 82:6f:31:d0:59:29:41:04:0c:fb:e2:8b:9f:7e:a8: 94:ce:56:97:89:6e:4d:8d:9f:11:7b:6c:3d:27:04: 4a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1C:AA:C8:ED:DE:BE:A5:E1:93:36:AB:2C:84:B4:1D:70:8E:6A:73 X509v3 Authority Key Identifier: keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:34:a5:31:a1:02:cc:10:a8:2e:e0:7e:32:a6:dd:52:cb:29: c8:84:1a:9b:ec:41:3c:d6:cf:2d:03:86:2d:a1:47:00:8d:c7: 0f:6d:4f:18:0b:32:29:46:eb:ce:16:59:a7:7a:1a:0b:a5:29: 06:a4:b4:01:d3:00:1d:3e:c2:a4:e3:b5:d3:21:05:d6:04:9e: fa:b6:9b:fd:4a:00:19:e4:ad:a8:6b:97:6a:68:4a:5e:c3:84: ae:43:e6:a1:de:10:83:31:fc:74:ba:e8:12:0a:e2:1d:37:a7: 50:73:5f:71:5d:99:3c:0e:ee:40:53:06:2f:21:76:bc:40:ee: 6b:c5:c0:1e:24:32:c6:23:a7:61:5f:13:f8:bf:93:1f:54:ff: 2b:55:2c:22:83:71:bb:b4:7f:32:7c:e8:82:ef:1c:29:8b:24: a0:67:c1:87:85:79:64:f2:e4:85:d6:c9:23:32:eb:c3:13:01: c0:7b:e1:4f:dd:2f:e2:5c:00:4b:49:79:6e:3f:1f:89:be:58: 30:5c:e8:3c:91:fb:7d:14:a4:03:00:b6:82:61:e4:9a:84:fd: 25:09:ae:aa:9b:9f:fe:39:30:02:b6:67:df:69:ab:b5:85:70: 67:94:ed:24:e5:59:8a:d2:8a:9a:80:b6:b2:08:00:46:0e:59: 30:16:03:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9d4y0U8b2HIUCwwkqFf9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNGE2MzE4YjJlZDZkMGM4MjM0Zjk4MjA4Zjg4ZGUwZTlk NDY5OGUwHhcNMjUxMjA2MDAwMDM2WhcNMjUxMjA3MDAwMDM2WjAzMTEwLwYDVQQD EyhkZjFjYWFjOGVkZGViZWE1ZTE5MzM2YWIyYzg0YjQxZDcwOGU2YTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXqjOzMQupx2vaLuZEcBAAFlkkBD 8uI/pFxff5p8kLfLzRogSt1/RnTDg7cNsdFmExb/SLcBevANbRymU1tQEKP8OyQZ rpzDa/s5O1lCvhX6HDrNBxEqt6G8Yw/CInxGszorAcznWuFiHyIEk83SPL0u3htK 0AQgncu6iidECYpnDqaRxt9IFudKGist3LufInoPzi2iwGmquBUpuA9t5qaNtRRi 9/N7NAEekh0Md96CMgicL9fXR5kD1mi+xA2iUU6zsn4RXddhyBFprgYre6OB/omM 9aHMxr+FLRxRCGGCbzHQWSlBBAz74ouffqiUzlaXiW5NjZ8Re2w9JwRKdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8cqsjt3r6l4ZM2qyyEtB1wjmpzMB8GA1UdIwQY MBaAFPFKYxiy7W0MgjT5ggj4jeDp1GmOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFVwakdMTHRiUXlDTlBtQ0NQaU40T25VYVk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8zMzU3OTctOWIyMS00YzUwLWIwNDQt Yzg2ZWQ0ODYyNTAxLzEvOFVwakdMTHRiUXlDTlBtQ0NQaU40T25VYVk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8zMzU3OTctOWIyMS00YzUwLWIwNDQtYzg2ZWQ0ODYyNTAx LzEvOFVwakdMTHRiUXlDTlBtQ0NQaU40T25VYVk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajSlMaEC zBCoLuB+MqbdUsspyIQam+xBPNbPLQOGLaFHAI3HD21PGAsyKUbrzhZZp3oaC6Up BqS0AdMAHT7CpOO10yEF1gSe+rab/UoAGeStqGuXamhKXsOErkPmod4QgzH8dLro EgriHTenUHNfcV2ZPA7uQFMGLyF2vEDua8XAHiQyxiOnYV8T+L+TH1T/K1UsIoNx u7R/Mnzogu8cKYskoGfBh4V5ZPLkhdbJIzLrwxMBwHvhT90v4lwAS0l5bj8fib5Y MFzoPJH7fRSkAwC2gmHkmoT9JQmuqpuf/jkwArZn32mrtYVwZ5TtJOVZitKKmoC2 sggARg5ZMBYDMg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:12:30 2025 by rpki-client