This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft File: 8_N8e7MVIGk0AdPGVyftXKpx3kM.mft (raw, json) Hash identifier: SdntUyyskz0klW6LKsJc0aHJ2+TfOH59sfmkTURmwnM= Subject key identifier: AF:A8:7A:BA:49:72:55:E2:42:26:27:83:EA:E2:15:6B:5E:4F:22:88 Authority key identifier: F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43 Certificate issuer: /CN=f3f37c7bb31520693401d3c65727ed5caa71de43 Certificate serial: 019AF31D67EFFF69BB75AB3298DD821135E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:03:01 +0000 Manifest this update: Sat 06 Dec 2025 10:03:01 +0000 Manifest next update: Sun 07 Dec 2025 10:03:01 +0000 Files and hashes: 1: 8_N8e7MVIGk0AdPGVyftXKpx3kM.crl (hash: xGfspzOk5A3F3OY98cIdOc+GeamWzfFGsaQC4EDnE4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:67:ef:ff:69:bb:75:ab:32:98:dd:82:11:35:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3f37c7bb31520693401d3c65727ed5caa71de43 Validity Not Before: Dec 6 10:03:01 2025 GMT Not After : Dec 7 10:03:01 2025 GMT Subject: CN=afa87aba497255e242262783eae2156b5e4f2288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:13:84:77:1e:09:66:e9:85:8d:ec:92:1b:45: ce:01:7a:b7:cb:94:6b:34:a8:d6:78:e4:05:d6:c5: 51:e7:9e:e9:36:42:bf:d2:45:9a:ab:3e:17:33:83: 11:fc:d2:b1:3e:8b:42:eb:f8:22:37:43:29:01:35: 96:97:56:df:f8:5e:1d:90:26:f4:dd:9e:ef:8e:99: 09:a0:bb:72:35:ab:11:7d:69:0a:58:9f:30:cf:2d: f2:72:b8:16:e3:55:04:11:06:0a:14:ee:8e:02:d0: a8:fe:3f:8c:ee:91:05:02:a3:77:20:8d:f4:fa:d4: e4:45:cf:e5:34:cd:bb:df:ea:07:7e:3d:b0:d8:fe: 59:bb:a4:fb:f5:f9:06:9f:d5:bc:97:93:c9:21:73: aa:68:2e:36:c6:3f:f9:88:10:b5:9d:a9:97:b2:c7: ea:dc:0d:7c:31:37:0d:d6:4a:43:eb:f8:f9:32:91: 42:5c:41:79:97:df:ef:d4:af:fa:e5:33:5d:78:96: 7a:68:41:36:c4:46:4f:d4:37:bb:98:cf:98:93:a9: e9:ac:7a:ed:c3:c3:f2:cd:ac:a0:10:3e:b9:0b:67: 5d:b2:6f:09:74:cf:c9:7f:f8:bc:4c:3d:1d:19:33: 11:94:ec:cf:11:9c:19:ec:b4:ad:20:03:7c:ec:66: 98:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A8:7A:BA:49:72:55:E2:42:26:27:83:EA:E2:15:6B:5E:4F:22:88 X509v3 Authority Key Identifier: keyid:F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d1:30:c7:69:c4:28:b1:55:76:9f:de:30:fc:89:64:5c:12: bf:c0:da:52:e3:e5:bb:86:1b:6e:a5:4e:7c:1c:4e:00:b4:44: 2f:1a:70:89:5b:44:cd:56:bd:74:cb:90:da:97:56:14:9e:7a: f0:f6:78:dd:83:41:c7:70:1d:d8:94:08:2d:63:75:d5:1b:9b: f2:0f:7f:da:ad:e2:1c:6f:2f:35:26:f4:86:8f:da:e0:37:1c: 3c:68:a5:e9:1a:56:06:27:d6:d6:09:79:58:63:51:be:dd:aa: e8:69:21:ff:ce:6e:94:e8:7c:44:e1:22:36:46:b3:4d:a2:9d: 38:9b:ad:98:3b:ba:2d:60:00:b9:a7:d0:e2:41:7b:ad:49:c4: 26:4c:5f:cd:b0:82:8a:90:4d:74:f3:62:e0:f6:3e:b6:b1:bd: 32:08:38:33:b5:4a:2b:f4:1b:de:a0:07:2f:c1:86:6f:0d:5b: 65:39:42:be:9b:de:92:21:17:c8:79:28:de:42:bc:fe:1e:26: ed:86:c9:08:19:8d:d9:ab:d8:01:01:80:91:bc:a3:9c:96:2e: 94:13:a1:e3:9a:46:61:a0:35:1a:63:a8:d2:e7:90:81:27:f3: 13:be:02:9a:44:9d:72:a1:9a:d6:a4:e3:39:29:fb:b5:3e:7c: e5:2c:64:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHWfv/2m7dasymN2CETXkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZjM3YzdiYjMxNTIwNjkzNDAxZDNjNjU3MjdlZDVjYWE3 MWRlNDMwHhcNMjUxMjA2MTAwMzAxWhcNMjUxMjA3MTAwMzAxWjAzMTEwLwYDVQQD EyhhZmE4N2FiYTQ5NzI1NWUyNDIyNjI3ODNlYWUyMTU2YjVlNGYyMjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBOEdx4JZumFjeySG0XOAXq3y5Rr NKjWeOQF1sVR557pNkK/0kWaqz4XM4MR/NKxPotC6/giN0MpATWWl1bf+F4dkCb0 3Z7vjpkJoLtyNasRfWkKWJ8wzy3ycrgW41UEEQYKFO6OAtCo/j+M7pEFAqN3II30 +tTkRc/lNM273+oHfj2w2P5Zu6T79fkGn9W8l5PJIXOqaC42xj/5iBC1namXssfq 3A18MTcN1kpD6/j5MpFCXEF5l9/v1K/65TNdeJZ6aEE2xEZP1De7mM+Yk6nprHrt w8PyzaygED65C2ddsm8JdM/Jf/i8TD0dGTMRlOzPEZwZ7LStIAN87GaYQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+oerpJclXiQiYng+riFWteTyKIMB8GA1UdIwQY MBaAFPPzfHuzFSBpNAHTxlcn7Vyqcd5DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOF9OOGU3TVZJR2swQWRQR1Z5ZnRYS3B4M2tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xYjdmOTgtNjM2OS00Njc2LTkyYzMt ZDM1ZThmYjQ2ZWJmLzEvOF9OOGU3TVZJR2swQWRQR1Z5ZnRYS3B4M2tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xYjdmOTgtNjM2OS00Njc2LTkyYzMtZDM1ZThmYjQ2ZWJm LzEvOF9OOGU3TVZJR2swQWRQR1Z5ZnRYS3B4M2tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9Ewx2nE KLFVdp/eMPyJZFwSv8DaUuPlu4YbbqVOfBxOALRELxpwiVtEzVa9dMuQ2pdWFJ56 8PZ43YNBx3Ad2JQILWN11Rub8g9/2q3iHG8vNSb0ho/a4DccPGil6RpWBifW1gl5 WGNRvt2q6Gkh/85ulOh8ROEiNkazTaKdOJutmDu6LWAAuafQ4kF7rUnEJkxfzbCC ipBNdPNi4PY+trG9Mgg4M7VKK/Qb3qAHL8GGbw1bZTlCvpvekiEXyHko3kK8/h4m 7YbJCBmN2avYAQGAkbyjnJYulBOh45pGYaA1GmOo0ueQgSfzE74CmkSdcqGa1qTj OSn7tT585SxkcA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:44:48 2025 by rpki-client