This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft File: 8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json) Hash identifier: tahlSN70/meE3Ges21JIrPU1Xm3/Je88K8M/vM7b7Lo= Subject key identifier: 20:BA:88:D3:0F:DF:DB:F5:BD:F2:19:4F:0B:22:46:90:35:8D:CA:AC Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B Certificate issuer: /CN=f21153011de4586ad8a803887ee7d2b00aefd61b Certificate serial: 019AF19B86D531B701B090E614D8D2C003B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft Manifest number: 05B8 Signing time: Sat 06 Dec 2025 03:01:32 +0000 Manifest this update: Sat 06 Dec 2025 03:01:32 +0000 Manifest next update: Sun 07 Dec 2025 03:01:32 +0000 Files and hashes: 1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: /vXVH53nw9KDqk89Gf6wSr4wXpZVLivqQtAxxBuW5ps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:86:d5:31:b7:01:b0:90:e6:14:d8:d2:c0:03:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b Validity Not Before: Dec 6 03:01:32 2025 GMT Not After : Dec 7 03:01:32 2025 GMT Subject: CN=20ba88d30fdfdbf5bdf2194f0b224690358dcaac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:23:02:32:a6:2e:96:b8:6f:ea:20:52:ef:9a: 6f:6c:aa:64:72:1e:03:26:4b:dc:41:63:8d:19:8c: ce:13:23:35:40:85:a5:b9:04:87:d4:69:5b:4a:7b: d2:93:ab:4f:2b:dd:ba:48:88:db:91:33:40:d0:08: 1c:8f:5a:67:89:22:a5:4c:f1:dc:9a:df:83:ff:98: d7:fd:c4:a6:e7:e5:f8:74:84:04:ba:7b:2e:52:10: d9:9e:06:fe:6c:69:3a:a1:c5:5a:64:c1:e2:af:88: 70:23:ab:3a:8b:d4:93:04:0c:d2:da:98:a8:47:7f: ff:85:de:64:dd:07:9b:55:2c:3d:ac:f5:c9:da:38: 52:2e:76:8c:a9:39:09:21:58:e9:1e:46:ec:fb:a7: c0:c2:93:cc:cd:13:da:90:6c:65:7d:5e:cf:8d:15: ed:0c:27:76:fb:28:b0:83:84:89:47:e6:92:44:da: bf:a3:6c:83:d5:a1:a4:bd:68:c9:f4:43:1d:d7:2e: 65:dc:c5:be:84:9a:02:83:5f:0b:e5:8e:e4:6d:f5: 9c:47:dc:de:84:9f:8e:ff:86:15:b3:2f:97:96:ee: d8:95:05:9c:b6:54:f2:aa:95:ca:cd:df:18:8c:aa: 33:8f:a3:df:26:7e:39:76:89:cd:7e:a9:ac:59:4c: 59:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BA:88:D3:0F:DF:DB:F5:BD:F2:19:4F:0B:22:46:90:35:8D:CA:AC X509v3 Authority Key Identifier: keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:9d:f1:18:44:7f:f9:f0:9a:96:71:98:75:d9:61:30:be:93: 3b:47:0c:4c:59:8d:bc:71:95:1e:3a:c2:f5:1f:16:c1:8d:d0: fd:2c:3a:8f:8d:a3:5b:2d:6a:18:a8:e9:97:77:cc:98:ec:cd: eb:b8:5f:13:ff:ad:1a:77:88:84:97:e6:f7:2d:8b:6e:76:c0: 07:50:f9:7d:8f:23:a3:7f:80:27:bf:b9:95:3a:13:dc:b6:88: fa:c6:d6:77:97:92:5f:7c:18:99:07:5c:67:47:c9:0e:20:e8: 69:21:0a:d2:6e:ed:e9:8d:51:6e:09:25:fd:bb:cd:99:78:21: 92:cb:87:9b:56:e8:0d:29:46:37:d5:5c:02:55:5c:4a:ac:36: 2e:bb:84:7d:d1:7e:45:3f:08:b3:ef:13:ff:68:34:9c:a1:a4: 83:bd:f6:93:c5:77:11:29:ff:4b:63:d0:55:75:17:56:1f:5a: 1d:27:1f:9b:e5:83:06:a6:fc:06:26:67:4f:92:9e:ef:20:32: 2b:1f:c9:06:91:12:fd:08:68:bb:ff:e2:22:9a:f0:3d:68:60: 86:dc:6f:78:e2:ed:aa:13:d1:24:27:e6:85:f5:d3:b4:5e:db: 33:e6:47:7e:82:48:ec:c3:68:6c:87:c0:3d:d2:ba:f1:dd:d7: b5:05:98:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4bVMbcBsJDmFNjSwAOzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMTE1MzAxMWRlNDU4NmFkOGE4MDM4ODdlZTdkMmIwMGFl ZmQ2MWIwHhcNMjUxMjA2MDMwMTMyWhcNMjUxMjA3MDMwMTMyWjAzMTEwLwYDVQQD EygyMGJhODhkMzBmZGZkYmY1YmRmMjE5NGYwYjIyNDY5MDM1OGRjYWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiMCMqYulrhv6iBS75pvbKpkch4D JkvcQWONGYzOEyM1QIWluQSH1GlbSnvSk6tPK926SIjbkTNA0Agcj1pniSKlTPHc mt+D/5jX/cSm5+X4dIQEunsuUhDZngb+bGk6ocVaZMHir4hwI6s6i9STBAzS2pio R3//hd5k3QebVSw9rPXJ2jhSLnaMqTkJIVjpHkbs+6fAwpPMzRPakGxlfV7PjRXt DCd2+yiwg4SJR+aSRNq/o2yD1aGkvWjJ9EMd1y5l3MW+hJoCg18L5Y7kbfWcR9ze hJ+O/4YVsy+Xlu7YlQWctlTyqpXKzd8YjKozj6PfJn45donNfqmsWUxZ6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCC6iNMP39v1vfIZTwsiRpA1jcqsMB8GA1UdIwQY MBaAFPIRUwEd5Fhq2KgDiH7n0rAK79YbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGhGVEFSM2tXR3JZcUFPSWZ1ZlNzQXJ2MWhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85ODgxODEtMWQxOS00MmUyLThkYzct MjgyNTM3MGM5NWZlLzEvOGhGVEFSM2tXR3JZcUFPSWZ1ZlNzQXJ2MWhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85ODgxODEtMWQxOS00MmUyLThkYzctMjgyNTM3MGM5NWZl LzEvOGhGVEFSM2tXR3JZcUFPSWZ1ZlNzQXJ2MWhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZ3xGER/ +fCalnGYddlhML6TO0cMTFmNvHGVHjrC9R8WwY3Q/Sw6j42jWy1qGKjpl3fMmOzN 67hfE/+tGneIhJfm9y2LbnbAB1D5fY8jo3+AJ7+5lToT3LaI+sbWd5eSX3wYmQdc Z0fJDiDoaSEK0m7t6Y1Rbgkl/bvNmXghksuHm1boDSlGN9VcAlVcSqw2LruEfdF+ RT8Is+8T/2g0nKGkg732k8V3ESn/S2PQVXUXVh9aHScfm+WDBqb8BiZnT5Ke7yAy Kx/JBpES/Qhou//iIprwPWhghtxveOLtqhPRJCfmhfXTtF7bM+ZHfoJI7MNobIfA PdK68d3XtQWY3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:10 2025 by rpki-client