This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft File: 8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json) Hash identifier: JwmZAgDo5ywcp1JMLnHIoRSiw3ym7yxNC4qqXl5eE/k= Subject key identifier: E3:62:7D:46:68:D2:F8:6B:96:55:29:59:D2:28:BB:AF:59:95:CF:98 Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB Certificate issuer: /CN=f309b219897bc5c2adb48702ac2da30de563d3cb Certificate serial: 019AF12E075B2B40D36DE7AC77F48A3D9BA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft Manifest number: 1497 Signing time: Sat 06 Dec 2025 01:01:56 +0000 Manifest this update: Sat 06 Dec 2025 01:01:56 +0000 Manifest next update: Sun 07 Dec 2025 01:01:56 +0000 Files and hashes: 1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: 5uz2pvBDyeUscOnKtzqFubc5eo8eQTwTQ6Sxg6tzP40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:07:5b:2b:40:d3:6d:e7:ac:77:f4:8a:3d:9b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb Validity Not Before: Dec 6 01:01:56 2025 GMT Not After : Dec 7 01:01:56 2025 GMT Subject: CN=e3627d4668d2f86b96552959d228bbaf5995cf98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9d:c9:a2:26:04:c6:68:17:04:cf:1f:51:90: dd:ee:2e:6c:14:d2:2b:89:bc:c8:9a:f0:26:80:2b: 56:38:dc:f3:f1:85:97:e4:ad:8c:31:57:63:52:80: 17:b1:36:7e:6a:53:66:cb:6a:04:38:e2:d6:7b:9b: 88:03:b1:38:71:b6:21:b5:79:a9:ef:5d:61:dc:2b: 75:9b:b6:07:fb:88:3c:19:24:84:d4:de:a8:a1:aa: 41:92:ce:1c:36:ea:97:32:72:a3:52:bf:36:03:15: fa:1d:8e:d3:2b:87:a9:2e:3a:dd:cc:e4:63:94:59: 28:3f:8f:46:27:1b:28:bf:77:0c:74:88:57:a7:2c: f4:c5:21:e9:35:c3:59:11:91:4d:52:63:13:dc:ca: 31:92:e8:4f:3c:49:a4:57:d5:d5:8c:6f:8f:7d:8a: 58:21:f9:ef:ba:18:56:75:81:24:d4:ad:6f:cf:c5: 90:ef:73:88:92:78:f9:d1:c3:18:d7:8d:26:5d:f6: e8:e8:28:e4:c4:c1:8f:13:41:59:ff:32:3c:71:40: 8d:89:37:ad:2b:61:ec:98:ea:90:06:d6:60:81:aa: 3c:73:3a:52:15:9d:d4:a4:34:84:e6:0f:91:6f:6b: 84:e4:5a:b5:66:e7:3b:f7:50:29:47:e8:a0:8d:95: 97:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:62:7D:46:68:D2:F8:6B:96:55:29:59:D2:28:BB:AF:59:95:CF:98 X509v3 Authority Key Identifier: keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:42:5e:00:97:ac:c6:f9:24:ff:d8:e0:3f:8a:8e:b5:0f:b0: 7d:f7:69:77:51:a8:dd:0e:f2:ab:7d:f0:de:dd:ab:67:bc:e5: e6:3c:43:e5:b0:5d:9f:51:8c:93:04:72:76:ef:24:40:1e:3d: fc:9c:af:0d:65:be:62:43:32:10:46:d8:7e:23:10:aa:fa:4a: 34:77:6c:f8:05:3a:87:d2:1c:9d:2e:c2:a7:3a:29:0d:13:2f: c5:21:ac:61:eb:4a:31:45:ee:91:88:a0:ea:e5:68:8e:e5:b7: a2:8f:cc:1d:6e:99:37:59:64:5a:63:9c:03:2e:18:a0:a5:f7: d0:a7:25:8e:c6:2c:06:aa:11:73:63:1a:cf:d4:76:cf:c4:ce: 7b:08:5e:28:a6:80:b9:0d:7c:c1:3a:e4:a3:f5:1f:fc:84:ee: 0b:6c:48:d5:bd:53:c1:ee:e8:5d:ad:dc:af:7a:ca:52:6f:59: 90:0a:7e:59:0b:81:2d:6c:23:54:0c:7a:bb:4c:93:31:15:55: 71:7b:55:1f:50:0d:b9:a2:f3:61:3a:f9:3a:bb:bb:12:15:b5: b9:61:a9:b8:11:bd:05:74:b6:c0:d8:8a:ed:ec:6c:4b:33:cb: be:da:4c:27:5a:81:b0:47:97:1b:b6:f2:dc:10:98:05:68:d4: 0f:39:82:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgdbK0DTbeesd/SKPZulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMDliMjE5ODk3YmM1YzJhZGI0ODcwMmFjMmRhMzBkZTU2 M2QzY2IwHhcNMjUxMjA2MDEwMTU2WhcNMjUxMjA3MDEwMTU2WjAzMTEwLwYDVQQD EyhlMzYyN2Q0NjY4ZDJmODZiOTY1NTI5NTlkMjI4YmJhZjU5OTVjZjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J3JoiYExmgXBM8fUZDd7i5sFNIr ibzImvAmgCtWONzz8YWX5K2MMVdjUoAXsTZ+alNmy2oEOOLWe5uIA7E4cbYhtXmp 711h3Ct1m7YH+4g8GSSE1N6ooapBks4cNuqXMnKjUr82AxX6HY7TK4epLjrdzORj lFkoP49GJxsov3cMdIhXpyz0xSHpNcNZEZFNUmMT3MoxkuhPPEmkV9XVjG+PfYpY IfnvuhhWdYEk1K1vz8WQ73OIknj50cMY140mXfbo6CjkxMGPE0FZ/zI8cUCNiTet K2HsmOqQBtZggao8czpSFZ3UpDSE5g+Rb2uE5Fq1Zuc791ApR+igjZWXXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONifUZo0vhrllUpWdIou69Zlc+YMB8GA1UdIwQY MBaAFPMJshmJe8XCrbSHAqwtow3lY9PLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHdteUdZbDd4Y0t0dEljQ3JDMmpEZVZqMDhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xNGMzZGItZDAwMy00ODM2LTg4ZGMt ODBhMzliYTQ4ODc1LzEvOHdteUdZbDd4Y0t0dEljQ3JDMmpEZVZqMDhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8xNGMzZGItZDAwMy00ODM2LTg4ZGMtODBhMzliYTQ4ODc1 LzEvOHdteUdZbDd4Y0t0dEljQ3JDMmpEZVZqMDhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEJeAJes xvkk/9jgP4qOtQ+wffdpd1Go3Q7yq33w3t2rZ7zl5jxD5bBdn1GMkwRydu8kQB49 /JyvDWW+YkMyEEbYfiMQqvpKNHds+AU6h9IcnS7CpzopDRMvxSGsYetKMUXukYig 6uVojuW3oo/MHW6ZN1lkWmOcAy4YoKX30KcljsYsBqoRc2Maz9R2z8TOewheKKaA uQ18wTrko/Uf/ITuC2xI1b1Twe7oXa3cr3rKUm9ZkAp+WQuBLWwjVAx6u0yTMRVV cXtVH1ANuaLzYTr5Oru7EhW1uWGpuBG9BXS2wNiK7exsSzPLvtpMJ1qBsEeXG7by 3BCYBWjUDzmCfA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:00:40 2025 by rpki-client