This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft File: 8DpbV31dnm0cX9O-1ADpacC-fDQ.mft (raw, json) Hash identifier: xkHq537vv6xgqD4F3yYX58O2L7HkLG+7yNW5MYbiEFM= Subject key identifier: 9C:A7:EF:F8:7E:F7:15:EF:AE:1B:FD:B6:C3:48:C8:E0:26:C3:7B:78 Authority key identifier: F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34 Certificate issuer: /CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34 Certificate serial: 019AF208B9167D5AEBCEA6B7C55778CFD8C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 05:00:49 +0000 Manifest this update: Sat 06 Dec 2025 05:00:49 +0000 Manifest next update: Sun 07 Dec 2025 05:00:49 +0000 Files and hashes: 1: 8DpbV31dnm0cX9O-1ADpacC-fDQ.crl (hash: Q2CnHJB1ZGY9MtCEtHOsJYjenH5Ng9+Qx7D27n5y04o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b9:16:7d:5a:eb:ce:a6:b7:c5:57:78:cf:d8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34 Validity Not Before: Dec 6 05:00:49 2025 GMT Not After : Dec 7 05:00:49 2025 GMT Subject: CN=9ca7eff87ef715efae1bfdb6c348c8e026c37b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a7:9b:a0:4d:e9:b9:47:2a:0c:16:16:a0:a8: 80:a2:96:4c:09:22:84:16:2f:f4:db:eb:13:5c:87: 1a:74:85:49:af:19:40:cf:ec:1e:b4:00:ef:09:09: a9:42:22:49:e9:76:a0:0e:c9:c4:20:86:19:de:da: e3:f2:06:c2:1b:8a:cd:b6:4d:ae:0c:4d:11:b6:4d: 96:50:ab:d9:f9:f0:67:5c:a1:cf:cf:27:07:b5:bd: bc:d1:01:66:4e:c1:3e:89:ff:fa:66:50:7b:73:1a: 02:1b:36:ff:a9:8d:c9:ff:c8:f5:0c:6c:51:3a:eb: 7e:2a:d8:d1:73:4f:a8:2f:30:aa:3c:19:d4:6a:6b: 5a:1f:dd:b9:e0:96:9c:64:b3:ec:67:2a:fc:76:75: 32:b1:d8:57:d7:66:4b:46:31:e2:68:b8:75:20:3f: 08:f9:57:85:49:0d:81:a3:e4:78:a3:64:a1:e1:06: 21:79:88:7f:7f:5e:b1:d7:a6:2b:db:df:c4:5d:2e: 77:16:14:c9:60:91:38:4e:a1:a5:05:cd:ea:6c:e8: 65:b4:aa:3b:4b:8c:cc:62:e0:84:07:d6:eb:a1:66: ee:2d:6c:a9:52:42:16:c1:b3:f1:cd:dc:06:93:b7: af:11:bb:52:ec:e6:ae:a2:c6:e2:d4:63:00:44:c9: 5c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A7:EF:F8:7E:F7:15:EF:AE:1B:FD:B6:C3:48:C8:E0:26:C3:7B:78 X509v3 Authority Key Identifier: keyid:F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:2a:93:b8:ae:e4:83:8d:fb:2a:3f:6e:ed:bc:4b:27:26:0e: 3f:01:93:13:f1:f8:83:93:fd:f9:21:30:db:71:4e:36:aa:2e: cc:40:a2:54:2b:11:1d:1a:60:64:fe:a1:bd:c6:09:22:5a:40: a5:a9:e3:3b:34:03:28:08:9d:0a:bb:d3:a1:2e:81:b3:c5:ee: 96:62:53:ff:8d:99:1f:a1:3c:a5:4b:45:ea:e6:4b:07:13:61: 2d:d6:b1:15:eb:39:19:d4:1e:75:a6:fb:63:b6:81:41:e8:34: 3a:9d:0c:f4:b5:27:ca:3b:79:78:f0:70:66:23:31:90:59:ea: e3:19:72:13:2b:28:bf:96:f7:f3:d9:8e:8a:6f:ce:95:eb:34: c7:8a:6b:60:42:46:89:0f:c9:92:4f:b4:f2:99:d9:12:01:53: 9e:d2:d4:65:6e:a7:d7:ba:55:81:e6:ef:42:b1:41:e1:80:3b: 48:63:6b:34:d5:a4:39:49:61:41:97:2f:1f:5a:cc:2e:44:7a: 96:99:2f:ad:d9:8c:24:b7:ad:db:36:33:72:1e:df:ea:18:70: 3d:b2:0d:c1:e9:e3:3f:d7:0c:87:6c:ab:86:83:55:eb:e7:a0: 70:fb:10:2c:e4:9e:7a:b4:0e:a5:3f:b6:75:1e:b0:de:c4:88: 39:76:48:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLkWfVrrzqa3xVd4z9jIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwM2E1YjU3N2Q1ZDllNmQxYzVmZDNiZWQ0MDBlOTY5YzBi ZTdjMzQwHhcNMjUxMjA2MDUwMDQ5WhcNMjUxMjA3MDUwMDQ5WjAzMTEwLwYDVQQD Eyg5Y2E3ZWZmODdlZjcxNWVmYWUxYmZkYjZjMzQ4YzhlMDI2YzM3Yjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaeboE3puUcqDBYWoKiAopZMCSKE Fi/02+sTXIcadIVJrxlAz+wetADvCQmpQiJJ6XagDsnEIIYZ3trj8gbCG4rNtk2u DE0Rtk2WUKvZ+fBnXKHPzycHtb280QFmTsE+if/6ZlB7cxoCGzb/qY3J/8j1DGxR Out+KtjRc0+oLzCqPBnUamtaH9254JacZLPsZyr8dnUysdhX12ZLRjHiaLh1ID8I +VeFSQ2Bo+R4o2Sh4QYheYh/f16x16Yr29/EXS53FhTJYJE4TqGlBc3qbOhltKo7 S4zMYuCEB9broWbuLWypUkIWwbPxzdwGk7evEbtS7Oauosbi1GMARMlcSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyn7/h+9xXvrhv9tsNIyOAmw3t4MB8GA1UdIwQY MBaAFPA6W1d9XZ5tHF/TvtQA6WnAvnw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOERwYlYzMWRubTBjWDlPLTFBRHBhY0MtZkRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS82ODg5NDMtNzEzZC00OTFlLWE3MjEt ZWNhNTlmODIwMThhLzEvOERwYlYzMWRubTBjWDlPLTFBRHBhY0MtZkRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS82ODg5NDMtNzEzZC00OTFlLWE3MjEtZWNhNTlmODIwMThh LzEvOERwYlYzMWRubTBjWDlPLTFBRHBhY0MtZkRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSqTuK7k g437Kj9u7bxLJyYOPwGTE/H4g5P9+SEw23FONqouzECiVCsRHRpgZP6hvcYJIlpA panjOzQDKAidCrvToS6Bs8XulmJT/42ZH6E8pUtF6uZLBxNhLdaxFes5GdQedab7 Y7aBQeg0Op0M9LUnyjt5ePBwZiMxkFnq4xlyEysov5b389mOim/Oles0x4prYEJG iQ/Jkk+08pnZEgFTntLUZW6n17pVgebvQrFB4YA7SGNrNNWkOUlhQZcvH1rMLkR6 lpkvrdmMJLet2zYzch7f6hhwPbINwenjP9cMh2yrhoNV6+egcPsQLOSeerQOpT+2 dR6w3sSIOXZI3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:31:44 2025 by rpki-client