This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft File: 8q7r5B0FGChKujpPXl2gXPq9b3Y.mft (raw, json) Hash identifier: K/5fyD1Sq+J9UOTYgp8CWc/nlMyPULWDMsvRjeiY99E= Subject key identifier: 45:34:55:CF:68:DB:68:5B:01:A7:8A:E8:9B:9F:5F:DA:FC:9F:A1:16 Authority key identifier: F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76 Certificate issuer: /CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76 Certificate serial: 019AF12D4460F2C5B2ADEA0EF6952F152F2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:01:06 +0000 Manifest this update: Sat 06 Dec 2025 01:01:06 +0000 Manifest next update: Sun 07 Dec 2025 01:01:06 +0000 Files and hashes: 1: 8q7r5B0FGChKujpPXl2gXPq9b3Y.crl (hash: 5kmc+fuz3FlGKyc2DSo4giTwt3lygpWIhKEeqFL+Yuo=) 2: M0x4P-eqDOpLCOY_5rdYfIPAYXc.roa (hash: Hz1NV4C1yE6vehHnBgkxV2TE2v53JgdybplNGjL2XYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:44:60:f2:c5:b2:ad:ea:0e:f6:95:2f:15:2f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76 Validity Not Before: Dec 6 01:01:06 2025 GMT Not After : Dec 7 01:01:06 2025 GMT Subject: CN=453455cf68db685b01a78ae89b9f5fdafc9fa116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:eb:f4:49:dc:f1:66:c0:2b:af:c3:f9:fa:22: 4c:55:6e:5e:08:be:0f:6f:63:36:43:c4:90:03:df: 89:e7:a5:8b:09:9b:00:ae:8e:fb:b6:24:e4:fb:41: 1b:8e:71:c6:35:0b:6c:f9:26:fa:77:0b:ca:18:68: 51:67:ca:df:33:1a:9e:11:d3:53:a3:43:55:9f:6a: 14:5f:d7:e4:71:4c:47:5c:a6:80:5f:66:94:28:b1: 1e:11:82:3b:dc:4c:6e:11:fd:31:08:a9:3b:0f:b2: c1:c6:64:16:3e:fc:a7:2a:4e:1f:de:92:17:d8:33: fb:de:b0:72:41:97:68:e2:21:90:32:9c:5e:47:b6: c2:bc:ef:4a:c8:c0:52:a4:32:b4:88:34:1e:89:da: fd:4e:f6:00:e5:44:61:99:6c:24:82:f0:57:37:0d: 26:13:c3:41:6e:eb:03:8a:48:3f:76:c6:7b:1d:69: e3:fb:e5:de:bc:af:e3:63:cc:99:21:d3:e6:e9:eb: ed:fa:ce:a9:9e:c0:ac:f8:ae:34:35:e3:6c:f3:04: d6:4a:b9:d2:99:11:5d:ec:1c:f7:be:30:09:bc:07: a8:34:03:b2:3e:a9:5f:37:b7:b7:4a:de:23:dc:7f: dc:6d:63:bc:8e:69:28:a3:ca:94:84:13:70:c7:ec: fb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:34:55:CF:68:DB:68:5B:01:A7:8A:E8:9B:9F:5F:DA:FC:9F:A1:16 X509v3 Authority Key Identifier: keyid:F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:3e:93:62:22:72:51:58:a6:f0:86:14:2a:3e:b6:5f:8e:50: e0:23:64:ff:11:0c:0c:65:26:8b:aa:1d:6b:e6:0e:2d:84:72: 60:09:e8:8d:67:d3:bc:6f:51:ea:59:bf:c5:55:b9:34:e9:87: 96:42:ca:d8:3f:08:de:78:e6:54:a6:74:ea:ee:17:2d:3c:c7: 9d:1a:eb:9c:4a:db:f4:8f:37:68:03:95:29:7c:83:5e:6a:79: d5:26:57:cb:19:b1:5c:1d:4e:6d:f9:db:81:a4:67:08:38:ee: f9:1d:86:b3:77:fc:c5:9a:99:ac:79:09:55:0e:74:bc:96:c1: 22:3a:6a:54:68:6c:cd:6d:26:16:ee:9f:2e:88:82:5c:c7:55: 11:6a:35:2b:47:66:23:7d:f9:f7:ea:de:26:23:a1:49:35:96: 5b:8e:be:47:ca:e8:62:73:56:75:c1:cf:a8:63:c6:bc:aa:b2: 64:3f:67:7b:2b:e7:db:b7:9b:a1:a5:70:ea:b7:94:b2:15:7a: 88:eb:9e:56:f7:af:56:6f:ff:14:55:2f:1e:04:da:ca:64:52: 70:e7:65:da:49:b0:84:da:d7:ab:9f:fb:81:ea:05:93:41:bf: d9:42:d6:3d:70:22:31:f5:31:7c:e5:96:bf:a7:3c:67:6f:25: f0:2b:42:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLURg8sWyreoO9pUvFS8vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYWVlYmU0MWQwNTE4Mjg0YWJhM2E0ZjVlNWRhMDVjZmFi ZDZmNzYwHhcNMjUxMjA2MDEwMTA2WhcNMjUxMjA3MDEwMTA2WjAzMTEwLwYDVQQD Eyg0NTM0NTVjZjY4ZGI2ODViMDFhNzhhZTg5YjlmNWZkYWZjOWZhMTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOv0SdzxZsArr8P5+iJMVW5eCL4P b2M2Q8SQA9+J56WLCZsAro77tiTk+0EbjnHGNQts+Sb6dwvKGGhRZ8rfMxqeEdNT o0NVn2oUX9fkcUxHXKaAX2aUKLEeEYI73ExuEf0xCKk7D7LBxmQWPvynKk4f3pIX 2DP73rByQZdo4iGQMpxeR7bCvO9KyMBSpDK0iDQeidr9TvYA5URhmWwkgvBXNw0m E8NBbusDikg/dsZ7HWnj++XevK/jY8yZIdPm6evt+s6pnsCs+K40NeNs8wTWSrnS mRFd7Bz3vjAJvAeoNAOyPqlfN7e3St4j3H/cbWO8jmkoo8qUhBNwx+z7zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEU0Vc9o22hbAaeK6JufX9r8n6EWMB8GA1UdIwQY MBaAFPKu6+QdBRgoSro6T15doFz6vW92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jZmMxYmEtOWM3OC00YzNkLThlYzMt YzBhZDc0Y2E1ZDliLzEvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jZmMxYmEtOWM3OC00YzNkLThlYzMtYzBhZDc0Y2E1ZDli LzEvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMz6TYiJy UVim8IYUKj62X45Q4CNk/xEMDGUmi6oda+YOLYRyYAnojWfTvG9R6lm/xVW5NOmH lkLK2D8I3njmVKZ06u4XLTzHnRrrnErb9I83aAOVKXyDXmp51SZXyxmxXB1Obfnb gaRnCDju+R2Gs3f8xZqZrHkJVQ50vJbBIjpqVGhszW0mFu6fLoiCXMdVEWo1K0dm I3359+reJiOhSTWWW46+R8roYnNWdcHPqGPGvKqyZD9neyvn27eboaVw6reUshV6 iOueVvevVm//FFUvHgTaymRScOdl2kmwhNrXq5/7geoFk0G/2ULWPXAiMfUxfOWW v6c8Z28l8CtC/g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:50 2025 by rpki-client