This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft File: 8PY2_se1stGN43l-aYTAaVXnFtc.mft (raw, json) Hash identifier: qsWHuxjQSt7K22yi3cDSAps3ZsDhBGAJryQhgaM2IiA= Subject key identifier: 9A:C3:CE:F0:14:ED:A3:02:C8:31:2C:1E:EF:AC:FF:4E:33:F9:B5:B5 Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7 Certificate issuer: /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7 Certificate serial: 019AF1D24AA2738E14E1BCBADB0E53999CF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 04:01:21 +0000 Manifest this update: Sat 06 Dec 2025 04:01:21 +0000 Manifest next update: Sun 07 Dec 2025 04:01:21 +0000 Files and hashes: 1: 8PY2_se1stGN43l-aYTAaVXnFtc.crl (hash: XXinJf3yg004jNDHnyp9IHBckrp+sf2PM+O3TF8dMl4=) 2: N4NsUcZuS_9XiBDgAfw6eryV7HU.roa (hash: tpgeA/zfOVEAg9H115FFWM358l26uFQNlABFRgvWlU4=) 3: YN5BT06xMfbo1c_Z7AZWug-50dI.roa (hash: IQTbSHfW7A6/vX1CnCMrP3c0x8Ql47ZxFKjq91S7rjA=) 4: yV4dNy3NsBZVUNWCmHTLsnrsaLM.roa (hash: HeRl5vH7gTSirrF3z1irtqiGbkDXqM3OvljtYndKLgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4a:a2:73:8e:14:e1:bc:ba:db:0e:53:99:9c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7 Validity Not Before: Dec 6 04:01:21 2025 GMT Not After : Dec 7 04:01:21 2025 GMT Subject: CN=9ac3cef014eda302c8312c1eefacff4e33f9b5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d9:2a:53:4e:14:ba:cd:53:7f:e8:6d:9b:84: d1:b5:1b:07:99:34:40:1d:4b:6d:e2:3d:83:2b:be: 86:db:0e:dc:27:fa:fb:97:3c:97:07:50:4b:b8:26: b3:00:24:e6:3f:90:d9:20:c4:43:ae:78:8d:13:a6: 8e:9c:7e:5b:fb:0d:e2:a7:80:5a:11:da:66:42:86: 91:4a:bd:56:fd:69:15:be:dc:ef:4e:af:b4:11:ae: dc:7d:f8:23:a8:5d:33:c5:a7:a5:1e:dd:b0:bf:81: 80:e2:56:5d:4d:d6:36:c0:55:a6:73:4f:49:c3:f0: 0f:8c:00:89:e4:65:73:fa:66:ca:67:5d:ec:f6:0c: 5c:06:70:0d:91:a2:08:3b:98:f6:ca:ed:63:cd:07: 19:86:b4:b0:f4:54:6b:77:91:bc:5f:ac:6b:f1:9e: 33:ec:9e:bf:e9:79:3a:4b:b0:8b:bf:b1:e9:1e:00: f3:da:b4:52:40:87:75:9f:9b:f4:c6:b9:70:6b:6c: d7:28:44:ee:36:bd:5b:27:d0:9e:aa:16:62:6f:7a: 96:0c:ca:9f:ba:08:5c:47:0b:e8:69:b0:25:ab:9f: 66:4e:58:34:a4:2e:3b:62:f2:74:b9:b3:83:be:5c: 76:d3:44:19:e0:0a:a8:09:5f:7f:9d:de:a8:8b:fe: e1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C3:CE:F0:14:ED:A3:02:C8:31:2C:1E:EF:AC:FF:4E:33:F9:B5:B5 X509v3 Authority Key Identifier: keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:81:56:33:f3:a3:b0:75:8a:22:ae:0a:07:da:79:0a:30:5a: 6e:a0:3f:a7:50:3e:e2:0d:b0:2f:9c:91:a2:2c:4b:e2:73:4e: f0:87:0c:58:7f:aa:1b:1d:13:6c:71:8f:6c:54:b7:61:8a:c0: 5f:af:2f:af:ab:dd:2e:da:43:bd:e8:91:da:e3:ee:cf:de:b6: 23:59:e2:5b:40:ea:37:7a:57:da:d1:4c:1c:62:26:11:48:6c: e1:47:38:a6:53:5a:a6:00:27:95:c7:ec:44:0a:90:51:2e:ce: b1:f6:e6:8e:5b:56:5e:80:cb:f2:88:93:39:24:cd:1b:f9:9f: bd:54:fb:56:52:03:06:f4:3d:38:88:e9:62:3e:40:f5:9c:62: 8c:b8:aa:78:15:a5:14:ce:e0:99:d2:00:e4:6c:00:a6:8f:07: 81:c4:38:a8:b4:a8:f6:c5:6e:a3:54:9a:0a:52:3b:27:ed:f1: 13:5f:af:f1:36:f2:f2:dc:e6:0a:50:8d:dc:29:1d:fd:0c:c8: b5:1a:e1:6c:fb:c4:82:56:f4:32:2c:31:c0:a4:39:47:96:e6: 7b:50:f4:5c:74:3c:77:14:55:67:10:83:35:3b:4c:cb:75:78: 9b:86:ad:72:9b:66:b9:71:af:a4:02:55:b7:39:9c:e5:6c:cf: 9f:de:1a:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kqic44U4by62w5TmZzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZjYzNmZlYzdiNWIyZDE4ZGUzNzk3ZTY5ODRjMDY5NTVl NzE2ZDcwHhcNMjUxMjA2MDQwMTIxWhcNMjUxMjA3MDQwMTIxWjAzMTEwLwYDVQQD Eyg5YWMzY2VmMDE0ZWRhMzAyYzgzMTJjMWVlZmFjZmY0ZTMzZjliNWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39kqU04Uus1Tf+htm4TRtRsHmTRA HUtt4j2DK76G2w7cJ/r7lzyXB1BLuCazACTmP5DZIMRDrniNE6aOnH5b+w3ip4Ba EdpmQoaRSr1W/WkVvtzvTq+0Ea7cffgjqF0zxaelHt2wv4GA4lZdTdY2wFWmc09J w/APjACJ5GVz+mbKZ13s9gxcBnANkaIIO5j2yu1jzQcZhrSw9FRrd5G8X6xr8Z4z 7J6/6Xk6S7CLv7HpHgDz2rRSQId1n5v0xrlwa2zXKETuNr1bJ9CeqhZib3qWDMqf ughcRwvoabAlq59mTlg0pC47YvJ0ubODvlx200QZ4AqoCV9/nd6oi/7hiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrDzvAU7aMCyDEsHu+s/04z+bW1MB8GA1UdIwQY MBaAFPD2Nv7HtbLRjeN5fmmEwGlV5xbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFBZMl9zZTFzdEdONDNsLWFZVEFhVlhuRnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hMDFhY2QtYTNkZS00ODM5LTlkMDIt NjQzYzFmZTM4Mzg1LzEvOFBZMl9zZTFzdEdONDNsLWFZVEFhVlhuRnRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9hMDFhY2QtYTNkZS00ODM5LTlkMDItNjQzYzFmZTM4Mzg1 LzEvOFBZMl9zZTFzdEdONDNsLWFZVEFhVlhuRnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4FWM/Oj sHWKIq4KB9p5CjBabqA/p1A+4g2wL5yRoixL4nNO8IcMWH+qGx0TbHGPbFS3YYrA X68vr6vdLtpDveiR2uPuz962I1niW0DqN3pX2tFMHGImEUhs4Uc4plNapgAnlcfs RAqQUS7OsfbmjltWXoDL8oiTOSTNG/mfvVT7VlIDBvQ9OIjpYj5A9ZxijLiqeBWl FM7gmdIA5GwApo8HgcQ4qLSo9sVuo1SaClI7J+3xE1+v8Tby8tzmClCN3Ckd/QzI tRrhbPvEglb0MiwxwKQ5R5bme1D0XHQ8dxRVZxCDNTtMy3V4m4atcptmuXGvpAJV tzmc5WzPn94aCg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:46 2025 by rpki-client