This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft File: 8E3LHKHUaLwERw8dtKRuz1uCeEg.mft (raw, json) Hash identifier: hAvuyRM6GtOgzIxqYEKTBp3ASMZtb7Y/8VV25dL6c6A= Subject key identifier: 66:63:EF:B9:6D:19:CA:E9:BD:55:53:CD:C9:68:A5:69:90:6C:8E:EC Authority key identifier: F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48 Certificate issuer: /CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848 Certificate serial: 019AF1D25B10DA021847A49DAB1F15E27BAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft Manifest number: 03E0 Signing time: Sat 06 Dec 2025 04:01:26 +0000 Manifest this update: Sat 06 Dec 2025 04:01:26 +0000 Manifest next update: Sun 07 Dec 2025 04:01:26 +0000 Files and hashes: 1: 8E3LHKHUaLwERw8dtKRuz1uCeEg.crl (hash: oORUf4IIY2Jgbqe5ZKdzj+cWbqWeGcvrIH6x02ZYf3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5b:10:da:02:18:47:a4:9d:ab:1f:15:e2:7b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848 Validity Not Before: Dec 6 04:01:26 2025 GMT Not After : Dec 7 04:01:26 2025 GMT Subject: CN=6663efb96d19cae9bd5553cdc968a569906c8eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e8:fd:5c:40:35:04:d2:26:4f:ba:50:59:db: 2c:e8:b3:54:d4:5d:97:ad:6b:52:1b:59:6c:02:9d: 93:44:7b:6d:e4:48:75:58:bf:93:cf:bb:fa:64:e2: 74:42:53:c3:d3:4d:23:46:dd:65:98:9d:89:00:57: 90:2d:c1:c8:9d:01:24:6a:3c:ce:00:31:60:9b:4a: 38:ed:9a:85:0d:60:d5:a6:3c:e9:c5:3d:30:0b:91: 6d:3d:fa:56:b1:38:b6:dc:d6:6f:ed:34:ed:49:d0: 5f:fb:dc:b3:32:33:1d:00:f3:96:49:2e:a4:55:e5: ae:3b:14:64:3f:2b:82:0d:00:a4:f5:a9:58:d9:63: 69:cb:36:4c:1e:68:98:f4:f9:01:01:1e:af:fd:f1: 29:fa:1a:7e:1e:b0:d5:21:2d:c1:66:35:27:1f:88: b7:c5:e4:ae:3d:79:65:2c:5c:20:1d:3b:b5:5a:57: b7:be:7c:c7:b6:d9:10:4a:54:21:36:2b:3c:79:6c: e9:49:8b:03:3c:22:69:52:e4:8d:2d:8e:16:89:71: ff:7e:35:8d:24:b7:1c:35:0b:4f:0f:0c:97:4e:7f: 6d:77:3f:c4:d1:b1:75:35:b4:69:b7:5e:5a:25:85: f9:78:e8:e8:8b:8f:40:0a:e8:f9:00:5d:ca:47:d7: c1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:63:EF:B9:6D:19:CA:E9:BD:55:53:CD:C9:68:A5:69:90:6C:8E:EC X509v3 Authority Key Identifier: keyid:F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:c3:74:db:fa:d7:56:75:6d:04:6b:a8:09:6a:e5:4c:fa:02: ae:bc:2b:80:c3:39:6c:57:db:a2:bb:4c:ea:56:2b:82:15:fa: 85:23:d6:e5:64:c8:55:e8:92:70:96:ac:41:2c:7e:86:c7:4a: 71:e3:fb:b3:20:72:d7:aa:e2:e0:50:2f:f4:7b:b5:b5:dd:6c: 06:3a:4d:f4:3e:dc:8c:89:f9:52:a9:56:ef:68:4c:42:7e:44: bd:cf:af:0e:b4:f2:14:2a:91:1d:de:4b:55:cf:fb:97:c5:e4: d7:fa:93:20:f0:25:d2:da:b8:ee:3e:7f:f0:5a:fc:55:bc:ed: 4d:51:16:19:a0:98:fc:01:6b:38:e4:75:75:69:6e:8c:df:91: bd:92:f5:79:31:2b:af:6a:84:30:d4:d9:75:19:e6:cf:e1:f4: 76:6b:55:63:94:53:c1:34:a0:9f:fb:13:6f:0f:f9:dc:28:c8: f1:e8:e1:fd:10:d5:ae:77:7d:f5:99:43:e0:7b:4f:30:74:9c: 24:43:64:a6:de:c1:54:76:bf:99:46:0e:84:4e:c7:f0:65:d7: e3:fa:3a:9c:d7:ae:ff:71:b1:81:b6:63:ed:89:20:9b:21:03: 74:e1:f1:ae:24:59:50:28:04:25:6f:17:17:f6:d3:bd:08:1a: 5a:65:8d:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lsQ2gIYR6Sdqx8V4nuuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGRjYjFjYTFkNDY4YmMwNDQ3MGYxZGI0YTQ2ZWNmNWI4 Mjc4NDgwHhcNMjUxMjA2MDQwMTI2WhcNMjUxMjA3MDQwMTI2WjAzMTEwLwYDVQQD Eyg2NjYzZWZiOTZkMTljYWU5YmQ1NTUzY2RjOTY4YTU2OTkwNmM4ZWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOj9XEA1BNImT7pQWdss6LNU1F2X rWtSG1lsAp2TRHtt5Eh1WL+Tz7v6ZOJ0QlPD000jRt1lmJ2JAFeQLcHInQEkajzO ADFgm0o47ZqFDWDVpjzpxT0wC5FtPfpWsTi23NZv7TTtSdBf+9yzMjMdAPOWSS6k VeWuOxRkPyuCDQCk9alY2WNpyzZMHmiY9PkBAR6v/fEp+hp+HrDVIS3BZjUnH4i3 xeSuPXllLFwgHTu1Wle3vnzHttkQSlQhNis8eWzpSYsDPCJpUuSNLY4WiXH/fjWN JLccNQtPDwyXTn9tdz/E0bF1NbRpt15aJYX5eOjoi49ACuj5AF3KR9fBzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZj77ltGcrpvVVTzclopWmQbI7sMB8GA1UdIwQY MBaAFPBNyxyh1Gi8BEcPHbSkbs9bgnhIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEUzTEhLSFVhTHdFUnc4ZHRLUnV6MXVDZUVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jNTZiMWItNGIxMC00MWRjLTlmZmEt ZGI1MTYwZWU3NGU3LzEvOEUzTEhLSFVhTHdFUnc4ZHRLUnV6MXVDZUVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9jNTZiMWItNGIxMC00MWRjLTlmZmEtZGI1MTYwZWU3NGU3 LzEvOEUzTEhLSFVhTHdFUnc4ZHRLUnV6MXVDZUVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAucN02/rX VnVtBGuoCWrlTPoCrrwrgMM5bFfbortM6lYrghX6hSPW5WTIVeiScJasQSx+hsdK ceP7syBy16ri4FAv9Hu1td1sBjpN9D7cjIn5UqlW72hMQn5Evc+vDrTyFCqRHd5L Vc/7l8Xk1/qTIPAl0tq47j5/8Fr8VbztTVEWGaCY/AFrOOR1dWlujN+RvZL1eTEr r2qEMNTZdRnmz+H0dmtVY5RTwTSgn/sTbw/53CjI8ejh/RDVrnd99ZlD4HtPMHSc JENkpt7BVHa/mUYOhE7H8GXX4/o6nNeu/3GxgbZj7YkgmyEDdOHxriRZUCgEJW8X F/bTvQgaWmWNEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:35:17 2025 by rpki-client