This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json) Hash identifier: xC3PoHBDesBncNLg5cLpqoB0u6OisfQxDitzCE7XYNg= Subject key identifier: DC:F8:E6:63:9F:1F:2F:A0:49:75:8A:C3:BD:B9:0C:8E:63:A2:67:C2 Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42 Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742 Certificate serial: 019AF42DCE6DD3B1F57EA62F79FB122B1EF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft Manifest number: 0DBE Signing time: Sat 06 Dec 2025 15:00:33 +0000 Manifest this update: Sat 06 Dec 2025 15:00:33 +0000 Manifest next update: Sun 07 Dec 2025 15:00:33 +0000 Files and hashes: 1: 4eZ-orLf3Sw1i9FoVC_BgUuV6yY.roa (hash: Hm2QNZ0IWwgkGkpS2MI3Rx4rLkOrxRzbQrRfD6XRt60=) 2: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: ph3657+MNq0un+6PWiCW1unhapOwkeJhDxw2YUsmTzI=) 3: PvG7RaoFWA1C7HlDkfB4Ix4UWSE.roa (hash: 3vQKjjJTEuiCPTgwApvaXGsOiHre5b8+kVP9FzsOJUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:ce:6d:d3:b1:f5:7e:a6:2f:79:fb:12:2b:1e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742 Validity Not Before: Dec 6 15:00:33 2025 GMT Not After : Dec 7 15:00:33 2025 GMT Subject: CN=dcf8e6639f1f2fa049758ac3bdb90c8e63a267c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:31:3a:51:ce:02:dc:ee:c4:a8:d5:a1:c7:7a: 2e:55:5d:95:80:40:e7:b7:6d:3e:31:0c:97:f0:2e: d3:ab:1f:eb:5c:a5:3e:4b:58:b1:2d:1d:ed:8a:69: 9e:b3:19:d0:16:69:28:51:58:d2:90:81:ca:c6:cd: 97:d4:80:f5:f9:c2:80:88:1f:3b:14:59:65:e4:9d: 8b:3c:23:89:7a:ea:cf:8b:47:44:98:b1:32:16:d7: 5d:f4:e0:f2:92:d1:43:c0:29:2c:fa:9f:d7:b7:67: 3d:ba:16:02:f5:e9:65:b3:56:6b:90:01:66:96:e0: 81:e4:ca:22:58:14:b0:1e:49:38:6a:91:a7:fc:7a: c0:5a:1a:0a:c4:10:94:05:c4:15:c5:99:bd:6b:99: 05:dd:bb:95:8a:44:90:68:e5:52:16:bc:79:e1:1c: 72:11:57:58:78:0b:11:21:07:aa:81:0b:a5:09:d0: d6:88:a5:21:53:73:f3:8d:49:46:71:9a:d3:7c:26: 68:f8:58:7c:95:0e:6a:a5:52:85:d0:c0:1b:7a:e0: 17:b5:5d:ec:34:1f:7b:b6:f0:63:33:21:e6:66:3f: 1f:c9:37:ef:78:3d:78:da:d0:de:60:25:ee:e0:53: 6a:fa:b9:23:5e:a9:0a:25:78:8b:f7:f1:0a:03:31: a3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F8:E6:63:9F:1F:2F:A0:49:75:8A:C3:BD:B9:0C:8E:63:A2:67:C2 X509v3 Authority Key Identifier: keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:aa:47:3e:f7:88:ad:23:61:89:38:06:a5:ba:54:7b:52:a6: a1:e6:73:e9:bf:e7:d2:de:98:d5:75:15:76:46:91:85:b4:c7: 18:1c:cd:bd:1c:64:34:73:78:77:0a:d6:02:60:1f:f0:ab:b5: c0:5a:e8:98:9c:59:c0:73:fc:6a:f5:fd:2d:f6:0e:4e:80:57: 38:82:96:3b:b4:d3:52:8b:26:c1:3e:68:e2:ec:5f:3e:73:cd: 4c:11:eb:4d:79:e1:7d:35:d4:c6:b4:fa:0d:02:c0:a8:70:66: 20:4b:80:85:fe:77:95:f2:76:88:cd:fb:c5:fd:98:af:0c:e5: 70:d6:41:ef:48:71:b1:a7:22:4a:af:b3:a5:2c:b1:6d:2b:f7: f7:be:c2:38:0f:bd:e4:e5:04:59:cd:86:27:dc:89:fc:c3:63: 85:2e:68:1a:72:fc:93:eb:5c:9c:db:3e:d8:60:fe:ea:c1:3f: 51:e7:35:bb:e6:16:f7:8d:37:1a:93:1b:5e:76:02:10:f7:38: 2a:bf:86:19:a7:56:3e:6e:b5:53:06:0b:1c:b7:d4:9b:7e:2c: 83:a4:60:07:32:e8:5c:8d:85:71:39:72:de:58:3a:7b:4d:49: d0:57:ed:e8:fb:dd:fd:a1:64:d5:74:85:a4:fb:05:bf:d5:a3: e8:6a:3f:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lc5t07H1fqYvefsSKx7wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyN2M5M2RkYjFhMTcxNTFjNTZmMjJkY2FmMzFkZDgyMjk0 NjM3NDIwHhcNMjUxMjA2MTUwMDMzWhcNMjUxMjA3MTUwMDMzWjAzMTEwLwYDVQQD EyhkY2Y4ZTY2MzlmMWYyZmEwNDk3NThhYzNiZGI5MGM4ZTYzYTI2N2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDE6Uc4C3O7EqNWhx3ouVV2VgEDn t20+MQyX8C7Tqx/rXKU+S1ixLR3timmesxnQFmkoUVjSkIHKxs2X1ID1+cKAiB87 FFll5J2LPCOJeurPi0dEmLEyFtdd9ODyktFDwCks+p/Xt2c9uhYC9ells1ZrkAFm luCB5MoiWBSwHkk4apGn/HrAWhoKxBCUBcQVxZm9a5kF3buVikSQaOVSFrx54Rxy EVdYeAsRIQeqgQulCdDWiKUhU3PzjUlGcZrTfCZo+Fh8lQ5qpVKF0MAbeuAXtV3s NB97tvBjMyHmZj8fyTfveD142tDeYCXu4FNq+rkjXqkKJXiL9/EKAzGjTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNz45mOfHy+gSXWKw725DI5jomfCMB8GA1UdIwQY MBaAFPJ8k92xoXFRxW8i3K8x3YIpRjdCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5Mjkt MzZlMGM4YWZlMjZhLzEvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5MjktMzZlMGM4YWZlMjZh LzEvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApKpHPveI rSNhiTgGpbpUe1KmoeZz6b/n0t6Y1XUVdkaRhbTHGBzNvRxkNHN4dwrWAmAf8Ku1 wFromJxZwHP8avX9LfYOToBXOIKWO7TTUosmwT5o4uxfPnPNTBHrTXnhfTXUxrT6 DQLAqHBmIEuAhf53lfJ2iM37xf2YrwzlcNZB70hxsaciSq+zpSyxbSv3977COA+9 5OUEWc2GJ9yJ/MNjhS5oGnL8k+tcnNs+2GD+6sE/Uec1u+YW9403GpMbXnYCEPc4 Kr+GGadWPm61UwYLHLfUm34sg6RgBzLoXI2FcTly3lg6e01J0Fft6Pvd/aFk1XSF pPsFv9Wj6Go/3A== -----END CERTIFICATE-----Generated at Sat Dec 6 19:29:59 2025 by rpki-client