This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft File: s8k12EMWos9WpllXttebevgRpwc.mft (raw, json) Hash identifier: uKnqIXXHj8v3F7yyGN9iWjkjJkRzq75F1QbB9M64evk= Subject key identifier: 12:E7:28:EE:37:CC:F0:1F:21:26:57:81:E1:5D:7F:1E:C1:3A:60:E9 Authority key identifier: B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07 Certificate issuer: /CN=b3c935d84316a2cf56a65957b6d79b7af811a707 Certificate serial: 019AF12EA246BD4187A0E63A69704D87372A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft Manifest number: 0A53 Signing time: Sat 06 Dec 2025 01:02:36 +0000 Manifest this update: Sat 06 Dec 2025 01:02:36 +0000 Manifest next update: Sun 07 Dec 2025 01:02:36 +0000 Files and hashes: 1: s8k12EMWos9WpllXttebevgRpwc.crl (hash: jPkaO89YjpW5lDzVtB+SPCzSscRgnF4YKBHZxBVCy5k=) 2: udh3xGDNJXhOcF-5H4cWJu3ktiY.roa (hash: ocPGT+ldVCPhS+IwJUZcLKrDX+p6H2fIq+UgAUlkPrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a2:46:bd:41:87:a0:e6:3a:69:70:4d:87:37:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c935d84316a2cf56a65957b6d79b7af811a707 Validity Not Before: Dec 6 01:02:36 2025 GMT Not After : Dec 7 01:02:36 2025 GMT Subject: CN=12e728ee37ccf01f21265781e15d7f1ec13a60e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:84:a3:75:59:02:a8:06:1d:9b:8a:b1:88:a7: 8b:e0:b1:22:45:0f:9b:07:d3:41:95:51:e8:53:dd: 01:8d:9e:b6:76:13:b0:58:09:62:25:a7:5b:1c:2a: e9:10:22:7f:1d:1f:f4:8f:d4:e7:87:43:01:7b:0f: f5:37:c1:2f:f8:ba:54:1f:32:60:0e:52:ac:fa:e9: 4d:bd:16:78:1c:58:91:8f:b2:21:a7:52:ee:a0:b5: 3b:21:9a:b9:f2:af:c1:7c:48:58:0a:cb:56:af:20: c0:9a:ab:5d:8c:93:a3:de:54:46:09:ef:5a:10:f6: 86:05:e4:af:ea:f6:cd:a1:29:d5:4e:53:b0:ea:f9: df:f8:7a:53:99:a3:5e:b1:9b:59:e4:5b:31:ac:ab: e8:85:fa:67:69:73:1a:5f:93:4b:74:d1:26:2e:d0: 1b:f5:e8:7f:6c:3d:a5:52:0e:db:ee:dc:93:03:1a: 71:c7:3c:ce:62:a4:50:09:e8:67:22:18:c8:49:2e: b6:99:88:d7:0e:db:b8:0e:6e:5c:d9:4f:b6:84:77: 19:d8:df:bf:f0:b2:43:45:d2:f0:fc:a6:63:59:37: 77:d7:65:42:c8:09:e7:94:25:a3:7e:ff:dc:39:00: 09:a6:8a:f0:a8:af:1e:e2:c9:1a:84:1e:db:d9:f6: 16:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E7:28:EE:37:CC:F0:1F:21:26:57:81:E1:5D:7F:1E:C1:3A:60:E9 X509v3 Authority Key Identifier: keyid:B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a8:71:57:1b:8c:c6:f6:1a:f5:2a:45:9a:b6:db:75:80:79: c2:9a:86:32:e1:40:fc:30:ab:f6:a0:31:2d:1a:63:80:a0:f3: 58:7d:d5:da:52:13:fe:79:30:2b:db:06:e1:8b:d9:e8:b4:35: 75:4d:ac:8f:94:22:02:15:e6:22:1f:e4:60:e0:b0:ed:d3:1f: 60:d0:47:c8:fc:9e:2b:4e:65:b5:67:66:52:c5:81:6c:7f:58: 9a:62:b9:4b:f4:0f:c4:63:34:2d:5d:e0:e7:90:9f:38:ee:5c: 78:34:a6:a1:05:7f:53:14:a4:e9:dd:67:a6:13:d8:36:27:7c: d9:c8:ea:11:ef:7c:17:e7:73:fa:14:68:0f:d9:5d:da:df:d3: 39:af:e4:5b:5a:36:0c:54:e5:21:a1:a2:fc:1c:a9:52:63:ef: c4:8c:c7:1c:31:c6:16:e1:e2:fb:08:6e:bb:d4:f2:ac:b6:62: 40:7a:93:f8:15:44:46:77:ab:02:cb:19:c6:06:fe:67:f4:7e: 71:d3:b7:40:dd:5d:8b:b4:4e:8f:76:81:af:85:c6:f6:7e:63: ce:fc:1c:8a:1f:df:92:52:ae:48:be:a6:d3:cb:94:8e:bf:e7: 13:13:68:9d:3a:8b:5a:04:8b:b9:45:e3:d9:ff:f5:10:48:5a: ea:99:9f:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqJGvUGHoOY6aXBNhzcqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzkzNWQ4NDMxNmEyY2Y1NmE2NTk1N2I2ZDc5YjdhZjgx MWE3MDcwHhcNMjUxMjA2MDEwMjM2WhcNMjUxMjA3MDEwMjM2WjAzMTEwLwYDVQQD EygxMmU3MjhlZTM3Y2NmMDFmMjEyNjU3ODFlMTVkN2YxZWMxM2E2MGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4SjdVkCqAYdm4qxiKeL4LEiRQ+b B9NBlVHoU90BjZ62dhOwWAliJadbHCrpECJ/HR/0j9Tnh0MBew/1N8Ev+LpUHzJg DlKs+ulNvRZ4HFiRj7Ihp1LuoLU7IZq58q/BfEhYCstWryDAmqtdjJOj3lRGCe9a EPaGBeSv6vbNoSnVTlOw6vnf+HpTmaNesZtZ5FsxrKvohfpnaXMaX5NLdNEmLtAb 9eh/bD2lUg7b7tyTAxpxxzzOYqRQCehnIhjISS62mYjXDtu4Dm5c2U+2hHcZ2N+/ 8LJDRdLw/KZjWTd312VCyAnnlCWjfv/cOQAJporwqK8e4skahB7b2fYWBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLnKO43zPAfISZXgeFdfx7BOmDpMB8GA1UdIwQY MBaAFLPJNdhDFqLPVqZZV7bXm3r4EacHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhrMTJFTVdvczlXcGxsWHR0ZWJldmdScHdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NTc5NjItMDUxYS00NmM1LThhOTMt MWNjMWE1MzhjM2NlLzEvczhrMTJFTVdvczlXcGxsWHR0ZWJldmdScHdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81NTc5NjItMDUxYS00NmM1LThhOTMtMWNjMWE1MzhjM2Nl LzEvczhrMTJFTVdvczlXcGxsWHR0ZWJldmdScHdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKhxVxuM xvYa9SpFmrbbdYB5wpqGMuFA/DCr9qAxLRpjgKDzWH3V2lIT/nkwK9sG4YvZ6LQ1 dU2sj5QiAhXmIh/kYOCw7dMfYNBHyPyeK05ltWdmUsWBbH9YmmK5S/QPxGM0LV3g 55CfOO5ceDSmoQV/UxSk6d1nphPYNid82cjqEe98F+dz+hRoD9ld2t/TOa/kW1o2 DFTlIaGi/BypUmPvxIzHHDHGFuHi+whuu9TyrLZiQHqT+BVERnerAssZxgb+Z/R+ cdO3QN1di7ROj3aBr4XG9n5jzvwcih/fklKuSL6m08uUjr/nExNonTqLWgSLuUXj 2f/1EEha6pmfvA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:30:57 2025 by rpki-client