This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft File: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft (raw, json) Hash identifier: 770Jmskye3iSaNe/vlXMl5MsAC6Xn5ACGKEWDfaQeRM= Subject key identifier: A4:DF:72:8C:60:ED:1B:EE:20:59:FD:DF:EB:75:07:2F:A0:BC:D0:45 Authority key identifier: F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B Certificate issuer: /CN=f27808519f2b08045c7fb41a61fda4e09e51891b Certificate serial: 019AF31D68D6AC3DBE03C1F7EEC41AE2E6DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:03:02 +0000 Manifest this update: Sat 06 Dec 2025 10:03:02 +0000 Manifest next update: Sun 07 Dec 2025 10:03:02 +0000 Files and hashes: 1: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl (hash: mTFbnvPxhiktYgGJpHbyL+f2CeXFECyw80JJNljTbJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:68:d6:ac:3d:be:03:c1:f7:ee:c4:1a:e2:e6:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f27808519f2b08045c7fb41a61fda4e09e51891b Validity Not Before: Dec 6 10:03:02 2025 GMT Not After : Dec 7 10:03:02 2025 GMT Subject: CN=a4df728c60ed1bee2059fddfeb75072fa0bcd045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:2c:84:ed:42:3c:5f:67:b0:ed:b1:82:01: 22:79:0e:ac:7b:b6:4c:20:d4:62:91:33:68:44:e1: 4c:1a:c7:3a:1f:24:43:a5:aa:f6:d2:fe:11:52:90: 89:00:bc:e1:e8:9b:10:d6:05:02:4b:65:e5:09:a1: 76:7f:1e:7f:c4:8b:e2:68:88:5b:fe:07:a8:d5:13: a7:fb:9d:99:bc:ba:db:86:60:a8:55:f4:d5:55:35: 77:d8:3f:ff:45:c1:3c:20:06:89:91:72:8c:83:90: cc:f8:40:00:fc:07:e0:b4:27:ed:f1:41:50:50:bc: 4c:32:8a:63:9e:f9:5d:2c:e2:f8:84:26:45:c5:e4: 76:a8:9f:f1:ff:8c:e0:40:d1:1c:8a:41:be:61:22: 31:83:cb:e0:a8:e7:40:1f:60:3b:e7:a8:27:9f:f5: 5f:f8:53:16:ed:e4:ac:02:17:45:52:e0:b5:77:34: d2:8a:d0:0b:2c:c5:78:f0:8f:e2:0f:a7:02:8e:45: 43:17:4c:83:95:d8:2b:e4:a6:3f:3d:72:11:cb:e5: 97:be:51:99:ca:38:f6:15:3b:b4:44:3e:eb:8b:4d: 3e:04:34:10:1f:bc:bb:99:97:50:05:a9:04:28:4a: 99:0a:b2:f6:94:b0:19:c7:7b:71:4f:5b:20:9b:b2: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DF:72:8C:60:ED:1B:EE:20:59:FD:DF:EB:75:07:2F:A0:BC:D0:45 X509v3 Authority Key Identifier: keyid:F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:8a:d5:8d:d6:57:5c:4b:df:82:d3:db:b5:10:3a:20:b9:5b: 96:90:b1:c2:b8:68:c0:79:c6:90:a4:69:fa:74:a5:e0:5c:cf: d7:d2:9a:48:c9:68:dc:28:9b:1b:0b:b3:e8:a1:0f:4e:61:6d: db:c2:e8:3f:dd:dc:55:9d:b5:ba:30:a5:56:b1:9a:d1:4b:31: ce:06:c1:3a:a0:dd:7f:89:1f:d3:1b:10:d6:3e:f9:91:2b:70: 6a:48:92:64:34:f1:39:2c:67:47:81:49:ca:01:c5:83:bb:eb: 80:ce:a2:ac:e6:a7:7e:10:a1:89:dc:1c:ef:b3:bb:d4:fb:e2: 9b:2c:6e:21:f4:79:a5:a7:ce:e1:7f:ed:95:09:48:b2:9d:ae: 69:0d:f8:c7:97:e5:7c:b3:eb:ff:64:a3:b2:c1:9b:76:3b:54: bc:a2:0a:a9:11:68:f8:28:6c:22:62:5c:2e:64:6e:26:80:16: 7a:41:48:e2:46:8d:df:d6:45:43:72:ff:1c:57:58:fa:f8:7b: 7d:70:3c:17:a5:68:d3:7c:5f:f7:5a:9b:77:44:4e:f4:2f:b6: a6:c4:e4:a0:0a:55:b4:dc:8e:72:94:1c:5e:41:ac:97:6c:4b: 03:05:3e:dc:4a:dc:65:4b:46:d0:32:d3:3a:6e:aa:57:7b:73: da:ed:ab:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHWjWrD2+A8H37sQa4ubaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNzgwODUxOWYyYjA4MDQ1YzdmYjQxYTYxZmRhNGUwOWU1 MTg5MWIwHhcNMjUxMjA2MTAwMzAyWhcNMjUxMjA3MTAwMzAyWjAzMTEwLwYDVQQD EyhhNGRmNzI4YzYwZWQxYmVlMjA1OWZkZGZlYjc1MDcyZmEwYmNkMDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtYshO1CPF9nsO2xggEieQ6se7ZM INRikTNoROFMGsc6HyRDpar20v4RUpCJALzh6JsQ1gUCS2XlCaF2fx5/xIviaIhb /geo1ROn+52ZvLrbhmCoVfTVVTV32D//RcE8IAaJkXKMg5DM+EAA/AfgtCft8UFQ ULxMMopjnvldLOL4hCZFxeR2qJ/x/4zgQNEcikG+YSIxg8vgqOdAH2A756gnn/Vf +FMW7eSsAhdFUuC1dzTSitALLMV48I/iD6cCjkVDF0yDldgr5KY/PXIRy+WXvlGZ yjj2FTu0RD7ri00+BDQQH7y7mZdQBakEKEqZCrL2lLAZx3txT1sgm7JgkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTfcoxg7RvuIFn93+t1By+gvNBFMB8GA1UdIwQY MBaAFPJ4CFGfKwgEXH+0GmH9pOCeUYkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG5nSVVaOHJDQVJjZjdRYVlmMms0SjVSaVJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81N2JhYWYtZTJlZi00N2VhLWFiYjct NTg1NWMxZDE0YzliLzEvOG5nSVVaOHJDQVJjZjdRYVlmMms0SjVSaVJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81N2JhYWYtZTJlZi00N2VhLWFiYjctNTg1NWMxZDE0Yzli LzEvOG5nSVVaOHJDQVJjZjdRYVlmMms0SjVSaVJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIrVjdZX XEvfgtPbtRA6ILlblpCxwrhowHnGkKRp+nSl4FzP19KaSMlo3CibGwuz6KEPTmFt 28LoP93cVZ21ujClVrGa0UsxzgbBOqDdf4kf0xsQ1j75kStwakiSZDTxOSxnR4FJ ygHFg7vrgM6irOanfhChidwc77O71PvimyxuIfR5pafO4X/tlQlIsp2uaQ34x5fl fLPr/2SjssGbdjtUvKIKqRFo+ChsImJcLmRuJoAWekFI4kaN39ZFQ3L/HFdY+vh7 fXA8F6Vo03xf91qbd0RO9C+2psTkoApVtNyOcpQcXkGsl2xLAwU+3ErcZUtG0DLT Om6qV3tz2u2r3A== -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:18 2025 by rpki-client