This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft File: i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft (raw, json) Hash identifier: pXOFL3WYugarc9UwDUagMypZJVNPjJQBp4GNPB8a06M= Subject key identifier: 8E:4C:85:C8:48:CA:8E:E1:5F:F6:31:1D:63:AF:BB:56:5F:8D:53:11 Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6 Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6 Certificate serial: 019AF12CB48344F795428EDC252FEE803FA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft Manifest number: 1777 Signing time: Sat 06 Dec 2025 01:00:30 +0000 Manifest this update: Sat 06 Dec 2025 01:00:30 +0000 Manifest next update: Sun 07 Dec 2025 01:00:30 +0000 Files and hashes: 1: RZK0b0ovThhwOspu5E-ursP21fk.roa (hash: QD9vKhIKNC6G+l7AznXUzzLsXomMDZljRclFB7nn2HQ=) 2: bXyl61NnJFUqVdpbbyJUbKSLOEk.asa (hash: kvt/aU200bfEnw4rYqKdYW9+xb8+wCfFGl6Rty5GK40=) 3: fiISLcTtszje5XVI9V1A5UtzzeY.roa (hash: eVRxObYN5WO+IJLUe7vH/MdccTrSwqFAfOP7RIW37BY=) 4: i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl (hash: kl+aNFXHSYIBmAAT2W6Fb9J9tmxguEUaabFIhAqcm44=) 5: jI6BNQdThJo2MEdSZOm1_susYMk.roa (hash: rpQAWWU68zMZ9YE0YNIh6QHC51Xor5PQY1DDvCq8+m8=) 6: uqvRjoImP67-V2pzEWGA2vqwBPY.roa (hash: yGPp5s4cB95t+0hM/KR3osWVzparRNQvZpkZjxE6wzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:b4:83:44:f7:95:42:8e:dc:25:2f:ee:80:3f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6 Validity Not Before: Dec 6 01:00:30 2025 GMT Not After : Dec 7 01:00:30 2025 GMT Subject: CN=8e4c85c848ca8ee15ff6311d63afbb565f8d5311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b4:04:1f:38:db:f9:21:1c:1a:b6:ca:d8:c4: 8e:9c:95:f0:b9:0e:ca:73:16:c4:f3:17:7f:6c:28: 56:32:bc:e3:fc:6a:fd:e7:82:0c:c3:c5:d0:87:97: 8f:01:cf:e2:cd:69:57:ee:38:a2:c9:68:7a:f0:6b: 81:e3:28:6d:5f:a0:37:f8:83:32:8b:c5:41:a9:12: 3c:18:05:ea:ce:8c:44:de:bd:95:67:61:2b:78:59: 56:61:2d:c0:cf:d9:ed:86:64:0e:0d:a7:f2:36:1e: 8f:bb:f1:09:5e:2b:0e:ef:ac:96:d9:b7:5f:06:1c: 6e:e8:e3:b0:da:b7:48:73:07:f6:9f:fd:f6:28:da: f4:b0:dd:df:3e:4f:a1:b2:8f:79:15:7f:a9:93:dc: 28:8e:ba:f5:e2:9e:c1:c1:af:08:9b:2d:c7:30:91: 7b:14:d9:ab:33:03:c0:1a:0b:90:5e:19:f5:53:d7: 96:62:30:bc:67:c1:56:7c:0c:af:64:3c:75:b2:e0: f1:73:dd:b2:24:86:48:1c:70:81:12:25:f8:3a:d3: 9b:db:90:3e:41:d5:43:2e:bf:fb:09:09:66:83:f9: f9:72:fd:93:8e:1d:b1:0d:7e:ae:07:4b:e6:8e:35: 9f:0c:a5:1c:06:20:f7:54:8a:c8:8a:21:f2:09:91: 1a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4C:85:C8:48:CA:8E:E1:5F:F6:31:1D:63:AF:BB:56:5F:8D:53:11 X509v3 Authority Key Identifier: keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:d1:70:2f:09:e5:80:a8:55:e1:f2:e5:24:e7:cc:7c:c2:72: 65:ca:55:99:7a:54:fe:ff:1e:59:21:71:46:7c:d3:60:58:5b: b3:aa:64:cc:2a:28:f9:0f:d6:a6:60:31:53:f0:e8:4a:2f:e0: e7:fb:64:29:5a:97:ab:8b:2a:94:20:b5:44:85:24:6c:1f:a8: 6e:98:83:98:8c:49:2e:d3:5d:3d:ba:62:a2:b3:d5:bd:61:6a: e7:1a:5e:b9:8a:4f:7a:49:8a:b5:a6:97:8b:28:30:bc:50:3a: b4:75:15:7e:10:b5:40:b3:e3:23:4f:6f:2b:15:d5:dd:54:2b: 80:1c:a6:40:6b:f7:41:72:51:bb:99:a2:d6:c9:c7:ec:97:36: 73:6a:53:57:2a:fa:76:3d:97:58:cc:ec:04:9e:a7:03:68:16: ef:3e:f5:36:4e:36:21:c7:6d:58:b5:86:c0:57:82:2c:74:af: a2:93:c3:45:42:6f:e7:8e:c9:15:94:88:fe:bb:13:28:ea:5a: 1a:72:c0:68:a0:d0:95:20:99:7e:06:62:c2:a7:b0:7d:c0:9c: bd:c0:05:e1:5a:dc:40:9a:7c:e4:8c:4f:83:5c:3b:ae:df:48: e2:c4:76:f8:70:05:13:ae:54:18:70:8c:ec:81:22:3f:f4:7c: cd:c8:1d:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLSDRPeVQo7cJS/ugD+oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNjlmYzYxMjhiZTU5MTQwMWFjZjgyYmMyNDYxYWY2MzZl YmU4ZTYwHhcNMjUxMjA2MDEwMDMwWhcNMjUxMjA3MDEwMDMwWjAzMTEwLwYDVQQD Eyg4ZTRjODVjODQ4Y2E4ZWUxNWZmNjMxMWQ2M2FmYmI1NjVmOGQ1MzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bQEHzjb+SEcGrbK2MSOnJXwuQ7K cxbE8xd/bChWMrzj/Gr954IMw8XQh5ePAc/izWlX7jiiyWh68GuB4yhtX6A3+IMy i8VBqRI8GAXqzoxE3r2VZ2EreFlWYS3Az9nthmQODafyNh6Pu/EJXisO76yW2bdf Bhxu6OOw2rdIcwf2n/32KNr0sN3fPk+hso95FX+pk9wojrr14p7Bwa8Imy3HMJF7 FNmrMwPAGguQXhn1U9eWYjC8Z8FWfAyvZDx1suDxc92yJIZIHHCBEiX4OtOb25A+ QdVDLr/7CQlmg/n5cv2Tjh2xDX6uB0vmjjWfDKUcBiD3VIrIiiHyCZEaqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5MhchIyo7hX/YxHWOvu1ZfjVMRMB8GA1UdIwQY MBaAFItp/GEovlkUAaz4K8JGGvY26+jmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUt MjY1ZjJiZDBmOGYzLzEvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUtMjY1ZjJiZDBmOGYz LzEvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadFwLwnl gKhV4fLlJOfMfMJyZcpVmXpU/v8eWSFxRnzTYFhbs6pkzCoo+Q/WpmAxU/DoSi/g 5/tkKVqXq4sqlCC1RIUkbB+obpiDmIxJLtNdPbpiorPVvWFq5xpeuYpPekmKtaaX iygwvFA6tHUVfhC1QLPjI09vKxXV3VQrgBymQGv3QXJRu5mi1snH7Jc2c2pTVyr6 dj2XWMzsBJ6nA2gW7z71Nk42IcdtWLWGwFeCLHSvopPDRUJv547JFZSI/rsTKOpa GnLAaKDQlSCZfgZiwqewfcCcvcAF4VrcQJp85IxPg1w7rt9I4sR2+HAFE65UGHCM 7IEiP/R8zcgdKA== -----END CERTIFICATE-----Generated at Sat Dec 6 05:00:44 2025 by rpki-client