This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft File: 8ppplYAYXWUQAV4dLKGe_0NkHtw.mft (raw, json) Hash identifier: MPZ1PqZkNm7B0tcqfYA8oubxuuMQWHWzwq4AqYs6fUA= Subject key identifier: E7:7C:A1:3B:A6:5A:81:38:F6:47:8B:DD:F1:70:91:4B:28:73:67:D8 Authority key identifier: F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC Certificate issuer: /CN=f29a699580185d6510015e1d2ca19eff43641edc Certificate serial: 019B2D0C20399A4018A77C00313B1C5E3585 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft Manifest number: 09BC Signing time: Wed 17 Dec 2025 16:02:07 +0000 Manifest this update: Wed 17 Dec 2025 16:02:07 +0000 Manifest next update: Thu 18 Dec 2025 16:02:07 +0000 Files and hashes: 1: 8ppplYAYXWUQAV4dLKGe_0NkHtw.crl (hash: rrEMxPyCdsyxfs6+yLr57soYxkyIBo0WeEd9Mu32Lus=) 2: nTEco9mT1eULi7_9dIxqABgskB8.roa (hash: yHq4DLSIuBnBv74/JgQY/5bfqTpB6DfkqhhtGE6kqjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:20:39:9a:40:18:a7:7c:00:31:3b:1c:5e:35:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29a699580185d6510015e1d2ca19eff43641edc Validity Not Before: Dec 17 16:02:07 2025 GMT Not After : Dec 18 16:02:07 2025 GMT Subject: CN=e77ca13ba65a8138f6478bddf170914b287367d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a7:21:3d:36:0d:9c:7f:ad:3d:65:61:07:e9: 91:ea:49:28:66:69:33:ef:d0:01:38:c1:a8:db:4f: 16:78:cd:19:9e:2c:1e:a3:e9:73:df:b8:ee:f2:87: c5:0e:d0:22:78:62:42:d6:54:4e:75:23:1f:63:60: 48:cc:98:92:12:37:2d:5e:c2:41:7d:f9:bf:ac:b3: 07:7c:4a:d2:3d:83:75:f7:64:16:e4:b3:a6:80:e0: 98:8a:f4:cb:14:45:17:24:41:e5:32:13:6e:44:d7: 1b:2a:6b:be:05:25:7e:b9:8e:3e:90:db:67:dc:1e: ca:31:e2:68:0a:a8:25:02:6d:ce:37:ed:34:14:28: b6:6a:10:b2:01:0b:4c:56:26:9f:44:e2:01:36:74: aa:2e:5b:95:cf:86:d0:34:90:4f:f8:14:25:3e:4e: 38:77:18:46:27:02:11:96:7a:bc:1e:14:43:c3:bb: 0a:b6:0c:85:9c:bb:a6:74:39:50:4c:82:17:ba:52: aa:73:63:b7:f5:1a:cf:84:59:5b:16:a2:5b:92:90: ee:20:a9:28:cf:df:32:13:18:6f:7f:57:fb:3d:0e: a7:0c:58:81:2f:85:d4:a0:1e:51:50:fa:c9:73:53: 0c:c8:da:9a:35:6e:87:27:75:34:83:7b:d4:a8:11: ec:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7C:A1:3B:A6:5A:81:38:F6:47:8B:DD:F1:70:91:4B:28:73:67:D8 X509v3 Authority Key Identifier: keyid:F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:49:95:a5:95:59:ec:54:cb:c2:5f:69:0d:4b:03:c0:20:40: 35:bb:4e:81:ca:65:1b:20:8c:cf:26:e1:19:ee:58:9f:1e:8a: 6f:ac:07:51:63:70:24:bf:34:e1:00:30:75:85:c0:41:16:c8: 22:6c:8c:c5:0a:8d:af:73:e1:6a:c1:d3:19:de:a8:ef:41:7b: 31:27:11:bc:88:ad:cb:3a:87:1b:30:57:42:59:50:9e:ad:67: 79:be:70:82:f1:93:c4:4f:19:f2:2f:76:9f:95:c8:dc:21:1b: 70:9d:05:b7:0c:6a:92:5c:e5:9d:9e:dc:cb:4e:87:fa:c1:fb: 9c:e5:89:a8:c8:0a:a1:27:2a:12:95:c2:af:5a:77:18:71:a0: 87:54:2e:94:2b:ce:a0:a4:f0:3e:12:42:c0:02:de:02:df:03: 3e:34:84:b2:14:4a:87:35:14:79:dc:5d:4a:d3:30:47:7d:3a: cc:55:c1:ea:7a:66:cf:d1:c3:e7:4a:47:89:95:1f:30:29:91: 02:b8:93:8b:b2:90:83:1d:8b:d4:a8:24:77:f7:7b:4e:81:c6: df:0f:26:58:0c:a1:69:ef:5b:02:03:42:7c:2d:1d:b4:3b:74: cb:24:3b:ff:62:40:22:53:a9:3b:5a:0e:17:88:4c:97:4b:d7: d9:b4:53:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDCA5mkAYp3wAMTscXjWFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyOWE2OTk1ODAxODVkNjUxMDAxNWUxZDJjYTE5ZWZmNDM2 NDFlZGMwHhcNMjUxMjE3MTYwMjA3WhcNMjUxMjE4MTYwMjA3WjAzMTEwLwYDVQQD EyhlNzdjYTEzYmE2NWE4MTM4ZjY0NzhiZGRmMTcwOTE0YjI4NzM2N2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KchPTYNnH+tPWVhB+mR6kkoZmkz 79ABOMGo208WeM0Zniweo+lz37ju8ofFDtAieGJC1lROdSMfY2BIzJiSEjctXsJB ffm/rLMHfErSPYN192QW5LOmgOCYivTLFEUXJEHlMhNuRNcbKmu+BSV+uY4+kNtn 3B7KMeJoCqglAm3ON+00FCi2ahCyAQtMViafROIBNnSqLluVz4bQNJBP+BQlPk44 dxhGJwIRlnq8HhRDw7sKtgyFnLumdDlQTIIXulKqc2O39RrPhFlbFqJbkpDuIKko z98yExhvf1f7PQ6nDFiBL4XUoB5RUPrJc1MMyNqaNW6HJ3U0g3vUqBHsjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOd8oTumWoE49keL3fFwkUsoc2fYMB8GA1UdIwQY MBaAFPKaaZWAGF1lEAFeHSyhnv9DZB7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHBwcGxZQVlYV1VRQVY0ZExLR2VfME5rSHR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lMDhlNDEtZDYwOS00MWQ4LTg2YTIt OGU2YTI5NWY4MDZmLzEvOHBwcGxZQVlYV1VRQVY0ZExLR2VfME5rSHR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9lMDhlNDEtZDYwOS00MWQ4LTg2YTItOGU2YTI5NWY4MDZm LzEvOHBwcGxZQVlYV1VRQVY0ZExLR2VfME5rSHR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEmVpZVZ 7FTLwl9pDUsDwCBANbtOgcplGyCMzybhGe5Ynx6Kb6wHUWNwJL804QAwdYXAQRbI ImyMxQqNr3PhasHTGd6o70F7MScRvIityzqHGzBXQllQnq1neb5wgvGTxE8Z8i92 n5XI3CEbcJ0FtwxqklzlnZ7cy06H+sH7nOWJqMgKoScqEpXCr1p3GHGgh1QulCvO oKTwPhJCwALeAt8DPjSEshRKhzUUedxdStMwR306zFXB6npmz9HD50pHiZUfMCmR AriTi7KQgx2L1Kgkd/d7ToHG3w8mWAyhae9bAgNCfC0dtDt0yyQ7/2JAIlOpO1oO F4hMl0vX2bRT5Q== -----END CERTIFICATE-----Generated at Wed Dec 17 20:12:55 2025 by rpki-client