This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft File: j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft (raw, json) Hash identifier: ukmV3T/ymDOMw2DCvW+HxvswMQS/3pDVLGQLk8H81Wc= Subject key identifier: A0:E5:FB:9D:69:34:CB:6C:FE:76:22:20:80:A6:FD:32:D8:A5:BE:EF Authority key identifier: 8F:C0:D6:40:75:28:53:86:42:FB:0D:3D:43:46:61:5F:EA:71:DC:2E Certificate issuer: /CN=8fc0d6407528538642fb0d3d4346615fea71dc2e Certificate serial: 019AF12DF729460658216AE7AF3BB2FB818C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft Manifest number: 0D8E Signing time: Sat 06 Dec 2025 01:01:52 +0000 Manifest this update: Sat 06 Dec 2025 01:01:52 +0000 Manifest next update: Sun 07 Dec 2025 01:01:52 +0000 Files and hashes: 1: j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl (hash: aQ9zm4lYN2iNkWzT1uvKdOyxhhwLXOKOsVMmlCtd5w4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f7:29:46:06:58:21:6a:e7:af:3b:b2:fb:81:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc0d6407528538642fb0d3d4346615fea71dc2e Validity Not Before: Dec 6 01:01:52 2025 GMT Not After : Dec 7 01:01:52 2025 GMT Subject: CN=a0e5fb9d6934cb6cfe76222080a6fd32d8a5beef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:05:6f:ee:63:bd:21:26:aa:65:26:f3:bc:93: d4:3f:52:e0:50:9b:a1:de:88:5d:eb:60:ed:22:1f: 24:e3:80:b6:76:85:fb:20:a1:15:d6:c9:ba:4d:43: 09:d4:13:19:fb:b5:8f:22:b2:e5:a2:fb:b3:91:17: 73:c4:bf:8a:44:fd:f8:3c:43:8a:de:49:e0:82:d7: 24:80:9d:7e:a3:5a:6a:33:33:a9:fe:e3:d7:f7:fa: 8f:42:a3:a8:69:64:16:db:15:ee:de:ad:ab:02:3b: b2:df:29:b5:c9:b1:07:ae:2e:03:09:71:4e:7f:7e: 00:d3:fc:82:cf:d0:56:7a:c9:ca:5f:c6:9f:7e:b5: 31:64:59:5d:61:c3:a1:81:e7:c0:84:fb:f2:31:aa: 43:36:21:53:cb:4c:e6:02:6d:db:fb:12:86:6a:d1: e6:25:8e:3e:4c:f4:c3:17:35:80:f9:3a:92:ce:9a: 42:89:dd:48:b6:06:f6:15:64:3c:16:5a:71:66:ce: 97:a5:47:1d:f6:94:ba:d8:39:d8:0f:82:f0:c2:03: 8f:e1:19:6b:0c:a9:bb:25:08:50:ee:30:d2:4e:d4: 50:75:1a:3e:fc:9e:c3:ea:e1:ad:8a:ef:ad:ae:c1: f0:34:3e:36:20:0e:62:97:c1:16:c6:eb:f7:68:3a: 4d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E5:FB:9D:69:34:CB:6C:FE:76:22:20:80:A6:FD:32:D8:A5:BE:EF X509v3 Authority Key Identifier: keyid:8F:C0:D6:40:75:28:53:86:42:FB:0D:3D:43:46:61:5F:EA:71:DC:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b4:a9:d8:4b:df:5c:01:51:d5:99:b4:74:24:ef:64:dc:ab: 9d:66:73:76:04:1c:b0:bd:73:b3:3c:81:da:91:d9:0b:ce:04: 1c:73:d8:14:65:6a:b6:4c:95:06:e4:dd:27:49:f9:38:fd:62: 4d:1f:a3:71:41:da:87:48:7f:b7:c1:66:bf:69:96:14:5f:f6: 87:d7:5d:25:27:7e:12:7b:2e:38:22:33:0c:81:c7:1a:1d:20: 18:7e:01:a4:c9:80:93:ff:84:7e:fb:c9:ee:7d:da:e9:a4:a4: 8f:a7:ea:b4:12:50:f5:82:f2:9b:4c:6d:51:2a:3f:e0:47:35: 22:f8:31:b7:25:1f:21:9a:f4:42:30:96:25:cb:81:8c:25:60: 73:13:f4:07:81:f0:d4:39:69:0d:62:9c:22:5c:d7:7e:ab:9c: a7:30:e9:23:6e:85:6c:c7:46:d5:d4:9b:f8:3d:f8:97:9a:d1: f2:c3:52:9c:a5:a5:6f:86:fc:3d:70:6a:46:b8:22:37:d5:52: f0:b4:c2:f1:22:05:c0:bd:a9:c0:cc:73:d5:83:69:59:f1:a3: 2d:46:e7:81:c5:42:28:ea:de:fd:43:03:af:a8:1f:15:34:b2: ec:1f:b1:47:af:63:7f:98:40:f2:9a:5e:2b:8a:b8:fd:92:10: 21:19:f6:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfcpRgZYIWrnrzuy+4GMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzBkNjQwNzUyODUzODY0MmZiMGQzZDQzNDY2MTVmZWE3 MWRjMmUwHhcNMjUxMjA2MDEwMTUyWhcNMjUxMjA3MDEwMTUyWjAzMTEwLwYDVQQD EyhhMGU1ZmI5ZDY5MzRjYjZjZmU3NjIyMjA4MGE2ZmQzMmQ4YTViZWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgVv7mO9ISaqZSbzvJPUP1LgUJuh 3ohd62DtIh8k44C2doX7IKEV1sm6TUMJ1BMZ+7WPIrLlovuzkRdzxL+KRP34PEOK 3knggtckgJ1+o1pqMzOp/uPX9/qPQqOoaWQW2xXu3q2rAjuy3ym1ybEHri4DCXFO f34A0/yCz9BWesnKX8affrUxZFldYcOhgefAhPvyMapDNiFTy0zmAm3b+xKGatHm JY4+TPTDFzWA+TqSzppCid1Itgb2FWQ8FlpxZs6XpUcd9pS62DnYD4LwwgOP4Rlr DKm7JQhQ7jDSTtRQdRo+/J7D6uGtiu+trsHwND42IA5il8EWxuv3aDpNwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDl+51pNMts/nYiIICm/TLYpb7vMB8GA1UdIwQY MBaAFI/A1kB1KFOGQvsNPUNGYV/qcdwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhEV1FIVW9VNFpDLXcwOVEwWmhYLXB4M0M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80NzQyODItNWY1Yy00NWU0LWJmYmYt NDVmNTc3OWQ4Y2I0LzEvajhEV1FIVW9VNFpDLXcwOVEwWmhYLXB4M0M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80NzQyODItNWY1Yy00NWU0LWJmYmYtNDVmNTc3OWQ4Y2I0 LzEvajhEV1FIVW9VNFpDLXcwOVEwWmhYLXB4M0M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7Sp2Evf XAFR1Zm0dCTvZNyrnWZzdgQcsL1zszyB2pHZC84EHHPYFGVqtkyVBuTdJ0n5OP1i TR+jcUHah0h/t8Fmv2mWFF/2h9ddJSd+EnsuOCIzDIHHGh0gGH4BpMmAk/+EfvvJ 7n3a6aSkj6fqtBJQ9YLym0xtUSo/4Ec1IvgxtyUfIZr0QjCWJcuBjCVgcxP0B4Hw 1DlpDWKcIlzXfqucpzDpI26FbMdG1dSb+D34l5rR8sNSnKWlb4b8PXBqRrgiN9VS 8LTC8SIFwL2pwMxz1YNpWfGjLUbngcVCKOre/UMDr6gfFTSy7B+xR69jf5hA8ppe K4q4/ZIQIRn2dA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:12:37 2025 by rpki-client