This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft File: 8aBsbBCOlBmyzbIdSLSaa71sFt8.mft (raw, json) Hash identifier: EUhLhtzbE8nlzSyVCCmxLHLnQZD7dSZANkLnrp1zM8I= Subject key identifier: C8:D7:4F:4E:13:1B:4B:1E:45:C3:77:CC:72:78:59:1B:69:5A:5E:95 Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF Certificate issuer: /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df Certificate serial: 019AF31C003B001C4836578ECE3C77EFF3C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft Manifest number: 1719 Signing time: Sat 06 Dec 2025 10:01:29 +0000 Manifest this update: Sat 06 Dec 2025 10:01:29 +0000 Manifest next update: Sun 07 Dec 2025 10:01:29 +0000 Files and hashes: 1: 8aBsbBCOlBmyzbIdSLSaa71sFt8.crl (hash: n3SgehjhykijMCDKthybSthvTKS4SwSfYcWTOx6+Lfg=) 2: LYYtWBIrqnMkBqXL_qoGSSiMC0A.roa (hash: GO+MMgl638g9Pe8U4lrnZd+WeVwSJjTIvRPV7rn/M2U=) 3: qUqbG1fI6WnBp5sF-Oa70_Lholo.roa (hash: Onc/iKE+MBUdx68cwO8V8LQmCLrY9+uNfRvlbv3SVUg=) 4: vNazpVnOuKKsE-A9nDrKkBqBqmw.roa (hash: 6yzwUeXrNsunwiRKny+F9bobTBkszKyU+zUViVo+zKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:00:3b:00:1c:48:36:57:8e:ce:3c:77:ef:f3:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df Validity Not Before: Dec 6 10:01:29 2025 GMT Not After : Dec 7 10:01:29 2025 GMT Subject: CN=c8d74f4e131b4b1e45c377cc7278591b695a5e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:48:d5:67:00:93:45:d1:17:f3:21:e0:68:38: ae:20:8c:f1:85:3f:0c:46:d0:ce:4a:90:27:c0:4e: 4e:c5:47:c8:87:c8:1d:0d:82:45:f5:fa:c0:cc:7f: b3:f4:9e:55:1b:83:d0:32:6d:f2:1b:af:5e:59:9b: 99:6d:ca:b7:f4:5d:97:a0:13:0a:b7:5b:47:20:00: 1c:10:4d:b9:9c:35:e4:8b:73:22:87:d4:7c:43:a5: fd:d9:e7:ac:b2:2a:c2:41:d4:a5:74:83:52:f2:2e: 8a:94:2f:6b:a2:d4:5d:51:ed:0f:27:fd:b2:f2:e2: e8:86:fa:0d:d6:13:5b:ef:12:e7:34:4b:5f:a5:ef: da:c6:61:21:a6:36:60:c4:28:40:b7:70:cf:a7:9f: a5:f5:35:7b:7a:33:b4:a1:2a:a5:e8:02:c6:12:7b: 26:a7:1a:a0:c6:b5:61:8a:fd:17:d3:ac:b0:f9:00: b5:89:89:57:f1:5d:59:36:b0:71:6b:45:2f:f6:f5: ab:f8:c8:9e:b6:d3:9a:d5:ed:25:d0:51:b1:b3:60: 5c:d1:1b:c1:eb:53:d6:83:88:a9:6c:55:a1:3e:99: 6d:a6:92:97:54:a0:4d:88:97:a2:54:84:ee:78:36: e9:15:11:35:1b:d9:ac:a0:69:1f:6c:76:8c:68:d6: e1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D7:4F:4E:13:1B:4B:1E:45:C3:77:CC:72:78:59:1B:69:5A:5E:95 X509v3 Authority Key Identifier: keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c4:c7:77:cc:bb:55:d7:be:1d:f5:dc:6e:9c:d6:88:19:20: 6e:19:95:1b:2d:b4:08:ff:a3:fe:9e:23:bf:78:62:18:54:6d: 59:9f:cd:19:bd:85:87:95:e4:61:72:46:5e:e9:21:ef:ad:48: 45:b0:b8:0d:f4:08:b7:b6:8d:5f:93:eb:98:be:8e:dc:7b:ea: ec:37:e9:f8:fd:23:f8:6a:89:85:9d:c6:b2:e7:d8:5c:8c:74: ef:98:97:8c:6b:6a:3c:99:fa:41:21:ae:45:13:cc:3b:0d:e7: a1:cf:cc:dd:26:ea:f7:f4:90:38:3b:41:ee:3e:60:01:2e:4c: 3f:91:7f:ba:9f:47:59:21:4a:fb:0a:f8:2a:1c:40:e6:68:9a: b1:2d:47:8f:64:b1:db:a1:22:61:7f:49:05:4b:07:f2:4a:30: b4:bc:93:12:49:f0:9a:89:f8:12:9c:28:01:7f:49:3f:e1:5d: 7b:bb:d4:60:18:a2:7b:3e:17:9d:8a:72:e8:b1:47:e8:81:b2: 6b:93:be:3b:70:28:ce:75:b5:22:53:68:79:8a:d7:0b:4e:51: 3c:fa:dc:85:08:09:04:68:0a:3c:55:e2:2b:e7:eb:c8:38:f2: b3:95:11:9f:47:e3:68:47:bb:16:a4:c6:ff:0a:fd:99:da:5e: d8:3a:8e:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHAA7ABxINleOzjx37/PBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYTA2YzZjMTA4ZTk0MTliMmNkYjIxZDQ4YjQ5YTZiYmQ2 YzE2ZGYwHhcNMjUxMjA2MTAwMTI5WhcNMjUxMjA3MTAwMTI5WjAzMTEwLwYDVQQD EyhjOGQ3NGY0ZTEzMWI0YjFlNDVjMzc3Y2M3Mjc4NTkxYjY5NWE1ZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUjVZwCTRdEX8yHgaDiuIIzxhT8M RtDOSpAnwE5OxUfIh8gdDYJF9frAzH+z9J5VG4PQMm3yG69eWZuZbcq39F2XoBMK t1tHIAAcEE25nDXki3Mih9R8Q6X92eessirCQdSldINS8i6KlC9rotRdUe0PJ/2y 8uLohvoN1hNb7xLnNEtfpe/axmEhpjZgxChAt3DPp5+l9TV7ejO0oSql6ALGEnsm pxqgxrVhiv0X06yw+QC1iYlX8V1ZNrBxa0Uv9vWr+MiettOa1e0l0FGxs2Bc0RvB 61PWg4ipbFWhPpltppKXVKBNiJeiVITueDbpFRE1G9msoGkfbHaMaNbh9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjXT04TG0seRcN3zHJ4WRtpWl6VMB8GA1UdIwQY MBaAFPGgbGwQjpQZss2yHUi0mmu9bBbfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGFCc2JCQ09sQm15emJJZFNMU2FhNzFzRnQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kZWY2NDctOTE4Ni00NzI5LWJiOTkt MTQyZWJlODY5MzE2LzEvOGFCc2JCQ09sQm15emJJZFNMU2FhNzFzRnQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9kZWY2NDctOTE4Ni00NzI5LWJiOTktMTQyZWJlODY5MzE2 LzEvOGFCc2JCQ09sQm15emJJZFNMU2FhNzFzRnQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsTHd8y7 Vde+HfXcbpzWiBkgbhmVGy20CP+j/p4jv3hiGFRtWZ/NGb2Fh5XkYXJGXukh761I RbC4DfQIt7aNX5PrmL6O3Hvq7Dfp+P0j+GqJhZ3GsufYXIx075iXjGtqPJn6QSGu RRPMOw3noc/M3Sbq9/SQODtB7j5gAS5MP5F/up9HWSFK+wr4KhxA5miasS1Hj2Sx 26EiYX9JBUsH8kowtLyTEknwmon4EpwoAX9JP+Fde7vUYBiiez4XnYpy6LFH6IGy a5O+O3AoznW1IlNoeYrXC05RPPrchQgJBGgKPFXiK+fryDjys5URn0fjaEe7FqTG /wr9mdpe2DqOjw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:29:02 2025 by rpki-client