This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json) Hash identifier: kq1HZzc30ngE5ahD+xP/u5phF+0EDTibEL4gVd+5c08= Subject key identifier: 89:C7:75:C9:AD:25:2E:58:90:D5:80:63:CB:76:99:79:A5:D6:8D:93 Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7 Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7 Certificate serial: 019AF0BF6EF236A6C794F3F1D32304B121EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft Manifest number: 1351 Signing time: Fri 05 Dec 2025 23:01:08 +0000 Manifest this update: Fri 05 Dec 2025 23:01:08 +0000 Manifest next update: Sat 06 Dec 2025 23:01:08 +0000 Files and hashes: 1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: bUuP6DWWtZHuldJuWUucNM4zsKpSK2DebKg86t7nRT4=) 2: IPgK_RAdsHuRvKKv6Yp_JI973ng.roa (hash: tX54SYM7m1FlAg3IfdN7mYvGyQfWousk3Km0i1Rx1t4=) 3: X6FDOxTNKh52-I33xxvcwTU1qaA.roa (hash: 2Nya6BSwofcloqYL9ndMBA+GqP5w942e0XCFOKQVeZs=) 4: ox2Wfo3GjgI5qclmFBQzRvWFiwk.roa (hash: HIdOko7O9yGAFOy4Nnvp9Ps0Vn1M8Ss4upiUCfRzfB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:6e:f2:36:a6:c7:94:f3:f1:d3:23:04:b1:21:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7 Validity Not Before: Dec 5 23:01:08 2025 GMT Not After : Dec 6 23:01:08 2025 GMT Subject: CN=89c775c9ad252e5890d58063cb769979a5d68d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:06:59:1f:71:fd:c7:fa:ff:b2:ac:94:6e:97: 68:d8:26:c1:c0:b0:8e:d8:e4:d4:18:ef:45:5c:6f: 15:f7:2c:be:57:ce:e3:ba:94:6c:7b:6d:7b:4a:3b: 86:65:1b:73:74:d6:53:4f:47:45:fa:b2:68:f2:b8: 64:56:ed:67:ce:83:f1:36:51:29:8f:2c:3b:be:da: ff:3e:21:0a:86:1a:61:35:18:d0:a5:af:c8:19:a7: 24:24:d8:1c:d2:cf:e8:18:c7:b1:9b:e1:c2:b8:d7: 79:ca:aa:63:25:64:96:a2:d3:31:a1:40:5e:69:10: 19:f2:42:03:cc:b6:11:ff:25:5b:06:02:a7:11:1e: c1:98:19:8f:46:76:92:b0:53:1e:f7:5f:95:56:86: 3c:91:6b:f3:43:bf:d5:f4:e4:23:b1:d9:6e:85:83: a7:73:90:fc:a9:23:d2:b0:fc:80:64:53:5f:6b:d0: 23:15:12:00:c3:82:4d:0f:4b:86:fa:99:03:1c:67: 1b:ca:ab:b6:6a:bd:ef:00:ef:af:67:a0:78:41:fb: 3c:d3:2f:a0:bb:9b:56:89:ce:52:e9:28:c3:33:e9: 79:6a:1c:22:b2:e3:e6:6e:6a:3e:74:f3:73:f8:c4: ff:57:b4:62:0c:46:88:93:fb:e3:a4:ed:2f:3e:4b: cf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C7:75:C9:AD:25:2E:58:90:D5:80:63:CB:76:99:79:A5:D6:8D:93 X509v3 Authority Key Identifier: keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:03:51:87:7c:f7:d8:b5:ed:72:b7:f3:54:e2:0b:54:83:c7: 2a:4b:c0:8b:6c:28:65:d4:25:c0:76:1a:ff:27:2e:40:29:b2: b1:06:47:a2:db:f8:7b:71:05:96:00:55:ed:9d:13:db:37:e0: 1c:91:2c:5d:db:99:ec:b4:10:9e:1e:f3:42:9d:f7:11:6b:30: e6:e5:02:9e:8b:54:de:2e:7c:bd:6d:69:0e:63:42:f7:7d:f2: 3a:20:21:00:8a:17:6d:a6:01:6b:a9:93:ee:ab:41:4f:3e:c1: d6:99:b3:8e:22:b7:cc:a9:7b:52:6f:26:85:81:ae:47:5c:92: 63:db:02:06:5e:48:e8:ee:3d:37:6d:2f:13:ed:6b:42:fe:ea: d2:42:a6:8e:57:4d:4b:ab:88:4c:35:d6:0f:28:aa:e6:7e:65: 38:2d:a8:53:f9:6d:e1:10:7f:59:d9:da:dd:10:78:59:08:20: f6:e0:09:99:ea:7c:de:80:a1:5f:09:e5:88:4b:25:4c:37:1b: b2:1b:06:00:59:12:6d:c2:1c:00:63:84:e1:07:bc:fa:94:2a: ca:cd:c7:51:2b:fe:e7:a0:a5:d5:7c:c4:36:b1:0a:5c:0e:f4: 13:08:20:e7:b2:63:88:49:e5:24:51:91:47:f7:24:9e:1b:ba: 69:ae:60:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv27yNqbHlPPx0yMEsSHrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYTI1M2NkZjUwN2EwM2UxZjU3OWQyMDJkOGRmMTFkNjhm NWMzZDcwHhcNMjUxMjA1MjMwMTA4WhcNMjUxMjA2MjMwMTA4WjAzMTEwLwYDVQQD Eyg4OWM3NzVjOWFkMjUyZTU4OTBkNTgwNjNjYjc2OTk3OWE1ZDY4ZDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AZZH3H9x/r/sqyUbpdo2CbBwLCO 2OTUGO9FXG8V9yy+V87jupRse217SjuGZRtzdNZTT0dF+rJo8rhkVu1nzoPxNlEp jyw7vtr/PiEKhhphNRjQpa/IGackJNgc0s/oGMexm+HCuNd5yqpjJWSWotMxoUBe aRAZ8kIDzLYR/yVbBgKnER7BmBmPRnaSsFMe91+VVoY8kWvzQ7/V9OQjsdluhYOn c5D8qSPSsPyAZFNfa9AjFRIAw4JND0uG+pkDHGcbyqu2ar3vAO+vZ6B4Qfs80y+g u5tWic5S6SjDM+l5ahwisuPmbmo+dPNz+MT/V7RiDEaIk/vjpO0vPkvPjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInHdcmtJS5YkNWAY8t2mXml1o2TMB8GA1UdIwQY MBaAFPKiU831B6A+H1edIC2N8R1o9cPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjct YmU0ZDVkMDlkNzEwLzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjctYmU0ZDVkMDlkNzEw LzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgNRh3z3 2LXtcrfzVOILVIPHKkvAi2woZdQlwHYa/ycuQCmysQZHotv4e3EFlgBV7Z0T2zfg HJEsXduZ7LQQnh7zQp33EWsw5uUCnotU3i58vW1pDmNC933yOiAhAIoXbaYBa6mT 7qtBTz7B1pmzjiK3zKl7Um8mhYGuR1ySY9sCBl5I6O49N20vE+1rQv7q0kKmjldN S6uITDXWDyiq5n5lOC2oU/lt4RB/Wdna3RB4WQgg9uAJmep83oChXwnliEslTDcb shsGAFkSbcIcAGOE4Qe8+pQqys3HUSv+56Cl1XzENrEKXA70Ewgg57JjiEnlJFGR R/cknhu6aa5gmg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:14 2025 by rpki-client