This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft File: 8J3iYg0i-mnFTL68by9IUFbOL-U.mft (raw, json) Hash identifier: BjbLp1x7YVy+0e+yH+3Ub8Gx6W6tj35nzylOPowvF3Y= Subject key identifier: B4:63:12:C0:F4:08:85:7F:E1:19:AE:9D:17:60:22:D4:AF:AC:12:9C Authority key identifier: F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5 Certificate issuer: /CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5 Certificate serial: 019AF164908D604332E25D621E5D6E0CC5D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft Manifest number: 0420 Signing time: Sat 06 Dec 2025 02:01:30 +0000 Manifest this update: Sat 06 Dec 2025 02:01:30 +0000 Manifest next update: Sun 07 Dec 2025 02:01:30 +0000 Files and hashes: 1: 8J3iYg0i-mnFTL68by9IUFbOL-U.crl (hash: KrgWGkx3fzJhMbSgbxHxWMCq16dTf9oAQLBYGJpX6tg=) 2: gtqtvDZxxq5MJdwetq5IVth42z0.roa (hash: DsoC8S+ekUdxd5VaMM9eODyiV+OQ6KDTcMckhDvQ+dw=) 3: vlbjkguhua3sXNAb4WL9C-kH7NI.roa (hash: W2Tg0b912XPXpVMo5wmJMbF6s29yN1E6dtpyPDGr82E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:90:8d:60:43:32:e2:5d:62:1e:5d:6e:0c:c5:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5 Validity Not Before: Dec 6 02:01:30 2025 GMT Not After : Dec 7 02:01:30 2025 GMT Subject: CN=b46312c0f408857fe119ae9d176022d4afac129c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b1:46:40:7d:c5:49:52:40:fc:4f:2f:a9:9a: 06:ec:32:ce:21:6f:28:e3:a5:79:bc:b5:d8:0f:dd: c6:43:88:58:bf:e5:a4:68:8d:8c:ff:8c:8f:33:34: b6:4f:99:ee:61:c7:4f:0f:13:7f:ef:2a:ea:7c:be: b8:4f:e5:ca:6e:36:22:ae:52:27:88:50:ee:70:e5: ac:37:7e:5e:c0:3a:8a:16:75:38:e7:1e:3f:34:b1: 54:81:20:22:f6:d1:b1:fd:b4:71:95:28:c3:99:25: 08:76:5d:7b:71:68:f8:f6:6e:38:9e:58:ab:94:83: f0:49:ba:5d:2e:fa:91:ed:02:19:c2:ab:02:f1:d6: 1a:ee:33:d4:22:d3:81:30:77:d1:f2:8d:c3:7e:0b: ce:94:28:e7:e2:9a:68:d0:d4:69:b8:90:d4:e9:7d: 0d:db:18:80:2f:f4:92:f4:59:c3:e9:b4:db:07:fd: 53:ce:fb:65:84:4d:58:d4:bf:47:08:b5:f3:d1:16: ea:a9:dd:bb:cd:2e:b8:36:28:04:14:ae:8e:24:ac: 39:fa:fd:30:a5:3a:4f:f9:56:a4:ce:1a:a2:ad:0e: 7d:04:76:6f:0f:dc:d0:0c:a5:e5:29:ac:95:09:7e: 3e:c6:36:6e:6e:a1:8a:95:11:04:df:4d:d2:48:61: 67:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:63:12:C0:F4:08:85:7F:E1:19:AE:9D:17:60:22:D4:AF:AC:12:9C X509v3 Authority Key Identifier: keyid:F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:97:81:bd:b3:da:91:c1:e5:e4:e5:b9:93:42:1d:e8:08:e0: 44:47:10:32:d8:00:83:e3:9a:54:1d:46:f3:1e:0b:e2:6f:94: bb:1e:19:ed:5e:4d:6e:ea:9c:4a:c7:1b:74:4b:d9:b5:53:ce: 1c:35:46:b3:d6:0d:4f:5c:01:03:6f:39:28:33:c8:61:61:00: 17:e3:9a:53:ce:99:69:a8:19:d9:7a:c8:74:76:a5:95:54:f0: 38:b0:82:d1:9a:af:f0:a2:51:8f:d9:94:d1:d5:5a:12:64:7a: 36:98:14:38:aa:f1:ca:cc:e0:51:b2:ae:a6:55:18:a1:1d:8a: 8d:97:58:e8:3f:f2:67:19:44:73:67:12:11:5a:b6:1a:d1:19: 8f:a7:46:49:b0:f2:32:3d:e8:ef:e4:0a:9c:77:52:80:28:30: de:b0:65:5f:6e:de:60:d9:de:cd:d6:56:df:96:88:35:9c:12: e3:c4:6c:ce:26:e5:7c:3b:1f:e0:50:fd:e0:d5:70:ee:d6:fa: 58:71:c4:29:03:04:1f:7b:9b:81:fc:e0:00:a5:c6:ab:66:c7: 1d:5d:16:ee:bd:08:e2:40:de:97:da:20:d6:4c:3c:85:b8:e6: 07:60:00:7a:26:e7:03:3d:7b:73:ed:93:d2:13:12:6b:5f:dc: 07:cf:09:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZJCNYEMy4l1iHl1uDMXZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwOWRlMjYyMGQyMmZhNjljNTRjYmViYzZmMmY0ODUwNTZj ZTJmZTUwHhcNMjUxMjA2MDIwMTMwWhcNMjUxMjA3MDIwMTMwWjAzMTEwLwYDVQQD EyhiNDYzMTJjMGY0MDg4NTdmZTExOWFlOWQxNzYwMjJkNGFmYWMxMjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrFGQH3FSVJA/E8vqZoG7DLOIW8o 46V5vLXYD93GQ4hYv+WkaI2M/4yPMzS2T5nuYcdPDxN/7yrqfL64T+XKbjYirlIn iFDucOWsN35ewDqKFnU45x4/NLFUgSAi9tGx/bRxlSjDmSUIdl17cWj49m44nlir lIPwSbpdLvqR7QIZwqsC8dYa7jPUItOBMHfR8o3DfgvOlCjn4ppo0NRpuJDU6X0N 2xiAL/SS9FnD6bTbB/1TzvtlhE1Y1L9HCLXz0Rbqqd27zS64NigEFK6OJKw5+v0w pTpP+VakzhqirQ59BHZvD9zQDKXlKayVCX4+xjZubqGKlREE303SSGFnFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRjEsD0CIV/4RmunRdgItSvrBKcMB8GA1UdIwQY MBaAFPCd4mINIvppxUy+vG8vSFBWzi/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85Mjg1OTMtN2EwYS00MzEyLTg2ZTIt ZjgyZDYwMGRkNGUyLzEvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85Mjg1OTMtN2EwYS00MzEyLTg2ZTItZjgyZDYwMGRkNGUy LzEvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZeBvbPa kcHl5OW5k0Id6AjgREcQMtgAg+OaVB1G8x4L4m+Uux4Z7V5NbuqcSscbdEvZtVPO HDVGs9YNT1wBA285KDPIYWEAF+OaU86ZaagZ2XrIdHallVTwOLCC0Zqv8KJRj9mU 0dVaEmR6NpgUOKrxyszgUbKuplUYoR2KjZdY6D/yZxlEc2cSEVq2GtEZj6dGSbDy Mj3o7+QKnHdSgCgw3rBlX27eYNnezdZW35aINZwS48RsziblfDsf4FD94NVw7tb6 WHHEKQMEH3ubgfzgAKXGq2bHHV0W7r0I4kDel9og1kw8hbjmB2AAeibnAz17c+2T 0hMSa1/cB88Jtw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:29 2025 by rpki-client