This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft File: MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft (raw, json) Hash identifier: pdyB0LFESjS6mbzS3+FLjblg4IIr083YB7BbNJu3+Lk= Subject key identifier: DA:FF:FA:1A:48:CF:79:AC:71:43:29:0C:59:97:F5:4E:CD:4E:76:1D Authority key identifier: 30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA Certificate issuer: /CN=302f09f265e9b278f8073d6982ff175713a5a0fa Certificate serial: 019AF088DDE0F0E2CE201125A6E48179E680 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft Manifest number: 08D6 Signing time: Fri 05 Dec 2025 22:01:32 +0000 Manifest this update: Fri 05 Dec 2025 22:01:32 +0000 Manifest next update: Sat 06 Dec 2025 22:01:32 +0000 Files and hashes: 1: Dz49aMuKRlKMoJhdInbOpT8odb0.roa (hash: eGQZ4ljYZGoi2bWlhPeueYms1SjbBMBvU/96IhPjXeA=) 2: ESyXldKwtms-9as-fPqZA06oJF8.roa (hash: ux8w7uiQ2u3yqvfbtVufiAk64n37yIym0ehvJixmaFU=) 3: MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl (hash: CH6J4tcwKqiXZpt0r6kF71MYQZMjNkEoHLZCH9xZcrA=) 4: PmMRDG9xx1iegEvlwTgY94xn0uY.roa (hash: rnYe+7KnzmmrVpmGGJ0sYn/ALtPwvcJTUyQU0nsWM1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:dd:e0:f0:e2:ce:20:11:25:a6:e4:81:79:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=302f09f265e9b278f8073d6982ff175713a5a0fa Validity Not Before: Dec 5 22:01:32 2025 GMT Not After : Dec 6 22:01:32 2025 GMT Subject: CN=dafffa1a48cf79ac7143290c5997f54ecd4e761d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:59:95:1e:5b:e3:a9:38:bf:4a:fa:7f:4f:60: 74:03:c4:98:43:dd:5a:86:05:66:de:b8:fb:fe:02: 10:07:fe:09:85:73:2c:4e:b0:df:34:c1:b1:d5:29: c4:3b:18:c6:e8:b2:fd:59:fc:07:9d:44:ce:1c:83: c8:48:3e:3f:55:8e:1d:6a:e9:01:47:a9:45:c7:a0: 01:a1:1b:5b:ed:4d:e3:6b:f4:e5:92:72:5e:76:38: 8c:17:4e:9c:a1:64:92:f8:70:39:75:7d:45:dc:af: 6b:c7:4b:7e:6c:a7:ec:83:98:6a:4a:4e:f1:8f:0a: 49:28:82:30:bb:89:ee:60:b7:49:b3:60:f0:cc:c7: b5:50:b5:3e:c6:cf:25:7e:f4:35:49:e0:2b:74:5c: f3:27:ca:3a:da:1b:f3:83:8b:8b:ff:7d:c7:77:50: 24:c7:73:df:95:84:4b:ce:3a:65:ce:65:c0:9d:63: be:54:00:85:a0:e1:23:2d:1d:20:0a:78:45:93:c3: 85:52:4c:d0:e8:a8:e6:85:10:79:ce:e6:5a:4c:05: b8:70:9f:b1:0b:ff:76:9e:7e:b4:b3:6a:2e:80:e3: 87:75:ae:72:03:47:f7:5a:b9:b1:63:4d:b1:92:75: 1c:b0:ce:a4:c2:77:8a:10:44:7a:5a:43:52:5c:b8: 67:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FF:FA:1A:48:CF:79:AC:71:43:29:0C:59:97:F5:4E:CD:4E:76:1D X509v3 Authority Key Identifier: keyid:30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:07:85:d8:7a:9d:dc:b5:a8:41:66:84:c9:8d:b3:3b:5f:01: 6c:2e:3a:20:18:0f:94:cd:bb:b5:76:49:db:0f:2e:f2:c9:af: 2e:33:a3:ed:d7:e4:a4:75:42:9e:7a:2b:d7:98:bb:66:53:63: 96:5f:07:97:8f:9e:50:6b:79:77:4b:1e:ae:fb:99:ec:69:db: 77:a5:38:5e:35:0e:a5:23:5d:f7:df:13:26:9e:9e:43:b2:2f: 13:f2:eb:7c:ac:66:2a:07:97:d4:84:9f:1f:75:4d:c1:fb:c8: 95:ce:23:9d:e4:76:26:cd:10:01:e4:5b:bf:75:81:74:e4:8e: 62:2d:b9:28:1b:34:f6:de:c8:76:8c:2e:ee:a3:bc:63:fd:14: 80:34:c9:c4:bd:ab:55:18:f2:0c:d7:f6:0d:38:7d:9d:7d:be: f6:e4:c2:43:d9:f4:cf:ac:10:87:e6:e3:82:3d:e2:6a:43:48: 62:66:7d:fc:bd:28:88:e0:89:cc:09:95:84:b9:61:2d:46:7a: a3:68:7c:c5:aa:69:22:d2:49:19:e3:cd:21:4e:91:ae:f2:a3: d1:6a:49:7e:fd:ba:0a:e3:fb:20:d4:13:89:8a:d2:50:aa:e6: 35:32:75:e1:e6:cc:ac:18:67:ad:91:33:22:a8:40:b8:2e:59: 87:b1:26:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiN3g8OLOIBElpuSBeeaAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMmYwOWYyNjVlOWIyNzhmODA3M2Q2OTgyZmYxNzU3MTNh NWEwZmEwHhcNMjUxMjA1MjIwMTMyWhcNMjUxMjA2MjIwMTMyWjAzMTEwLwYDVQQD EyhkYWZmZmExYTQ4Y2Y3OWFjNzE0MzI5MGM1OTk3ZjU0ZWNkNGU3NjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslmVHlvjqTi/Svp/T2B0A8SYQ91a hgVm3rj7/gIQB/4JhXMsTrDfNMGx1SnEOxjG6LL9WfwHnUTOHIPISD4/VY4daukB R6lFx6ABoRtb7U3ja/TlknJedjiMF06coWSS+HA5dX1F3K9rx0t+bKfsg5hqSk7x jwpJKIIwu4nuYLdJs2DwzMe1ULU+xs8lfvQ1SeArdFzzJ8o62hvzg4uL/33Hd1Ak x3PflYRLzjplzmXAnWO+VACFoOEjLR0gCnhFk8OFUkzQ6KjmhRB5zuZaTAW4cJ+x C/92nn60s2ougOOHda5yA0f3WrmxY02xknUcsM6kwneKEER6WkNSXLhnkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNr/+hpIz3mscUMpDFmX9U7NTnYdMB8GA1UdIwQY MBaAFDAvCfJl6bJ4+Ac9aYL/F1cTpaD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lNzVhZDItMWUzMC00NTVlLTk3ODct M2I1NWYyMzI3YjM0LzEvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9lNzVhZDItMWUzMC00NTVlLTk3ODctM2I1NWYyMzI3YjM0 LzEvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgeF2Hqd 3LWoQWaEyY2zO18BbC46IBgPlM27tXZJ2w8u8smvLjOj7dfkpHVCnnor15i7ZlNj ll8Hl4+eUGt5d0servuZ7Gnbd6U4XjUOpSNd998TJp6eQ7IvE/LrfKxmKgeX1ISf H3VNwfvIlc4jneR2Js0QAeRbv3WBdOSOYi25KBs09t7Idowu7qO8Y/0UgDTJxL2r VRjyDNf2DTh9nX2+9uTCQ9n0z6wQh+bjgj3iakNIYmZ9/L0oiOCJzAmVhLlhLUZ6 o2h8xappItJJGePNIU6RrvKj0WpJfv26CuP7INQTiYrSUKrmNTJ14ebMrBhnrZEz IqhAuC5Zh7EmBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:50 2025 by rpki-client