This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft File: C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json) Hash identifier: 2OS/TEjl8dZrUHu92Fwdv5WRcM1I2+82vfSv5RMaqqM= Subject key identifier: 65:B3:88:87:A4:F2:E0:4A:B8:86:5A:31:25:F6:49:E6:AA:B2:33:EB Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1 Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1 Certificate serial: 019B2BF87B7A2206038BBD82EB900D326D31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft Manifest number: 0BEC Signing time: Wed 17 Dec 2025 11:01:03 +0000 Manifest this update: Wed 17 Dec 2025 11:01:03 +0000 Manifest next update: Thu 18 Dec 2025 11:01:03 +0000 Files and hashes: 1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: t9+zBvwRHXUxflyoCi+JWOOmgtEK4o/3LU/sdCMZZLo=) 2: xPUzYHJ2p6sBXOjKUulEgLqlcBc.roa (hash: ygZqht59F65fKs2o1JfQZNtwvL5DudVBMCJ5Le5stTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:7b:7a:22:06:03:8b:bd:82:eb:90:0d:32:6d:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1 Validity Not Before: Dec 17 11:01:03 2025 GMT Not After : Dec 18 11:01:03 2025 GMT Subject: CN=65b38887a4f2e04ab8865a3125f649e6aab233eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d5:b2:98:18:38:93:42:52:5f:4f:2e:ff:4c: 1e:7e:06:7a:d6:dd:12:73:28:78:b9:ee:cc:23:2c: fa:82:7d:46:cf:36:50:e8:44:c2:64:46:b7:d0:16: 06:b3:0a:f9:b4:c8:8c:0e:e2:6f:4f:f9:42:76:9f: 9a:af:d9:cf:0c:56:98:f1:26:42:ae:d1:c2:43:28: 97:29:9c:21:ed:83:54:c8:99:65:e0:29:6f:c9:f7: 6c:4a:39:41:3c:1d:15:fe:ab:ec:ea:62:63:cf:4a: 4b:67:06:fd:73:09:f4:14:9d:11:a9:79:1d:88:a5: db:ca:e8:32:8b:86:e8:5d:a4:24:18:aa:a3:b4:29: 83:ce:2b:26:c7:58:4f:f3:56:2b:e6:9d:62:04:6a: 69:54:db:b9:24:c6:9d:a7:a0:51:4f:d1:eb:a3:62: 73:76:a5:80:50:25:fd:4b:b9:a9:09:44:53:ae:f4: 96:25:fa:7b:08:d6:5d:ba:ca:7b:24:96:71:d9:1b: 9e:28:c3:b6:64:1e:17:41:d4:b4:1f:40:5a:fa:eb: 6a:1d:61:71:7d:bb:8b:5c:88:b6:db:33:90:fa:11: 7a:95:78:e9:aa:08:42:a6:51:72:b5:44:54:2d:b9: 58:63:42:cc:24:89:d4:49:1c:6f:55:a0:66:99:7f: ee:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B3:88:87:A4:F2:E0:4A:B8:86:5A:31:25:F6:49:E6:AA:B2:33:EB X509v3 Authority Key Identifier: keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f7:9f:e3:60:10:5f:c6:0a:85:b8:d4:95:84:04:e5:e4:55: 66:2a:f1:8e:e2:ac:e7:19:96:ca:68:77:68:62:6c:66:56:12: 54:0c:9f:d7:61:06:de:2c:69:5c:cd:e4:88:dc:2d:23:48:f6: 03:c8:61:6f:ac:96:8c:bb:94:f7:8d:40:d0:27:d6:ed:f0:a5: 1c:ca:1b:47:97:e7:40:fd:59:0a:7f:84:f6:aa:93:3f:45:c8: dd:66:6b:46:89:b7:ff:6d:0f:b9:ca:00:3b:5d:2e:b0:58:74: 5a:6f:5f:0a:bb:20:dc:1a:f1:de:0d:1e:af:b9:79:3f:e3:a7: 88:08:3a:b6:9a:27:d5:a8:3b:5b:98:58:6e:13:37:86:1e:e4: 02:14:0a:ff:55:af:23:e1:61:92:4f:d9:c1:7b:00:71:63:9a: de:ab:06:81:b4:1d:59:63:ac:d6:dc:cf:7d:b4:87:b8:54:39: 21:6f:08:fe:2b:5f:2c:9b:59:b6:f4:a8:25:d0:86:73:da:4d: 4d:d8:3b:6d:7d:de:3d:df:be:0f:89:f2:9a:0a:b8:b0:99:05: c7:84:d7:5c:cf:59:4f:9e:59:a7:dd:72:95:d6:4c:b7:7b:ef: b8:d9:47:7a:06:f9:7a:7d:48:19:41:25:c8:d3:01:03:7f:23: 03:91:7d:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+Ht6IgYDi72C65ANMm0xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYzcxZGYxNmRkMGI0N2NkMGFmOTcxZjE0ZDFkY2E2ZDgy MDZiYjEwHhcNMjUxMjE3MTEwMTAzWhcNMjUxMjE4MTEwMTAzWjAzMTEwLwYDVQQD Eyg2NWIzODg4N2E0ZjJlMDRhYjg4NjVhMzEyNWY2NDllNmFhYjIzM2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudWymBg4k0JSX08u/0wefgZ61t0S cyh4ue7MIyz6gn1GzzZQ6ETCZEa30BYGswr5tMiMDuJvT/lCdp+ar9nPDFaY8SZC rtHCQyiXKZwh7YNUyJll4ClvyfdsSjlBPB0V/qvs6mJjz0pLZwb9cwn0FJ0RqXkd iKXbyugyi4boXaQkGKqjtCmDzismx1hP81Yr5p1iBGppVNu5JMadp6BRT9Hro2Jz dqWAUCX9S7mpCURTrvSWJfp7CNZdusp7JJZx2RueKMO2ZB4XQdS0H0Ba+utqHWFx fbuLXIi22zOQ+hF6lXjpqghCplFytURULblYY0LMJInUSRxvVaBmmX/u2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWziIek8uBKuIZaMSX2SeaqsjPrMB8GA1UdIwQY MBaAFAvHHfFt0LR80K+XHxTR3KbYIGuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hY2RhNWUtNGQyZC00Zjg2LWExN2It NWI0OTNhYTA3MjY4LzEvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9hY2RhNWUtNGQyZC00Zjg2LWExN2ItNWI0OTNhYTA3MjY4 LzEvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfef42AQ X8YKhbjUlYQE5eRVZirxjuKs5xmWymh3aGJsZlYSVAyf12EG3ixpXM3kiNwtI0j2 A8hhb6yWjLuU941A0CfW7fClHMobR5fnQP1ZCn+E9qqTP0XI3WZrRom3/20PucoA O10usFh0Wm9fCrsg3Brx3g0er7l5P+OniAg6tpon1ag7W5hYbhM3hh7kAhQK/1Wv I+Fhkk/ZwXsAcWOa3qsGgbQdWWOs1tzPfbSHuFQ5IW8I/itfLJtZtvSoJdCGc9pN Tdg7bX3ePd++D4nymgq4sJkFx4TXXM9ZT55Zp91yldZMt3vvuNlHegb5en1IGUEl yNMBA38jA5F9uA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:31:59 2025 by rpki-client