This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft File: C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json) Hash identifier: P+qfRoAT7xcCT5uO5ZfcfE3ydePTHeNHqwNWNuocIEA= Subject key identifier: 15:A7:FB:E3:D0:D2:83:02:3A:EC:0D:98:4B:2B:30:63:8F:3C:A7:77 Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1 Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1 Certificate serial: 019AF208F58B757F006159A1176104C1FE2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft Manifest number: 0BCE Signing time: Sat 06 Dec 2025 05:01:04 +0000 Manifest this update: Sat 06 Dec 2025 05:01:04 +0000 Manifest next update: Sun 07 Dec 2025 05:01:04 +0000 Files and hashes: 1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: TAOq/kHAnYwzP2+4paPjU7QS8r+/rWTgByqT9GkXxkQ=) 2: xPUzYHJ2p6sBXOjKUulEgLqlcBc.roa (hash: ygZqht59F65fKs2o1JfQZNtwvL5DudVBMCJ5Le5stTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f5:8b:75:7f:00:61:59:a1:17:61:04:c1:fe:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1 Validity Not Before: Dec 6 05:01:04 2025 GMT Not After : Dec 7 05:01:04 2025 GMT Subject: CN=15a7fbe3d0d283023aec0d984b2b30638f3ca777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:da:45:de:2a:e2:1a:f0:8e:6d:49:0b:58: 14:2e:40:6b:bd:ef:ae:8e:ab:24:77:44:6b:d9:84: bd:8c:dc:a7:f6:d6:24:9a:57:e4:0b:cb:08:c6:57: 3b:51:bf:94:7f:b1:48:84:41:79:99:aa:6f:6e:fe: 8c:e1:7f:a4:a5:14:66:29:74:f7:01:89:da:28:d9: 4a:1f:44:3a:73:e1:83:1b:13:08:f8:b5:9e:69:d2: 62:65:72:4c:21:1a:8d:fc:7c:81:b4:ab:5a:94:a9: 9b:9d:15:3c:b2:1d:a7:c4:3e:bd:94:4a:2c:bc:90: 75:c3:b4:de:ff:46:73:4d:25:ab:76:96:ea:fc:dd: b8:9d:bf:7a:84:bf:9b:f7:52:8c:3a:42:4f:80:e9: 87:65:50:ea:17:ce:bb:e7:df:94:8d:cb:af:87:c0: 89:f5:95:54:2e:70:9a:74:d3:ca:1e:01:17:1c:28: bc:c4:10:e9:a9:f3:8c:1c:ef:9f:e4:15:95:3c:89: 78:dd:59:eb:80:ba:c4:2b:bc:06:7a:80:a6:64:f1: 3b:9b:a1:99:f7:88:2e:6f:83:63:88:05:f1:5a:47: a4:af:8c:3e:85:2c:2d:d3:2f:5e:1d:c3:af:2e:f9: 68:97:a5:80:fd:79:56:df:25:73:3a:b7:3c:18:28: ee:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A7:FB:E3:D0:D2:83:02:3A:EC:0D:98:4B:2B:30:63:8F:3C:A7:77 X509v3 Authority Key Identifier: keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:5f:b4:8e:b4:e4:3a:fe:b7:22:ea:59:9d:c6:98:7c:70:b8: 9f:cd:b9:b3:5d:ee:cf:8b:47:db:d6:d0:6f:56:ea:aa:e5:fb: 66:6b:14:9e:28:eb:73:7a:34:ad:1d:94:69:8b:bb:eb:63:21: 90:62:ea:d9:05:5f:8c:6b:21:92:90:86:88:cd:d8:23:5f:25: a3:d0:20:4e:88:03:b1:e8:f9:57:d2:69:3b:96:8b:78:f6:25: 3f:49:04:71:40:4b:50:d0:80:b4:17:06:20:d7:9b:59:43:cc: f5:49:17:1a:e9:af:59:2e:31:5d:23:23:c9:47:a2:fd:1f:c6: 72:87:6e:ca:16:85:89:7f:54:b1:6d:80:8e:74:3f:24:38:56: 24:31:95:b3:c8:e7:85:d2:a1:cd:70:bf:90:eb:e3:28:2f:c6: 64:43:06:bb:ff:7e:7e:fd:73:7d:bc:d6:42:26:78:03:03:d5: 66:55:8f:8b:55:ca:49:ed:e8:79:aa:f0:43:67:64:d2:06:59: 51:e4:20:d6:db:9e:b0:cd:9d:c2:0a:38:84:75:d9:4f:cf:64: ad:55:09:ea:5e:66:ac:8b:d2:8c:04:a9:bc:0a:45:92:ed:4d: 35:a1:a8:91:eb:bd:37:1e:0e:ed:7f:c3:7f:6b:5c:46:90:2c: 7a:0b:61:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPWLdX8AYVmhF2EEwf4qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYzcxZGYxNmRkMGI0N2NkMGFmOTcxZjE0ZDFkY2E2ZDgy MDZiYjEwHhcNMjUxMjA2MDUwMTA0WhcNMjUxMjA3MDUwMTA0WjAzMTEwLwYDVQQD EygxNWE3ZmJlM2QwZDI4MzAyM2FlYzBkOTg0YjJiMzA2MzhmM2NhNzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4LaRd4q4hrwjm1JC1gULkBrve+u jqskd0Rr2YS9jNyn9tYkmlfkC8sIxlc7Ub+Uf7FIhEF5mapvbv6M4X+kpRRmKXT3 AYnaKNlKH0Q6c+GDGxMI+LWeadJiZXJMIRqN/HyBtKtalKmbnRU8sh2nxD69lEos vJB1w7Te/0ZzTSWrdpbq/N24nb96hL+b91KMOkJPgOmHZVDqF86759+Ujcuvh8CJ 9ZVULnCadNPKHgEXHCi8xBDpqfOMHO+f5BWVPIl43VnrgLrEK7wGeoCmZPE7m6GZ 94gub4NjiAXxWkekr4w+hSwt0y9eHcOvLvlol6WA/XlW3yVzOrc8GCjumwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWn++PQ0oMCOuwNmEsrMGOPPKd3MB8GA1UdIwQY MBaAFAvHHfFt0LR80K+XHxTR3KbYIGuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hY2RhNWUtNGQyZC00Zjg2LWExN2It NWI0OTNhYTA3MjY4LzEvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9hY2RhNWUtNGQyZC00Zjg2LWExN2ItNWI0OTNhYTA3MjY4 LzEvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1+0jrTk Ov63IupZncaYfHC4n825s13uz4tH29bQb1bqquX7ZmsUnijrc3o0rR2UaYu762Mh kGLq2QVfjGshkpCGiM3YI18lo9AgTogDsej5V9JpO5aLePYlP0kEcUBLUNCAtBcG INebWUPM9UkXGumvWS4xXSMjyUei/R/GcoduyhaFiX9UsW2AjnQ/JDhWJDGVs8jn hdKhzXC/kOvjKC/GZEMGu/9+fv1zfbzWQiZ4AwPVZlWPi1XKSe3oearwQ2dk0gZZ UeQg1tuesM2dwgo4hHXZT89krVUJ6l5mrIvSjASpvApFku1NNaGokeu9Nx4O7X/D f2tcRpAsegthsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:30 2025 by rpki-client