This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft File: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft (raw, json) Hash identifier: 9Zb3mXhVy3Qfc0fjXxQlEh3tcc+VuTGfZk5rKgd7OgQ= Subject key identifier: 37:29:AB:B9:E2:B6:F5:9E:0D:DC:F2:56:46:48:97:68:F5:71:FF:B8 Authority key identifier: F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B Certificate issuer: /CN=f296fa79967e1aea042602f93242880a9543938b Certificate serial: 019AF19B203D35FD093EDDD568870423883F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:01:06 +0000 Manifest this update: Sat 06 Dec 2025 03:01:06 +0000 Manifest next update: Sun 07 Dec 2025 03:01:06 +0000 Files and hashes: 1: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl (hash: ZuMWc1Q1pVUhtZVoJhdTNnTJ6wEIN6p7pPJ9YEfbqY8=) 2: H-eIyUNZ0W3PQRk326R5srYUXMQ.roa (hash: sIobqQC6E12Xk9efcNzqh0/xjMLIgWaEqWZ87SibDYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:20:3d:35:fd:09:3e:dd:d5:68:87:04:23:88:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f296fa79967e1aea042602f93242880a9543938b Validity Not Before: Dec 6 03:01:06 2025 GMT Not After : Dec 7 03:01:06 2025 GMT Subject: CN=3729abb9e2b6f59e0ddcf25646489768f571ffb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:30:13:c5:5f:d8:67:dd:7e:9f:24:fa:69:b0: f8:07:3b:43:b0:ed:fa:4c:27:6e:2c:e1:fd:10:05: b8:8e:6b:12:ea:17:08:2a:c0:0f:02:53:ca:3a:d9: 75:35:7e:16:36:4a:4d:fc:f5:55:f8:21:1c:3f:0d: e0:99:03:a6:c5:f9:ea:06:a6:21:7f:77:02:be:66: 3b:81:b0:ca:bf:4a:69:46:03:d3:27:0e:65:dd:a3: 4f:1a:85:c4:5c:00:7f:05:be:6c:75:27:41:87:0d: 89:b3:a0:fc:58:d9:3c:3d:2a:e7:77:fc:a5:e0:06: a1:33:41:71:18:c7:ad:43:42:65:2e:74:c5:5e:8f: 2f:f9:a4:d4:cb:91:e6:27:4e:01:f0:a5:60:0f:41: 58:f3:aa:b8:eb:bc:0b:20:5d:b6:8d:75:3f:a0:28: 63:44:d1:e4:8a:88:c2:a6:bf:0f:02:57:78:4a:7c: 0f:ec:40:00:8f:39:1d:9a:6b:04:d0:0e:c0:fc:36: f1:74:cf:11:de:58:2c:7e:9d:4d:e3:83:11:09:b8: a4:82:75:af:07:63:40:fc:60:09:f0:4d:9a:a8:27: f3:c7:96:fa:0e:f1:66:15:c2:e3:a6:ad:b0:1f:9e: 15:29:ec:54:e5:e2:af:5f:2c:ba:53:e3:fc:14:dc: 09:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:29:AB:B9:E2:B6:F5:9E:0D:DC:F2:56:46:48:97:68:F5:71:FF:B8 X509v3 Authority Key Identifier: keyid:F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:fa:0d:72:b1:9f:62:f7:0b:6e:26:c8:53:b7:b6:f3:ed:71: bf:f8:ec:44:0f:f8:d6:15:db:16:54:9f:f2:20:fd:b6:e8:ea: d2:5a:14:59:34:ba:4f:98:d7:da:c0:5a:cd:13:8b:bb:76:17: 96:46:8d:79:34:e9:cc:21:15:3d:3c:1c:2e:67:62:1d:06:81: c8:48:3a:b1:f6:9c:62:94:ed:fc:c4:b8:63:9f:04:20:3c:80: 2b:95:40:08:bf:2e:d8:b2:d4:7e:fe:30:51:ee:3b:60:ff:81: 71:a5:c0:ab:30:0d:b0:d3:b9:a4:f0:ed:e4:3b:14:3b:a3:ee: 05:89:b7:40:e2:25:0e:82:af:d8:51:03:72:69:5c:84:08:67: 99:8a:68:40:5a:bb:24:a4:93:96:d4:c0:e3:c2:d3:d8:7a:71: 50:70:01:fb:be:1e:72:0a:9a:f7:a3:a9:0e:4a:2c:9b:ba:55: 6c:14:6c:e6:fe:10:4b:87:4f:5b:94:b7:24:7c:8b:0b:d1:26: 5b:1b:81:a3:a5:ee:11:66:3d:41:e1:ab:83:9d:9f:a2:16:97: 0d:dd:f3:b8:a2:1e:18:0a:de:cb:ef:61:f4:73:ce:ad:76:7c: dd:c7:52:a3:a4:0b:32:43:5b:25:e3:a6:98:93:2b:4b:c6:f5: cb:ac:8f:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyA9Nf0JPt3VaIcEI4g/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyOTZmYTc5OTY3ZTFhZWEwNDI2MDJmOTMyNDI4ODBhOTU0 MzkzOGIwHhcNMjUxMjA2MDMwMTA2WhcNMjUxMjA3MDMwMTA2WjAzMTEwLwYDVQQD EygzNzI5YWJiOWUyYjZmNTllMGRkY2YyNTY0NjQ4OTc2OGY1NzFmZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jATxV/YZ91+nyT6abD4BztDsO36 TCduLOH9EAW4jmsS6hcIKsAPAlPKOtl1NX4WNkpN/PVV+CEcPw3gmQOmxfnqBqYh f3cCvmY7gbDKv0ppRgPTJw5l3aNPGoXEXAB/Bb5sdSdBhw2Js6D8WNk8PSrnd/yl 4AahM0FxGMetQ0JlLnTFXo8v+aTUy5HmJ04B8KVgD0FY86q467wLIF22jXU/oChj RNHkiojCpr8PAld4SnwP7EAAjzkdmmsE0A7A/DbxdM8R3lgsfp1N44MRCbikgnWv B2NA/GAJ8E2aqCfzx5b6DvFmFcLjpq2wH54VKexU5eKvXyy6U+P8FNwJIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcpq7nitvWeDdzyVkZIl2j1cf+4MB8GA1UdIwQY MBaAFPKW+nmWfhrqBCYC+TJCiAqVQ5OLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHBiNmVaWi1HdW9FSmdMNU1rS0lDcFZEazRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi82ZDJhMjgtYmM4My00MmQ1LTg1NTYt OTQwOWQ5MTA5MGZhLzEvOHBiNmVaWi1HdW9FSmdMNU1rS0lDcFZEazRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi82ZDJhMjgtYmM4My00MmQ1LTg1NTYtOTQwOWQ5MTA5MGZh LzEvOHBiNmVaWi1HdW9FSmdMNU1rS0lDcFZEazRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/oNcrGf YvcLbibIU7e28+1xv/jsRA/41hXbFlSf8iD9tujq0loUWTS6T5jX2sBazROLu3YX lkaNeTTpzCEVPTwcLmdiHQaByEg6sfacYpTt/MS4Y58EIDyAK5VACL8u2LLUfv4w Ue47YP+BcaXAqzANsNO5pPDt5DsUO6PuBYm3QOIlDoKv2FEDcmlchAhnmYpoQFq7 JKSTltTA48LT2HpxUHAB+74ecgqa96OpDkosm7pVbBRs5v4QS4dPW5S3JHyLC9Em WxuBo6XuEWY9QeGrg52fohaXDd3zuKIeGArey+9h9HPOrXZ83cdSo6QLMkNbJeOm mJMrS8b1y6yPLA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:13 2025 by rpki-client