This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft File: n8IY9nJDtH2gIf2j_rRBR0s865Q.mft (raw, json) Hash identifier: ZbDZJZCdzrKrKd4ad2H21xOnyOXGdZe9/2BjrygQx1Y= Subject key identifier: A2:E3:3A:3C:AC:C4:AA:23:E2:56:0A:A5:E1:85:08:EA:D7:B8:0B:5E Authority key identifier: 9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94 Certificate issuer: /CN=9fc218f67243b47da021fda3feb441474b3ceb94 Certificate serial: 019AF31B7F08A1E455392E3F6947561C08ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:00:56 +0000 Manifest this update: Sat 06 Dec 2025 10:00:56 +0000 Manifest next update: Sun 07 Dec 2025 10:00:56 +0000 Files and hashes: 1: n8IY9nJDtH2gIf2j_rRBR0s865Q.crl (hash: UyhAoZ3M3Eb7sr/1o3fuYqgQ6qjJxjWhMqZoNZaCafE=) 2: sYA6KeIU16Bd58c84OvJJaCKPKU.roa (hash: tX4ZljxiPaFmNoY3hS/p0i7eqE1TuxWDswzU5ZDhiFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:7f:08:a1:e4:55:39:2e:3f:69:47:56:1c:08:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fc218f67243b47da021fda3feb441474b3ceb94 Validity Not Before: Dec 6 10:00:56 2025 GMT Not After : Dec 7 10:00:56 2025 GMT Subject: CN=a2e33a3cacc4aa23e2560aa5e18508ead7b80b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f7:c7:0d:a9:8a:d7:cd:3a:74:80:72:77:69: 11:71:1c:5c:4b:06:4e:45:fb:98:7b:91:83:0f:ca: 93:0c:cb:46:86:78:fc:33:0a:60:53:2a:d5:f4:5b: 8f:2f:f5:35:d6:aa:d8:7d:f3:80:37:d3:79:71:77: 04:6b:c5:ae:b6:83:85:08:d3:de:d1:42:d7:95:5e: ff:75:7b:cb:9b:fc:04:82:7e:df:da:b9:aa:1f:1b: b7:73:2b:90:fa:56:40:b3:cd:db:8f:8c:2c:91:6d: c3:4d:35:f3:cf:7d:73:5f:24:32:74:ea:7f:af:27: b5:1e:43:3f:9d:4c:5d:54:1b:77:e8:2d:08:b7:24: ef:d3:10:c8:93:bb:bc:fa:f3:f6:8d:f7:c3:42:60: a3:c0:1b:1a:96:ea:b4:5b:2d:06:2a:3d:58:51:6d: c0:9c:28:a4:8e:24:8a:16:ff:33:07:18:bc:a5:b6: 4b:cf:35:31:f8:35:48:61:6b:36:46:ab:a1:2e:3f: 45:d8:68:9b:b5:a7:c2:b8:f9:74:21:cd:1e:05:a0: eb:98:79:7a:23:94:5e:72:43:96:6f:68:9d:ba:a6: fc:70:41:97:4c:2b:73:b5:60:9a:bc:d5:fc:03:02: 68:89:bb:f9:8b:0a:f3:2c:12:90:54:f6:2f:6d:1e: 36:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E3:3A:3C:AC:C4:AA:23:E2:56:0A:A5:E1:85:08:EA:D7:B8:0B:5E X509v3 Authority Key Identifier: keyid:9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:19:a6:cb:70:2a:fa:63:e5:70:92:2e:13:27:0d:9c:f8:ca: 24:33:cc:95:4f:28:ec:64:3d:1b:ad:93:eb:42:a3:40:a4:24: 9b:95:f1:a5:5b:a3:50:c9:d6:73:96:e2:cf:12:94:3b:a4:14: 6a:53:7a:35:99:91:7f:f6:a4:e0:f2:fa:af:9e:83:58:c5:1a: 00:4e:2f:2a:95:2f:87:e2:7c:09:fe:b2:aa:69:45:bc:4e:b5: a2:f3:bc:41:7c:82:6f:2e:8c:65:d4:31:01:39:dd:9d:24:aa: 16:53:33:dd:39:14:d3:63:e0:c9:b6:cc:00:72:a0:7c:bc:ee: 60:13:a4:59:08:1b:8b:af:f0:d9:94:b4:67:f0:5f:1e:90:30: 0e:2e:37:ff:87:5c:01:44:6a:34:e8:bc:eb:f8:b4:2e:e8:8a: f6:50:72:96:fb:1b:cb:e8:02:85:1c:09:d8:6c:9a:1d:4b:3f: 18:ab:32:fc:b5:d5:2e:97:75:3b:a3:30:0a:2f:04:ce:cf:45: 23:77:79:29:58:e2:9c:bb:ae:a6:56:20:66:1d:99:59:6f:1e: e9:58:2b:2c:3c:1f:98:d2:01:c7:e6:f5:fc:1e:9d:48:7d:90: 43:ee:b7:08:e6:b6:ef:5a:fe:f4:4a:79:19:22:24:67:3e:19: 79:c3:1c:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG38IoeRVOS4/aUdWHAjtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYzIxOGY2NzI0M2I0N2RhMDIxZmRhM2ZlYjQ0MTQ3NGIz Y2ViOTQwHhcNMjUxMjA2MTAwMDU2WhcNMjUxMjA3MTAwMDU2WjAzMTEwLwYDVQQD EyhhMmUzM2EzY2FjYzRhYTIzZTI1NjBhYTVlMTg1MDhlYWQ3YjgwYjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/fHDamK1806dIByd2kRcRxcSwZO RfuYe5GDD8qTDMtGhnj8MwpgUyrV9FuPL/U11qrYffOAN9N5cXcEa8WutoOFCNPe 0ULXlV7/dXvLm/wEgn7f2rmqHxu3cyuQ+lZAs83bj4wskW3DTTXzz31zXyQydOp/ rye1HkM/nUxdVBt36C0ItyTv0xDIk7u8+vP2jffDQmCjwBsaluq0Wy0GKj1YUW3A nCikjiSKFv8zBxi8pbZLzzUx+DVIYWs2RquhLj9F2GibtafCuPl0Ic0eBaDrmHl6 I5ReckOWb2iduqb8cEGXTCtztWCavNX8AwJoibv5iwrzLBKQVPYvbR42hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLjOjysxKoj4lYKpeGFCOrXuAteMB8GA1UdIwQY MBaAFJ/CGPZyQ7R9oCH9o/60QUdLPOuUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjhJWTluSkR0SDJnSWYyal9yUkJSMHM4NjVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82N2FhZTItYzhmYy00YWQwLWJjNjAt ZGVmOWIyZTJkZmQzLzEvbjhJWTluSkR0SDJnSWYyal9yUkJSMHM4NjVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy82N2FhZTItYzhmYy00YWQwLWJjNjAtZGVmOWIyZTJkZmQz LzEvbjhJWTluSkR0SDJnSWYyal9yUkJSMHM4NjVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhmmy3Aq +mPlcJIuEycNnPjKJDPMlU8o7GQ9G62T60KjQKQkm5XxpVujUMnWc5bizxKUO6QU alN6NZmRf/ak4PL6r56DWMUaAE4vKpUvh+J8Cf6yqmlFvE61ovO8QXyCby6MZdQx ATndnSSqFlMz3TkU02PgybbMAHKgfLzuYBOkWQgbi6/w2ZS0Z/BfHpAwDi43/4dc AURqNOi86/i0LuiK9lBylvsby+gChRwJ2GyaHUs/GKsy/LXVLpd1O6MwCi8Ezs9F I3d5KVjinLuuplYgZh2ZWW8e6VgrLDwfmNIBx+b1/B6dSH2QQ+63COa271r+9Ep5 GSIkZz4ZecMcoA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:38 2025 by rpki-client