This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft File: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft (raw, json) Hash identifier: zTWxjNZ+gdgWE1V+k6cR1+D1CMVMMJLYj4HRbk++0y8= Subject key identifier: 2E:27:26:FC:A8:A7:BF:32:CA:02:7F:B0:10:01:F8:00:0E:6D:6C:F8 Authority key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3 Certificate issuer: /CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3 Certificate serial: 019AF12E554A74981FEB395DFF61F6E387D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 01:02:16 +0000 Manifest this update: Sat 06 Dec 2025 01:02:16 +0000 Manifest next update: Sun 07 Dec 2025 01:02:16 +0000 Files and hashes: 1: 1-OIAlKZkamjD55UMqzWQx8P8ujA.roa (hash: 60FXDRY9jVOvfNl6JHlrniUKuc6zQEI45l9Gv0k62G4=) 2: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl (hash: BCZdrf0HeWfLPFxMV5ZABninoLGvi+4nGaqCw88g99U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:55:4a:74:98:1f:eb:39:5d:ff:61:f6:e3:87:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3 Validity Not Before: Dec 6 01:02:16 2025 GMT Not After : Dec 7 01:02:16 2025 GMT Subject: CN=2e2726fca8a7bf32ca027fb01001f8000e6d6cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4d:c3:14:6c:d2:17:17:8a:cb:81:9a:4b:e5: c6:0f:a0:50:e9:44:ac:c5:c6:fa:d7:67:85:78:b3: 18:2d:8f:a1:2d:a8:81:71:9e:6f:0e:5f:ba:a9:e9: b4:11:cc:19:e6:8d:30:fa:96:6b:cc:7d:2c:05:a7: c9:6c:61:1e:a9:65:c6:37:38:32:43:66:2b:2f:c1: b4:a6:f9:2e:7a:14:fb:c5:81:bc:89:71:5f:bf:0b: f2:f2:8a:a2:b9:e3:3b:04:ab:16:f9:a3:c9:7e:19: bb:76:aa:f0:49:83:69:91:03:9a:59:e0:48:fd:2f: 39:12:19:87:a0:ec:5c:a0:71:1d:ec:6e:24:e0:d4: 09:d8:79:1e:4d:16:8e:02:26:b6:4e:bf:04:62:bb: c8:3e:f8:9d:a9:99:4d:60:79:20:58:47:cf:82:bb: 9e:f7:0e:8a:4d:4a:69:3c:b5:d5:f5:b2:72:2d:b0: 5b:72:8e:3b:44:46:cd:b2:25:7c:96:f2:d5:ac:58: 76:13:0e:b2:86:6c:02:3f:34:21:82:0c:31:a4:59: d1:51:16:b4:41:3b:59:1c:3f:5d:ad:8f:fc:66:38: 20:14:18:3e:8d:3e:fb:fb:30:d6:ce:44:d0:fb:82: 7e:f2:3a:e4:d4:d7:f8:47:2d:d2:98:0a:99:fc:fe: 55:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:27:26:FC:A8:A7:BF:32:CA:02:7F:B0:10:01:F8:00:0E:6D:6C:F8 X509v3 Authority Key Identifier: keyid:B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:af:4e:ff:31:ec:db:94:a8:06:e8:e9:31:cb:65:56:3f:f2: 0d:29:60:90:1f:f6:24:ef:11:99:34:ab:19:c8:87:c7:b1:e1: fa:77:38:d4:ff:09:78:4d:ca:47:1e:ce:3e:9a:3d:85:ad:90: ff:b9:a6:a6:18:8c:44:f2:1f:9e:8c:63:6a:9d:1f:fd:5f:70: 7d:29:a4:f6:f1:ed:ed:05:8f:13:67:c5:a5:fb:ab:69:c7:f5: 5e:d4:32:e3:69:b8:9d:e3:78:fa:83:f9:b2:48:80:40:65:34: d8:06:17:c1:f3:bd:da:5c:35:b4:46:fb:18:51:5d:1f:b8:b4: 1d:48:0d:c0:46:ac:e8:9d:7b:51:ef:7d:8a:49:52:33:0f:35: 3a:87:19:63:48:86:79:8c:dc:55:17:ad:5b:34:ec:0e:0b:6d: ef:fa:65:82:e2:f4:f2:ae:d5:ee:1e:f4:59:a8:67:f3:d5:9c: fe:9d:77:2e:fc:07:95:3b:3f:51:1c:fa:52:36:ae:b4:a3:f5: 37:82:34:4c:eb:5a:56:c1:b3:d2:3b:83:e2:70:1f:a9:70:06: 1b:ae:a2:0b:d2:7b:b5:aa:11:ba:b1:fb:b7:3f:9d:8f:05:96: 9e:e5:94:49:5c:84:3f:6f:a2:4c:91:2c:1f:c4:25:34:1a:73: 58:8b:00:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlVKdJgf6zld/2H244fZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMWYwNjcxZjM5OWU0ZGEyMGE0OGJkMzI3YzQ3YWZhNGE0 MWZmYzMwHhcNMjUxMjA2MDEwMjE2WhcNMjUxMjA3MDEwMjE2WjAzMTEwLwYDVQQD EygyZTI3MjZmY2E4YTdiZjMyY2EwMjdmYjAxMDAxZjgwMDBlNmQ2Y2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk3DFGzSFxeKy4GaS+XGD6BQ6USs xcb612eFeLMYLY+hLaiBcZ5vDl+6qem0EcwZ5o0w+pZrzH0sBafJbGEeqWXGNzgy Q2YrL8G0pvkuehT7xYG8iXFfvwvy8oqiueM7BKsW+aPJfhm7dqrwSYNpkQOaWeBI /S85EhmHoOxcoHEd7G4k4NQJ2HkeTRaOAia2Tr8EYrvIPvidqZlNYHkgWEfPgrue 9w6KTUppPLXV9bJyLbBbco47REbNsiV8lvLVrFh2Ew6yhmwCPzQhggwxpFnRURa0 QTtZHD9drY/8ZjggFBg+jT77+zDWzkTQ+4J+8jrk1Nf4Ry3SmAqZ/P5VWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4nJvyop78yygJ/sBAB+AAObWz4MB8GA1UdIwQY MBaAFLMfBnHzmeTaIKSL0yfEevpKQf/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3g4R2NmT1o1Tm9ncEl2VEo4UjYta3BCXzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC84NzhhMWMtYTdhMC00ZmQxLTk4YTAt MzNlNDQ2MjFkYjA3LzEvc3g4R2NmT1o1Tm9ncEl2VEo4UjYta3BCXzhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC84NzhhMWMtYTdhMC00ZmQxLTk4YTAtMzNlNDQ2MjFkYjA3 LzEvc3g4R2NmT1o1Tm9ncEl2VEo4UjYta3BCXzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEq9O/zHs 25SoBujpMctlVj/yDSlgkB/2JO8RmTSrGciHx7Hh+nc41P8JeE3KRx7OPpo9ha2Q /7mmphiMRPIfnoxjap0f/V9wfSmk9vHt7QWPE2fFpfuracf1XtQy42m4neN4+oP5 skiAQGU02AYXwfO92lw1tEb7GFFdH7i0HUgNwEas6J17Ue99iklSMw81OocZY0iG eYzcVRetWzTsDgtt7/plguL08q7V7h70Wahn89Wc/p13LvwHlTs/URz6UjautKP1 N4I0TOtaVsGz0juD4nAfqXAGG66iC9J7taoRurH7tz+djwWWnuWUSVyEP2+iTJEs H8QlNBpzWIsAiA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:59 2025 by rpki-client