This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft File: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft (raw, json) Hash identifier: xI28mfjraldlTBJ4wcvvt0NKx7hARDpSBBBdb2Qt5TQ= Subject key identifier: 9D:4A:D8:CF:46:C4:CB:DA:E0:E3:C7:CD:D1:BE:4D:48:32:85:10:3F Authority key identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71 Certificate issuer: /CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971 Certificate serial: 019AF164108A2F8A419ED47F991F6BADA840 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft Manifest number: 1353 Signing time: Sat 06 Dec 2025 02:00:57 +0000 Manifest this update: Sat 06 Dec 2025 02:00:57 +0000 Manifest next update: Sun 07 Dec 2025 02:00:57 +0000 Files and hashes: 1: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl (hash: nfTu4SgBgEm+E6LLPHBs9nphJj8R1gAJ7fd0pdrP43o=) 2: F0L-7P2Vilk9HCqFohJsqZcHd3Q.roa (hash: fTuIh58gxrXX3Bba7KkC9bw1yhp77tWXLVMb0qHV7oo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:10:8a:2f:8a:41:9e:d4:7f:99:1f:6b:ad:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971 Validity Not Before: Dec 6 02:00:57 2025 GMT Not After : Dec 7 02:00:57 2025 GMT Subject: CN=9d4ad8cf46c4cbdae0e3c7cdd1be4d483285103f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d6:1f:59:98:82:e3:a7:80:fd:06:fd:8d:c1: 82:f1:e4:b3:e4:f1:e8:b9:31:7f:fd:fa:fe:c5:19: 34:fb:b5:69:3e:9d:84:58:7d:fc:37:c9:54:19:3d: aa:b2:a8:66:4d:93:82:38:0d:28:65:57:e1:54:cf: 9b:a1:2a:3e:24:91:1a:43:fd:d5:52:4b:d2:a1:26: b3:dc:8a:be:4f:da:42:75:47:4d:3f:af:6d:55:da: e5:38:b4:2c:8d:6f:47:fc:47:9d:b0:84:6e:f1:11: 14:60:c7:6e:7c:81:e9:4c:a6:e4:30:81:52:db:36: e0:75:71:fe:6b:04:ae:8f:00:75:4c:3e:55:1a:d9: 99:b5:7d:74:fd:3f:a0:3a:7d:15:a3:cf:9d:ee:55: ca:66:ce:bc:b7:23:92:05:95:1d:18:d8:32:af:c1: 88:36:c6:d1:a2:2a:32:bb:56:90:e1:3f:13:bb:70: 2a:7a:c2:15:a8:b3:c3:bf:a7:ff:2a:a2:68:3d:15: 17:48:f2:83:92:4e:53:f4:2d:f0:d9:16:e0:da:92: 1a:c0:e1:a0:88:ab:c2:21:52:76:40:c3:f7:2f:5d: f2:98:bd:61:bd:f7:db:ef:86:cc:d1:8c:15:70:d0: 4f:f3:14:48:d3:14:05:dc:d3:fd:11:44:24:28:b8: 97:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4A:D8:CF:46:C4:CB:DA:E0:E3:C7:CD:D1:BE:4D:48:32:85:10:3F X509v3 Authority Key Identifier: keyid:F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:1e:24:5d:9d:d6:7f:3b:3e:50:a8:6a:1e:60:ee:47:71:8a: c6:de:a7:b7:24:16:77:e2:cf:b5:0c:db:68:03:73:e7:5b:1b: 7b:a9:f6:97:68:21:d8:6c:7b:26:1c:dd:81:1b:26:6b:27:43: 75:f1:df:f2:16:5b:ec:2e:08:fc:5f:eb:5a:9f:e6:22:ed:38: f5:9d:18:e9:24:4b:4a:5b:84:0e:7e:59:1c:13:35:81:d1:7f: 3e:a6:de:ac:c2:b6:f0:fa:5c:53:fe:3d:89:8a:82:d9:a8:74: 4f:74:1e:fc:c5:63:c0:c2:0e:75:7a:f8:85:f8:39:95:40:8e: 1d:29:40:98:68:00:2e:24:bc:2e:26:97:7f:fe:0c:dc:8c:f9: 55:15:42:53:6d:a2:48:be:e5:ac:e5:57:60:06:f6:3a:da:11: 74:ee:1c:67:13:b7:0b:c4:3f:e5:87:e3:d7:b3:14:72:d3:0f: 0c:82:dd:f8:07:a3:cc:36:a4:c9:b9:24:73:1b:ec:b1:46:93: 33:0d:d6:85:8e:75:e2:80:aa:ab:b0:8d:56:68:1a:c7:fc:b8: 2b:86:d3:c7:e8:20:7e:27:12:4e:cf:d9:de:22:e1:31:ef:c8: 8b:6a:5f:ae:85:41:d6:70:44:1d:d2:43:8b:28:a7:87:10:d4: c5:8e:a9:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBCKL4pBntR/mR9rrahAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMjQ2MzQ2ZGRiM2U2YmE2ZTg5MDAwNWI4ODE0OGQyZDZj ZTk5NzEwHhcNMjUxMjA2MDIwMDU3WhcNMjUxMjA3MDIwMDU3WjAzMTEwLwYDVQQD Eyg5ZDRhZDhjZjQ2YzRjYmRhZTBlM2M3Y2RkMWJlNGQ0ODMyODUxMDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutYfWZiC46eA/Qb9jcGC8eSz5PHo uTF//fr+xRk0+7VpPp2EWH38N8lUGT2qsqhmTZOCOA0oZVfhVM+boSo+JJEaQ/3V UkvSoSaz3Iq+T9pCdUdNP69tVdrlOLQsjW9H/EedsIRu8REUYMdufIHpTKbkMIFS 2zbgdXH+awSujwB1TD5VGtmZtX10/T+gOn0Vo8+d7lXKZs68tyOSBZUdGNgyr8GI NsbRoioyu1aQ4T8Tu3AqesIVqLPDv6f/KqJoPRUXSPKDkk5T9C3w2Rbg2pIawOGg iKvCIVJ2QMP3L13ymL1hvffb74bM0YwVcNBP8xRI0xQF3NP9EUQkKLiXlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1K2M9GxMva4OPHzdG+TUgyhRA/MB8GA1UdIwQY MBaAFPIkY0bds+a6bokABbiBSNLWzplxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGlSalJ0Mno1cnB1aVFBRnVJRkkwdGJPbVhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lZWE5ZDEtMjM5Yi00MzQ5LThiNDUt YjViYWNkZDA3NzlkLzEvOGlSalJ0Mno1cnB1aVFBRnVJRkkwdGJPbVhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9lZWE5ZDEtMjM5Yi00MzQ5LThiNDUtYjViYWNkZDA3Nzlk LzEvOGlSalJ0Mno1cnB1aVFBRnVJRkkwdGJPbVhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKB4kXZ3W fzs+UKhqHmDuR3GKxt6ntyQWd+LPtQzbaANz51sbe6n2l2gh2Gx7JhzdgRsmaydD dfHf8hZb7C4I/F/rWp/mIu049Z0Y6SRLSluEDn5ZHBM1gdF/PqberMK28PpcU/49 iYqC2ah0T3Qe/MVjwMIOdXr4hfg5lUCOHSlAmGgALiS8LiaXf/4M3Iz5VRVCU22i SL7lrOVXYAb2OtoRdO4cZxO3C8Q/5Yfj17MUctMPDILd+AejzDakybkkcxvssUaT Mw3WhY514oCqq7CNVmgax/y4K4bTx+ggficSTs/Z3iLhMe/Ii2pfroVB1nBEHdJD iyinhxDUxY6pgg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:06 2025 by rpki-client