This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft File: 8BGVyAze5CsGiNuOk6aLRZuFjm4.mft (raw, json) Hash identifier: fZJO0wZn7Lboj2ItvKl16eVIVCS89lwSBDjr8b9JU7k= Subject key identifier: C4:F8:D9:C9:F4:5C:04:09:FC:C8:F4:B1:3F:5C:5A:0A:DA:D3:02:FB Authority key identifier: F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E Certificate issuer: /CN=f01195c80cdee42b0688db8e93a68b459b858e6e Certificate serial: 019AF19AEB01EB185D6323017CDCDCEA1140 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft Manifest number: 0548 Signing time: Sat 06 Dec 2025 03:00:52 +0000 Manifest this update: Sat 06 Dec 2025 03:00:52 +0000 Manifest next update: Sun 07 Dec 2025 03:00:52 +0000 Files and hashes: 1: 8BGVyAze5CsGiNuOk6aLRZuFjm4.crl (hash: kD3o2Id8egfAaRw2ltw3gIuhu8M1LZpEvSJhrEjmbuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:eb:01:eb:18:5d:63:23:01:7c:dc:dc:ea:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f01195c80cdee42b0688db8e93a68b459b858e6e Validity Not Before: Dec 6 03:00:52 2025 GMT Not After : Dec 7 03:00:52 2025 GMT Subject: CN=c4f8d9c9f45c0409fcc8f4b13f5c5a0adad302fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:20:ef:16:9b:53:4b:a4:2f:61:12:13:cf:fd: 0f:ce:45:a2:1f:9e:f2:36:42:c9:5b:94:9b:8e:bf: 2a:a5:bb:17:9d:5a:70:50:4e:4f:7d:ed:25:8e:9d: 16:26:04:64:6f:fc:b6:ec:64:50:04:d6:e9:ff:7a: e1:d4:d3:b5:b2:ec:db:ef:3c:c1:8a:ed:cf:38:15: 80:fc:9f:38:a1:bf:64:5c:32:c3:f1:0e:e3:ce:d2: 6a:e7:ed:70:37:c7:d9:f6:29:fb:47:e1:1f:ae:63: 61:66:a6:3c:c7:73:fe:41:92:0f:7e:aa:cb:7d:80: ce:87:48:d9:6f:ab:31:d0:02:f0:b8:fb:d1:14:65: e8:4b:4f:90:0b:ac:af:7a:ef:9f:43:d8:9c:8c:d8: 0f:87:3c:5c:db:7c:4d:4b:8f:fd:85:03:ad:22:2a: 74:4c:7a:44:f9:d0:0d:6e:de:8b:6e:ad:0b:a2:92: b0:3a:1d:9a:76:8d:b3:41:be:1e:0b:dd:9d:ff:bd: fe:41:26:49:e4:a9:d9:db:7c:58:ff:d6:a2:62:40: b5:7c:12:07:dd:67:6e:45:ef:73:31:5a:62:53:49: 42:d8:e1:13:8e:29:6a:c8:51:e4:55:80:0a:d6:6e: 5e:46:9a:c1:c6:8a:1f:86:6d:82:2e:0f:2c:10:b8: ed:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F8:D9:C9:F4:5C:04:09:FC:C8:F4:B1:3F:5C:5A:0A:DA:D3:02:FB X509v3 Authority Key Identifier: keyid:F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:9b:2d:9f:f9:65:b8:4e:c3:64:c7:c7:66:73:e6:80:9e:43: c6:40:63:27:60:0f:1a:b9:be:c4:4e:1a:14:93:f0:fe:20:be: 80:40:f7:01:3f:d6:c2:da:85:2f:e4:e3:78:6d:b6:31:fa:a1: bf:1c:87:90:cf:97:a7:50:13:eb:7c:84:b4:07:09:54:d1:4e: c2:74:ee:43:62:cf:b1:ed:c5:0e:15:c4:99:90:8b:d6:d1:5e: ef:15:ed:e2:b5:9a:2f:1b:c3:53:af:ac:cc:74:22:15:d2:fe: e3:cb:92:ce:f2:ef:fd:93:9e:47:f7:7a:08:21:12:6b:10:b8: 61:67:de:86:17:43:d4:39:6c:ce:10:e4:d2:13:b1:bd:db:14: af:ab:d1:a4:00:32:1c:24:06:e7:9d:7b:7c:66:60:2f:5e:df: 1e:ca:9a:c1:40:88:0d:44:5f:e6:f2:b5:1b:86:8c:3e:62:4a: 5b:57:ce:9d:9c:06:61:65:14:7e:d8:f4:cf:ef:49:e8:e1:aa: 4f:1d:b5:ca:2f:41:85:ae:39:6d:69:32:a7:f5:bd:18:87:f6: 3f:fa:92:f7:1b:1f:29:82:4f:a4:81:d9:97:68:42:60:39:d9: 74:84:01:35:19:30:00:38:fb:ce:b3:f7:95:c2:85:66:e8:53: 7f:bf:9a:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmusB6xhdYyMBfNzc6hFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMTE5NWM4MGNkZWU0MmIwNjg4ZGI4ZTkzYTY4YjQ1OWI4 NThlNmUwHhcNMjUxMjA2MDMwMDUyWhcNMjUxMjA3MDMwMDUyWjAzMTEwLwYDVQQD EyhjNGY4ZDljOWY0NWMwNDA5ZmNjOGY0YjEzZjVjNWEwYWRhZDMwMmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyDvFptTS6QvYRITz/0PzkWiH57y NkLJW5Sbjr8qpbsXnVpwUE5Pfe0ljp0WJgRkb/y27GRQBNbp/3rh1NO1suzb7zzB iu3POBWA/J84ob9kXDLD8Q7jztJq5+1wN8fZ9in7R+EfrmNhZqY8x3P+QZIPfqrL fYDOh0jZb6sx0ALwuPvRFGXoS0+QC6yveu+fQ9icjNgPhzxc23xNS4/9hQOtIip0 THpE+dANbt6Lbq0LopKwOh2ado2zQb4eC92d/73+QSZJ5KnZ23xY/9aiYkC1fBIH 3WduRe9zMVpiU0lC2OETjilqyFHkVYAK1m5eRprBxoofhm2CLg8sELjtoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMT42cn0XAQJ/Mj0sT9cWgra0wL7MB8GA1UdIwQY MBaAFPARlcgM3uQrBojbjpOmi0WbhY5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEJHVnlBemU1Q3NHaU51T2s2YUxSWnVGam00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kNzJlNjctMTI2Mi00MThiLTg1NjAt ZGY3YWM2YThhZTJkLzEvOEJHVnlBemU1Q3NHaU51T2s2YUxSWnVGam00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9kNzJlNjctMTI2Mi00MThiLTg1NjAtZGY3YWM2YThhZTJk LzEvOEJHVnlBemU1Q3NHaU51T2s2YUxSWnVGam00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZstn/ll uE7DZMfHZnPmgJ5DxkBjJ2APGrm+xE4aFJPw/iC+gED3AT/WwtqFL+TjeG22Mfqh vxyHkM+Xp1AT63yEtAcJVNFOwnTuQ2LPse3FDhXEmZCL1tFe7xXt4rWaLxvDU6+s zHQiFdL+48uSzvLv/ZOeR/d6CCESaxC4YWfehhdD1DlszhDk0hOxvdsUr6vRpAAy HCQG5517fGZgL17fHsqawUCIDURf5vK1G4aMPmJKW1fOnZwGYWUUftj0z+9J6OGq Tx21yi9Bha45bWkyp/W9GIf2P/qS9xsfKYJPpIHZl2hCYDnZdIQBNRkwADj7zrP3 lcKFZuhTf7+a8w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:12:07 2025 by rpki-client