This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft File: 8cSYM_Q5ueBnfY078fUt-_ssYk8.mft (raw, json) Hash identifier: xPvADX3rzvk8P859u/4DACAGNyEt/dsrEt5vYeTPFnw= Subject key identifier: E2:4A:92:FB:F7:D8:93:36:4A:6D:13:F1:4E:00:2E:DA:84:5F:1E:C3 Authority key identifier: F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F Certificate issuer: /CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f Certificate serial: 019AF1D2610DA6723F42568E4D3538E28A82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft Manifest number: 0B4C Signing time: Sat 06 Dec 2025 04:01:27 +0000 Manifest this update: Sat 06 Dec 2025 04:01:27 +0000 Manifest next update: Sun 07 Dec 2025 04:01:27 +0000 Files and hashes: 1: 3ZpH3IW99tcCAzGjbjQTTiu70Eg.roa (hash: DLWTw4UKdSLOETh6kocBhjPqoC9NP+EApW6Oj+8OWfw=) 2: 8cSYM_Q5ueBnfY078fUt-_ssYk8.crl (hash: yThSeGSAyplewmrsq+01MmkhRbfBcNBJRba/CIgafs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.crl rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:61:0d:a6:72:3f:42:56:8e:4d:35:38:e2:8a:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f Validity Not Before: Dec 6 04:01:27 2025 GMT Not After : Dec 7 04:01:27 2025 GMT Subject: CN=e24a92fbf7d893364a6d13f14e002eda845f1ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:0b:6e:a9:37:e4:53:a9:da:b5:4b:10:61: 83:02:cc:4a:2c:20:ca:ca:7f:18:3a:8f:a0:43:14: d1:f2:f6:56:6d:d2:89:07:be:f1:f1:2e:e4:fd:83: 69:c9:3b:c5:95:88:26:0a:08:f6:8e:71:49:42:c6: 5f:7d:61:cb:99:15:53:4b:31:b2:d0:ee:67:11:cf: 54:df:21:0f:3e:0e:07:aa:b3:88:48:97:fc:c6:c6: d2:2e:16:fd:7d:44:5b:d3:52:77:ca:d5:ed:82:c1: 80:26:30:e6:f2:4f:19:5e:36:d2:10:f0:a5:a7:25: 97:43:1b:db:6e:9b:2a:50:5d:0f:50:af:c2:25:55: f1:05:35:b1:53:f5:9b:4c:6a:06:6f:d5:0b:bc:c7: c0:d9:c2:82:12:e7:6b:17:84:f5:6d:65:1d:0b:45: 8b:4a:3d:f8:57:ab:75:93:8b:34:99:5f:1e:8e:82: dc:df:f2:1c:69:2c:37:8a:2d:c4:ce:3a:46:55:d5: 1a:46:7f:84:e2:ed:81:41:9a:e0:b7:93:07:cd:3a: 2b:93:ef:c7:88:69:ee:45:52:0c:f7:e3:c6:b8:8a: 83:43:5e:bd:7c:26:93:5d:aa:b6:7f:f1:5f:e7:b3: 5d:ee:fc:ab:d7:de:74:fd:1d:fc:3a:29:00:89:5d: 4a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4A:92:FB:F7:D8:93:36:4A:6D:13:F1:4E:00:2E:DA:84:5F:1E:C3 X509v3 Authority Key Identifier: keyid:F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:6a:d0:93:96:d9:76:55:bd:f5:09:5f:dd:73:b2:0b:95:6d: 25:a1:a8:5c:64:dd:91:b5:22:da:13:d2:41:37:80:a4:f4:68: 63:ab:ab:29:46:9b:8f:09:bd:34:9f:f8:66:a5:c0:cc:1a:fd: 5f:ea:50:f9:ef:46:0c:20:33:86:7b:8d:d2:4a:bb:04:ab:d2: 97:be:23:00:6b:e3:05:2f:26:3a:ae:38:99:ff:59:20:9c:9f: 14:02:f5:9a:8c:50:a1:b4:06:02:83:26:05:e5:59:b6:b6:aa: 36:99:9e:ce:89:96:fd:63:20:50:93:bc:15:19:ee:8b:3c:5e: a1:6f:81:4b:63:3e:33:3b:3f:4a:cc:d2:1e:de:3e:67:63:61: 7b:b4:1e:4a:b0:9a:f3:8d:f1:f9:e5:68:a5:88:76:2d:e6:59: 94:87:da:ad:99:4e:a3:14:d4:af:42:11:f1:8c:68:86:be:d5: e3:4c:02:bf:f1:ab:a9:f8:f4:d3:7d:13:f7:1c:8e:d7:80:88: 79:a5:42:de:83:9e:6f:61:59:07:18:09:d1:1d:06:4a:3f:23: e1:fa:f7:91:b3:0c:f4:23:b4:e1:3f:65:ac:a0:9b:95:ad:80: dc:f4:75:c9:1e:51:8c:44:de:11:ee:ae:26:c6:40:f0:61:00: 1c:cc:c8:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0mENpnI/QlaOTTU44oqCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYzQ5ODMzZjQzOWI5ZTA2NzdkOGQzYmYxZjUyZGZiZmIy YzYyNGYwHhcNMjUxMjA2MDQwMTI3WhcNMjUxMjA3MDQwMTI3WjAzMTEwLwYDVQQD EyhlMjRhOTJmYmY3ZDg5MzM2NGE2ZDEzZjE0ZTAwMmVkYTg0NWYxZWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6cLbqk35FOp2rVLEGGDAsxKLCDK yn8YOo+gQxTR8vZWbdKJB77x8S7k/YNpyTvFlYgmCgj2jnFJQsZffWHLmRVTSzGy 0O5nEc9U3yEPPg4HqrOISJf8xsbSLhb9fURb01J3ytXtgsGAJjDm8k8ZXjbSEPCl pyWXQxvbbpsqUF0PUK/CJVXxBTWxU/WbTGoGb9ULvMfA2cKCEudrF4T1bWUdC0WL Sj34V6t1k4s0mV8ejoLc3/IcaSw3ii3EzjpGVdUaRn+E4u2BQZrgt5MHzTork+/H iGnuRVIM9+PGuIqDQ169fCaTXaq2f/Ff57Nd7vyr1950/R38OikAiV1KOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJKkvv32JM2Sm0T8U4ALtqEXx7DMB8GA1UdIwQY MBaAFPHEmDP0ObngZ32NO/H1Lfv7LGJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGNTWU1fUTV1ZUJuZlkwNzhmVXQtX3NzWWs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zYWUzNzktNzllMS00NmFiLWIwNGQt MGYwZmE2YjZlNGJkLzEvOGNTWU1fUTV1ZUJuZlkwNzhmVXQtX3NzWWs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8zYWUzNzktNzllMS00NmFiLWIwNGQtMGYwZmE2YjZlNGJk LzEvOGNTWU1fUTV1ZUJuZlkwNzhmVXQtX3NzWWs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2rQk5bZ dlW99Qlf3XOyC5VtJaGoXGTdkbUi2hPSQTeApPRoY6urKUabjwm9NJ/4ZqXAzBr9 X+pQ+e9GDCAzhnuN0kq7BKvSl74jAGvjBS8mOq44mf9ZIJyfFAL1moxQobQGAoMm BeVZtraqNpmezomW/WMgUJO8FRnuizxeoW+BS2M+Mzs/SszSHt4+Z2Nhe7QeSrCa 843x+eVopYh2LeZZlIfarZlOoxTUr0IR8Yxohr7V40wCv/Grqfj0030T9xyO14CI eaVC3oOeb2FZBxgJ0R0GSj8j4fr3kbMM9CO04T9lrKCbla2A3PR1yR5RjETeEe6u JsZA8GEAHMzITQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:47:53 2025 by rpki-client