This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft File: x8H9uvmsDlre7GCgkjxN1KAektw.mft (raw, json) Hash identifier: LqHQr/rzfMrTMBkKkG4u5HJ4AkuX/Zft497naz/e3ao= Subject key identifier: 2E:ED:72:76:87:7F:A0:4A:D8:30:09:A6:71:FC:C3:86:79:3F:7B:B3 Authority key identifier: C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC Certificate issuer: /CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc Certificate serial: 019AF164855B49A37AEE2FDC414B5567B10A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 02:01:28 +0000 Manifest this update: Sat 06 Dec 2025 02:01:28 +0000 Manifest next update: Sun 07 Dec 2025 02:01:28 +0000 Files and hashes: 1: KuITA8F2JpisQKF630WYOsFc4wk.roa (hash: bB2rOvgz8hjIMe852Fv1qtbwAzNh+J9BjKdpPYjEPmg=) 2: x8H9uvmsDlre7GCgkjxN1KAektw.crl (hash: Xj9wHI4ZXdNGzoXPOSz/toCJGu7v/Y/6C263OUOoS8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:85:5b:49:a3:7a:ee:2f:dc:41:4b:55:67:b1:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc Validity Not Before: Dec 6 02:01:28 2025 GMT Not After : Dec 7 02:01:28 2025 GMT Subject: CN=2eed7276877fa04ad83009a671fcc386793f7bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ea:d5:49:84:23:93:84:0d:30:45:e7:e0:7b: 6d:bd:4a:33:73:07:4f:05:5a:81:db:8d:20:20:cd: 90:28:95:e4:c7:b2:a4:c1:49:38:42:86:94:6b:e3: b7:0b:30:e3:0c:3b:8f:d0:18:3b:ef:a2:7c:4b:e7: f8:c4:08:4b:c4:5f:98:b2:2d:3b:da:70:10:f2:d4: 67:b9:7e:79:93:e9:be:b2:46:9d:4d:d9:f6:80:56: c1:91:f1:2d:0a:e4:d4:95:38:84:f7:c9:13:50:de: d9:a4:b1:22:2d:ff:88:25:c5:23:d6:86:ae:bc:55: 30:e2:10:eb:dd:1b:5b:92:9c:f9:60:59:e6:a1:0a: 64:31:12:fc:2e:bc:aa:18:90:56:9d:dc:9b:64:16: 17:df:7f:90:82:fe:2e:29:07:12:a1:61:99:06:d4: 03:9d:39:cb:1b:3e:e0:e4:a6:f6:d0:d7:cb:bd:02: 83:32:70:18:d7:7b:30:04:5a:48:b9:48:e5:b5:69: 33:cb:1a:42:e1:93:25:6d:55:21:f7:11:2b:87:c5: 51:f4:00:9f:c0:31:b5:8c:ab:85:33:b8:e4:88:67: 54:9a:ab:98:6e:9b:ca:74:1f:0e:2f:1f:ad:43:bc: a2:54:50:fb:f6:df:ee:6b:82:a3:65:10:f0:f2:b4: 94:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:ED:72:76:87:7F:A0:4A:D8:30:09:A6:71:FC:C3:86:79:3F:7B:B3 X509v3 Authority Key Identifier: keyid:C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:88:5b:3c:b9:fe:3d:b1:ce:98:cd:48:15:60:da:80:40:0f: eb:8d:9d:a4:97:7e:18:2f:8a:b5:96:94:41:83:66:12:e1:09: 82:c7:17:8f:28:ef:74:50:84:4f:7f:06:71:ff:c3:48:af:d5: 9f:e4:d9:fa:36:86:d7:82:05:5e:cc:c4:6f:19:57:8c:e7:09: f6:2a:6c:12:d2:43:ee:18:3f:72:ab:db:e4:a8:ac:1f:39:0f: c1:35:de:c3:d1:57:0f:d4:8c:2f:10:f8:a4:e4:fc:b8:c3:82: b2:e7:40:2a:be:6b:b3:48:2a:5f:71:dc:bd:95:d9:c2:dd:ef: 40:5f:78:e1:dd:8c:65:12:87:57:43:f5:21:64:8e:0a:c8:8d: c3:32:28:5d:94:07:62:05:be:dc:f5:4e:3e:8d:0d:a7:47:e3: cf:0d:04:da:b3:79:2b:93:44:18:7d:95:63:3e:a5:a9:f1:65: 9f:15:b6:47:b7:ed:05:44:51:5b:f3:56:ef:d5:7c:11:d2:37: 7b:fc:7c:8b:37:3e:ad:2b:c0:b3:45:58:2d:1b:5c:19:1c:5b: eb:ab:2a:2c:ce:be:9e:8e:6a:a1:98:81:df:35:68:ae:0c:de: 2b:37:a2:39:a5:63:5b:22:4f:15:8f:18:28:5b:77:e1:fd:18: ad:32:f1:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIVbSaN67i/cQUtVZ7EKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YzFmZGJhZjlhYzBlNWFkZWVjNjBhMDkyM2M0ZGQ0YTAx ZTkyZGMwHhcNMjUxMjA2MDIwMTI4WhcNMjUxMjA3MDIwMTI4WjAzMTEwLwYDVQQD EygyZWVkNzI3Njg3N2ZhMDRhZDgzMDA5YTY3MWZjYzM4Njc5M2Y3YmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkurVSYQjk4QNMEXn4HttvUozcwdP BVqB240gIM2QKJXkx7KkwUk4QoaUa+O3CzDjDDuP0Bg776J8S+f4xAhLxF+Ysi07 2nAQ8tRnuX55k+m+skadTdn2gFbBkfEtCuTUlTiE98kTUN7ZpLEiLf+IJcUj1oau vFUw4hDr3Rtbkpz5YFnmoQpkMRL8LryqGJBWndybZBYX33+Qgv4uKQcSoWGZBtQD nTnLGz7g5Kb20NfLvQKDMnAY13swBFpIuUjltWkzyxpC4ZMlbVUh9xErh8VR9ACf wDG1jKuFM7jkiGdUmquYbpvKdB8OLx+tQ7yiVFD79t/ua4KjZRDw8rSUJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7tcnaHf6BK2DAJpnH8w4Z5P3uzMB8GA1UdIwQY MBaAFMfB/br5rA5a3uxgoJI8TdSgHpLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDhIOXV2bXNEbHJlN0dDZ2tqeE4xS0Fla3R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi82YTI3MmItOGI2Zi00ZmUzLThmMjkt ZjAwMjk4MTYwOTdlLzEveDhIOXV2bXNEbHJlN0dDZ2tqeE4xS0Fla3R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi82YTI3MmItOGI2Zi00ZmUzLThmMjktZjAwMjk4MTYwOTdl LzEveDhIOXV2bXNEbHJlN0dDZ2tqeE4xS0Fla3R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgIhbPLn+ PbHOmM1IFWDagEAP642dpJd+GC+KtZaUQYNmEuEJgscXjyjvdFCET38Gcf/DSK/V n+TZ+jaG14IFXszEbxlXjOcJ9ipsEtJD7hg/cqvb5KisHzkPwTXew9FXD9SMLxD4 pOT8uMOCsudAKr5rs0gqX3HcvZXZwt3vQF944d2MZRKHV0P1IWSOCsiNwzIoXZQH YgW+3PVOPo0Np0fjzw0E2rN5K5NEGH2VYz6lqfFlnxW2R7ftBURRW/NW79V8EdI3 e/x8izc+rSvAs0VYLRtcGRxb66sqLM6+no5qoZiB3zVorgzeKzeiOaVjWyJPFY8Y KFt34f0YrTLxcw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:56 2025 by rpki-client