This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft File: B8QNcBYPMIZCEpobcq5a5S24g8Q.mft (raw, json) Hash identifier: wfwdwEYn/+dIa6/gMsuL6vSRg2OfJVy5O9G2VjUajc8= Subject key identifier: 2A:C0:77:ED:88:16:D9:37:57:4F:36:40:00:99:81:AA:1C:FB:F2:D4 Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4 Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4 Certificate serial: 019AF276A1024576254481ADB5E9D946994E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft Manifest number: 1020 Signing time: Sat 06 Dec 2025 07:00:51 +0000 Manifest this update: Sat 06 Dec 2025 07:00:51 +0000 Manifest next update: Sun 07 Dec 2025 07:00:51 +0000 Files and hashes: 1: B8QNcBYPMIZCEpobcq5a5S24g8Q.crl (hash: /r0IIvW9tJJRDtp9DHPs78PwiJSDhNKWalEy6wIKEgE=) 2: FrqlWltvg2IIueyy45ogVbfzXOI.roa (hash: I5FtBNSL1o5XSBQN3V8eqj4CiYkfCwGhk95ch/7f1y0=) 3: w7QCmizrQXeuidochTL3wPaTPwQ.roa (hash: H6wbvBF9uFQ8IN4rm+CScPncC9WaN8oR2hYLVqdaZWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a1:02:45:76:25:44:81:ad:b5:e9:d9:46:99:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4 Validity Not Before: Dec 6 07:00:51 2025 GMT Not After : Dec 7 07:00:51 2025 GMT Subject: CN=2ac077ed8816d937574f3640009981aa1cfbf2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:60:89:d3:3e:26:a4:b2:c9:a0:4c:a2:30:3e: 01:90:c4:62:fe:84:63:6c:8e:97:63:2a:2b:cc:5e: 20:56:83:ca:bd:47:05:f7:ae:b0:72:41:28:bd:36: 13:a3:fd:40:29:e1:b5:f2:da:5f:85:fb:9b:2d:87: 70:66:57:3c:4e:e3:5d:59:4b:ec:75:76:03:8e:96: a5:36:da:63:52:e5:65:0f:3d:7d:8c:12:ae:15:60: 2d:28:4d:0d:c2:a7:32:53:46:3e:37:08:da:da:fe: 07:97:13:50:46:31:8a:dd:b1:be:5d:aa:c0:45:70: f2:7d:e9:8b:9a:82:28:db:b0:42:bd:98:bb:4c:d9: 77:b9:2f:cc:f5:4d:a2:45:41:c6:02:ab:d4:78:43: ce:3a:b7:f2:fe:8a:15:f6:c6:e8:d3:7d:5a:39:13: d1:c7:a1:51:cf:23:9e:b0:fd:f1:ee:f2:95:c5:cc: e8:01:63:e6:56:a0:ed:66:58:aa:b0:af:06:fa:57: fd:94:07:e8:b9:12:3e:09:25:eb:a3:96:aa:e6:cf: 39:15:25:34:a9:2e:29:72:b7:d9:02:a9:94:f5:bb: 44:3f:7c:c1:bd:29:0c:4f:da:66:ee:a4:97:19:83: 10:bf:76:b5:07:5c:b6:14:19:a5:9b:da:a8:4f:7b: 72:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C0:77:ED:88:16:D9:37:57:4F:36:40:00:99:81:AA:1C:FB:F2:D4 X509v3 Authority Key Identifier: keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:11:cc:a4:4f:ae:b2:da:30:63:e4:a0:2b:01:7f:18:b4:91: 1d:a7:8d:fb:d1:28:d4:0d:5e:2e:86:ee:81:9d:3f:92:3c:c8: 12:d1:16:4e:e2:3a:2d:ae:26:84:d8:8c:f7:5b:f1:4b:24:a6: f7:f2:b7:6a:2d:7e:eb:bb:92:ee:3a:83:9f:43:b3:11:6e:af: 82:bb:38:a6:9b:0f:78:e4:81:70:af:d3:bd:e4:f5:0c:e3:fc: 81:d6:b5:76:7d:08:e7:9e:c3:a6:bb:b4:02:87:c7:58:70:f2: b8:52:20:0f:ac:7c:e0:63:a4:45:95:06:64:35:af:6c:5f:92: e7:24:ce:14:b2:23:c9:71:4e:ca:4f:ad:d5:f9:a3:0a:c6:d2: 1d:13:54:90:38:bc:0c:00:8d:81:db:26:34:2a:8b:eb:a1:be: 82:ca:d9:85:19:cf:97:93:e0:64:a8:0d:eb:63:1a:63:7c:3c: 61:2c:59:b7:81:ed:8c:6e:41:ab:5a:9b:20:d3:bc:32:85:be: cf:a0:cf:f0:71:40:98:60:a4:fb:85:d7:24:e7:f4:a8:06:86: 75:0d:a3:8b:c8:5d:2c:09:8d:dd:43:0f:ea:4f:0a:91:15:5e: 95:f1:9b:82:82:29:20:7f:db:d8:1c:e3:7e:ef:7e:c6:81:60: e0:42:40:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqECRXYlRIGttenZRplOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YzQwZDcwMTYwZjMwODY0MjEyOWExYjcyYWU1YWU1MmRi ODgzYzQwHhcNMjUxMjA2MDcwMDUxWhcNMjUxMjA3MDcwMDUxWjAzMTEwLwYDVQQD EygyYWMwNzdlZDg4MTZkOTM3NTc0ZjM2NDAwMDk5ODFhYTFjZmJmMmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WCJ0z4mpLLJoEyiMD4BkMRi/oRj bI6XYyorzF4gVoPKvUcF966wckEovTYTo/1AKeG18tpfhfubLYdwZlc8TuNdWUvs dXYDjpalNtpjUuVlDz19jBKuFWAtKE0NwqcyU0Y+Nwja2v4HlxNQRjGK3bG+XarA RXDyfemLmoIo27BCvZi7TNl3uS/M9U2iRUHGAqvUeEPOOrfy/ooV9sbo031aORPR x6FRzyOesP3x7vKVxczoAWPmVqDtZliqsK8G+lf9lAfouRI+CSXro5aq5s85FSU0 qS4pcrfZAqmU9btEP3zBvSkMT9pm7qSXGYMQv3a1B1y2FBmlm9qoT3tyUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrAd+2IFtk3V082QACZgaoc+/LUMB8GA1UdIwQY MBaAFAfEDXAWDzCGQhKaG3KuWuUtuIPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUt OTdkY2JiMDA4NmUzLzEvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUtOTdkY2JiMDA4NmUz LzEvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBHMpE+u stowY+SgKwF/GLSRHaeN+9Eo1A1eLobugZ0/kjzIEtEWTuI6La4mhNiM91vxSySm 9/K3ai1+67uS7jqDn0OzEW6vgrs4ppsPeOSBcK/TveT1DOP8gda1dn0I557Dpru0 AofHWHDyuFIgD6x84GOkRZUGZDWvbF+S5yTOFLIjyXFOyk+t1fmjCsbSHRNUkDi8 DACNgdsmNCqL66G+gsrZhRnPl5PgZKgN62MaY3w8YSxZt4HtjG5Bq1qbINO8MoW+ z6DP8HFAmGCk+4XXJOf0qAaGdQ2ji8hdLAmN3UMP6k8KkRVelfGbgoIpIH/b2Bzj fu9+xoFg4EJAhA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:51 2025 by rpki-client