This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft File: 8jWG8iDMsNHFLArt9edm7KGhHHQ.mft (raw, json) Hash identifier: CmxTFxxhQoz3qJ+CO3kylkXpOIbjK7RzBgn9kALDi7M= Subject key identifier: 15:1F:1C:05:1A:D5:91:F2:F5:1E:CC:83:94:2C:81:A3:E6:08:09:62 Authority key identifier: F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74 Certificate issuer: /CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74 Certificate serial: 019AF12D106498B1600954D9B6B886562503 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft Manifest number: 05BF Signing time: Sat 06 Dec 2025 01:00:53 +0000 Manifest this update: Sat 06 Dec 2025 01:00:53 +0000 Manifest next update: Sun 07 Dec 2025 01:00:53 +0000 Files and hashes: 1: 8jWG8iDMsNHFLArt9edm7KGhHHQ.crl (hash: iNbAlj1ypZLuFRGFrUnzvz9f2MJpiQ0flQBAgH2r/2M=) 2: v9SdGCEbNFlSuDgWgo1kf6nL3As.roa (hash: qiXG0Rmw4yiW0AhRjg9/OTIgPd0soD+OwXQ8XH+CjYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:10:64:98:b1:60:09:54:d9:b6:b8:86:56:25:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74 Validity Not Before: Dec 6 01:00:53 2025 GMT Not After : Dec 7 01:00:53 2025 GMT Subject: CN=151f1c051ad591f2f51ecc83942c81a3e6080962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8e:58:c1:b4:98:b5:b2:3c:84:d9:97:0c:69: e9:13:f5:08:34:4c:ec:b7:cf:56:0f:2d:c5:2b:2d: e3:73:e8:60:a3:69:3c:9b:42:8f:79:1a:71:44:5b: 0a:64:61:75:41:bd:31:b9:c4:67:76:7e:a8:41:0e: 0f:29:3f:b3:e7:0d:c2:d5:44:ea:67:9a:1b:ab:15: bd:e0:82:1c:ee:2d:9e:1a:c0:e1:34:d1:f8:e3:6b: cf:b3:fe:6b:87:2e:3e:d8:e5:e9:89:65:96:8c:be: 66:9d:77:9a:bf:b9:05:e2:fe:91:39:72:60:fe:88: 71:73:5a:0b:35:01:2e:66:8a:3a:53:9e:de:f8:66: 6b:00:ce:32:ed:cb:17:01:16:13:4b:f6:da:d8:0a: e3:ea:b1:72:1e:ca:b6:ef:25:a4:f0:ce:04:9a:8d: 4f:60:60:27:bb:99:0c:8f:44:ea:09:c6:49:27:25: 72:ae:d9:e2:3e:d2:5f:cd:78:26:d2:8e:4a:39:67: 7e:e2:4f:28:0a:5e:5a:ad:53:18:69:dd:35:e7:7b: d7:40:d5:25:83:90:04:f9:74:3a:6d:04:48:65:11: 4a:98:61:42:ba:a3:78:39:73:65:e7:43:b7:4c:f6: b1:a0:30:cf:f8:cf:7c:7b:fc:5e:53:16:6c:c0:6b: 38:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1F:1C:05:1A:D5:91:F2:F5:1E:CC:83:94:2C:81:A3:E6:08:09:62 X509v3 Authority Key Identifier: keyid:F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:80:b6:3d:7f:0a:e5:d3:b0:54:cc:a8:49:cf:ff:f0:be:6a: 1f:7c:e6:58:e4:6b:01:40:4b:cc:7f:41:6a:46:cd:92:10:81: 0c:f8:61:21:38:59:40:10:14:c4:34:8d:a4:0f:b0:10:a7:1d: e3:ae:cc:a6:95:55:43:ce:19:9d:fe:68:c2:04:ad:a5:0c:21: 7c:68:c2:e1:14:41:63:d5:dd:a5:57:29:e1:d4:62:75:1a:74: b8:27:5b:0f:69:b3:86:17:e1:c1:7d:9b:94:34:72:f3:29:19: 8e:ab:ec:73:4b:f9:a6:af:1b:93:18:bf:4b:34:35:3f:bd:8f: 61:fc:8a:03:97:5d:c4:da:17:b4:91:8c:54:07:2d:65:5d:cf: 62:f4:9b:59:64:64:a7:47:be:ae:28:29:46:75:03:dc:fe:a2: 79:d2:ad:4c:01:b7:b3:37:1c:7a:fd:30:0e:6e:64:a9:c0:c3: 60:1c:f5:d4:c7:cd:e4:f8:52:d7:b7:17:cd:e9:78:e3:f8:50: 6e:90:38:4d:2a:5d:dc:58:f3:6d:0a:4c:5e:9f:9f:e0:a1:ce: 86:1e:cb:84:08:d4:15:ba:7a:1a:1d:2b:6e:7f:01:43:6c:d1: 72:93:cd:ae:a7:3e:69:01:3b:17:8e:c4:dd:ae:cb:fb:d4:fd: bc:b6:17:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRBkmLFgCVTZtriGViUDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMzU4NmYyMjBjY2IwZDFjNTJjMGFlZGY1ZTc2NmVjYTFh MTFjNzQwHhcNMjUxMjA2MDEwMDUzWhcNMjUxMjA3MDEwMDUzWjAzMTEwLwYDVQQD EygxNTFmMWMwNTFhZDU5MWYyZjUxZWNjODM5NDJjODFhM2U2MDgwOTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo5YwbSYtbI8hNmXDGnpE/UINEzs t89WDy3FKy3jc+hgo2k8m0KPeRpxRFsKZGF1Qb0xucRndn6oQQ4PKT+z5w3C1UTq Z5obqxW94IIc7i2eGsDhNNH442vPs/5rhy4+2OXpiWWWjL5mnXeav7kF4v6ROXJg /ohxc1oLNQEuZoo6U57e+GZrAM4y7csXARYTS/ba2Arj6rFyHsq27yWk8M4Emo1P YGAnu5kMj0TqCcZJJyVyrtniPtJfzXgm0o5KOWd+4k8oCl5arVMYad0153vXQNUl g5AE+XQ6bQRIZRFKmGFCuqN4OXNl50O3TPaxoDDP+M98e/xeUxZswGs4HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUfHAUa1ZHy9R7Mg5QsgaPmCAliMB8GA1UdIwQY MBaAFPI1hvIgzLDRxSwK7fXnZuyhoRx0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGpXRzhpRE1zTkhGTEFydDllZG03S0doSEhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS84MzQ3MGItOTBiMC00NmI2LWI5NjMt MzAxMzczYzA0MTk2LzEvOGpXRzhpRE1zTkhGTEFydDllZG03S0doSEhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS84MzQ3MGItOTBiMC00NmI2LWI5NjMtMzAxMzczYzA0MTk2 LzEvOGpXRzhpRE1zTkhGTEFydDllZG03S0doSEhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoC2PX8K 5dOwVMyoSc//8L5qH3zmWORrAUBLzH9BakbNkhCBDPhhIThZQBAUxDSNpA+wEKcd 467MppVVQ84Znf5owgStpQwhfGjC4RRBY9XdpVcp4dRidRp0uCdbD2mzhhfhwX2b lDRy8ykZjqvsc0v5pq8bkxi/SzQ1P72PYfyKA5ddxNoXtJGMVActZV3PYvSbWWRk p0e+rigpRnUD3P6iedKtTAG3szccev0wDm5kqcDDYBz11MfN5PhS17cXzel44/hQ bpA4TSpd3FjzbQpMXp+f4KHOhh7LhAjUFbp6Gh0rbn8BQ2zRcpPNrqc+aQE7F47E 3a7L+9T9vLYXiw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:44 2025 by rpki-client