This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft File: 8L-tMcFMk9qlNEugT0tSNUaW368.mft (raw, json) Hash identifier: gnnifM/q135Y1ngcZ9Mof7f+WZ6bb+9bOj2re1JnG7E= Subject key identifier: FB:0E:62:CA:4E:86:83:02:E3:7F:C3:AD:C6:31:6D:74:23:76:A3:55 Authority key identifier: F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF Certificate issuer: /CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf Certificate serial: 019AF23F973637E1DC3C58D41FA0DEB27E6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:00:45 +0000 Manifest this update: Sat 06 Dec 2025 06:00:45 +0000 Manifest next update: Sun 07 Dec 2025 06:00:45 +0000 Files and hashes: 1: 8L-tMcFMk9qlNEugT0tSNUaW368.crl (hash: eRTIsvuzBN0GeIWN3Pt3wLvUe9MqBj1wT7rIzIpLxSs=) 2: UW4EyDU9bcfR_a5RruA-KGiV3Uw.roa (hash: yNneGYRFbH3ZhAuncPonvd3a6cecW1xrZDzoeBjGnHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:97:36:37:e1:dc:3c:58:d4:1f:a0:de:b2:7e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf Validity Not Before: Dec 6 06:00:45 2025 GMT Not After : Dec 7 06:00:45 2025 GMT Subject: CN=fb0e62ca4e868302e37fc3adc6316d742376a355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7c:fe:7f:31:42:a8:38:3d:d6:3e:2f:a3:4e: 6a:15:8b:38:4f:d0:21:42:44:67:4b:9c:25:11:69: 03:9f:e9:a7:a7:fc:91:e5:05:e5:19:27:8f:d4:1c: 81:2c:e6:fc:44:75:8f:52:9e:08:89:f9:e1:ad:b9: e9:ab:9b:70:59:97:e6:6e:28:1d:02:d1:0b:ba:9b: 5b:8a:61:76:ef:3c:3f:35:5b:34:f7:31:2d:1b:ee: 9f:ec:0a:53:d1:12:fd:98:e7:7b:b3:84:9a:7d:7c: 1f:c0:99:28:3b:d0:50:a3:3d:18:ac:16:68:af:72: 83:86:28:10:14:f4:5e:b6:76:1b:9e:a1:ad:50:50: 75:a5:6f:c8:02:54:56:f9:2d:2d:77:b4:bf:a3:22: eb:d3:97:83:24:8d:77:7c:85:c1:fc:6a:fe:69:da: 1b:eb:05:11:29:77:60:00:38:a7:96:e4:86:ed:bf: f5:b2:19:b4:50:b1:5a:ce:a1:2b:8f:05:74:36:09: 6d:60:4c:fc:91:a0:0c:87:ad:9a:74:1b:8a:31:04: d3:7b:69:4d:5c:4b:8e:e1:d6:1e:8f:0d:e9:70:a1: c3:04:79:63:fd:82:5c:49:4b:fe:c1:4b:a9:53:20: dd:df:5d:24:16:81:49:1e:bd:a9:3f:c7:4c:17:bf: ee:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0E:62:CA:4E:86:83:02:E3:7F:C3:AD:C6:31:6D:74:23:76:A3:55 X509v3 Authority Key Identifier: keyid:F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:c3:3b:c4:a2:ae:f1:c2:7c:63:10:78:fe:6c:22:3b:84:23: f8:b3:99:82:ca:44:79:84:e9:08:69:d3:14:ab:38:a5:2b:2c: fc:3b:38:59:9c:4e:8c:05:67:f7:ec:ea:23:9d:9b:de:24:6f: a4:f3:6d:7c:6d:31:1d:6f:13:e0:50:01:31:6b:3e:bd:2e:c6: ef:55:97:ab:69:9b:5b:61:0e:c8:9d:14:2c:46:f3:95:80:cc: 31:a9:21:11:a5:da:41:b1:ef:e5:a9:47:4d:a3:8e:ac:33:11: a1:76:1f:e6:12:e0:a0:0a:f5:da:4f:0b:42:74:39:b0:dd:1a: 9b:41:9d:97:5f:b5:bc:0b:ee:9b:e5:69:e1:b2:14:7f:a3:dd: 95:2f:a0:d1:b3:86:0c:d4:ac:b3:f1:08:b5:e3:a7:32:80:40: be:5c:b9:cb:fa:2c:78:a7:4b:96:3f:66:a9:68:9a:5a:25:e6: 99:0b:35:18:11:92:4a:ba:61:98:93:34:ff:8d:9a:1a:5f:4e: be:26:10:3d:df:0f:35:19:a0:b0:7a:8d:da:b4:30:f3:44:55: 7d:3f:54:40:75:c2:f6:01:cb:65:bd:55:e0:47:8f:36:54:fb: 56:8c:0f:ac:33:07:c5:9f:e7:00:83:02:ff:85:85:0b:5a:d7: 60:10:73:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5c2N+HcPFjUH6Desn5qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYmZhZDMxYzE0YzkzZGFhNTM0NGJhMDRmNGI1MjM1NDY5 NmRmYWYwHhcNMjUxMjA2MDYwMDQ1WhcNMjUxMjA3MDYwMDQ1WjAzMTEwLwYDVQQD EyhmYjBlNjJjYTRlODY4MzAyZTM3ZmMzYWRjNjMxNmQ3NDIzNzZhMzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnz+fzFCqDg91j4vo05qFYs4T9Ah QkRnS5wlEWkDn+mnp/yR5QXlGSeP1ByBLOb8RHWPUp4Iifnhrbnpq5twWZfmbigd AtELuptbimF27zw/NVs09zEtG+6f7ApT0RL9mOd7s4SafXwfwJkoO9BQoz0YrBZo r3KDhigQFPRetnYbnqGtUFB1pW/IAlRW+S0td7S/oyLr05eDJI13fIXB/Gr+adob 6wURKXdgADinluSG7b/1shm0ULFazqErjwV0NgltYEz8kaAMh62adBuKMQTTe2lN XEuO4dYejw3pcKHDBHlj/YJcSUv+wUupUyDd310kFoFJHr2pP8dMF7/uWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsOYspOhoMC43/DrcYxbXQjdqNVMB8GA1UdIwQY MBaAFPC/rTHBTJPapTRLoE9LUjVGlt+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9kYzM1ZWItNmVjZi00NDUyLTg1OTkt NzBkNTljYzRmN2NjLzEvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9kYzM1ZWItNmVjZi00NDUyLTg1OTktNzBkNTljYzRmN2Nj LzEvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARsM7xKKu 8cJ8YxB4/mwiO4Qj+LOZgspEeYTpCGnTFKs4pSss/Ds4WZxOjAVn9+zqI52b3iRv pPNtfG0xHW8T4FABMWs+vS7G71WXq2mbW2EOyJ0ULEbzlYDMMakhEaXaQbHv5alH TaOOrDMRoXYf5hLgoAr12k8LQnQ5sN0am0Gdl1+1vAvum+Vp4bIUf6PdlS+g0bOG DNSss/EIteOnMoBAvly5y/oseKdLlj9mqWiaWiXmmQs1GBGSSrphmJM0/42aGl9O viYQPd8PNRmgsHqN2rQw80RVfT9UQHXC9gHLZb1V4EePNlT7VowPrDMHxZ/nAIMC /4WFC1rXYBBzRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:25 2025 by rpki-client