This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft File: 8R8omgChsRW386TRuAEb-Q0aL3I.mft (raw, json) Hash identifier: GqUrkWNIAqQ43O8lHqftwfg+WB76nK3AeruWLvdM1YA= Subject key identifier: 8E:02:4A:ED:8B:DC:C8:53:D1:43:9E:1F:EF:30:82:64:9E:45:22:5F Authority key identifier: F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72 Certificate issuer: /CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72 Certificate serial: 019AF50B9FFFD900B214E064F1C49172C0AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft Manifest number: 0B32 Signing time: Sat 06 Dec 2025 19:02:51 +0000 Manifest this update: Sat 06 Dec 2025 19:02:51 +0000 Manifest next update: Sun 07 Dec 2025 19:02:51 +0000 Files and hashes: 1: 8R8omgChsRW386TRuAEb-Q0aL3I.crl (hash: 9PbjC4CRkRYKlFyrAJhyzMacjkNZ2mgnwG9j3x0DANs=) 2: tRxgXr9YQwTbEh2NqyL9M68npkQ.roa (hash: QcuVE9jeWpJsMM52+9+6n7mFIjZuC9lNEDcWkB7O3NI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:9f:ff:d9:00:b2:14:e0:64:f1:c4:91:72:c0:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72 Validity Not Before: Dec 6 19:02:51 2025 GMT Not After : Dec 7 19:02:51 2025 GMT Subject: CN=8e024aed8bdcc853d1439e1fef3082649e45225f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9e:9b:2d:53:15:f2:f5:d5:8a:06:1b:03:bb: d1:5a:7f:c5:45:3a:41:bf:e8:1c:61:7d:db:ad:42: 12:6a:58:f9:a0:4e:c3:a5:b0:a7:40:b5:73:58:d2: ba:d9:79:31:f0:91:46:11:39:0c:f6:29:3a:ed:1a: 9a:43:89:a9:b4:a4:76:6d:da:1c:3a:df:e8:65:d3: 87:3e:3b:a6:17:25:38:00:e4:b4:6f:ae:e5:01:ba: 98:62:50:67:b5:21:60:26:8b:10:3f:e2:35:dc:d5: 83:d5:71:85:43:29:83:40:8f:48:2c:b3:a1:16:a2: f7:6f:a3:de:d3:04:15:f3:f3:ea:05:67:43:fa:ab: 8d:cd:d8:72:4a:57:70:4f:84:20:0e:5e:16:ea:ce: 0f:05:b4:e2:2d:b4:ae:37:47:0e:ee:eb:82:07:6d: 29:5f:64:22:66:e8:70:70:dc:36:53:55:9d:ff:6d: 03:e8:5c:04:c1:33:fa:49:3b:91:6f:f3:3c:05:d6: 48:37:68:b7:71:4c:1f:98:3d:63:1c:13:e7:be:90: d5:5a:dd:0e:11:11:cb:63:f9:05:c3:91:66:86:2c: 14:4a:c8:5e:07:9f:17:af:21:f7:a2:f2:e2:a7:1f: 68:1c:5c:52:03:20:bc:32:7e:22:5b:b5:3f:1b:1f: bc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:02:4A:ED:8B:DC:C8:53:D1:43:9E:1F:EF:30:82:64:9E:45:22:5F X509v3 Authority Key Identifier: keyid:F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:7d:99:c7:32:31:a4:b5:1c:22:81:e2:10:69:4d:23:2d:b8: 7b:8f:e1:e7:ee:a5:ea:7b:01:40:6e:b8:b1:f6:30:bd:1f:e1: 86:b9:69:64:7d:9e:81:35:70:22:c0:40:4d:92:c2:a6:3b:27: 78:41:ff:a4:0a:34:b4:9e:83:5b:f8:e9:02:cb:63:fa:41:5b: 49:41:5b:27:b5:d4:8d:67:8e:b3:e4:05:16:73:74:a8:a4:64: a1:a5:9c:cf:46:be:4d:f5:84:f0:37:47:25:f1:4f:88:db:fa: 4e:08:51:c3:b5:ec:a2:d0:1f:30:e1:ea:fb:a4:9d:7c:e0:39: 0c:96:78:72:96:b1:4b:72:af:84:b0:45:f3:90:62:df:62:3d: da:90:75:51:a7:74:34:5e:95:18:ca:ee:d5:61:70:bb:87:0e: 68:23:f5:f6:01:55:f5:26:a1:1f:a4:58:42:b4:dd:5c:02:e8: 2d:f1:a9:13:f2:27:d7:60:40:da:c4:a7:7f:ac:03:ce:03:ee: ba:71:32:c4:d4:a2:6d:ef:f2:ea:3a:79:87:8c:e0:b2:d3:52: 75:8b:fd:17:d3:c0:fd:0f:fc:15:87:ad:c7:a6:57:1c:66:5a: 12:b9:c4:eb:0f:4f:44:dd:44:77:b6:a8:c2:90:be:c9:bf:46: fd:be:8f:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C5//2QCyFOBk8cSRcsCvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMWYyODlhMDBhMWIxMTViN2YzYTRkMWI4MDExYmY5MGQx YTJmNzIwHhcNMjUxMjA2MTkwMjUxWhcNMjUxMjA3MTkwMjUxWjAzMTEwLwYDVQQD Eyg4ZTAyNGFlZDhiZGNjODUzZDE0MzllMWZlZjMwODI2NDllNDUyMjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA456bLVMV8vXVigYbA7vRWn/FRTpB v+gcYX3brUISalj5oE7DpbCnQLVzWNK62Xkx8JFGETkM9ik67RqaQ4mptKR2bdoc Ot/oZdOHPjumFyU4AOS0b67lAbqYYlBntSFgJosQP+I13NWD1XGFQymDQI9ILLOh FqL3b6Pe0wQV8/PqBWdD+quNzdhySldwT4QgDl4W6s4PBbTiLbSuN0cO7uuCB20p X2QiZuhwcNw2U1Wd/20D6FwEwTP6STuRb/M8BdZIN2i3cUwfmD1jHBPnvpDVWt0O ERHLY/kFw5FmhiwUSsheB58XryH3ovLipx9oHFxSAyC8Mn4iW7U/Gx+89QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4CSu2L3MhT0UOeH+8wgmSeRSJfMB8GA1UdIwQY MBaAFPEfKJoAobEVt/Ok0bgBG/kNGi9yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFI4b21nQ2hzUlczODZUUnVBRWItUTBhTDNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81MTUxZTEtMzZiNy00MjA1LTlhZjct NzRlODQ5NjcxNjhiLzEvOFI4b21nQ2hzUlczODZUUnVBRWItUTBhTDNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS81MTUxZTEtMzZiNy00MjA1LTlhZjctNzRlODQ5NjcxNjhi LzEvOFI4b21nQ2hzUlczODZUUnVBRWItUTBhTDNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHn2ZxzIx pLUcIoHiEGlNIy24e4/h5+6l6nsBQG64sfYwvR/hhrlpZH2egTVwIsBATZLCpjsn eEH/pAo0tJ6DW/jpAstj+kFbSUFbJ7XUjWeOs+QFFnN0qKRkoaWcz0a+TfWE8DdH JfFPiNv6TghRw7XsotAfMOHq+6SdfOA5DJZ4cpaxS3KvhLBF85Bi32I92pB1Uad0 NF6VGMru1WFwu4cOaCP19gFV9SahH6RYQrTdXALoLfGpE/In12BA2sSnf6wDzgPu unEyxNSibe/y6jp5h4zgstNSdYv9F9PA/Q/8FYetx6ZXHGZaErnE6w9PRN1Ed7ao wpC+yb9G/b6Pyw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:55:41 2025 by rpki-client