This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft File: 8C4yJOPjKSgZJijSZIfVAPJwd2U.mft (raw, json) Hash identifier: ZccsNbUefV//gJZzbxlnmdiuNdnbzGCwYJQYub0Nq+E= Subject key identifier: 2D:24:C1:F9:5A:DB:B0:74:1D:84:B9:D9:2B:D5:3F:0B:5A:9A:D4:D0 Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65 Certificate issuer: /CN=f02e3224e3e32928192628d26487d500f2707765 Certificate serial: 019AF9F9B70C4D7EA48A5A44DDAD7D60451B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft Manifest number: 1768 Signing time: Sun 07 Dec 2025 18:01:23 +0000 Manifest this update: Sun 07 Dec 2025 18:01:23 +0000 Manifest next update: Mon 08 Dec 2025 18:01:23 +0000 Files and hashes: 1: 3-RywYSjpl9yuamrGaiHfk5Mz6o.roa (hash: khi3zX71hfk8spUUIwuIJwDTfe1y2tzgOMplAgujSag=) 2: 8C4yJOPjKSgZJijSZIfVAPJwd2U.crl (hash: v1urgSmYEK4mhXGHwhMWAjOa2el1BvrdrUV6aiyAadc=) 3: qmufYg21c7b0gdjuY1ziryDKce0.roa (hash: cPNs19EWQmBAO/qKhHL4tQL9v8RMF/40vmmVOD5n7Ds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:f9:b7:0c:4d:7e:a4:8a:5a:44:dd:ad:7d:60:45:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02e3224e3e32928192628d26487d500f2707765 Validity Not Before: Dec 7 18:01:23 2025 GMT Not After : Dec 8 18:01:23 2025 GMT Subject: CN=2d24c1f95adbb0741d84b9d92bd53f0b5a9ad4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:06:c2:51:99:55:9e:32:3d:3f:25:4c:bb:8b: 5a:85:bc:75:fc:c5:39:f3:22:2c:74:8c:0c:90:91: 1f:61:21:c5:ed:05:08:5c:0c:bd:2e:33:73:8f:4c: 36:a7:40:d0:90:86:bb:a9:e4:90:a6:3c:ab:ee:f5: f1:12:2e:70:ae:f9:41:43:90:fe:48:01:03:e5:df: a5:41:a7:6f:73:e8:40:59:ee:c1:bc:26:42:8c:62: ad:0a:da:45:46:b2:78:c3:7e:75:94:b0:c8:4c:36: b3:11:5a:34:1a:82:2f:47:93:8d:f9:1a:11:63:b1: c7:aa:b2:77:c0:b4:35:c7:00:fc:bf:2f:cd:19:db: 4a:11:2f:d2:8c:16:28:1a:5a:bc:8f:31:27:e2:67: 7c:d1:75:ff:09:14:7f:2c:5f:4f:ce:92:0c:28:2c: 2c:3f:8f:9e:a5:af:a4:90:0c:3b:85:ea:e7:f5:73: 13:90:45:50:7f:c3:2d:86:8f:a9:e9:76:6a:4d:fd: 2a:e4:6c:f2:0f:25:11:31:89:6f:d3:29:64:58:af: 61:82:3e:34:27:b0:2b:a7:18:17:af:84:cd:97:ec: 3b:df:75:96:25:fc:c4:ae:4b:78:5e:df:42:34:74: e4:a1:00:7a:9a:bb:0d:19:5c:22:df:35:78:b4:80: 08:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:24:C1:F9:5A:DB:B0:74:1D:84:B9:D9:2B:D5:3F:0B:5A:9A:D4:D0 X509v3 Authority Key Identifier: keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:77:30:35:ae:10:ef:18:15:e0:c7:77:64:35:72:69:73:f5: 83:e2:28:b7:61:a2:54:4a:89:9a:47:69:33:fb:69:2d:56:63: 86:89:e3:a4:7b:8a:5b:96:24:93:5e:0b:3b:c1:74:b4:10:b5: 82:70:bb:1d:75:e8:11:c2:ca:37:c0:75:61:e7:d2:bf:9a:eb: 51:33:d4:b9:b1:18:e6:94:5a:cb:7e:1c:f1:3a:bd:c0:b8:c7: e9:f1:d7:1d:b0:df:3c:0e:ca:e1:56:fa:86:02:e9:97:bd:cb: 15:c5:81:30:ae:f1:b7:85:df:cd:11:a6:85:16:75:cc:9f:be: 8f:b2:82:42:b6:e4:78:0d:d6:25:c7:8e:36:8b:46:a6:f5:15: ca:53:1d:a1:be:88:2f:a8:97:70:2a:10:da:8b:d4:e7:8b:2e: 49:ac:24:e2:ae:31:ce:68:df:39:59:ae:6b:7a:38:59:94:dd: 5d:eb:da:7a:21:93:74:42:c0:1c:8f:71:71:18:96:23:1a:10: 16:28:f6:c4:a6:e9:77:e3:59:9d:6e:f7:fe:3c:1f:fd:cc:73: ac:aa:2a:f1:93:01:4c:33:c0:23:d2:0e:e6:37:65:21:ce:1d: e1:ee:69:f9:2b:fd:9f:63:3c:fd:88:07:94:c5:67:e5:81:52: d7:e7:91:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5+bcMTX6kilpE3a19YEUbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmUzMjI0ZTNlMzI5MjgxOTI2MjhkMjY0ODdkNTAwZjI3 MDc3NjUwHhcNMjUxMjA3MTgwMTIzWhcNMjUxMjA4MTgwMTIzWjAzMTEwLwYDVQQD EygyZDI0YzFmOTVhZGJiMDc0MWQ4NGI5ZDkyYmQ1M2YwYjVhOWFkNGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygbCUZlVnjI9PyVMu4tahbx1/MU5 8yIsdIwMkJEfYSHF7QUIXAy9LjNzj0w2p0DQkIa7qeSQpjyr7vXxEi5wrvlBQ5D+ SAED5d+lQadvc+hAWe7BvCZCjGKtCtpFRrJ4w351lLDITDazEVo0GoIvR5ON+RoR Y7HHqrJ3wLQ1xwD8vy/NGdtKES/SjBYoGlq8jzEn4md80XX/CRR/LF9PzpIMKCws P4+epa+kkAw7hern9XMTkEVQf8Mtho+p6XZqTf0q5GzyDyURMYlv0ylkWK9hgj40 J7ArpxgXr4TNl+w733WWJfzErkt4Xt9CNHTkoQB6mrsNGVwi3zV4tIAIHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0kwfla27B0HYS52SvVPwtamtTQMB8GA1UdIwQY MBaAFPAuMiTj4ykoGSYo0mSH1QDycHdlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEM0eUpPUGpLU2daSmlqU1pJZlZBUEp3ZDJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNjg4OTAtZDUwOS00NTFlLWI5ZWUt ZmI5OTUzYzA3ZjE1LzEvOEM0eUpPUGpLU2daSmlqU1pJZlZBUEp3ZDJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8yNjg4OTAtZDUwOS00NTFlLWI5ZWUtZmI5OTUzYzA3ZjE1 LzEvOEM0eUpPUGpLU2daSmlqU1pJZlZBUEp3ZDJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXcwNa4Q 7xgV4Md3ZDVyaXP1g+Iot2GiVEqJmkdpM/tpLVZjhonjpHuKW5Ykk14LO8F0tBC1 gnC7HXXoEcLKN8B1YefSv5rrUTPUubEY5pRay34c8Tq9wLjH6fHXHbDfPA7K4Vb6 hgLpl73LFcWBMK7xt4XfzRGmhRZ1zJ++j7KCQrbkeA3WJceONotGpvUVylMdob6I L6iXcCoQ2ovU54suSawk4q4xzmjfOVmua3o4WZTdXevaeiGTdELAHI9xcRiWIxoQ Fij2xKbpd+NZnW73/jwf/cxzrKoq8ZMBTDPAI9IO5jdlIc4d4e5p+Sv9n2M8/YgH lMVn5YFS1+eRvA== -----END CERTIFICATE-----Generated at Sun Dec 7 21:40:52 2025 by rpki-client