This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft File: 8gRTIEA3KhoBrACJS58IvT_hreM.mft (raw, json) Hash identifier: tKH5elA9txNrP5OvmR0sDRNWATNb//b82TbYCUsVHOM= Subject key identifier: 24:29:D2:CC:2E:8D:38:23:6C:22:B7:39:0A:54:8F:CD:55:6A:8C:05 Authority key identifier: F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3 Certificate issuer: /CN=f204532040372a1a01ac00894b9f08bd3fe1ade3 Certificate serial: 019AF464E68C871D3294A271CD58B9C74DE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft Manifest number: 01FF Signing time: Sat 06 Dec 2025 16:00:44 +0000 Manifest this update: Sat 06 Dec 2025 16:00:44 +0000 Manifest next update: Sun 07 Dec 2025 16:00:44 +0000 Files and hashes: 1: 8gRTIEA3KhoBrACJS58IvT_hreM.crl (hash: rNrMiQz2OKhRMJ4IoFpheGDFh+LfF4Du5LCHhFGbvkA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:e6:8c:87:1d:32:94:a2:71:cd:58:b9:c7:4d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f204532040372a1a01ac00894b9f08bd3fe1ade3 Validity Not Before: Dec 6 16:00:44 2025 GMT Not After : Dec 7 16:00:44 2025 GMT Subject: CN=2429d2cc2e8d38236c22b7390a548fcd556a8c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4d:57:91:21:07:14:4c:29:f1:66:55:40:bb: 74:fb:21:4c:2d:40:fa:78:cc:f2:c4:82:03:d4:e4: b3:4a:32:b5:ba:4d:8f:c6:fe:9e:ef:c4:69:1c:0f: c1:84:a5:49:ea:6f:20:c9:74:b0:ef:fe:82:8a:50: 60:ad:07:e1:1b:68:8b:4d:1a:0f:e3:6e:3a:f7:f4: 48:0c:ef:e4:00:0b:29:8b:87:d2:a9:c0:63:45:fd: a2:8a:56:80:d2:d1:57:da:d9:f0:ae:b8:3d:04:14: 0b:bc:50:1e:9a:74:e9:4c:18:14:ca:60:e6:97:70: 4c:34:b2:e5:3c:88:fb:fe:65:76:7d:86:e8:3b:86: c3:5f:2e:06:4d:69:2d:f8:20:ae:99:62:4f:49:5a: 92:f9:ba:56:58:4b:21:f2:0d:35:8f:da:2f:b2:89: 5d:e3:03:74:19:79:b5:4d:17:a3:29:0d:b0:2e:4c: b9:fc:bb:c9:c9:77:cc:84:80:9b:6a:71:1f:db:91: 1d:e9:67:dd:63:f8:1d:7c:ba:13:bb:ac:ac:b4:04: 6f:34:87:7f:26:92:eb:d4:94:80:19:b6:2c:ab:f3: 97:33:db:7d:4c:32:47:19:71:01:05:19:ce:ac:92: b5:b2:2c:17:5c:b8:04:f3:c5:8b:2f:ed:1d:23:ed: bf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:29:D2:CC:2E:8D:38:23:6C:22:B7:39:0A:54:8F:CD:55:6A:8C:05 X509v3 Authority Key Identifier: keyid:F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:a7:cf:16:ed:93:82:d1:72:ab:e6:60:f2:45:6d:f4:e5:08: d4:5c:ea:11:54:69:c4:4a:a9:04:19:0e:5c:14:53:dc:09:45: 0c:65:75:7f:47:28:a6:ac:a1:85:4d:0c:2c:dd:2f:a1:be:ca: 69:83:2b:a2:65:44:0e:63:37:15:f1:ec:e5:7d:05:01:05:32: f4:a4:42:6e:f3:09:0e:91:56:12:ac:1a:b0:1e:58:cf:ae:49: f4:4e:26:ff:2f:cd:fc:89:f3:45:73:d6:9a:4f:30:3a:c6:59: 8e:57:a7:98:ac:ba:21:43:45:e1:46:e8:03:31:3f:a8:43:54: 66:a5:27:05:43:32:f4:53:e4:02:20:4d:50:06:78:16:04:cf: dd:e3:24:df:dc:e8:dd:b6:ee:fe:cd:91:6d:bb:fb:77:82:e7: 35:78:7d:88:05:59:e9:3c:8c:26:71:f1:ff:00:40:ca:17:1f: ac:79:ae:f7:7a:2a:fe:ba:b6:9a:ea:b4:98:8a:dc:20:a6:8e: ef:b4:79:82:3b:8c:c7:15:da:9b:6b:46:1c:23:e6:8d:5b:06: 51:c6:ba:d9:6d:53:25:1a:c0:06:48:25:21:3e:35:22:1d:a1: 8f:ff:9b:bc:dc:ba:fc:8b:48:7b:66:1b:fb:28:4e:e5:20:f8: a9:cf:6c:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZOaMhx0ylKJxzVi5x03hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMDQ1MzIwNDAzNzJhMWEwMWFjMDA4OTRiOWYwOGJkM2Zl MWFkZTMwHhcNMjUxMjA2MTYwMDQ0WhcNMjUxMjA3MTYwMDQ0WjAzMTEwLwYDVQQD EygyNDI5ZDJjYzJlOGQzODIzNmMyMmI3MzkwYTU0OGZjZDU1NmE4YzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi01XkSEHFEwp8WZVQLt0+yFMLUD6 eMzyxIID1OSzSjK1uk2Pxv6e78RpHA/BhKVJ6m8gyXSw7/6CilBgrQfhG2iLTRoP 42469/RIDO/kAAspi4fSqcBjRf2iilaA0tFX2tnwrrg9BBQLvFAemnTpTBgUymDm l3BMNLLlPIj7/mV2fYboO4bDXy4GTWkt+CCumWJPSVqS+bpWWEsh8g01j9ovsold 4wN0GXm1TRejKQ2wLky5/LvJyXfMhICbanEf25Ed6WfdY/gdfLoTu6ystARvNId/ JpLr1JSAGbYsq/OXM9t9TDJHGXEBBRnOrJK1siwXXLgE88WLL+0dI+2/kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQp0swujTgjbCK3OQpUj81VaowFMB8GA1UdIwQY MBaAFPIEUyBANyoaAawAiUufCL0/4a3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGdSVElFQTNLaG9CckFDSlM1OEl2VF9ocmVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80N2EyNjUtM2ViYi00MTA1LWJjNDMt MzQyNDllNjFhNDc0LzEvOGdSVElFQTNLaG9CckFDSlM1OEl2VF9ocmVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80N2EyNjUtM2ViYi00MTA1LWJjNDMtMzQyNDllNjFhNDc0 LzEvOGdSVElFQTNLaG9CckFDSlM1OEl2VF9ocmVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKfPFu2T gtFyq+Zg8kVt9OUI1FzqEVRpxEqpBBkOXBRT3AlFDGV1f0copqyhhU0MLN0vob7K aYMromVEDmM3FfHs5X0FAQUy9KRCbvMJDpFWEqwasB5Yz65J9E4m/y/N/InzRXPW mk8wOsZZjlenmKy6IUNF4UboAzE/qENUZqUnBUMy9FPkAiBNUAZ4FgTP3eMk39zo 3bbu/s2Rbbv7d4LnNXh9iAVZ6TyMJnHx/wBAyhcfrHmu93oq/rq2muq0mIrcIKaO 77R5gjuMxxXam2tGHCPmjVsGUca62W1TJRrABkglIT41Ih2hj/+bvNy6/ItIe2Yb +yhO5SD4qc9scg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:10:15 2025 by rpki-client