This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft File: 8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json) Hash identifier: kO11jYHVmFizzmKvo6OSqzYU1DGgVdm7xfNfLKJg2A8= Subject key identifier: 55:CD:E0:C0:F6:3F:5F:E8:BA:20:C0:66:F4:A8:8B:D4:27:93:D1:7A Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae Certificate serial: 019AF24000C64726F8006AA2AEF4BDA61D06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft Manifest number: 06E0 Signing time: Sat 06 Dec 2025 06:01:11 +0000 Manifest this update: Sat 06 Dec 2025 06:01:11 +0000 Manifest next update: Sun 07 Dec 2025 06:01:11 +0000 Files and hashes: 1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: ug6YmDxbP6MJtEYtWNgp/FG8jAkFDnyq1Cg2KBjkoAs=) 2: yze2rcJ637RL8GZo48PGt4d8nY8.roa (hash: H8OFKVxMCjsZaNXr8DPY/I8jq0ZMaggP4bkjrXxk6OY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:00:c6:47:26:f8:00:6a:a2:ae:f4:bd:a6:1d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae Validity Not Before: Dec 6 06:01:11 2025 GMT Not After : Dec 7 06:01:11 2025 GMT Subject: CN=55cde0c0f63f5fe8ba20c066f4a88bd42793d17a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2b:d3:49:9c:38:c8:a5:d4:f8:4e:b2:99:b5: 01:db:3b:05:59:3b:72:8e:fe:33:b7:9a:bd:92:48: bb:0a:01:0d:6c:13:2a:1e:52:e3:ec:ea:35:74:6d: d3:8c:aa:51:d0:15:a8:6a:8e:0b:81:b2:e3:7e:ce: c8:fa:fa:cc:7e:e6:7b:33:6f:cb:64:f4:dd:23:3d: b4:e9:47:98:98:e8:81:c0:dd:cb:8c:fb:43:44:93: 9e:19:ae:96:77:f7:30:e7:ad:c2:5d:fd:24:62:c4: aa:3c:47:ad:23:ae:cb:8c:96:c8:65:ca:ad:7b:2f: 06:d2:78:47:01:2a:26:a1:c2:55:42:a0:d9:92:5d: f0:b2:7e:71:9f:ec:0e:50:08:63:b7:ce:33:90:e6: b0:06:30:f8:e5:87:01:7a:f1:81:31:76:66:a3:94: fd:20:c0:d3:dc:e0:3f:89:9a:04:54:24:52:aa:b2: 31:f7:96:50:66:e9:77:3f:fb:6d:90:15:a3:35:27: 85:dc:49:ac:89:65:0a:96:dc:cc:82:47:aa:a3:cb: dc:65:f6:6f:8c:9d:f9:55:c0:d8:17:44:84:1c:bd: 15:35:7f:03:07:20:d0:94:c4:56:e0:20:99:48:ba: 0a:e8:08:b3:cb:65:38:eb:f4:17:23:de:da:fb:79: 31:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:CD:E0:C0:F6:3F:5F:E8:BA:20:C0:66:F4:A8:8B:D4:27:93:D1:7A X509v3 Authority Key Identifier: keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:62:a9:6f:cf:98:22:1f:7b:fa:fc:ee:83:0f:18:1e:23:23: cb:4e:23:20:8f:0b:19:57:33:b6:57:23:eb:a9:1d:82:f5:3a: c0:ec:2b:15:e6:a8:72:83:f3:1c:a4:5d:71:f4:f0:ae:2e:2f: a8:b6:4b:a6:30:ee:e1:95:37:52:4a:ce:6c:6d:d4:40:9b:00: 39:09:54:0e:ae:11:a4:bf:ba:25:1b:02:59:f4:39:68:d8:af: 25:61:65:a4:67:e9:df:0a:9e:c4:59:58:d3:7d:9f:33:73:6b: 77:30:dc:b5:2a:92:9c:86:6e:50:2a:5b:49:40:27:a9:36:b0: ff:4a:42:2e:24:be:46:f4:e1:70:69:c5:c8:a7:b5:4e:0d:3f: f7:ee:50:11:5b:56:f8:07:65:fe:74:4a:68:f0:7a:3f:9d:59: 4e:6d:f3:a9:1f:52:78:e4:6f:cd:cd:d7:b7:ef:40:e5:fc:b6: d3:5c:3a:ae:92:3c:8f:37:6f:54:ef:cc:0f:69:b8:96:03:80: 61:09:be:6b:15:52:e6:ed:a3:82:1e:df:2d:62:12:eb:15:9b: c6:d1:15:d2:02:ee:db:9a:37:cb:fb:5b:c6:c0:67:e3:f1:07: 31:7c:92:16:73:d0:f4:49:49:7a:c4:c8:ea:0b:ea:10:86:d1: 73:1e:6e:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQADGRyb4AGqirvS9ph0GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxODUyNzBlODMxOTNkMzI2OWY3Y2RlOWRhMDgwOGIxZWZm NTUyYWUwHhcNMjUxMjA2MDYwMTExWhcNMjUxMjA3MDYwMTExWjAzMTEwLwYDVQQD Eyg1NWNkZTBjMGY2M2Y1ZmU4YmEyMGMwNjZmNGE4OGJkNDI3OTNkMTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryvTSZw4yKXU+E6ymbUB2zsFWTty jv4zt5q9kki7CgENbBMqHlLj7Oo1dG3TjKpR0BWoao4LgbLjfs7I+vrMfuZ7M2/L ZPTdIz206UeYmOiBwN3LjPtDRJOeGa6Wd/cw563CXf0kYsSqPEetI67LjJbIZcqt ey8G0nhHASomocJVQqDZkl3wsn5xn+wOUAhjt84zkOawBjD45YcBevGBMXZmo5T9 IMDT3OA/iZoEVCRSqrIx95ZQZul3P/ttkBWjNSeF3EmsiWUKltzMgkeqo8vcZfZv jJ35VcDYF0SEHL0VNX8DByDQlMRW4CCZSLoK6Aizy2U46/QXI97a+3kxIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXN4MD2P1/ouiDAZvSoi9Qnk9F6MB8GA1UdIwQY MBaAFPGFJw6DGT0yaffN6doICLHv9VKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgt ZmVmOTZlOTVhYmEwLzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgtZmVmOTZlOTVhYmEw LzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2Kpb8+Y Ih97+vzugw8YHiMjy04jII8LGVcztlcj66kdgvU6wOwrFeaocoPzHKRdcfTwri4v qLZLpjDu4ZU3UkrObG3UQJsAOQlUDq4RpL+6JRsCWfQ5aNivJWFlpGfp3wqexFlY 032fM3NrdzDctSqSnIZuUCpbSUAnqTaw/0pCLiS+RvThcGnFyKe1Tg0/9+5QEVtW +Adl/nRKaPB6P51ZTm3zqR9SeORvzc3Xt+9A5fy201w6rpI8jzdvVO/MD2m4lgOA YQm+axVS5u2jgh7fLWIS6xWbxtEV0gLu25o3y/tbxsBn4/EHMXySFnPQ9ElJesTI 6gvqEIbRcx5udQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:06 2025 by rpki-client