This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft File: C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft (raw, json) Hash identifier: mzLzMUG86b4E/f+Axw81h8z0fiYRoSeRJNScGQch4a8= Subject key identifier: A4:04:19:BF:34:D4:5B:31:9A:00:F7:C4:A7:CD:D5:A0:72:84:D4:50 Authority key identifier: 0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52 Certificate issuer: /CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052 Certificate serial: 019B2475ECDB29B03B881AACE4146D755379 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft Manifest number: 1458 Signing time: Tue 16 Dec 2025 00:01:06 +0000 Manifest this update: Tue 16 Dec 2025 00:01:06 +0000 Manifest next update: Wed 17 Dec 2025 00:01:06 +0000 Files and hashes: 1: C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl (hash: PxzNYRoS7A+THo7nAEKvpeHuZVh0ol6AScdzPb1HNSA=) 2: VDV2mgvPqpRmmoenb9SaX1u1440.roa (hash: ivvVUYPgums0E545lnqR4Wp+TXCXyBK6qgVWasD11m0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:75:ec:db:29:b0:3b:88:1a:ac:e4:14:6d:75:53:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052 Validity Not Before: Dec 16 00:01:06 2025 GMT Not After : Dec 17 00:01:06 2025 GMT Subject: CN=a40419bf34d45b319a00f7c4a7cdd5a07284d450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9e:d7:2d:0f:fe:0d:67:d9:ba:ba:11:73:9f: b7:1c:1d:d5:1c:4c:0d:cb:a3:f5:ac:2a:88:dc:2d: 27:68:8c:d5:23:a0:2d:49:39:3c:31:e8:78:3e:f1: 18:58:85:f3:63:49:13:e2:39:cb:7a:81:b8:26:fa: c0:84:18:a7:1a:14:56:04:d4:c3:d4:7d:9a:fd:af: 19:f6:a2:0a:12:8a:8a:58:b4:e6:85:a1:d9:a5:68: 74:a3:dd:9c:53:ee:a4:ab:78:aa:d0:62:9e:49:42: a1:33:e0:49:78:61:85:70:aa:63:c3:72:1c:2a:bf: 46:f5:91:5d:f2:2b:64:ac:28:4f:1b:c7:d6:d0:01: 89:52:96:4b:99:87:f1:41:d8:fc:5e:5d:ef:39:42: 89:cb:94:21:1f:e6:fb:d1:73:91:fc:e2:56:9e:30: e8:45:5e:c3:09:62:ba:84:97:2b:1c:ab:1b:c9:92: 93:53:e9:69:67:90:aa:19:d3:9e:b0:55:d3:9e:55: da:e3:75:d3:fe:f3:12:7b:5c:71:5e:ca:cc:1d:d4: 55:d7:9c:0b:cd:c2:ca:d2:30:0f:40:bb:fd:87:80: 3a:25:90:18:f3:6a:83:e0:7f:3c:07:8f:bc:17:cf: c5:cb:a7:0c:4c:74:9d:b8:41:37:59:e6:18:b6:2c: e2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:04:19:BF:34:D4:5B:31:9A:00:F7:C4:A7:CD:D5:A0:72:84:D4:50 X509v3 Authority Key Identifier: keyid:0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:96:e0:b4:a7:2c:6e:3c:97:e2:87:98:20:b0:d9:b5:a3:f6: 7e:6e:2c:ae:85:05:b7:fc:91:6e:a6:fd:ff:f9:17:a4:c3:ca: ed:1a:a4:b6:4a:3a:35:fe:53:86:26:0c:f3:e2:7e:51:ae:ba: e1:ae:90:f5:62:dd:b8:ac:b7:5c:b5:73:75:de:8b:fc:d7:19: 3f:e9:47:54:59:af:d3:26:ad:69:cf:eb:5b:10:ad:bb:2a:fb: e3:ba:2b:bb:a5:42:15:78:00:02:7d:57:dc:cb:a2:bd:2f:6b: 77:7b:56:a1:0e:7e:92:88:04:0d:cf:71:a5:41:5f:9e:c7:af: 59:f4:51:e6:a9:2d:e8:9b:fd:48:f9:9b:53:1e:0a:ad:97:06: 8d:b2:c7:13:f7:af:fb:48:f1:ce:0e:00:1c:bc:a6:d6:56:16: a1:c8:71:fc:f0:eb:2c:a5:2d:82:f5:e4:de:42:8d:cc:4d:6c: a5:d4:b5:93:7b:ec:c0:e7:84:7c:66:e0:5d:c9:4e:79:db:39: 05:8b:5d:71:15:68:16:56:24:e4:aa:ae:d4:cd:d1:c2:f8:22: ed:7d:d1:25:b4:f4:31:b6:26:f6:89:71:84:79:21:36:ae:1b: a2:1a:7c:25:ce:ea:ee:b1:0e:a0:02:b2:0e:4f:92:25:7c:07: 24:85:9e:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdezbKbA7iBqs5BRtdVN5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiY2JmNzQ4ZTlmNDk5ODY4NWQwYzk2NWQyZGZkZjBmMzYy YTUwNTIwHhcNMjUxMjE2MDAwMTA2WhcNMjUxMjE3MDAwMTA2WjAzMTEwLwYDVQQD EyhhNDA0MTliZjM0ZDQ1YjMxOWEwMGY3YzRhN2NkZDVhMDcyODRkNDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl57XLQ/+DWfZuroRc5+3HB3VHEwN y6P1rCqI3C0naIzVI6AtSTk8Meh4PvEYWIXzY0kT4jnLeoG4JvrAhBinGhRWBNTD 1H2a/a8Z9qIKEoqKWLTmhaHZpWh0o92cU+6kq3iq0GKeSUKhM+BJeGGFcKpjw3Ic Kr9G9ZFd8itkrChPG8fW0AGJUpZLmYfxQdj8Xl3vOUKJy5QhH+b70XOR/OJWnjDo RV7DCWK6hJcrHKsbyZKTU+lpZ5CqGdOesFXTnlXa43XT/vMSe1xxXsrMHdRV15wL zcLK0jAPQLv9h4A6JZAY82qD4H88B4+8F8/Fy6cMTHSduEE3WeYYtiziBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQEGb801FsxmgD3xKfN1aByhNRQMB8GA1UdIwQY MBaAFAvL90jp9JmGhdDJZdLf3w82KlBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzh2M1NPbjBtWWFGME1sbDB0X2ZEellxVUZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lMjIxOTItYmUwMC00OGMwLWE3MTEt N2Y5NmM5ZjA1ZjU0LzEvQzh2M1NPbjBtWWFGME1sbDB0X2ZEellxVUZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9lMjIxOTItYmUwMC00OGMwLWE3MTEtN2Y5NmM5ZjA1ZjU0 LzEvQzh2M1NPbjBtWWFGME1sbDB0X2ZEellxVUZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5bgtKcs bjyX4oeYILDZtaP2fm4sroUFt/yRbqb9//kXpMPK7Rqktko6Nf5ThiYM8+J+Ua66 4a6Q9WLduKy3XLVzdd6L/NcZP+lHVFmv0yatac/rWxCtuyr747oru6VCFXgAAn1X 3MuivS9rd3tWoQ5+kogEDc9xpUFfnsevWfRR5qkt6Jv9SPmbUx4KrZcGjbLHE/ev +0jxzg4AHLym1lYWochx/PDrLKUtgvXk3kKNzE1spdS1k3vswOeEfGbgXclOeds5 BYtdcRVoFlYk5Kqu1M3Rwvgi7X3RJbT0MbYm9olxhHkhNq4bohp8Jc7q7rEOoAKy Dk+SJXwHJIWegA== -----END CERTIFICATE-----Generated at Tue Dec 16 07:08:48 2025 by rpki-client