This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft File: 8FCiDjDskV3tHfIAVa9rXyZnLqk.mft (raw, json) Hash identifier: YdAQI/31ePOpG88oPMZHUHRnf+OmEKygVkQi/XXkw9I= Subject key identifier: DD:C0:9B:7A:26:C8:8B:84:3B:69:F9:AE:C2:BC:E9:3C:B5:04:35:8A Authority key identifier: F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9 Certificate issuer: /CN=f050a20e30ec915ded1df20055af6b5f26672ea9 Certificate serial: 019B3D2364258F49C816F0B6F87B1820B8CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 19:01:28 +0000 Manifest this update: Sat 20 Dec 2025 19:01:28 +0000 Manifest next update: Sun 21 Dec 2025 19:01:28 +0000 Files and hashes: 1: 8FCiDjDskV3tHfIAVa9rXyZnLqk.crl (hash: sROmzNV4YQqlVClCSjaXY9TXRxLTM1LwhrmrXiUAAbM=) 2: DYi7F6e5pGT8BUg7LPKGmN6_EDw.roa (hash: i4XKBDV9uWZ8rdo9xvJHenErvD+Z3AjDvUvgRz1NJaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:64:25:8f:49:c8:16:f0:b6:f8:7b:18:20:b8:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f050a20e30ec915ded1df20055af6b5f26672ea9 Validity Not Before: Dec 20 19:01:28 2025 GMT Not After : Dec 21 19:01:28 2025 GMT Subject: CN=ddc09b7a26c88b843b69f9aec2bce93cb504358a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6c:81:ea:b6:65:9a:8e:51:91:8c:31:be:4a: 7c:74:15:10:66:17:16:e6:94:71:83:e0:7d:ec:ab: 18:3c:e3:ab:84:34:83:42:de:05:ba:61:40:01:28: 37:26:17:7f:1b:9d:73:95:a3:6a:f9:59:80:af:92: fd:11:c6:d2:ed:ea:3b:99:1a:21:2b:2b:23:8a:03: 39:67:b7:b8:aa:f0:b8:9f:41:ab:7e:61:5f:11:f1: a9:8d:ed:03:9d:23:d1:ae:1b:53:66:89:b4:60:98: 26:b9:01:b7:03:da:17:83:2e:4c:ae:9b:a7:8a:d2: 69:18:2e:b8:b5:3c:80:54:4c:c6:6d:0a:4d:86:72: ea:6f:98:77:5a:f5:cc:68:1a:98:a0:86:74:b8:09: 9a:0a:d8:61:4e:88:ea:d7:c2:11:60:f5:c1:1f:b4: 57:43:c5:5a:2a:e8:68:8c:81:e3:e0:cd:a9:81:00: cd:f2:d1:80:c0:03:49:12:d9:17:e7:66:bc:6a:1c: 64:97:39:48:5a:24:72:6b:44:16:71:ea:b1:3d:ec: d4:76:e6:b3:f4:60:e3:4a:a4:64:4e:86:ac:91:9d: 16:9f:76:f6:cb:5d:73:a5:24:f6:2d:e3:fb:7b:c3: 9e:63:04:a8:b7:fb:96:01:1a:e3:5a:48:11:80:bb: 18:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C0:9B:7A:26:C8:8B:84:3B:69:F9:AE:C2:BC:E9:3C:B5:04:35:8A X509v3 Authority Key Identifier: keyid:F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e1:c3:8d:6a:05:d3:72:ed:c4:52:18:15:d4:f3:b4:2f:ba: 3f:8f:a8:be:87:11:23:bb:b7:dc:9b:2c:d3:d5:48:0c:ad:85: 49:43:e7:1a:fe:e9:86:af:a4:a0:75:46:8c:c9:2e:f5:d3:33: 1f:9f:cc:35:56:76:f1:61:e9:65:0e:ef:71:a5:05:95:d6:a4: 38:f4:47:df:42:fe:d5:fc:89:70:eb:5e:57:79:1d:91:df:d3: e1:8e:7a:19:68:80:a8:24:0c:dd:3e:ed:55:13:95:9c:45:1f: 12:20:e7:26:cd:16:ba:93:8a:97:00:27:58:ce:72:ac:2c:5d: 80:14:c7:5b:0b:78:7b:24:81:41:d1:25:b2:8b:b0:87:f4:05: 85:04:12:b0:6b:bd:b3:30:1f:e9:a6:72:cb:e0:1e:47:5a:e6: e9:0d:89:1c:fc:b9:d4:55:1f:e2:00:90:e4:4d:73:6d:96:d3: 7b:3b:3c:de:78:cf:56:da:cf:8c:49:4e:1c:0e:c0:df:81:3c: ad:38:cf:8e:1b:f6:40:88:6b:d4:44:a5:92:84:93:ae:eb:88: 17:fb:4b:62:18:46:e2:50:7e:b8:fb:fe:58:95:06:62:ab:31: 3f:50:50:ce:18:5c:cb:b0:ae:eb:e0:13:1d:91:7b:fe:b6:59: fe:26:66:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I2Qlj0nIFvC2+HsYILjNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTBhMjBlMzBlYzkxNWRlZDFkZjIwMDU1YWY2YjVmMjY2 NzJlYTkwHhcNMjUxMjIwMTkwMTI4WhcNMjUxMjIxMTkwMTI4WjAzMTEwLwYDVQQD EyhkZGMwOWI3YTI2Yzg4Yjg0M2I2OWY5YWVjMmJjZTkzY2I1MDQzNThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymyB6rZlmo5RkYwxvkp8dBUQZhcW 5pRxg+B97KsYPOOrhDSDQt4FumFAASg3Jhd/G51zlaNq+VmAr5L9EcbS7eo7mRoh KysjigM5Z7e4qvC4n0GrfmFfEfGpje0DnSPRrhtTZom0YJgmuQG3A9oXgy5Mrpun itJpGC64tTyAVEzGbQpNhnLqb5h3WvXMaBqYoIZ0uAmaCthhTojq18IRYPXBH7RX Q8VaKuhojIHj4M2pgQDN8tGAwANJEtkX52a8ahxklzlIWiRya0QWceqxPezUduaz 9GDjSqRkToaskZ0Wn3b2y11zpST2LeP7e8OeYwSot/uWARrjWkgRgLsYYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3Am3omyIuEO2n5rsK86Ty1BDWKMB8GA1UdIwQY MBaAFPBQog4w7JFd7R3yAFWva18mZy6pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iNWQ4MDktMmRiMC00ZmJmLThhMGQt OWQzMTY3ODMxOTM0LzEvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9iNWQ4MDktMmRiMC00ZmJmLThhMGQtOWQzMTY3ODMxOTM0 LzEvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOHDjWoF 03LtxFIYFdTztC+6P4+ovocRI7u33Jss09VIDK2FSUPnGv7phq+koHVGjMku9dMz H5/MNVZ28WHpZQ7vcaUFldakOPRH30L+1fyJcOteV3kdkd/T4Y56GWiAqCQM3T7t VROVnEUfEiDnJs0WupOKlwAnWM5yrCxdgBTHWwt4eySBQdElsouwh/QFhQQSsGu9 szAf6aZyy+AeR1rm6Q2JHPy51FUf4gCQ5E1zbZbTezs83njPVtrPjElOHA7A34E8 rTjPjhv2QIhr1ESlkoSTruuIF/tLYhhG4lB+uPv+WJUGYqsxP1BQzhhcy7Cu6+AT HZF7/rZZ/iZmzQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:30:22 2025 by rpki-client