This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft File: 8FCiDjDskV3tHfIAVa9rXyZnLqk.mft (raw, json) Hash identifier: yMvvhvvpiL4blp0welwoBoatJpGjyZGXjRbPoTFElKk= Subject key identifier: 47:92:7C:75:F5:3F:7F:A2:1C:08:D1:22:B4:3A:BF:07:E2:0B:BE:3F Authority key identifier: F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9 Certificate issuer: /CN=f050a20e30ec915ded1df20055af6b5f26672ea9 Certificate serial: 019AF1D1B979BC837EA6428FBE69937BC73E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 04:00:44 +0000 Manifest this update: Sat 06 Dec 2025 04:00:44 +0000 Manifest next update: Sun 07 Dec 2025 04:00:44 +0000 Files and hashes: 1: 8FCiDjDskV3tHfIAVa9rXyZnLqk.crl (hash: W0l+6GpeNLw6JSfCou3DDgT9mE/3M6xgS+j4zdtVro4=) 2: DYi7F6e5pGT8BUg7LPKGmN6_EDw.roa (hash: i4XKBDV9uWZ8rdo9xvJHenErvD+Z3AjDvUvgRz1NJaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:b9:79:bc:83:7e:a6:42:8f:be:69:93:7b:c7:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f050a20e30ec915ded1df20055af6b5f26672ea9 Validity Not Before: Dec 6 04:00:44 2025 GMT Not After : Dec 7 04:00:44 2025 GMT Subject: CN=47927c75f53f7fa21c08d122b43abf07e20bbe3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ec:b2:66:02:ae:0f:96:22:4b:6f:5a:48:cd: 7c:05:b5:48:1a:e5:fe:1a:66:a0:fa:6a:83:b4:b4: 8f:05:3d:41:96:a5:e4:58:d0:e0:57:df:6d:cd:48: 4c:93:0b:a9:80:fc:29:44:6a:01:2d:f6:f1:9d:e2: 96:5a:cd:b8:52:eb:b2:e8:8f:48:ba:50:27:29:30: 6c:a0:1d:2b:49:8b:7b:12:44:59:8f:f6:32:c7:c9: 71:1c:0d:86:17:cc:d2:16:60:12:38:3c:c2:4c:6f: 34:39:51:2f:b7:42:94:82:41:3c:2b:02:5b:09:37: 7c:da:98:c6:80:ac:3b:36:0f:13:15:70:97:63:5c: 0d:5c:96:dc:81:19:1f:eb:a1:94:ff:be:74:85:82: 12:13:7d:15:7f:d2:3c:cc:77:e2:a1:91:f2:e4:49: 7d:cd:f9:0f:95:50:28:86:75:7a:e1:2a:53:71:7c: 15:2a:e2:a7:97:21:90:80:6e:f9:5b:f1:60:cc:35: ca:db:3a:9f:4a:e9:5d:0b:5d:02:f7:01:16:a2:36: 81:eb:b3:80:bf:1c:53:ef:41:a6:29:02:36:1f:64: 1d:d4:a7:d9:50:28:b6:d0:d2:ee:e3:2a:2a:9b:60: 53:58:16:16:4b:89:f2:87:e7:1d:a0:e7:ca:4d:75: 16:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:92:7C:75:F5:3F:7F:A2:1C:08:D1:22:B4:3A:BF:07:E2:0B:BE:3F X509v3 Authority Key Identifier: keyid:F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:e1:6f:3a:e5:97:25:ac:49:95:ac:cf:19:d6:8a:16:3f:a2: f1:e0:1f:45:bf:cf:3f:dc:03:d1:f0:c4:b1:b1:b0:37:b8:d0: 84:a0:d1:8b:f4:d3:a0:98:0d:b8:9c:5f:67:af:6b:af:f9:9a: ff:08:26:a8:fe:f6:09:c8:12:8d:9f:c2:d6:7b:aa:b4:c7:46: d8:83:63:b7:83:59:2e:ce:08:53:5c:a9:cc:cd:5a:c0:45:ab: 24:20:f4:bd:43:1c:ef:29:5a:25:f0:21:c8:83:35:35:7f:58: c7:f0:e1:f8:d4:f0:56:e7:7b:02:5f:bf:15:ab:e1:6b:74:0d: 4f:b2:57:e0:34:aa:d1:30:7b:2e:f3:28:eb:ec:2a:33:62:f0: 3f:4e:81:6f:0d:de:8c:03:9d:03:af:90:aa:85:4d:08:3a:e3: d6:58:cd:4d:8e:fd:07:8e:09:a2:76:3b:a5:4e:dc:1a:32:d8: 21:bb:93:86:c2:06:19:9b:53:8a:5e:6d:ee:f9:87:4d:73:7e: 7e:24:63:d0:63:46:13:97:11:60:6c:3f:0b:20:3e:9e:a6:40: 25:97:30:7f:2b:7c:83:44:b0:c1:d1:c1:f1:79:1c:6b:00:24: 52:62:e7:65:99:0f:4b:e8:c1:db:34:ab:2a:cb:e8:2d:53:64: eb:ed:c8:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bl5vIN+pkKPvmmTe8c+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTBhMjBlMzBlYzkxNWRlZDFkZjIwMDU1YWY2YjVmMjY2 NzJlYTkwHhcNMjUxMjA2MDQwMDQ0WhcNMjUxMjA3MDQwMDQ0WjAzMTEwLwYDVQQD Eyg0NzkyN2M3NWY1M2Y3ZmEyMWMwOGQxMjJiNDNhYmYwN2UyMGJiZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeyyZgKuD5YiS29aSM18BbVIGuX+ Gmag+mqDtLSPBT1BlqXkWNDgV99tzUhMkwupgPwpRGoBLfbxneKWWs24Uuuy6I9I ulAnKTBsoB0rSYt7EkRZj/Yyx8lxHA2GF8zSFmASODzCTG80OVEvt0KUgkE8KwJb CTd82pjGgKw7Ng8TFXCXY1wNXJbcgRkf66GU/750hYISE30Vf9I8zHfioZHy5El9 zfkPlVAohnV64SpTcXwVKuKnlyGQgG75W/FgzDXK2zqfSuldC10C9wEWojaB67OA vxxT70GmKQI2H2Qd1KfZUCi20NLu4yoqm2BTWBYWS4nyh+cdoOfKTXUWlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeSfHX1P3+iHAjRIrQ6vwfiC74/MB8GA1UdIwQY MBaAFPBQog4w7JFd7R3yAFWva18mZy6pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iNWQ4MDktMmRiMC00ZmJmLThhMGQt OWQzMTY3ODMxOTM0LzEvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9iNWQ4MDktMmRiMC00ZmJmLThhMGQtOWQzMTY3ODMxOTM0 LzEvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOFvOuWX JaxJlazPGdaKFj+i8eAfRb/PP9wD0fDEsbGwN7jQhKDRi/TToJgNuJxfZ69rr/ma /wgmqP72CcgSjZ/C1nuqtMdG2INjt4NZLs4IU1ypzM1awEWrJCD0vUMc7ylaJfAh yIM1NX9Yx/Dh+NTwVud7Al+/Favha3QNT7JX4DSq0TB7LvMo6+wqM2LwP06Bbw3e jAOdA6+QqoVNCDrj1ljNTY79B44JonY7pU7cGjLYIbuThsIGGZtTil5t7vmHTXN+ fiRj0GNGE5cRYGw/CyA+nqZAJZcwfyt8g0SwwdHB8XkcawAkUmLnZZkPS+jB2zSr KsvoLVNk6+3IpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:47:39 2025 by rpki-client