This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft File: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft (raw, json) Hash identifier: nR3c6Veeu2i1ZCTXSFcCDxkR/cg0V+O9O+QXO1irxCM= Subject key identifier: 18:4A:E0:AC:7D:71:A6:EA:6B:11:1E:E4:98:48:6B:76:44:7A:16:76 Authority key identifier: AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D Certificate issuer: /CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d Certificate serial: 019AF0882E762E8C7448498E54F7C0B22497 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft Manifest number: 0BBF Signing time: Fri 05 Dec 2025 22:00:47 +0000 Manifest this update: Fri 05 Dec 2025 22:00:47 +0000 Manifest next update: Sat 06 Dec 2025 22:00:47 +0000 Files and hashes: 1: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl (hash: QLqQ64zAVMG5YVhLIpLZs+UnnhRzZ08fooIxe2nj2Es=) 2: y434m32YaOSFWfdjMrvD69-28ws.roa (hash: 2wH2CADXRiwQAKzkBQR9rJEZcF/YGQDp6VtufnWzYz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:2e:76:2e:8c:74:48:49:8e:54:f7:c0:b2:24:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d Validity Not Before: Dec 5 22:00:47 2025 GMT Not After : Dec 6 22:00:47 2025 GMT Subject: CN=184ae0ac7d71a6ea6b111ee498486b76447a1676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:83:9d:09:40:ce:37:1f:bd:00:91:5f:19:1b: 22:4d:03:e0:25:d4:be:a8:3f:b9:9c:fc:0c:4f:3c: 2e:76:fc:70:28:12:8e:e2:57:b0:f0:f3:e1:0a:57: 7a:03:b8:0f:a0:a3:c2:db:24:19:18:b5:f0:ac:87: 5e:2f:d2:a7:10:ca:d8:c9:bc:73:7b:31:b9:d4:48: 02:02:96:29:64:92:06:88:f3:2e:4f:ab:7b:91:b4: 85:05:ed:05:31:92:7d:85:19:52:ff:c1:46:0d:d1: 78:a2:2b:bc:61:b2:3d:6f:af:1a:f5:e1:18:ff:99: 97:02:be:ca:1c:6c:32:1e:8f:f4:db:25:4d:a5:97: 0c:c2:0d:f3:66:61:d6:6a:74:3a:45:79:6d:f2:50: 40:a4:78:55:65:bb:0b:cc:6c:14:99:a7:4f:e3:2f: eb:9d:77:52:0b:84:0c:03:31:e4:8f:78:34:a3:99: 2f:d1:5d:40:f0:d6:33:72:89:f3:7a:05:33:5e:f0: c7:56:9e:0f:e7:c5:0a:eb:52:77:ca:76:1b:16:c5: 90:d9:cc:80:af:62:84:3a:f0:59:1f:12:36:4a:b4: 14:c3:2d:bb:1e:ee:7b:01:8f:d0:7b:0c:4b:69:47: 32:24:56:d9:c4:29:a3:82:7f:f1:bd:a0:c9:33:3a: c4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4A:E0:AC:7D:71:A6:EA:6B:11:1E:E4:98:48:6B:76:44:7A:16:76 X509v3 Authority Key Identifier: keyid:AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:66:75:d9:b5:a9:b7:f0:65:52:ed:1d:c6:48:8b:49:9c:87: 5d:ed:4f:65:da:ae:d5:65:e6:6b:eb:70:f0:61:0a:04:22:ae: 25:93:bd:dd:65:49:d3:7c:13:94:c1:0e:3e:47:7f:f8:de:fd: 3b:c8:f0:26:3a:a2:d4:f7:30:da:f7:11:9c:20:58:d3:94:4c: ba:0b:af:11:b1:9a:46:cc:e2:71:a9:dd:54:3c:ca:64:a8:15: 02:39:4b:6a:bf:d5:31:4b:2a:cd:b0:74:c3:5e:2a:2b:b6:43: aa:67:a7:7c:4d:57:43:76:da:7b:91:10:ba:2b:db:a8:ee:36: eb:59:cf:19:5a:ea:7d:f8:30:31:ec:6b:3c:60:11:b6:98:66: 12:fd:32:20:0e:05:f4:87:ea:a5:57:cb:89:d9:4c:e9:b8:e9: 16:a9:34:3d:87:b0:fd:36:58:ea:7d:34:3a:3e:f4:13:00:15: 76:a4:a9:67:03:69:a2:62:3b:a9:be:e7:b2:32:1d:de:33:0c: 9d:43:c3:3e:5c:b5:72:14:d9:29:5e:bc:b5:29:6b:15:f3:8d: a8:2a:14:58:a0:a5:68:52:77:0e:bb:7a:44:0a:80:55:67:8a: 04:5a:7b:87:eb:d8:0d:40:f2:04:d7:5b:f0:f7:c2:b9:97:30: 97:d4:8b:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiC52Lox0SEmOVPfAsiSXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmY2MxZDMwZWRlZWFiNTRiNTgxMmE5OTBhOTQzZTNlOGZl ODM5MWQwHhcNMjUxMjA1MjIwMDQ3WhcNMjUxMjA2MjIwMDQ3WjAzMTEwLwYDVQQD EygxODRhZTBhYzdkNzFhNmVhNmIxMTFlZTQ5ODQ4NmI3NjQ0N2ExNjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YOdCUDONx+9AJFfGRsiTQPgJdS+ qD+5nPwMTzwudvxwKBKO4lew8PPhCld6A7gPoKPC2yQZGLXwrIdeL9KnEMrYybxz ezG51EgCApYpZJIGiPMuT6t7kbSFBe0FMZJ9hRlS/8FGDdF4oiu8YbI9b68a9eEY /5mXAr7KHGwyHo/02yVNpZcMwg3zZmHWanQ6RXlt8lBApHhVZbsLzGwUmadP4y/r nXdSC4QMAzHkj3g0o5kv0V1A8NYzconzegUzXvDHVp4P58UK61J3ynYbFsWQ2cyA r2KEOvBZHxI2SrQUwy27Hu57AY/QewxLaUcyJFbZxCmjgn/xvaDJMzrEqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhK4Kx9cabqaxEe5JhIa3ZEehZ2MB8GA1UdIwQY MBaAFK/MHTDt7qtUtYEqmQqUPj6P6DkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjh3ZE1PM3VxMVMxZ1NxWkNwUS1Qb19vT1IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wMjE3YzItNzM1NC00MDYxLTllZjct YTIyMGZlNmEyYTI1LzEvcjh3ZE1PM3VxMVMxZ1NxWkNwUS1Qb19vT1IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8wMjE3YzItNzM1NC00MDYxLTllZjctYTIyMGZlNmEyYTI1 LzEvcjh3ZE1PM3VxMVMxZ1NxWkNwUS1Qb19vT1IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimZ12bWp t/BlUu0dxkiLSZyHXe1PZdqu1WXma+tw8GEKBCKuJZO93WVJ03wTlMEOPkd/+N79 O8jwJjqi1Pcw2vcRnCBY05RMuguvEbGaRszicandVDzKZKgVAjlLar/VMUsqzbB0 w14qK7ZDqmenfE1XQ3bae5EQuivbqO4261nPGVrqffgwMexrPGARtphmEv0yIA4F 9IfqpVfLidlM6bjpFqk0PYew/TZY6n00Oj70EwAVdqSpZwNpomI7qb7nsjId3jMM nUPDPly1chTZKV68tSlrFfONqCoUWKClaFJ3Drt6RAqAVWeKBFp7h+vYDUDyBNdb 8PfCuZcwl9SLkA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:14:55 2025 by rpki-client