This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft File: j8Yziy6SHZEmxTYwPweMnruah1I.mft (raw, json) Hash identifier: ZqSswVCPuCqoBrAvz0z6Fi0Jn9IW2ZMYlbOHQl67AOw= Subject key identifier: 71:1F:33:08:20:68:FF:2B:8A:66:C6:76:70:2F:AC:9D:2D:66:C8:83 Authority key identifier: 8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52 Certificate issuer: /CN=8fc6338b2e921d9126c536303f078c9ebb9a8752 Certificate serial: 019AF2772D43158D0A238809C97E66B85F55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:01:27 +0000 Manifest this update: Sat 06 Dec 2025 07:01:27 +0000 Manifest next update: Sun 07 Dec 2025 07:01:27 +0000 Files and hashes: 1: E9E2NhUKJP_3TXPCgDM1hcFl3-A.roa (hash: aBze8FprGa3p4/CGvI/TFD3mAyVwA/i5ic5RvbopQHs=) 2: j8Yziy6SHZEmxTYwPweMnruah1I.crl (hash: ocimn5G438h+VClaP8sc+9y9e1IGARN6pb/0WVK2H4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:2d:43:15:8d:0a:23:88:09:c9:7e:66:b8:5f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc6338b2e921d9126c536303f078c9ebb9a8752 Validity Not Before: Dec 6 07:01:27 2025 GMT Not After : Dec 7 07:01:27 2025 GMT Subject: CN=711f33082068ff2b8a66c676702fac9d2d66c883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8e:a9:64:52:3d:d4:fb:d1:49:2d:e1:2a:51: 63:cc:af:d8:a7:25:73:e5:a7:f7:65:d3:f5:ce:af: 89:75:ea:0b:94:97:b8:93:74:7f:04:bf:4a:0a:0f: 4b:65:59:ac:60:91:ab:6f:a5:bc:22:90:a7:e6:7d: 6a:d8:40:19:57:50:68:0d:5b:12:26:cc:c8:05:56: 1f:e5:7b:aa:b1:68:27:82:5c:62:eb:32:af:78:5b: c1:1f:2f:7f:c0:8d:be:ac:04:5a:b9:53:96:e1:23: fa:68:45:8c:8f:b0:08:58:91:b5:88:fc:56:ca:5d: f8:48:ad:7d:c1:a9:91:20:dc:ba:4d:a1:7f:ed:ea: 29:c3:a0:eb:da:82:32:55:80:4f:cd:ef:52:3b:d7: 7b:ff:63:7c:66:2a:4b:48:1c:2f:c6:2a:00:45:57: 0b:41:cf:4e:79:4d:cd:03:60:5a:b3:5f:4a:b7:a2: 4f:10:3e:55:e9:62:34:f7:97:70:3d:c7:f3:64:c5: 4e:c1:4a:fd:cf:05:25:de:cd:43:15:bb:c7:3c:56: 44:07:2d:92:32:3c:da:60:24:cc:96:90:43:15:18: af:14:15:28:32:ed:92:ff:56:eb:b4:34:d8:62:dd: 8a:fb:9b:78:4a:76:27:02:c4:bc:29:3a:e6:3e:dd: 45:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1F:33:08:20:68:FF:2B:8A:66:C6:76:70:2F:AC:9D:2D:66:C8:83 X509v3 Authority Key Identifier: keyid:8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e8:9d:84:6b:31:3f:b8:5a:15:96:7c:fe:03:f3:ab:16:1d: 11:64:70:87:b3:f7:7f:48:ed:e6:a1:eb:9f:00:cd:24:c4:42: 4d:23:e5:a3:89:41:3d:21:74:81:33:86:3e:9e:94:97:72:71: 44:55:b2:79:f9:e9:52:c2:d0:8c:1a:d2:cb:5a:39:13:46:02: 42:a6:72:a9:4b:ae:0f:87:45:6f:bc:a3:55:7b:8d:dc:5d:36: e0:e4:b4:0b:7c:6f:6b:3f:08:2b:36:21:b2:ed:b7:c0:bf:6f: 6c:57:b6:a8:06:e5:53:7a:1a:5b:05:a5:65:e2:f6:b2:c2:99: 3e:e8:8d:e4:74:69:fd:c1:23:5d:2a:06:aa:8b:a4:63:c1:01: d4:72:2a:1c:22:16:0e:5e:c0:fc:52:fe:8f:69:b5:47:a2:df: 3b:28:af:83:94:b8:b0:5b:d1:55:4a:1b:3c:c7:9b:9a:95:b9: 29:3b:29:6d:93:cf:09:5e:93:98:70:cd:fc:8f:8b:ab:96:3f: 97:95:86:4f:e2:1f:48:22:8a:78:b7:ec:9a:76:2c:85:ea:a8: 9e:90:8a:0f:b5:76:45:ca:80:6c:49:7c:d8:09:68:18:da:02: d4:d9:21:a8:4d:e5:ae:d1:b0:30:07:79:36:e7:ac:23:d3:82: 56:b0:8b:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydy1DFY0KI4gJyX5muF9VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzYzMzhiMmU5MjFkOTEyNmM1MzYzMDNmMDc4YzllYmI5 YTg3NTIwHhcNMjUxMjA2MDcwMTI3WhcNMjUxMjA3MDcwMTI3WjAzMTEwLwYDVQQD Eyg3MTFmMzMwODIwNjhmZjJiOGE2NmM2NzY3MDJmYWM5ZDJkNjZjODgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o6pZFI91PvRSS3hKlFjzK/YpyVz 5af3ZdP1zq+JdeoLlJe4k3R/BL9KCg9LZVmsYJGrb6W8IpCn5n1q2EAZV1BoDVsS JszIBVYf5XuqsWgnglxi6zKveFvBHy9/wI2+rARauVOW4SP6aEWMj7AIWJG1iPxW yl34SK19wamRINy6TaF/7eopw6Dr2oIyVYBPze9SO9d7/2N8ZipLSBwvxioARVcL Qc9OeU3NA2Bas19Kt6JPED5V6WI095dwPcfzZMVOwUr9zwUl3s1DFbvHPFZEBy2S MjzaYCTMlpBDFRivFBUoMu2S/1brtDTYYt2K+5t4SnYnAsS8KTrmPt1F2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEfMwggaP8rimbGdnAvrJ0tZsiDMB8GA1UdIwQY MBaAFI/GM4sukh2RJsU2MD8HjJ67modSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhZeml5NlNIWkVteFRZd1B3ZU1ucnVhaDFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jZmNiOTMtZDhmNC00NjlhLTkwZjkt OGYzNGRmMzA0OTI3LzEvajhZeml5NlNIWkVteFRZd1B3ZU1ucnVhaDFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jZmNiOTMtZDhmNC00NjlhLTkwZjktOGYzNGRmMzA0OTI3 LzEvajhZeml5NlNIWkVteFRZd1B3ZU1ucnVhaDFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuidhGsx P7haFZZ8/gPzqxYdEWRwh7P3f0jt5qHrnwDNJMRCTSPlo4lBPSF0gTOGPp6Ul3Jx RFWyefnpUsLQjBrSy1o5E0YCQqZyqUuuD4dFb7yjVXuN3F024OS0C3xvaz8IKzYh su23wL9vbFe2qAblU3oaWwWlZeL2ssKZPuiN5HRp/cEjXSoGqoukY8EB1HIqHCIW Dl7A/FL+j2m1R6LfOyivg5S4sFvRVUobPMebmpW5KTspbZPPCV6TmHDN/I+Lq5Y/ l5WGT+IfSCKKeLfsmnYsheqonpCKD7V2RcqAbEl82AloGNoC1NkhqE3lrtGwMAd5 NuesI9OCVrCL/A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:09:47 2025 by rpki-client