This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft File: tI8GPSnpEPAzvstlbouZAfaeyXQ.mft (raw, json) Hash identifier: rV6KZHpA8yQ0uPAkHR+9CwGlX7+ukosb3wHd9Yip1XE= Subject key identifier: 0D:80:5E:93:F7:CD:AE:18:CD:9D:99:4F:8C:EE:64:EA:77:E9:36:95 Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74 Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974 Certificate serial: 019B307A2887BBDE123933D9F627C2E5A1D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft Manifest number: 1080 Signing time: Thu 18 Dec 2025 08:01:10 +0000 Manifest this update: Thu 18 Dec 2025 08:01:10 +0000 Manifest next update: Fri 19 Dec 2025 08:01:10 +0000 Files and hashes: 1: 7KQuRRixFRD2InAA41vDA8b46Ss.roa (hash: pqy5x79CuZKPgbD27qu8dFnC6qLbsZEYs512o7B8AtE=) 2: tI8GPSnpEPAzvstlbouZAfaeyXQ.crl (hash: fLKnTmmM2bWJwJuAC7hNgZc7iiPQ3R+YJudq50wMJSU=) 3: vM1WQhwz3cRdhRzRWZYRS2EG35U.roa (hash: 6cZcrnHWZ9ymPZFFF87v+vfASbgITAqQf6OR2I+DcbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 08:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:7a:28:87:bb:de:12:39:33:d9:f6:27:c2:e5:a1:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974 Validity Not Before: Dec 18 08:01:10 2025 GMT Not After : Dec 19 08:01:10 2025 GMT Subject: CN=0d805e93f7cdae18cd9d994f8cee64ea77e93695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f1:18:e8:4e:f6:b9:a3:e4:eb:cf:2b:f1:05: f0:4d:7b:fa:8f:b6:7d:66:97:eb:4e:c9:a9:59:3d: 71:19:06:22:65:29:8f:51:e1:49:27:50:44:95:94: f3:a2:a4:cf:23:17:1c:e8:3e:4e:02:b6:13:1a:24: 2f:5a:41:45:1c:9e:21:25:ca:cb:31:2d:e8:5e:f5: 49:ca:a0:58:dc:40:1d:30:b7:f8:25:1f:53:53:ab: 52:8f:1e:84:a5:53:c3:a1:4e:8a:6a:b5:41:83:05: b4:73:2b:28:76:48:20:54:1a:e3:74:bc:2a:61:75: cd:6e:6b:1c:4f:aa:56:e0:e3:b1:6e:f4:37:83:d4: cf:88:cf:0b:f7:b8:59:10:b0:c4:3e:2a:32:93:c1: 21:16:7e:92:04:58:bd:95:ce:5b:ea:14:fe:77:d0: 1d:0c:46:7b:f4:4a:46:b6:c7:5b:9b:6a:cb:33:f9: 7a:6c:e6:dd:5f:1c:90:d2:29:ae:5c:ba:eb:6b:79: 07:14:e7:ab:95:71:aa:78:b6:fe:bd:15:b9:c3:0a: 16:91:e0:2a:4b:ce:eb:27:62:28:1c:f7:3a:60:2a: f9:4e:6c:74:b7:7b:bb:96:76:9f:21:21:0d:11:22: f2:c9:13:29:e8:07:da:d1:b5:03:9a:2d:95:64:43: 64:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:80:5E:93:F7:CD:AE:18:CD:9D:99:4F:8C:EE:64:EA:77:E9:36:95 X509v3 Authority Key Identifier: keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:6f:0d:83:53:bb:82:29:9f:08:7a:2d:95:20:27:ca:fb:ca: 47:04:31:dc:13:00:85:aa:7b:b1:32:61:16:30:43:01:a2:c2: 41:2f:98:06:f4:52:88:af:a3:fe:aa:d6:b5:19:48:9c:04:b7: c5:63:69:90:85:0c:3d:d4:d7:29:7f:6e:07:4c:0f:9e:99:51: 35:ed:60:ee:42:31:36:6d:4f:35:24:50:b6:97:c8:6f:93:e7: 01:2a:be:c3:2e:7d:a8:c8:89:ad:c3:41:91:cf:79:b6:8e:3b: 71:83:2d:61:9a:38:c4:ca:45:81:a7:c8:fc:f4:b3:5d:41:73: f4:3c:c5:10:0c:b5:06:9b:24:7d:c4:5e:7a:eb:be:ef:b8:17: 4a:47:67:5e:04:f2:13:75:cd:9a:cf:db:a1:58:90:d2:40:1d: 1d:24:de:55:34:4e:cf:03:29:56:5a:04:6f:55:51:10:4a:4c: 37:d1:69:17:43:ec:f0:ec:bb:22:1c:7d:49:44:d6:99:c5:1a: f3:66:4b:b9:a3:bc:5a:b9:40:3b:2c:53:8e:cf:36:06:4b:50: 2d:ad:32:b2:c5:4d:ff:01:77:d0:d2:a7:0b:b2:e6:ce:29:61: 6d:02:2b:14:db:e5:52:be:80:5e:5d:11:d3:67:3f:e4:46:26: ce:fe:86:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsweiiHu94SOTPZ9ifC5aHRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OGYwNjNkMjllOTEwZjAzM2JlY2I2NTZlOGI5OTAxZjY5 ZWM5NzQwHhcNMjUxMjE4MDgwMTEwWhcNMjUxMjE5MDgwMTEwWjAzMTEwLwYDVQQD EygwZDgwNWU5M2Y3Y2RhZTE4Y2Q5ZDk5NGY4Y2VlNjRlYTc3ZTkzNjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfEY6E72uaPk688r8QXwTXv6j7Z9 ZpfrTsmpWT1xGQYiZSmPUeFJJ1BElZTzoqTPIxcc6D5OArYTGiQvWkFFHJ4hJcrL MS3oXvVJyqBY3EAdMLf4JR9TU6tSjx6EpVPDoU6KarVBgwW0cysodkggVBrjdLwq YXXNbmscT6pW4OOxbvQ3g9TPiM8L97hZELDEPioyk8EhFn6SBFi9lc5b6hT+d9Ad DEZ79EpGtsdbm2rLM/l6bObdXxyQ0imuXLrra3kHFOerlXGqeLb+vRW5wwoWkeAq S87rJ2IoHPc6YCr5Tmx0t3u7lnafISENESLyyRMp6Afa0bUDmi2VZENkfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2AXpP3za4YzZ2ZT4zuZOp36TaVMB8GA1UdIwQY MBaAFLSPBj0p6RDwM77LZW6LmQH2nsl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEk4R1BTbnBFUEF6dnN0bGJvdVpBZmFleVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8yNmM3ZmYtOTk4ZS00MTMxLWE3NDct M2M0M2MzZDM1ZWYzLzEvdEk4R1BTbnBFUEF6dnN0bGJvdVpBZmFleVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8yNmM3ZmYtOTk4ZS00MTMxLWE3NDctM2M0M2MzZDM1ZWYz LzEvdEk4R1BTbnBFUEF6dnN0bGJvdVpBZmFleVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbm8Ng1O7 gimfCHotlSAnyvvKRwQx3BMAhap7sTJhFjBDAaLCQS+YBvRSiK+j/qrWtRlInAS3 xWNpkIUMPdTXKX9uB0wPnplRNe1g7kIxNm1PNSRQtpfIb5PnASq+wy59qMiJrcNB kc95to47cYMtYZo4xMpFgafI/PSzXUFz9DzFEAy1BpskfcReeuu+77gXSkdnXgTy E3XNms/boViQ0kAdHSTeVTROzwMpVloEb1VREEpMN9FpF0Ps8Oy7Ihx9SUTWmcUa 82ZLuaO8WrlAOyxTjs82BktQLa0yssVN/wF30NKnC7LmzilhbQIrFNvlUr6AXl0R 02c/5EYmzv6G8w== -----END CERTIFICATE-----Generated at Thu Dec 18 14:17:16 2025 by rpki-client