This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft File: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft (raw, json) Hash identifier: 9bkNih82W8Ql7EGUYr/xhNDXBxk8f8FddOnILhGAvNk= Subject key identifier: A7:43:6A:4F:74:21:26:E9:08:72:6A:F4:63:A0:C1:8B:3C:AC:69:02 Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A Certificate issuer: /CN=73c2f49445980199475512f5297608f45d08bb5a Certificate serial: 019AF27687EA34CC04DFA5242D28A88B4C42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:00:45 +0000 Manifest this update: Sat 06 Dec 2025 07:00:45 +0000 Manifest next update: Sun 07 Dec 2025 07:00:45 +0000 Files and hashes: 1: T8CaRngGi_3wzcIt9PzPZ1wckgY.roa (hash: 37vNH+xFSIYvkh93FypQjuj5VJFxVq0H4oy/OpBqTs8=) 2: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl (hash: uZ1ObpTursMazJPq9F1WOM+c/HpG5tOpqXSqlUxDgfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:87:ea:34:cc:04:df:a5:24:2d:28:a8:8b:4c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a Validity Not Before: Dec 6 07:00:45 2025 GMT Not After : Dec 7 07:00:45 2025 GMT Subject: CN=a7436a4f742126e908726af463a0c18b3cac6902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:93:fd:e0:55:72:c1:d3:03:84:85:94:0f:ff: 65:64:4a:d0:cc:fd:74:ce:64:18:27:92:f9:05:9a: b4:25:b3:10:47:f2:48:38:81:0a:8e:e7:d9:b9:92: 01:db:28:8d:94:c0:76:da:3e:65:35:22:2a:73:49: 70:14:5e:c8:01:9f:bc:e4:32:de:93:91:10:a6:2d: 10:b5:8b:f1:04:88:db:15:59:e0:c3:25:43:51:e1: f2:9b:57:2f:be:87:60:de:61:a1:e7:ae:81:b6:82: 56:c3:1b:35:9c:4f:7b:97:c1:5c:5d:5d:39:42:b0: 2f:81:a7:3f:bd:6d:86:60:b5:b5:93:50:a5:74:a0: 0a:a3:98:6a:05:df:4c:8d:9c:95:cb:61:2d:a2:e2: c5:2a:4e:92:e7:21:43:5c:79:a3:e7:4a:79:db:2f: 55:00:70:bb:5e:aa:78:cb:ab:85:d8:be:c6:f8:c9: ba:d5:e2:08:f3:ea:a0:87:f9:bf:da:6e:51:b1:54: 7b:2d:be:53:79:81:85:7d:47:10:96:6b:5b:b2:ad: 00:c5:5e:18:ef:ca:f0:4e:e2:f7:be:08:b1:5e:0e: eb:1a:ab:3b:bd:c0:b3:23:e1:07:6d:f4:82:e4:49: 39:3a:8d:62:f2:7d:95:cc:39:a0:2e:3e:3c:54:09: f6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:43:6A:4F:74:21:26:E9:08:72:6A:F4:63:A0:C1:8B:3C:AC:69:02 X509v3 Authority Key Identifier: keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:32:76:56:86:c7:59:d7:13:82:8c:11:67:87:e3:8d:11:a5: 9f:6d:ad:af:50:0d:b8:d4:93:12:c3:37:76:07:ad:9f:b0:66: cb:9d:84:22:a8:ad:d2:16:d0:38:20:fa:46:33:c5:d7:8b:5c: fd:a6:ad:76:0d:25:59:b5:70:f2:cb:e5:a5:a7:bf:0a:94:5a: a4:5e:ae:27:8f:c3:8e:ed:9e:13:ea:f3:cb:4e:f3:48:05:75: ce:d7:d3:61:6b:f4:1c:83:a3:c6:70:d2:4d:c6:a7:a7:12:74: 9c:39:28:be:3f:10:9a:43:8a:35:2e:0f:23:20:7b:65:d1:f4: 0e:67:e5:6a:96:a6:42:ed:d6:7b:3c:2b:3a:77:9a:10:0b:1f: f5:f5:d5:1f:25:61:6e:ed:01:d0:0b:c6:bc:c9:fe:d3:78:2d: a2:d6:17:44:0c:13:c7:23:c2:ad:6e:75:3f:e7:bc:0e:d7:9c: a9:8a:0a:13:3b:4b:ca:2d:ea:96:7c:5e:a6:bf:a7:76:8a:23: b6:50:d0:88:6a:8e:f9:cf:c1:6e:10:52:ee:3e:6d:fd:6a:e1: be:23:a4:04:7d:47:06:e3:61:10:60:5b:fd:27:66:2f:7c:8b: 9d:df:d7:eb:23:88:60:82:e9:85:f6:44:d0:d4:4f:f3:a0:fa: e9:cd:58:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydofqNMwE36UkLSioi0xCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzJmNDk0NDU5ODAxOTk0NzU1MTJmNTI5NzYwOGY0NWQw OGJiNWEwHhcNMjUxMjA2MDcwMDQ1WhcNMjUxMjA3MDcwMDQ1WjAzMTEwLwYDVQQD EyhhNzQzNmE0Zjc0MjEyNmU5MDg3MjZhZjQ2M2EwYzE4YjNjYWM2OTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZP94FVywdMDhIWUD/9lZErQzP10 zmQYJ5L5BZq0JbMQR/JIOIEKjufZuZIB2yiNlMB22j5lNSIqc0lwFF7IAZ+85DLe k5EQpi0QtYvxBIjbFVngwyVDUeHym1cvvodg3mGh566BtoJWwxs1nE97l8FcXV05 QrAvgac/vW2GYLW1k1CldKAKo5hqBd9MjZyVy2EtouLFKk6S5yFDXHmj50p52y9V AHC7Xqp4y6uF2L7G+Mm61eII8+qgh/m/2m5RsVR7Lb5TeYGFfUcQlmtbsq0AxV4Y 78rwTuL3vgixXg7rGqs7vcCzI+EHbfSC5Ek5Oo1i8n2VzDmgLj48VAn2wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdDak90ISbpCHJq9GOgwYs8rGkCMB8GA1UdIwQY MBaAFHPC9JRFmAGZR1US9Sl2CPRdCLtaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhMMGxFV1lBWmxIVlJMMUtYWUk5RjBJdTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84YTI1MTgtMzlhMC00YTk4LTk1NjIt Nzg3YjliNTg0YzJkLzEvYzhMMGxFV1lBWmxIVlJMMUtYWUk5RjBJdTFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy84YTI1MTgtMzlhMC00YTk4LTk1NjItNzg3YjliNTg0YzJk LzEvYzhMMGxFV1lBWmxIVlJMMUtYWUk5RjBJdTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjJ2VobH WdcTgowRZ4fjjRGln22tr1ANuNSTEsM3dgetn7Bmy52EIqit0hbQOCD6RjPF14tc /aatdg0lWbVw8svlpae/CpRapF6uJ4/Dju2eE+rzy07zSAV1ztfTYWv0HIOjxnDS TcanpxJ0nDkovj8QmkOKNS4PIyB7ZdH0DmflapamQu3WezwrOneaEAsf9fXVHyVh bu0B0AvGvMn+03gtotYXRAwTxyPCrW51P+e8DtecqYoKEztLyi3qlnxepr+ndooj tlDQiGqO+c/BbhBS7j5t/WrhviOkBH1HBuNhEGBb/SdmL3yLnd/X6yOIYILphfZE 0NRP86D66c1Yag== -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:33 2025 by rpki-client