This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft File: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft (raw, json) Hash identifier: Vgwrach8J5UFDpnyoIatNIUCYEtTZ+DegJuBBj2t79A= Subject key identifier: 79:67:1B:D8:49:24:C5:CE:65:41:64:13:B0:80:BF:6A:45:DB:9C:07 Authority key identifier: D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9 Certificate issuer: /CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9 Certificate serial: 019AF12CE072B85B91460633B9A5A99406FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft Manifest number: 141C Signing time: Sat 06 Dec 2025 01:00:41 +0000 Manifest this update: Sat 06 Dec 2025 01:00:41 +0000 Manifest next update: Sun 07 Dec 2025 01:00:41 +0000 Files and hashes: 1: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl (hash: hIffWI8UQpP55HtM55AiCXYXpp9SMr9qRTsU/aMYxOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e0:72:b8:5b:91:46:06:33:b9:a5:a9:94:06:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9 Validity Not Before: Dec 6 01:00:41 2025 GMT Not After : Dec 7 01:00:41 2025 GMT Subject: CN=79671bd84924c5ce65416413b080bf6a45db9c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:09:21:5a:8d:c4:29:26:a5:c4:b5:a5:09:29: 29:91:99:8d:f5:85:73:75:94:a8:92:e2:90:b9:00: 6e:b0:93:03:71:f2:29:14:f7:17:8a:8b:93:3b:45: e9:f7:8c:f9:61:2b:96:19:60:12:3a:8f:d5:2e:55: cf:1e:2c:9e:94:33:a5:fc:c8:28:50:fe:d8:ad:02: 24:15:90:e2:c3:3c:06:40:ad:31:08:36:72:ee:11: b2:06:29:f7:45:49:ec:9a:6c:2a:f7:83:78:60:5d: 22:01:82:df:d3:28:53:8d:e9:6b:d6:42:7a:ba:3d: 58:f9:8c:bc:65:f0:01:7e:d3:7e:69:41:6b:d3:bc: 09:c1:7e:84:c9:d1:9a:9f:29:3a:de:07:f0:80:ca: a2:03:24:ff:14:63:be:00:de:81:f4:e7:81:e4:71: a1:84:28:aa:b8:e0:79:3a:33:c6:13:54:2a:99:b6: f0:01:36:01:37:42:09:e9:5c:84:90:d0:34:97:89: a1:80:58:97:3e:54:4e:03:6f:55:0e:05:bc:22:d7: 76:54:87:f1:56:45:26:e1:cf:42:12:4c:be:99:b2: c2:6a:33:1e:80:e2:60:bf:8c:fe:e7:11:77:99:fc: 9d:c2:92:ff:6f:77:5d:e8:56:ae:e1:25:05:4d:dc: 54:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:67:1B:D8:49:24:C5:CE:65:41:64:13:B0:80:BF:6A:45:DB:9C:07 X509v3 Authority Key Identifier: keyid:D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:0c:3e:e1:c0:6c:99:b2:81:b2:6a:6a:96:7e:bc:ed:b3:5a: 48:f9:89:39:e3:a9:87:8a:80:66:d3:ba:9f:9d:73:aa:d0:29: 46:df:77:06:82:a9:8e:b5:77:e7:a6:a5:19:4a:67:28:7e:05: 46:f9:eb:44:25:4f:cb:01:11:2e:c1:10:a4:60:37:14:95:fe: 23:ef:76:54:e1:aa:6c:87:9f:cc:2b:17:e4:17:dc:5c:da:88: 68:02:95:78:c9:9b:40:57:f3:76:76:c5:4d:16:40:52:18:4a: cd:bb:24:48:ee:ee:ac:5d:0d:68:f3:94:3b:4d:65:8b:2d:5f: bc:c4:35:48:32:38:44:d4:4a:46:ad:e2:8a:9c:c7:73:cb:fc: ce:19:5c:7e:65:ed:03:a1:f3:fd:38:49:d2:43:b4:17:aa:47: a2:0f:ff:48:cc:04:fb:41:f4:5a:ba:58:f2:7c:a3:1f:34:98: a1:12:16:a8:ff:38:3a:0b:38:05:93:18:5e:30:91:0c:a7:b2: 7d:83:f9:60:f0:0f:ca:5c:63:29:4b:87:f6:09:67:7a:8d:0f: 95:f4:a7:0a:b6:07:25:bb:7e:72:12:41:e1:db:e6:cf:17:64: 05:f5:6a:ee:ea:cd:a9:ee:b6:4f:e1:0f:b1:8b:5e:cf:fb:95: eb:70:13:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOByuFuRRgYzuaWplAb7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMmYyOWZjMDdlZDRiNTIxOGNkMTI3ZGEyYWM1N2ZhMDYz NDUyZDkwHhcNMjUxMjA2MDEwMDQxWhcNMjUxMjA3MDEwMDQxWjAzMTEwLwYDVQQD Eyg3OTY3MWJkODQ5MjRjNWNlNjU0MTY0MTNiMDgwYmY2YTQ1ZGI5YzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgkhWo3EKSalxLWlCSkpkZmN9YVz dZSokuKQuQBusJMDcfIpFPcXiouTO0Xp94z5YSuWGWASOo/VLlXPHiyelDOl/Mgo UP7YrQIkFZDiwzwGQK0xCDZy7hGyBin3RUnsmmwq94N4YF0iAYLf0yhTjelr1kJ6 uj1Y+Yy8ZfABftN+aUFr07wJwX6EydGanyk63gfwgMqiAyT/FGO+AN6B9OeB5HGh hCiquOB5OjPGE1QqmbbwATYBN0IJ6VyEkNA0l4mhgFiXPlROA29VDgW8Itd2VIfx VkUm4c9CEky+mbLCajMegOJgv4z+5xF3mfydwpL/b3dd6Fau4SUFTdxUGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlnG9hJJMXOZUFkE7CAv2pF25wHMB8GA1UdIwQY MBaAFNEvKfwH7UtSGM0SfaKsV/oGNFLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jOTQ1YjktNGJlZi00NzEzLWE4OGEt ZTBkODIxZTQ1ZmZjLzEvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9jOTQ1YjktNGJlZi00NzEzLWE4OGEtZTBkODIxZTQ1ZmZj LzEvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQw+4cBs mbKBsmpqln687bNaSPmJOeOph4qAZtO6n51zqtApRt93BoKpjrV356alGUpnKH4F RvnrRCVPywERLsEQpGA3FJX+I+92VOGqbIefzCsX5BfcXNqIaAKVeMmbQFfzdnbF TRZAUhhKzbskSO7urF0NaPOUO01liy1fvMQ1SDI4RNRKRq3iipzHc8v8zhlcfmXt A6Hz/ThJ0kO0F6pHog//SMwE+0H0WrpY8nyjHzSYoRIWqP84Ogs4BZMYXjCRDKey fYP5YPAPylxjKUuH9glneo0PlfSnCrYHJbt+chJB4dvmzxdkBfVq7urNqe62T+EP sYtez/uV63ATRA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:11 2025 by rpki-client