This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft File: 8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json) Hash identifier: 1JCz5kAWAM+SlsXth6ClHfqOea8PclAWU3ODUyMbhzE= Subject key identifier: 77:A0:CA:ED:5E:45:6A:AE:F2:D3:D0:3D:4F:A1:66:D7:B5:A9:89:C9 Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68 Certificate issuer: /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68 Certificate serial: 019AF1D1C450AA19DBC3FD122F7AE92A26C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft Manifest number: 13D5 Signing time: Sat 06 Dec 2025 04:00:47 +0000 Manifest this update: Sat 06 Dec 2025 04:00:47 +0000 Manifest next update: Sun 07 Dec 2025 04:00:47 +0000 Files and hashes: 1: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: vwB7u7Jh2blDwoPfjPcTIR1KsLBEiayRlnlHf90H5kQ=) 2: xInS4OBZE4XZhCIYPtcEJ4L0sW0.roa (hash: KkBHzYhuSu08Rz0qev1AtQ0vsja7TfnwTOncPO/urxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c4:50:aa:19:db:c3:fd:12:2f:7a:e9:2a:26:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68 Validity Not Before: Dec 6 04:00:47 2025 GMT Not After : Dec 7 04:00:47 2025 GMT Subject: CN=77a0caed5e456aaef2d3d03d4fa166d7b5a989c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:45:2c:bf:be:63:e3:fe:1b:f1:fd:d0:ea:7f: 41:8a:14:66:ed:8e:9d:a7:d3:0a:b1:98:d1:b5:ee: 1f:2e:21:1d:d5:36:2b:a0:9f:95:7a:62:ac:9b:4c: 67:47:b9:bc:22:cb:45:da:3b:83:4c:ae:a0:cc:5c: 96:c7:36:da:cb:74:37:ef:cf:a2:95:dd:37:06:7d: bb:8d:6a:b1:d7:71:48:19:77:74:de:24:49:97:8b: 9c:3d:2e:1f:a0:f6:1c:fc:80:71:0f:5b:41:01:18: 96:40:86:13:28:e0:f9:90:96:cc:a8:79:dd:95:ca: 8f:2a:f3:3d:4e:0a:7d:94:77:4f:06:75:c4:91:1f: 1a:9e:61:c9:9e:6d:81:83:da:a3:21:1f:ed:4a:0a: 96:70:6c:aa:de:2e:cf:9a:7a:b1:b0:be:07:a8:71: 95:7e:09:0b:27:1a:74:54:f4:eb:5a:e5:8d:15:7c: 97:75:2b:ae:4f:25:1e:4c:06:2d:50:84:b8:f7:59: 73:89:e7:2d:df:37:ac:ca:b9:91:bf:55:1e:d4:81: c6:35:9b:1d:97:bc:d0:71:6b:87:14:42:5f:e6:cb: a6:04:77:2c:10:9e:fa:df:8c:11:5b:5e:28:35:f9: 26:8d:bd:ff:eb:68:3a:70:71:ae:9b:15:a7:5b:e5: 19:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A0:CA:ED:5E:45:6A:AE:F2:D3:D0:3D:4F:A1:66:D7:B5:A9:89:C9 X509v3 Authority Key Identifier: keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:16:eb:da:d6:e5:78:be:39:5a:60:3c:23:93:13:ba:34:b6: f1:97:3a:b7:84:4a:df:1b:0d:41:5f:df:91:09:33:7d:df:09: 9e:01:96:f6:40:ab:13:d5:4b:05:65:c6:8b:10:c6:04:27:55: 51:3a:32:fa:5c:76:d5:ed:7f:de:ea:8b:00:a9:9a:2a:55:f3: 25:b6:2b:f6:9c:cf:dd:5a:ec:f9:aa:b3:4e:bf:90:c5:73:3b: c2:63:62:86:7d:ac:f1:f9:21:74:3b:fc:a8:3e:fc:df:7d:3c: 92:9e:30:b8:f7:b6:70:42:f8:3c:fc:21:1e:82:d0:18:8f:fe: d7:a8:bb:fd:4a:7f:7b:38:53:4f:c0:91:2b:a8:61:72:2c:94: 93:49:87:dd:d8:e7:a5:55:6e:3c:eb:1a:5a:04:f0:9f:df:56: bf:59:09:56:81:a4:57:a5:12:63:e0:74:c1:d1:fc:d0:e0:29: 9f:ae:93:b8:59:0f:0d:ba:ee:60:a5:46:e2:69:8e:83:88:7b: 1a:b0:32:d5:37:27:61:2e:f1:79:a9:e9:18:80:bc:76:70:c5: 27:19:47:86:be:db:50:78:04:c6:7d:1c:e0:61:64:a9:82:28: 85:3f:0a:ac:64:6a:dd:53:03:1b:1e:e6:9c:dc:2e:03:4c:42: 71:fd:f9:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cRQqhnbw/0SL3rpKibDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMTBjNTBkMmNjODdiZGJmYTViYjUxMWExOGEyMjc3YmEw MGJhNjgwHhcNMjUxMjA2MDQwMDQ3WhcNMjUxMjA3MDQwMDQ3WjAzMTEwLwYDVQQD Eyg3N2EwY2FlZDVlNDU2YWFlZjJkM2QwM2Q0ZmExNjZkN2I1YTk4OWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkUsv75j4/4b8f3Q6n9BihRm7Y6d p9MKsZjRte4fLiEd1TYroJ+VemKsm0xnR7m8IstF2juDTK6gzFyWxzbay3Q378+i ld03Bn27jWqx13FIGXd03iRJl4ucPS4foPYc/IBxD1tBARiWQIYTKOD5kJbMqHnd lcqPKvM9Tgp9lHdPBnXEkR8anmHJnm2Bg9qjIR/tSgqWcGyq3i7PmnqxsL4HqHGV fgkLJxp0VPTrWuWNFXyXdSuuTyUeTAYtUIS491lziect3zesyrmRv1Ue1IHGNZsd l7zQcWuHFEJf5sumBHcsEJ7634wRW14oNfkmjb3/62g6cHGumxWnW+UZoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHegyu1eRWqu8tPQPU+hZte1qYnJMB8GA1UdIwQY MBaAFPMQxQ0syHvb+lu1EaGKIne6ALpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZWE0YTQtMjc3NC00NTQ1LTgwNWYt MWU5ZjBiZGViNTMyLzEvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8wZWE0YTQtMjc3NC00NTQ1LTgwNWYtMWU5ZjBiZGViNTMy LzEvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBbr2tbl eL45WmA8I5MTujS28Zc6t4RK3xsNQV/fkQkzfd8JngGW9kCrE9VLBWXGixDGBCdV UToy+lx21e1/3uqLAKmaKlXzJbYr9pzP3Vrs+aqzTr+QxXM7wmNihn2s8fkhdDv8 qD783308kp4wuPe2cEL4PPwhHoLQGI/+16i7/Up/ezhTT8CRK6hhciyUk0mH3djn pVVuPOsaWgTwn99Wv1kJVoGkV6USY+B0wdH80OApn66TuFkPDbruYKVG4mmOg4h7 GrAy1TcnYS7xeanpGIC8dnDFJxlHhr7bUHgExn0c4GFkqYIohT8KrGRq3VMDGx7m nNwuA0xCcf35og== -----END CERTIFICATE-----Generated at Sat Dec 6 10:05:58 2025 by rpki-client