This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json) Hash identifier: eEIJr4CHA01AnOude0dYF10ypRf0CNEp0UfDXhHJPOc= Subject key identifier: 1C:32:BF:51:41:BC:4C:8B:FB:FD:CC:BE:0F:A1:8B:C9:D6:15:17:E2 Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50 Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150 Certificate serial: 019B3EDA6C9C2AEF5F6574B587819253667B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft Manifest number: 0EF7 Signing time: Sun 21 Dec 2025 03:01:00 +0000 Manifest this update: Sun 21 Dec 2025 03:01:00 +0000 Manifest next update: Mon 22 Dec 2025 03:01:00 +0000 Files and hashes: 1: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: OsSnvf3jEJbF4oNMe5sikK0lH7neBZu3X2eQAwMe87I=) 2: YkEpFHQglRkkx7TW2iOd8M7ku-c.roa (hash: kIeQhyyEYB0FfxtFkPtqVvMk30nvPQUJg2CwKA7jeLY=) 3: uq0Ty9FTaErs0rzB7yOaaIcCy9E.roa (hash: cH522XBAhZQR4is+g9SDDOs+Uj5P/+RJANdH54+jdMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:6c:9c:2a:ef:5f:65:74:b5:87:81:92:53:66:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150 Validity Not Before: Dec 21 03:01:00 2025 GMT Not After : Dec 22 03:01:00 2025 GMT Subject: CN=1c32bf5141bc4c8bfbfdccbe0fa18bc9d61517e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fb:81:9c:4f:f5:64:83:b0:c3:ae:fb:38:12: 9a:5b:20:97:ae:11:79:54:d3:a4:c3:89:f8:6f:f0: 19:3a:68:e4:f5:8a:79:ba:75:1b:d6:9f:c8:5b:93: 0b:b0:ed:f6:43:e0:c0:44:e9:0c:5e:4b:b8:88:00: 38:6e:de:4d:c7:e8:ed:4c:29:34:62:d8:bc:4d:78: 89:79:06:37:dc:c3:f9:32:bc:6e:8c:7b:4d:77:44: 75:06:33:65:71:7c:a6:b3:48:12:07:b1:4b:3b:8d: ad:98:96:8c:01:e2:d4:3a:11:48:cb:14:d5:b8:d5: 4f:28:34:4a:12:a6:07:61:e9:2b:5c:64:67:55:16: c7:37:24:8a:61:a7:25:6d:16:fc:05:e0:25:4f:23: a6:e6:3e:07:70:51:5f:0b:38:50:2a:f1:c7:48:43: 5c:81:74:be:f8:ef:43:32:d7:52:4e:54:5c:58:91: f1:ee:59:cd:00:0d:a4:08:07:3b:59:ed:48:cb:0c: 49:2c:06:58:c8:20:b9:d1:9b:33:1b:e6:be:ea:c1: 6f:f3:66:c9:6d:f3:3f:38:53:ce:e1:ff:04:58:0b: 4d:99:01:a6:bd:38:9c:95:fe:0e:5b:83:1b:f4:df: 35:b2:9e:10:a5:37:c8:8e:50:c3:74:bb:9e:23:b2: b2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:32:BF:51:41:BC:4C:8B:FB:FD:CC:BE:0F:A1:8B:C9:D6:15:17:E2 X509v3 Authority Key Identifier: keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f1:58:1e:5a:d5:0e:79:7d:1c:78:e6:aa:9c:b1:b4:66:51: 3b:d3:bf:31:88:a7:2d:7e:be:d1:9f:55:a0:e7:63:2a:0a:00: 87:f6:5c:57:19:0a:4f:3c:a5:7a:45:b4:47:94:1e:58:6d:6a: 4b:12:99:76:21:64:14:35:e6:fe:ec:b7:58:ed:c7:7a:ab:13: 3c:16:db:f7:63:06:16:1b:3a:88:f6:01:b4:aa:bd:31:ed:ec: 20:44:3e:78:31:19:92:64:85:9d:b8:27:b9:06:5c:07:af:46: 79:f1:dd:10:66:ac:f9:b5:6b:90:fc:79:50:64:5b:81:67:18: d7:9b:cb:15:20:06:04:d7:26:8a:77:60:52:32:1b:c0:ed:7f: a5:b6:3b:ea:19:23:08:49:37:30:79:61:0f:08:59:ce:f3:38: bb:0d:94:f8:dc:a2:40:a3:34:06:d1:d6:fb:4f:13:42:a6:ef: 21:5f:b8:68:a7:36:f4:a9:c1:b8:4d:f1:a9:73:50:09:0b:76: dc:d2:27:ee:bf:f3:b2:1f:23:a3:37:7a:60:0d:55:1b:fc:76: 6d:b2:f6:d0:e9:ec:34:9c:90:6b:db:c7:d3:86:44:e4:ce:b4: c7:8c:8f:95:93:b8:cf:75:a1:18:78:76:35:12:76:fc:b1:26: 59:72:9a:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2mycKu9fZXS1h4GSU2Z7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjkzMDg1YjVmNzVjMGYxMGRlMDhlMjJjYmU0YjA2MjQ1 MWIxNTAwHhcNMjUxMjIxMDMwMTAwWhcNMjUxMjIyMDMwMTAwWjAzMTEwLwYDVQQD EygxYzMyYmY1MTQxYmM0YzhiZmJmZGNjYmUwZmExOGJjOWQ2MTUxN2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfuBnE/1ZIOww677OBKaWyCXrhF5 VNOkw4n4b/AZOmjk9Yp5unUb1p/IW5MLsO32Q+DAROkMXku4iAA4bt5Nx+jtTCk0 Yti8TXiJeQY33MP5MrxujHtNd0R1BjNlcXyms0gSB7FLO42tmJaMAeLUOhFIyxTV uNVPKDRKEqYHYekrXGRnVRbHNySKYaclbRb8BeAlTyOm5j4HcFFfCzhQKvHHSENc gXS++O9DMtdSTlRcWJHx7lnNAA2kCAc7We1IywxJLAZYyCC50ZszG+a+6sFv82bJ bfM/OFPO4f8EWAtNmQGmvTiclf4OW4Mb9N81sp4QpTfIjlDDdLueI7Ky1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwyv1FBvEyL+/3Mvg+hi8nWFRfiMB8GA1UdIwQY MBaAFPJpMIW191wPEN4I4iy+SwYkUbFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNzMzMjctOTc0Mi00MzViLTg2YzAt NTVlODVlYTA5ZGRlLzEvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xNzMzMjctOTc0Mi00MzViLTg2YzAtNTVlODVlYTA5ZGRl LzEvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfFYHlrV Dnl9HHjmqpyxtGZRO9O/MYinLX6+0Z9VoOdjKgoAh/ZcVxkKTzylekW0R5QeWG1q SxKZdiFkFDXm/uy3WO3HeqsTPBbb92MGFhs6iPYBtKq9Me3sIEQ+eDEZkmSFnbgn uQZcB69GefHdEGas+bVrkPx5UGRbgWcY15vLFSAGBNcmindgUjIbwO1/pbY76hkj CEk3MHlhDwhZzvM4uw2U+NyiQKM0BtHW+08TQqbvIV+4aKc29KnBuE3xqXNQCQt2 3NIn7r/zsh8jozd6YA1VG/x2bbL20OnsNJyQa9vH04ZE5M60x4yPlZO4z3WhGHh2 NRJ2/LEmWXKaFw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:19:02 2025 by rpki-client