This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft File: 8XUAF9wNk26aoWaTGTffeJKv6fE.mft (raw, json) Hash identifier: OhYQIzQMQzWbe9n3AeLk1WZPHVbUXsAowMqavZsjIjc= Subject key identifier: C4:E7:A6:B2:5A:06:64:70:64:22:C7:9B:24:73:67:C7:16:71:87:C9 Authority key identifier: F1:75:00:17:DC:0D:93:6E:9A:A1:66:93:19:37:DF:78:92:AF:E9:F1 Certificate issuer: /CN=f1750017dc0d936e9aa166931937df7892afe9f1 Certificate serial: 019AF5E5E7EBEB00319E23BBAC79894DDCC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft Manifest number: 0130 Signing time: Sat 06 Dec 2025 23:01:16 +0000 Manifest this update: Sat 06 Dec 2025 23:01:16 +0000 Manifest next update: Sun 07 Dec 2025 23:01:16 +0000 Files and hashes: 1: 8XUAF9wNk26aoWaTGTffeJKv6fE.crl (hash: jD/KspS4nwkI7RzxgBXwaQFTdYbyei7dpekRF8RSNNo=) 2: kfUoGqSXXKSaS-PEIgtGaao6Ro0.roa (hash: LjonqlIQc85Yf1YLDViU9RKSdWSeDZPSWNCbM4dAk5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.crl rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:e7:eb:eb:00:31:9e:23:bb:ac:79:89:4d:dc:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1750017dc0d936e9aa166931937df7892afe9f1 Validity Not Before: Dec 6 23:01:16 2025 GMT Not After : Dec 7 23:01:16 2025 GMT Subject: CN=c4e7a6b25a0664706422c79b247367c7167187c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:72:65:80:a2:ff:ef:f3:38:f4:2d:29:f9:f3: 31:7f:0a:ef:71:1f:12:92:60:fa:b2:38:c0:78:03: 14:f3:cf:38:b1:de:cb:fb:87:5a:40:88:b4:14:ec: 3d:65:af:2d:74:12:8f:55:fc:5f:e2:bc:c6:39:39: 6e:85:7b:ec:de:b0:59:a9:1d:7b:93:67:27:9b:4e: 86:ee:c7:09:19:31:41:61:47:47:3c:74:81:0a:3c: 0a:56:a0:9d:05:5c:bd:12:7c:1e:b6:05:0b:13:12: 81:f9:52:8e:4f:6c:66:60:a1:b8:86:c2:ed:1a:a1: 13:c2:9e:b7:78:52:1a:6e:e6:f0:07:a1:21:08:7e: 42:43:d5:95:e4:cd:52:f4:08:d1:59:ed:c6:3d:c4: 2d:81:1b:13:90:3f:b7:63:c5:81:3e:89:a6:fa:e4: 68:d6:98:77:54:00:03:71:cb:c9:6d:d4:40:35:8e: e2:15:5d:74:93:a3:09:4e:fc:2a:fd:4f:f6:c5:e4: 15:b5:0a:2b:57:b6:a2:55:7a:6c:e5:73:c0:0b:5f: e8:96:01:4a:11:cf:83:d0:36:b4:8e:1f:42:e3:c9: 99:ed:ef:9e:d7:65:e7:bc:c7:04:10:b4:48:65:17: 71:cd:9b:bf:ed:21:cb:e9:9a:40:b8:9e:af:62:79: 12:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E7:A6:B2:5A:06:64:70:64:22:C7:9B:24:73:67:C7:16:71:87:C9 X509v3 Authority Key Identifier: keyid:F1:75:00:17:DC:0D:93:6E:9A:A1:66:93:19:37:DF:78:92:AF:E9:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:2e:7f:3f:ac:08:45:a9:90:69:9f:28:39:e2:55:f6:cf:9c: 9f:a1:87:7d:3c:1d:f2:1c:b1:8f:47:51:ad:27:68:77:55:83: c4:5a:9e:f0:68:2a:8d:19:8b:aa:4f:67:73:f6:9b:1d:e5:87: 6e:73:ad:c0:6b:f6:ab:45:39:f8:f9:5d:9f:20:b7:7b:30:58: d4:dd:89:1e:1e:8b:e7:af:6a:a9:bb:fe:a6:b5:88:eb:e5:bb: e0:78:42:ca:fc:0a:95:71:d7:93:88:90:c3:ab:b4:5c:4d:02: 44:1a:cb:76:f2:77:97:9b:ca:88:07:f8:9d:f4:7a:0d:a7:b2: dc:2e:25:78:a6:46:29:bb:43:e5:c5:3c:fe:af:c8:52:6a:bf: fa:68:d3:9f:e1:35:a0:88:80:14:39:1d:e1:56:6c:08:3d:d0: 37:90:8d:fa:94:ed:53:ce:f6:c4:24:28:c4:d0:04:ea:83:07: 48:61:cd:ac:4f:6c:17:72:e1:86:72:01:87:e7:09:8c:15:7e: 91:b6:46:3d:92:4e:22:66:cb:40:5f:a6:5f:df:b3:b1:75:91: 60:55:d4:92:50:c8:06:73:21:7a:60:23:e0:5a:8d:90:b5:91: 75:03:3b:33:50:75:66:73:00:16:59:98:1a:18:62:11:5a:2d: 76:41:e5:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15efr6wAxniO7rHmJTdzHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNzUwMDE3ZGMwZDkzNmU5YWExNjY5MzE5MzdkZjc4OTJh ZmU5ZjEwHhcNMjUxMjA2MjMwMTE2WhcNMjUxMjA3MjMwMTE2WjAzMTEwLwYDVQQD EyhjNGU3YTZiMjVhMDY2NDcwNjQyMmM3OWIyNDczNjdjNzE2NzE4N2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3JlgKL/7/M49C0p+fMxfwrvcR8S kmD6sjjAeAMU8884sd7L+4daQIi0FOw9Za8tdBKPVfxf4rzGOTluhXvs3rBZqR17 k2cnm06G7scJGTFBYUdHPHSBCjwKVqCdBVy9EnwetgULExKB+VKOT2xmYKG4hsLt GqETwp63eFIabubwB6EhCH5CQ9WV5M1S9AjRWe3GPcQtgRsTkD+3Y8WBPomm+uRo 1ph3VAADccvJbdRANY7iFV10k6MJTvwq/U/2xeQVtQorV7aiVXps5XPAC1/olgFK Ec+D0Da0jh9C48mZ7e+e12XnvMcEELRIZRdxzZu/7SHL6ZpAuJ6vYnkSIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTnprJaBmRwZCLHmyRzZ8cWcYfJMB8GA1UdIwQY MBaAFPF1ABfcDZNumqFmkxk333iSr+nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFhVQUY5d05rMjZhb1dhVEdUZmZlSkt2NmZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9mNjE0ZWYtNTZhZS00ZGRmLWEzZmMt OTI5OTVmY2Y1N2M2LzEvOFhVQUY5d05rMjZhb1dhVEdUZmZlSkt2NmZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9mNjE0ZWYtNTZhZS00ZGRmLWEzZmMtOTI5OTVmY2Y1N2M2 LzEvOFhVQUY5d05rMjZhb1dhVEdUZmZlSkt2NmZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfC5/P6wI RamQaZ8oOeJV9s+cn6GHfTwd8hyxj0dRrSdod1WDxFqe8GgqjRmLqk9nc/abHeWH bnOtwGv2q0U5+PldnyC3ezBY1N2JHh6L569qqbv+prWI6+W74HhCyvwKlXHXk4iQ w6u0XE0CRBrLdvJ3l5vKiAf4nfR6Daey3C4leKZGKbtD5cU8/q/IUmq/+mjTn+E1 oIiAFDkd4VZsCD3QN5CN+pTtU872xCQoxNAE6oMHSGHNrE9sF3LhhnIBh+cJjBV+ kbZGPZJOImbLQF+mX9+zsXWRYFXUklDIBnMhemAj4FqNkLWRdQM7M1B1ZnMAFlmY GhhiEVotdkHlwA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:53:54 2025 by rpki-client