This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft File: 8M0rO57YMSbUXboSAD1sbjWms4A.mft (raw, json) Hash identifier: kPau74SRLu9L8sufOpbhU65VZrmuM2G6J7T2a1DTYbs= Subject key identifier: 89:99:1D:EE:A4:67:4D:6B:19:98:52:48:71:0F:1B:1D:2D:41:7B:FF Authority key identifier: F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80 Certificate issuer: /CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380 Certificate serial: 019AF27702DB480069BAFC1BD696E14EE929 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft Manifest number: 1488 Signing time: Sat 06 Dec 2025 07:01:16 +0000 Manifest this update: Sat 06 Dec 2025 07:01:16 +0000 Manifest next update: Sun 07 Dec 2025 07:01:16 +0000 Files and hashes: 1: 8M0rO57YMSbUXboSAD1sbjWms4A.crl (hash: /blnQiUqSZDa8mN/nqmbpdOZ3Jc0QDT9oDoYm18CMf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:02:db:48:00:69:ba:fc:1b:d6:96:e1:4e:e9:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380 Validity Not Before: Dec 6 07:01:16 2025 GMT Not After : Dec 7 07:01:16 2025 GMT Subject: CN=89991deea4674d6b19985248710f1b1d2d417bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1a:dc:3a:2e:a1:84:37:18:64:7e:c7:40:3f: aa:f0:38:57:e9:92:fa:37:22:9a:11:ce:44:28:3f: 3e:5a:63:7b:ec:53:be:db:9f:f0:87:72:d0:2e:b7: 57:26:dc:df:74:b1:b6:ad:66:22:06:70:72:80:fa: 3c:41:bf:64:b1:f0:eb:df:3d:90:a5:f6:0a:0a:62: f7:9a:57:44:8d:c7:14:1e:23:d3:36:40:bb:59:0c: e2:14:fe:f1:ac:f7:db:93:76:f9:58:5e:ae:6d:61: 6e:84:2c:04:f3:9a:f4:03:53:3d:ee:f1:19:a6:df: 3f:9a:52:5e:54:b9:6c:a2:ba:ca:0f:3f:b5:b0:45: 69:1d:39:37:4e:59:46:7f:32:31:39:1a:dd:4e:9f: 52:b9:36:64:e9:66:08:b1:bf:d6:ed:09:d9:da:80: ac:b0:e0:af:aa:9e:01:69:5b:f8:1f:87:d7:0b:20: 06:b7:4c:91:1f:f7:fd:52:d7:58:94:25:a7:b3:b6: 70:39:0e:dd:d7:0a:4e:6e:3a:98:a1:e7:c0:60:9e: d3:b5:19:9a:4e:2d:f2:57:ec:fc:c9:00:30:5a:c0: c0:58:41:e9:ff:d3:92:92:52:3f:8a:c0:77:ce:81: 60:1a:60:4f:7c:b8:ea:c7:ea:69:e2:85:a7:0d:a0: b6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:99:1D:EE:A4:67:4D:6B:19:98:52:48:71:0F:1B:1D:2D:41:7B:FF X509v3 Authority Key Identifier: keyid:F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:45:04:f4:b5:8a:16:b5:12:a2:92:e2:fe:38:f1:59:49:75: 94:1a:b2:e7:57:31:48:92:ed:a3:17:45:7f:61:4d:c5:db:aa: e6:6c:06:9d:59:f6:fc:fd:a9:a6:52:91:ff:81:63:35:b6:68: f5:98:7a:17:fe:09:53:46:ce:e9:66:45:85:0e:15:95:9f:d3: f8:42:c2:93:67:0a:e1:ed:30:a1:10:6e:e1:9f:a3:99:c2:69: 52:89:29:df:29:f3:da:22:3b:83:ed:7b:66:db:2c:3c:4f:ed: 31:dc:61:bd:e5:10:27:d3:03:3e:ce:a2:8a:66:31:af:e0:eb: 99:4d:d3:27:43:ef:e1:ab:28:00:76:26:29:bb:10:89:5d:9f: c8:5a:b7:8c:4b:06:e4:72:e2:e8:8d:b6:e5:46:f1:84:56:07: 59:15:39:7f:4c:58:4f:bf:50:ba:01:f5:8d:30:29:cb:6b:c0: fb:b4:9d:91:07:3e:de:68:2f:66:b0:04:84:d2:02:63:c4:a4: d1:82:06:b6:9b:b4:f5:3e:47:e3:07:8e:6a:07:54:48:37:b0: 20:1f:9f:e0:29:c6:8c:8a:39:89:5b:07:d8:57:fb:8f:32:95: b1:e5:67:fd:20:e5:7a:74:9b:5b:0f:1c:0c:9b:2c:51:1d:75: 89:16:36:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwLbSABpuvwb1pbhTukpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwY2QyYjNiOWVkODMxMjZkNDVkYmExMjAwM2Q2YzZlMzVh NmIzODAwHhcNMjUxMjA2MDcwMTE2WhcNMjUxMjA3MDcwMTE2WjAzMTEwLwYDVQQD Eyg4OTk5MWRlZWE0Njc0ZDZiMTk5ODUyNDg3MTBmMWIxZDJkNDE3YmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRrcOi6hhDcYZH7HQD+q8DhX6ZL6 NyKaEc5EKD8+WmN77FO+25/wh3LQLrdXJtzfdLG2rWYiBnBygPo8Qb9ksfDr3z2Q pfYKCmL3mldEjccUHiPTNkC7WQziFP7xrPfbk3b5WF6ubWFuhCwE85r0A1M97vEZ pt8/mlJeVLlsorrKDz+1sEVpHTk3TllGfzIxORrdTp9SuTZk6WYIsb/W7QnZ2oCs sOCvqp4BaVv4H4fXCyAGt0yRH/f9UtdYlCWns7ZwOQ7d1wpObjqYoefAYJ7TtRma Ti3yV+z8yQAwWsDAWEHp/9OSklI/isB3zoFgGmBPfLjqx+pp4oWnDaC2DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImZHe6kZ01rGZhSSHEPGx0tQXv/MB8GA1UdIwQY MBaAFPDNKzue2DEm1F26EgA9bG41prOAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNDc5ODItMzdkZS00ZTcwLWJlYmQt N2M5ZTEwNTE3YzI1LzEvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8wNDc5ODItMzdkZS00ZTcwLWJlYmQtN2M5ZTEwNTE3YzI1 LzEvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArUUE9LWK FrUSopLi/jjxWUl1lBqy51cxSJLtoxdFf2FNxduq5mwGnVn2/P2pplKR/4FjNbZo 9Zh6F/4JU0bO6WZFhQ4VlZ/T+ELCk2cK4e0woRBu4Z+jmcJpUokp3ynz2iI7g+17 ZtssPE/tMdxhveUQJ9MDPs6iimYxr+DrmU3TJ0Pv4asoAHYmKbsQiV2fyFq3jEsG 5HLi6I225UbxhFYHWRU5f0xYT79QugH1jTApy2vA+7SdkQc+3mgvZrAEhNICY8Sk 0YIGtpu09T5H4weOagdUSDewIB+f4CnGjIo5iVsH2Ff7jzKVseVn/SDlenSbWw8c DJssUR11iRY2Mg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:30 2025 by rpki-client