This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft File: r8GT7hHlRxYWn5TI-THq4fyFSSE.mft (raw, json) Hash identifier: uN5M0QDiA7e/0YJywmXvRe2dCNljMERa4PeqTj1kPr4= Subject key identifier: CB:BC:C5:44:08:02:C9:BA:4C:D2:65:43:FB:A0:5C:5D:F9:10:DC:91 Authority key identifier: AF:C1:93:EE:11:E5:47:16:16:9F:94:C8:F9:31:EA:E1:FC:85:49:21 Certificate issuer: /CN=afc193ee11e54716169f94c8f931eae1fc854921 Certificate serial: 019AF31C97469F1AB5B7FFF1765B4BC6B737 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft Manifest number: 0CB5 Signing time: Sat 06 Dec 2025 10:02:08 +0000 Manifest this update: Sat 06 Dec 2025 10:02:08 +0000 Manifest next update: Sun 07 Dec 2025 10:02:08 +0000 Files and hashes: 1: AaiQ-SNQmt6l5xOeIk4PwVHWfh4.roa (hash: 6CQTrWnDAV45WpOAHO1NfVL9iDI/ELlZY8vizp+bA9s=) 2: r8GT7hHlRxYWn5TI-THq4fyFSSE.crl (hash: 6RcDBYWBZNhuAn+n338DW78t88pDFZM5XcLGykMtGAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:97:46:9f:1a:b5:b7:ff:f1:76:5b:4b:c6:b7:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc193ee11e54716169f94c8f931eae1fc854921 Validity Not Before: Dec 6 10:02:08 2025 GMT Not After : Dec 7 10:02:08 2025 GMT Subject: CN=cbbcc5440802c9ba4cd26543fba05c5df910dc91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:59:0b:ad:29:1b:6d:3b:4a:4a:1f:64:2c:7b: f2:37:74:84:5e:54:5b:cc:19:90:43:21:b2:87:2e: bf:c6:27:00:78:64:49:d0:14:4a:58:6d:d0:38:98: 09:62:e2:e2:17:40:c3:f1:9b:00:14:17:9e:0e:5b: 3d:70:ca:88:50:6a:24:39:7e:5e:63:14:ea:84:4d: de:20:8e:f1:29:51:b7:6f:aa:58:7f:0c:11:3b:8c: c7:7a:bf:0f:29:29:97:7d:39:a6:0b:59:7b:57:70: 63:e5:f9:06:92:53:79:05:1d:33:a2:79:a2:7a:f0: 68:76:36:c2:b5:e4:80:a4:2b:f5:05:e1:a8:47:d4: 83:f8:59:5d:b9:b1:26:6b:5f:b2:e5:2c:ff:2f:1b: ee:03:4d:9f:d6:ce:7c:68:c3:b3:44:ba:f0:02:8f: a2:a3:3d:e9:22:5a:ac:ea:ec:64:72:6a:f5:57:1a: 9f:d7:f0:3e:e2:fa:cb:21:46:b7:b6:54:7a:7d:37: 7a:f6:2a:f7:1e:53:87:1c:9e:ac:b8:39:5c:7d:70: ee:87:0c:27:8f:63:52:69:f4:4e:6f:e1:17:38:b3: 94:ee:3f:60:9e:ff:91:18:14:14:53:96:d3:74:5c: af:03:da:64:49:39:e5:36:55:ac:b4:4b:b7:4a:df: 1d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BC:C5:44:08:02:C9:BA:4C:D2:65:43:FB:A0:5C:5D:F9:10:DC:91 X509v3 Authority Key Identifier: keyid:AF:C1:93:EE:11:E5:47:16:16:9F:94:C8:F9:31:EA:E1:FC:85:49:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:83:21:91:2a:91:37:30:bd:58:2c:a3:19:2b:33:80:e5:bd: fa:7e:49:87:0f:6c:6f:42:99:f0:54:4a:e0:17:e4:d7:af:50: 0e:27:92:b0:59:49:e4:50:e1:e9:4d:fb:de:92:36:7c:be:0f: 67:39:e9:b0:c3:b3:78:d2:1e:82:1d:ae:5e:90:85:10:2a:5f: c0:47:04:c1:1f:aa:e0:53:1c:93:48:cd:32:ed:cf:5b:50:85: 4f:85:ad:bb:6f:e2:2a:b6:b4:32:3c:e5:e0:71:6b:e8:d9:88: 9e:11:b2:ef:02:c8:82:9a:dd:b3:5f:8c:9b:77:77:fb:bb:fd: c6:57:af:70:b8:8c:7a:92:12:0d:a0:cf:fe:94:db:b5:b6:34: 06:85:f3:42:d8:8f:1f:e7:42:ff:d6:b8:73:38:e5:22:ef:ad: 78:d8:f8:81:43:f2:e7:8e:56:36:0e:da:56:6e:0d:e3:39:67: e7:b2:ee:b5:b2:c9:05:a0:d2:1b:f8:f5:af:db:5a:93:15:0f: 71:1d:3c:68:dc:38:87:3c:b0:29:33:08:65:14:03:0f:dd:f9: 45:50:00:be:f4:9d:fc:38:13:5f:c6:8a:72:c2:36:fe:a2:b8: 60:4a:e7:1e:97:7f:c2:f6:63:03:74:47:54:96:29:bf:78:e3: 41:7c:4d:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJdGnxq1t//xdltLxrc3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYzE5M2VlMTFlNTQ3MTYxNjlmOTRjOGY5MzFlYWUxZmM4 NTQ5MjEwHhcNMjUxMjA2MTAwMjA4WhcNMjUxMjA3MTAwMjA4WjAzMTEwLwYDVQQD EyhjYmJjYzU0NDA4MDJjOWJhNGNkMjY1NDNmYmEwNWM1ZGY5MTBkYzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlkLrSkbbTtKSh9kLHvyN3SEXlRb zBmQQyGyhy6/xicAeGRJ0BRKWG3QOJgJYuLiF0DD8ZsAFBeeDls9cMqIUGokOX5e YxTqhE3eII7xKVG3b6pYfwwRO4zHer8PKSmXfTmmC1l7V3Bj5fkGklN5BR0zonmi evBodjbCteSApCv1BeGoR9SD+FldubEma1+y5Sz/LxvuA02f1s58aMOzRLrwAo+i oz3pIlqs6uxkcmr1Vxqf1/A+4vrLIUa3tlR6fTd69ir3HlOHHJ6suDlcfXDuhwwn j2NSafROb+EXOLOU7j9gnv+RGBQUU5bTdFyvA9pkSTnlNlWstEu3St8dlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMu8xUQIAsm6TNJlQ/ugXF35ENyRMB8GA1UdIwQY MBaAFK/Bk+4R5UcWFp+UyPkx6uH8hUkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjhHVDdoSGxSeFlXbjVUSS1USHE0ZnlGU1NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wYjljYmYtMjVhZS00MzI3LTk4YWEt YTdkZDlhZWExZDdhLzEvcjhHVDdoSGxSeFlXbjVUSS1USHE0ZnlGU1NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8wYjljYmYtMjVhZS00MzI3LTk4YWEtYTdkZDlhZWExZDdh LzEvcjhHVDdoSGxSeFlXbjVUSS1USHE0ZnlGU1NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATIMhkSqR NzC9WCyjGSszgOW9+n5Jhw9sb0KZ8FRK4Bfk169QDieSsFlJ5FDh6U373pI2fL4P ZznpsMOzeNIegh2uXpCFECpfwEcEwR+q4FMck0jNMu3PW1CFT4Wtu2/iKra0Mjzl 4HFr6NmInhGy7wLIgprds1+Mm3d3+7v9xlevcLiMepISDaDP/pTbtbY0BoXzQtiP H+dC/9a4czjlIu+teNj4gUPy545WNg7aVm4N4zln57LutbLJBaDSG/j1r9takxUP cR08aNw4hzywKTMIZRQDD935RVAAvvSd/DgTX8aKcsI2/qK4YErnHpd/wvZjA3RH VJYpv3jjQXxNNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:07 2025 by rpki-client