This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft File: 8V__itxu51EnLAqR0F3K_36NLWk.mft (raw, json) Hash identifier: NFaWHp4RtmYx2pnV2qZxmJ3s8LG5NXfDWyP3yW+bI74= Subject key identifier: 67:08:26:3D:71:A1:07:2C:8C:A8:A6:E4:FE:A2:F4:69:61:9E:DD:81 Authority key identifier: F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69 Certificate issuer: /CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69 Certificate serial: 019AF31D39B7FCFEF81726323A04FDB98340 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 10:02:50 +0000 Manifest this update: Sat 06 Dec 2025 10:02:50 +0000 Manifest next update: Sun 07 Dec 2025 10:02:50 +0000 Files and hashes: 1: 8V__itxu51EnLAqR0F3K_36NLWk.crl (hash: bMnu1xT6Hsa02mt8pM7KgPEkS4WxxPq2Cp98nWKHHwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:39:b7:fc:fe:f8:17:26:32:3a:04:fd:b9:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69 Validity Not Before: Dec 6 10:02:50 2025 GMT Not After : Dec 7 10:02:50 2025 GMT Subject: CN=6708263d71a1072c8ca8a6e4fea2f469619edd81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a1:73:c5:9a:28:bc:27:3f:e5:86:4a:82:1e: 3d:fd:0d:d5:2e:6e:c7:0d:ec:04:a3:a4:fd:36:ae: 3e:ec:9d:86:70:9f:c0:4a:cb:74:3a:7e:ff:77:f5: d6:8c:c4:0f:82:b1:ce:75:4e:85:17:2a:32:e3:4c: d7:1e:42:a3:ca:dc:04:c3:83:4c:02:82:56:41:97: 11:aa:b1:38:4e:27:52:05:d9:80:8a:dd:d9:3d:0a: dc:58:d1:8f:a9:08:e9:13:07:63:a4:ef:06:97:19: d0:5b:a8:9b:05:39:48:d3:13:6e:31:7d:78:c3:16: 90:fd:b4:d1:70:91:ef:70:b5:40:f4:58:2a:c7:6c: 56:c7:15:1c:09:f0:62:4c:00:92:f9:28:36:f5:80: e8:57:39:c0:ee:af:9e:1e:6b:f8:ca:24:ea:51:a1: 57:05:aa:1a:e3:02:c8:43:f7:b2:8c:90:21:c4:2d: f2:9e:0d:f3:6c:02:f4:d5:83:c9:88:8e:7b:cc:9f: 07:af:ec:c3:21:df:33:b1:a2:c2:a6:a0:0f:a9:b2: 5a:cc:f1:2a:cc:f2:d6:fe:9d:50:d7:b6:df:68:f2: de:85:ab:43:42:b5:ae:fe:b0:6c:58:61:bc:55:6e: 4f:68:5d:93:5c:aa:f7:ca:a4:9b:4a:e4:63:3c:52: f0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:08:26:3D:71:A1:07:2C:8C:A8:A6:E4:FE:A2:F4:69:61:9E:DD:81 X509v3 Authority Key Identifier: keyid:F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c1:8a:23:6f:7d:0a:af:87:12:91:7d:ad:f3:56:97:f8:3f: 4a:0e:51:19:b1:c2:21:f9:94:3a:b0:f0:16:97:ff:0f:db:78: c2:36:c2:cd:fc:43:ff:08:9b:38:c9:c4:2d:e2:21:e4:41:63: f2:35:5a:cb:87:78:ab:7e:4a:04:88:d3:56:1b:75:e6:1e:1f: a5:ed:8a:86:b6:0b:1e:33:97:84:4e:f9:8f:02:ca:3e:27:ef: b1:7a:12:d3:57:3f:45:32:db:d9:e8:aa:9e:a8:0b:a4:47:4c: 09:58:08:74:9d:16:01:84:b6:e7:39:10:84:b8:fe:bd:3b:33: a2:63:8e:72:a2:69:5f:e6:99:da:c4:54:dc:1c:0e:db:21:7b: 06:4c:2e:d5:c4:92:d8:43:61:6a:db:10:e0:f6:64:24:7a:76: dd:e6:26:95:4d:d5:51:94:b4:95:10:91:83:29:09:9f:27:9e: 23:b9:e1:3c:27:aa:dd:2d:3c:a6:a7:38:1f:81:21:da:06:ac: 86:3f:a6:83:26:c1:f9:1a:14:29:0a:12:29:97:63:db:e0:f1: 38:49:1a:31:50:a6:aa:47:c5:62:d1:86:e6:aa:50:bc:e8:41: 41:41:ad:01:0e:6b:ee:75:2b:0b:03:35:8a:c7:9d:34:26:44: 48:43:4a:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHTm3/P74FyYyOgT9uYNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNWZmZjhhZGM2ZWU3NTEyNzJjMGE5MWQwNWRjYWZmN2U4 ZDJkNjkwHhcNMjUxMjA2MTAwMjUwWhcNMjUxMjA3MTAwMjUwWjAzMTEwLwYDVQQD Eyg2NzA4MjYzZDcxYTEwNzJjOGNhOGE2ZTRmZWEyZjQ2OTYxOWVkZDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6FzxZoovCc/5YZKgh49/Q3VLm7H DewEo6T9Nq4+7J2GcJ/ASst0On7/d/XWjMQPgrHOdU6FFyoy40zXHkKjytwEw4NM AoJWQZcRqrE4TidSBdmAit3ZPQrcWNGPqQjpEwdjpO8GlxnQW6ibBTlI0xNuMX14 wxaQ/bTRcJHvcLVA9Fgqx2xWxxUcCfBiTACS+Sg29YDoVznA7q+eHmv4yiTqUaFX Baoa4wLIQ/eyjJAhxC3yng3zbAL01YPJiI57zJ8Hr+zDId8zsaLCpqAPqbJazPEq zPLW/p1Q17bfaPLehatDQrWu/rBsWGG8VW5PaF2TXKr3yqSbSuRjPFLw5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcIJj1xoQcsjKim5P6i9Glhnt2BMB8GA1UdIwQY MBaAFPFf/4rcbudRJywKkdBdyv9+jS1pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFZfX2l0eHU1MUVuTEFxUjBGM0tfMzZOTFdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wYWM5ZDAtZmU1YS00MDAyLTkyZWQt YzNmNGI5ODU3MTRjLzEvOFZfX2l0eHU1MUVuTEFxUjBGM0tfMzZOTFdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wYWM5ZDAtZmU1YS00MDAyLTkyZWQtYzNmNGI5ODU3MTRj LzEvOFZfX2l0eHU1MUVuTEFxUjBGM0tfMzZOTFdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8GKI299 Cq+HEpF9rfNWl/g/Sg5RGbHCIfmUOrDwFpf/D9t4wjbCzfxD/wibOMnELeIh5EFj 8jVay4d4q35KBIjTVht15h4fpe2KhrYLHjOXhE75jwLKPifvsXoS01c/RTLb2eiq nqgLpEdMCVgIdJ0WAYS25zkQhLj+vTszomOOcqJpX+aZ2sRU3BwO2yF7Bkwu1cSS 2ENhatsQ4PZkJHp23eYmlU3VUZS0lRCRgykJnyeeI7nhPCeq3S08pqc4H4Eh2gas hj+mgybB+RoUKQoSKZdj2+DxOEkaMVCmqkfFYtGG5qpQvOhBQUGtAQ5r7nUrCwM1 isedNCZESENKwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:21:23 2025 by rpki-client