This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft File: i8qzttz8va_XYxEPhmqCgV3qRGM.mft (raw, json) Hash identifier: 0qHZqLcKgF9i6OgSTmTBSc2WQi19B/pNMz2EpVtuVOg= Subject key identifier: EA:EF:0C:22:53:9A:32:4F:C0:03:96:CF:C9:55:E2:83:94:3B:54:B3 Authority key identifier: 8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63 Certificate issuer: /CN=8bcab3b6dcfcbdafd763110f866a82815dea4463 Certificate serial: 019AF12DD1550797727580D158B8039CADAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft Manifest number: 03D4 Signing time: Sat 06 Dec 2025 01:01:43 +0000 Manifest this update: Sat 06 Dec 2025 01:01:43 +0000 Manifest next update: Sun 07 Dec 2025 01:01:43 +0000 Files and hashes: 1: XDaCGcZealj-spshbO6gPk6HDcA.roa (hash: nsrfqrdgPjlaid22aLgk/rpbmAlJVh+pY8pGwnfkSSY=) 2: i8qzttz8va_XYxEPhmqCgV3qRGM.crl (hash: Ar+524KEp6cZL6c80fT3lEDPz5cua0RxPgIKblnmwwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d1:55:07:97:72:75:80:d1:58:b8:03:9c:ad:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bcab3b6dcfcbdafd763110f866a82815dea4463 Validity Not Before: Dec 6 01:01:43 2025 GMT Not After : Dec 7 01:01:43 2025 GMT Subject: CN=eaef0c22539a324fc00396cfc955e283943b54b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:07:aa:09:ba:9d:87:42:fc:74:fc:08:da:ec: 25:36:21:76:55:55:8f:6c:22:2d:9b:01:2a:09:00: f5:32:db:2b:6f:af:ca:3d:c3:c3:92:e1:21:d9:a6: ff:ac:35:8a:0d:00:05:83:26:c9:77:e9:df:f0:a9: 90:32:54:8b:9d:43:19:f1:04:f2:a5:f7:9e:85:e7: 20:54:20:9a:e5:da:ff:89:ab:b2:c4:66:49:12:83: 91:e2:8a:ad:b7:77:24:9f:f0:2e:ca:75:58:dd:f8: 9a:a3:56:8d:05:fe:c2:42:38:23:ea:5c:59:44:95: fa:b3:f9:40:0e:77:a5:0a:f7:9f:48:f0:43:c8:a2: 9f:82:4e:9d:b7:73:56:95:e6:2e:80:48:f5:24:43: 31:b0:0e:6b:3b:57:d7:71:cd:87:4d:44:1b:bd:95: 13:bf:fd:68:66:dc:08:6e:d4:8a:07:8c:f7:18:eb: 91:f3:e4:43:70:7b:2b:e8:83:f2:ac:a6:e9:54:29: 76:6b:b4:c0:9b:94:3e:fe:d1:1c:1d:9d:94:5d:eb: 6c:c1:9b:5e:30:77:29:be:20:f9:7a:33:f2:f5:25: 25:f8:a1:1b:17:ab:28:e8:3a:df:0b:77:d0:cb:10: 64:8d:ec:ef:53:49:39:00:73:c4:0f:3f:7f:57:8a: b2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EF:0C:22:53:9A:32:4F:C0:03:96:CF:C9:55:E2:83:94:3B:54:B3 X509v3 Authority Key Identifier: keyid:8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ce:0e:06:53:bf:5c:f4:3c:44:1e:66:3a:09:bc:23:63:e2: 25:3f:2b:d8:25:be:4b:e9:09:cd:9f:ce:20:ee:19:8f:52:6b: e9:8b:67:5b:95:9d:fc:08:27:97:e6:68:9f:7e:53:42:aa:85: 4f:b9:ea:b4:b5:16:71:00:67:51:b7:cb:d5:9e:4b:75:e6:cc: c6:57:79:ff:2c:18:4d:39:a7:60:51:19:9a:71:9a:b2:6d:fa: db:73:1a:2a:2f:16:bf:9d:ad:fd:cc:34:25:cd:94:da:43:48: 6c:5d:96:c7:c8:03:43:23:a1:38:09:1d:13:f0:59:ba:ab:f6: 4f:37:fd:bf:7b:14:5d:0b:30:5a:88:a3:53:c1:48:b9:c5:2e: 69:62:b7:4c:9e:06:8d:8c:63:7c:77:7d:8b:8e:c1:04:66:b9: 80:4f:c9:88:d9:a6:78:ff:e4:2b:9b:d1:c3:e7:d9:fd:23:15: 60:32:ee:14:d0:a7:70:69:4e:f6:c1:8d:b0:69:b9:49:e2:a1: 6a:c5:c4:7e:ff:42:7a:ee:f3:52:dc:52:e0:28:28:2e:cb:47: 70:e6:5f:20:03:a5:dc:81:a5:1d:c1:ae:b6:5f:4f:4c:db:19: 5c:fb:33:a3:0c:89:c9:c9:a9:ff:25:1e:b0:49:1a:0e:6f:61: dc:11:32:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdFVB5dydYDRWLgDnK2rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiY2FiM2I2ZGNmY2JkYWZkNzYzMTEwZjg2NmE4MjgxNWRl YTQ0NjMwHhcNMjUxMjA2MDEwMTQzWhcNMjUxMjA3MDEwMTQzWjAzMTEwLwYDVQQD EyhlYWVmMGMyMjUzOWEzMjRmYzAwMzk2Y2ZjOTU1ZTI4Mzk0M2I1NGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5weqCbqdh0L8dPwI2uwlNiF2VVWP bCItmwEqCQD1Mtsrb6/KPcPDkuEh2ab/rDWKDQAFgybJd+nf8KmQMlSLnUMZ8QTy pfeehecgVCCa5dr/iauyxGZJEoOR4oqtt3ckn/AuynVY3fiao1aNBf7CQjgj6lxZ RJX6s/lADnelCvefSPBDyKKfgk6dt3NWleYugEj1JEMxsA5rO1fXcc2HTUQbvZUT v/1oZtwIbtSKB4z3GOuR8+RDcHsr6IPyrKbpVCl2a7TAm5Q+/tEcHZ2UXetswZte MHcpviD5ejPy9SUl+KEbF6so6DrfC3fQyxBkjezvU0k5AHPEDz9/V4qy5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOrvDCJTmjJPwAOWz8lV4oOUO1SzMB8GA1UdIwQY MBaAFIvKs7bc/L2v12MRD4ZqgoFd6kRjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaThxenR0ejh2YV9YWXhFUGhtcUNnVjNxUkdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mODc5YTItMjg4MS00M2IxLWE4MTAt ZjJjODkyYzJkYzdkLzEvaThxenR0ejh2YV9YWXhFUGhtcUNnVjNxUkdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9mODc5YTItMjg4MS00M2IxLWE4MTAtZjJjODkyYzJkYzdk LzEvaThxenR0ejh2YV9YWXhFUGhtcUNnVjNxUkdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhs4OBlO/ XPQ8RB5mOgm8I2PiJT8r2CW+S+kJzZ/OIO4Zj1Jr6YtnW5Wd/Agnl+Zon35TQqqF T7nqtLUWcQBnUbfL1Z5LdebMxld5/ywYTTmnYFEZmnGasm3623MaKi8Wv52t/cw0 Jc2U2kNIbF2Wx8gDQyOhOAkdE/BZuqv2Tzf9v3sUXQswWoijU8FIucUuaWK3TJ4G jYxjfHd9i47BBGa5gE/JiNmmeP/kK5vRw+fZ/SMVYDLuFNCncGlO9sGNsGm5SeKh asXEfv9Ceu7zUtxS4CgoLstHcOZfIAOl3IGlHcGutl9PTNsZXPszowyJycmp/yUe sEkaDm9h3BEyvA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:10 2025 by rpki-client