This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft File: 8nBAx0Kee54hpf_IjZMrRwfMOgA.mft (raw, json) Hash identifier: J28BhL1VRVhnkSFqmj6eSax1vyC93NppcO9H9/0mbCQ= Subject key identifier: 51:C2:37:D9:D9:F4:52:B3:1D:F5:07:D4:EA:9B:E8:CC:A3:86:9C:96 Authority key identifier: F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00 Certificate issuer: /CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00 Certificate serial: 019AF23FDCC5B85AE70AE06F5DA3702832AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 06:01:02 +0000 Manifest this update: Sat 06 Dec 2025 06:01:02 +0000 Manifest next update: Sun 07 Dec 2025 06:01:02 +0000 Files and hashes: 1: 8nBAx0Kee54hpf_IjZMrRwfMOgA.crl (hash: mm3CX6KzGur3DjgP0g+22exwCTK62FFzpz5clMLt6Yg=) 2: r8IgxFWc9XzlcmWsiD3Z-WIyGyw.roa (hash: FGlOHNeym9mZlkgU9PVn/K4BszdTXj5x4PebqSOF0dQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:dc:c5:b8:5a:e7:0a:e0:6f:5d:a3:70:28:32:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00 Validity Not Before: Dec 6 06:01:02 2025 GMT Not After : Dec 7 06:01:02 2025 GMT Subject: CN=51c237d9d9f452b31df507d4ea9be8cca3869c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d4:fa:78:d5:c0:08:8f:d9:da:67:41:e3:15: 25:10:5b:c8:a1:c0:06:f0:7b:3f:c3:74:25:98:67: 21:7c:c3:e4:bc:06:ab:45:41:53:72:1a:22:22:67: 95:ac:3e:af:d6:55:17:9f:21:b2:76:84:5f:5d:da: 21:9d:19:72:d4:dc:49:26:41:7d:b3:a1:ef:b3:b1: 07:94:79:42:d3:fd:fb:5f:68:04:40:ee:c4:ab:ff: e9:39:85:1b:67:67:bc:86:d4:61:75:b8:a1:dc:3b: 29:50:18:e1:f8:e8:ed:a0:c5:0e:60:88:e8:72:8d: 8c:5a:dc:9d:cb:2b:b0:0f:0c:fc:6e:8c:6c:aa:c5: 8a:92:6a:95:d0:ae:f7:41:48:17:4e:47:c6:cc:11: b8:41:fe:fd:0e:39:b0:30:7a:2b:fa:fb:09:49:fc: 7c:24:55:d0:30:5e:92:35:1e:bc:8e:e0:26:79:a2: a0:63:5f:41:e7:c2:57:6f:9f:a9:d5:4e:a8:03:63: 50:09:0c:01:d6:c8:86:46:ae:78:49:76:17:29:71: f5:5a:e7:82:aa:a2:c7:36:63:fb:dd:73:dd:b9:f6: 55:2f:d7:3e:c1:fe:56:8a:f6:20:1a:fe:69:92:d8: b0:f0:19:90:36:5c:62:cf:b3:e1:a6:c8:51:a9:ce: cc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C2:37:D9:D9:F4:52:B3:1D:F5:07:D4:EA:9B:E8:CC:A3:86:9C:96 X509v3 Authority Key Identifier: keyid:F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:19:5c:9f:d6:2d:1a:b9:9f:80:a6:a0:da:98:47:e1:e5:60: 30:e7:1a:92:5a:6b:32:3f:00:f7:35:f0:cd:53:61:39:8b:3f: 6d:5b:d1:3d:12:fa:03:93:19:99:c5:7e:12:3d:17:60:d7:e9: 7f:73:9b:9e:a9:74:6d:04:cb:f5:87:48:6d:da:30:66:6e:7c: 8c:f2:7c:71:53:d3:98:61:e0:53:6e:f6:ea:8f:27:e4:c1:70: 66:e6:42:4b:c0:5d:d9:52:a4:93:88:98:56:cc:8d:e1:d4:5f: 69:30:92:a7:94:5e:ab:03:28:73:ce:d1:e9:3b:5a:72:57:18: 0f:df:89:3c:f4:52:57:d2:99:2d:74:4b:3c:c1:ee:3e:c8:3a: a0:3b:87:e3:40:47:7f:6f:38:4c:57:49:73:38:cf:e6:62:2c: 32:1b:da:4a:1a:7d:9e:d9:87:56:ce:cb:7b:2d:f4:02:b4:f3: 22:1c:44:b7:56:80:59:a4:61:7e:17:24:f4:eb:45:c3:cc:b8: c4:ce:a6:64:d1:e1:b1:d1:32:7e:bc:00:39:f9:7d:65:92:2b: 82:59:e5:93:bf:b6:f5:11:db:12:13:f4:ed:8a:bf:f6:ea:d0: d4:03:2c:49:da:ee:20:0b:4e:ac:d6:6c:cb:0b:4c:6e:54:ef: 8d:91:48:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9zFuFrnCuBvXaNwKDKtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNzA0MGM3NDI5ZTdiOWUyMWE1ZmZjODhkOTMyYjQ3MDdj YzNhMDAwHhcNMjUxMjA2MDYwMTAyWhcNMjUxMjA3MDYwMTAyWjAzMTEwLwYDVQQD Eyg1MWMyMzdkOWQ5ZjQ1MmIzMWRmNTA3ZDRlYTliZThjY2EzODY5Yzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9T6eNXACI/Z2mdB4xUlEFvIocAG 8Hs/w3QlmGchfMPkvAarRUFTchoiImeVrD6v1lUXnyGydoRfXdohnRly1NxJJkF9 s6Hvs7EHlHlC0/37X2gEQO7Eq//pOYUbZ2e8htRhdbih3DspUBjh+OjtoMUOYIjo co2MWtydyyuwDwz8boxsqsWKkmqV0K73QUgXTkfGzBG4Qf79DjmwMHor+vsJSfx8 JFXQMF6SNR68juAmeaKgY19B58JXb5+p1U6oA2NQCQwB1siGRq54SXYXKXH1WueC qqLHNmP73XPdufZVL9c+wf5WivYgGv5pktiw8BmQNlxiz7PhpshRqc7MwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHCN9nZ9FKzHfUH1Oqb6MyjhpyWMB8GA1UdIwQY MBaAFPJwQMdCnnueIaX/yI2TK0cHzDoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG5CQXgwS2VlNTRocGZfSWpaTXJSd2ZNT2dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81NDNkNGMtYTRkOS00MTk2LTg5MmMt N2VjYWJhZTE4ZDhhLzEvOG5CQXgwS2VlNTRocGZfSWpaTXJSd2ZNT2dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS81NDNkNGMtYTRkOS00MTk2LTg5MmMtN2VjYWJhZTE4ZDhh LzEvOG5CQXgwS2VlNTRocGZfSWpaTXJSd2ZNT2dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBlcn9Yt GrmfgKag2phH4eVgMOcaklprMj8A9zXwzVNhOYs/bVvRPRL6A5MZmcV+Ej0XYNfp f3Obnql0bQTL9YdIbdowZm58jPJ8cVPTmGHgU2726o8n5MFwZuZCS8Bd2VKkk4iY VsyN4dRfaTCSp5ReqwMoc87R6TtaclcYD9+JPPRSV9KZLXRLPMHuPsg6oDuH40BH f284TFdJczjP5mIsMhvaShp9ntmHVs7Ley30ArTzIhxEt1aAWaRhfhck9OtFw8y4 xM6mZNHhsdEyfrwAOfl9ZZIrglnlk7+29RHbEhP07Yq/9urQ1AMsSdruIAtOrNZs ywtMblTvjZFIVw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:03:08 2025 by rpki-client