This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft File: 8D9771R9ACUziqa2rueqHb4Urio.mft (raw, json) Hash identifier: yqubP2psXPvdAJiknzjWEfKR458uXOf6pHfTOSbgXuo= Subject key identifier: 75:61:8A:F7:BC:E9:D7:40:3B:B3:0D:03:21:B6:9A:24:CE:B3:26:1F Authority key identifier: F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A Certificate issuer: /CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a Certificate serial: 019B34C437B861F95835D702B7B2107E8F62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft Manifest number: 1781 Signing time: Fri 19 Dec 2025 04:00:33 +0000 Manifest this update: Fri 19 Dec 2025 04:00:33 +0000 Manifest next update: Sat 20 Dec 2025 04:00:33 +0000 Files and hashes: 1: 8D9771R9ACUziqa2rueqHb4Urio.crl (hash: PDesJNwlm3vLmgQG1joqpGL1W8ym7TCBrHqJTY/IZC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:37:b8:61:f9:58:35:d7:02:b7:b2:10:7e:8f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a Validity Not Before: Dec 19 04:00:33 2025 GMT Not After : Dec 20 04:00:33 2025 GMT Subject: CN=75618af7bce9d7403bb30d0321b69a24ceb3261f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e4:4b:62:1b:46:20:dc:25:e3:b6:61:40:a7: 71:cf:3b:d5:e9:62:a2:db:73:55:63:42:84:b4:eb: 30:99:ef:94:be:22:be:cc:4a:4d:59:e4:e0:80:d4: e2:5b:4d:b3:b4:d3:96:d9:4f:d8:5a:df:de:1b:0b: a7:9f:b9:93:7a:74:b3:2f:f2:14:96:59:a7:81:9d: a0:fa:38:1d:ed:f5:44:83:bd:ea:c6:18:f2:3c:0c: de:76:9d:9f:5f:1f:0a:a8:d6:d3:cc:ce:1d:92:3c: aa:0f:49:4a:ec:7b:66:b7:07:83:00:1d:da:6f:9d: e0:0f:62:ce:02:e1:5a:7f:a8:10:e7:35:d0:82:c0: a2:95:6b:3a:73:0f:7c:ad:f9:1f:f7:1a:24:10:d6: 90:0c:f3:53:3d:44:0b:4a:bf:48:5e:b6:40:8a:bc: 49:c7:55:d4:51:c1:8a:aa:c6:73:13:a8:03:f7:fc: 52:a5:45:58:9e:71:6f:db:8b:14:d8:f4:8a:41:ad: 93:2f:f1:4c:74:1f:4b:95:91:f2:27:6a:51:2f:68: 8e:0b:92:1c:fb:16:c8:ed:bf:59:61:b0:0c:d3:10: 15:be:c4:f1:20:bd:56:cf:c4:af:a4:54:51:03:a5: f0:f6:ed:1e:a5:be:04:93:3a:e1:1f:70:4a:99:e6: 6f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:61:8A:F7:BC:E9:D7:40:3B:B3:0D:03:21:B6:9A:24:CE:B3:26:1F X509v3 Authority Key Identifier: keyid:F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:14:b7:8c:24:18:15:d6:cd:a6:cf:8f:52:6d:ab:82:e0:39: 5a:93:b2:d2:42:09:3e:f3:11:73:dd:2f:7d:41:ff:6b:ca:90: 6a:04:97:4f:b2:d4:43:8f:48:c9:5c:6d:c4:5e:66:37:b1:09: 99:fc:6e:6e:0a:eb:a7:4a:67:45:62:dd:9c:0e:9a:6a:2c:14: f6:c1:a0:50:77:8a:d3:1c:5f:a5:22:13:a1:02:fc:96:55:e3: a5:2b:e9:d9:95:ef:d2:0b:62:ad:10:6f:75:4b:3c:58:15:49: b3:87:cb:a4:62:ae:e8:1b:64:51:b5:59:11:79:7b:91:82:e1: 4b:22:c5:54:f4:41:35:cc:4e:4b:66:f6:ca:74:9d:f9:c7:1e: cc:d9:d8:cd:0c:39:10:30:13:36:b7:bc:5e:87:58:8f:cf:b6: 42:fb:34:cf:9c:10:4d:ad:cd:fe:85:17:25:23:11:d7:e8:f9: e7:87:4d:c0:18:a9:fd:2e:7e:1d:37:43:3f:a6:6e:8e:76:0a: a5:a7:74:32:db:ca:82:0e:8a:dd:57:91:e7:da:e9:5a:0b:04: 6f:45:99:be:14:82:82:fe:f7:19:c4:8a:ba:85:62:fc:06:2b: 48:fa:0d:d1:da:aa:16:ef:85:15:e7:ad:30:3f:56:68:a1:c6: bb:23:a4:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xDe4YflYNdcCt7IQfo9iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwM2Y3YmVmNTQ3ZDAwMjUzMzhhYTZiNmFlZTdhYTFkYmUx NGFlMmEwHhcNMjUxMjE5MDQwMDMzWhcNMjUxMjIwMDQwMDMzWjAzMTEwLwYDVQQD Eyg3NTYxOGFmN2JjZTlkNzQwM2JiMzBkMDMyMWI2OWEyNGNlYjMyNjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweRLYhtGINwl47ZhQKdxzzvV6WKi 23NVY0KEtOswme+UviK+zEpNWeTggNTiW02ztNOW2U/YWt/eGwunn7mTenSzL/IU llmngZ2g+jgd7fVEg73qxhjyPAzedp2fXx8KqNbTzM4dkjyqD0lK7HtmtweDAB3a b53gD2LOAuFaf6gQ5zXQgsCilWs6cw98rfkf9xokENaQDPNTPUQLSr9IXrZAirxJ x1XUUcGKqsZzE6gD9/xSpUVYnnFv24sU2PSKQa2TL/FMdB9LlZHyJ2pRL2iOC5Ic +xbI7b9ZYbAM0xAVvsTxIL1Wz8SvpFRRA6Xw9u0epb4EkzrhH3BKmeZvGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVhive86ddAO7MNAyG2miTOsyYfMB8GA1UdIwQY MBaAFPA/e+9UfQAlM4qmtq7nqh2+FK4qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEQ5NzcxUjlBQ1V6aXFhMnJ1ZXFIYjRVcmlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84ODFhNDgtOGFmMy00N2FjLThlYTgt ZDVjMjc0ZmVmOTY0LzEvOEQ5NzcxUjlBQ1V6aXFhMnJ1ZXFIYjRVcmlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC84ODFhNDgtOGFmMy00N2FjLThlYTgtZDVjMjc0ZmVmOTY0 LzEvOEQ5NzcxUjlBQ1V6aXFhMnJ1ZXFIYjRVcmlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhS3jCQY FdbNps+PUm2rguA5WpOy0kIJPvMRc90vfUH/a8qQagSXT7LUQ49IyVxtxF5mN7EJ mfxubgrrp0pnRWLdnA6aaiwU9sGgUHeK0xxfpSIToQL8llXjpSvp2ZXv0gtirRBv dUs8WBVJs4fLpGKu6BtkUbVZEXl7kYLhSyLFVPRBNcxOS2b2ynSd+ccezNnYzQw5 EDATNre8XodYj8+2Qvs0z5wQTa3N/oUXJSMR1+j554dNwBip/S5+HTdDP6ZujnYK pad0MtvKgg6K3VeR59rpWgsEb0WZvhSCgv73GcSKuoVi/AYrSPoN0dqqFu+FFeet MD9WaKHGuyOkFA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:20:28 2025 by rpki-client