This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft File: 8FoX3TvrjchI--dikGHWCAFB59Q.mft (raw, json) Hash identifier: lvRpDpt0azxgvLC1Zh7Olgqe4ht8N51T5N6aP8Z++zk= Subject key identifier: 42:01:45:C4:30:06:89:93:1B:2B:DC:5C:2C:3D:31:DC:C1:AE:A5:D5 Authority key identifier: F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4 Certificate issuer: /CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4 Certificate serial: 019AF12E7AAAFE41C054FAA7BD81A57DB5AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft Manifest number: B2 Signing time: Sat 06 Dec 2025 01:02:26 +0000 Manifest this update: Sat 06 Dec 2025 01:02:26 +0000 Manifest next update: Sun 07 Dec 2025 01:02:26 +0000 Files and hashes: 1: 8FoX3TvrjchI--dikGHWCAFB59Q.crl (hash: PpRsHOgmKWB63V9HU3edKudtSmvJCDLtw67KUTcys0Q=) 2: XQvs_LeYh7n5lJNYbQ7IMsSxGfU.roa (hash: NEI+JeokcTnC/E33WRhCXxumi2TGWneCiQdh6c4jiDg=) 3: bglm7OBH7qMueWHwWp8x13IQumU.roa (hash: KuVFh8acpsLYsRfes4W/qZZMayuNHOlxpXdjCaCH3rE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:7a:aa:fe:41:c0:54:fa:a7:bd:81:a5:7d:b5:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4 Validity Not Before: Dec 6 01:02:26 2025 GMT Not After : Dec 7 01:02:26 2025 GMT Subject: CN=420145c4300689931b2bdc5c2c3d31dcc1aea5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6a:82:15:53:a7:db:07:a6:d0:c4:71:88:c0: ee:77:ae:7d:1b:87:6b:d6:66:58:c0:59:9f:73:25: e0:36:22:fe:9e:83:2e:aa:e2:52:c5:23:07:4c:3c: 88:6c:fa:7c:c0:be:7d:6d:1f:5f:34:90:92:a7:22: e0:14:61:68:f4:4e:91:6f:17:62:97:ea:ad:f9:d3: 31:2f:f1:db:4b:8b:89:3c:21:14:64:b8:6c:33:18: 76:60:a0:80:42:fa:09:f6:c7:dd:63:07:83:e7:c2: 22:6c:26:dd:f7:a1:bc:e4:31:29:ae:4f:10:35:f2: 79:7e:5e:90:ae:bb:f9:8e:68:9c:03:c8:60:be:fd: 79:c1:3c:41:a3:93:52:db:50:ac:50:dd:73:ec:83: ae:ba:64:7f:91:71:44:0d:bf:9d:6e:e6:74:4f:ec: f8:90:b1:71:00:7b:e3:65:7d:aa:f4:9f:a3:c6:d7: 47:84:20:77:3c:bd:1f:d8:54:be:f7:c0:a5:00:0e: db:1a:6b:d4:ed:9f:b3:db:68:42:74:c1:c4:ea:4b: 4f:da:3f:f8:b9:31:e6:05:7d:a7:4a:41:6b:2c:d3: eb:0c:3c:20:03:d5:8c:60:db:4f:52:cd:13:79:45: 05:a7:df:dc:ca:7a:92:b6:62:86:25:76:76:ae:fc: 97:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:01:45:C4:30:06:89:93:1B:2B:DC:5C:2C:3D:31:DC:C1:AE:A5:D5 X509v3 Authority Key Identifier: keyid:F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ff:dc:69:0a:42:c3:65:cb:ac:bc:bd:a4:85:f2:62:67:a1: ea:46:90:23:b7:73:3f:fa:bd:b9:1c:34:dd:f4:1c:86:cc:8a: c2:10:5d:42:0d:13:be:19:ec:49:fa:a7:ba:45:3e:95:94:87: 50:23:65:00:86:d7:c8:5b:ee:f8:41:d8:0c:7d:70:9d:1a:81: e0:61:c2:cc:17:0e:d4:f2:cd:4e:1f:e1:74:2e:c1:a6:94:48: ac:1f:ff:22:66:d1:d1:bc:77:12:a4:46:90:6c:ad:1b:cf:43: a9:b9:90:b8:17:c0:4a:99:b3:09:e2:7c:2a:b7:8b:ce:3e:aa: 9b:8d:81:75:a5:73:2b:e5:cb:26:50:cd:ab:20:53:bb:ef:ec: db:37:a7:44:70:9d:54:56:95:ec:3f:e2:2e:03:93:dc:9f:bc: ca:02:38:23:e2:7e:f1:0e:96:81:fc:61:65:06:3d:43:77:92: ea:fe:50:d9:40:fd:87:65:9f:5c:da:3e:9c:91:83:53:3e:62: 4e:d9:a0:1f:cf:66:7a:cf:51:32:be:1c:8a:73:9f:be:b1:38: 11:42:b9:4b:b8:28:f4:09:c1:7b:c3:0e:69:b9:a1:2d:35:19: 67:0d:d2:dd:cd:69:e7:32:4f:b9:a9:6f:fe:ee:17:49:07:11: ca:4e:9e:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnqq/kHAVPqnvYGlfbWqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNWExN2RkM2JlYjhkYzg0OGZiZTc2MjkwNjFkNjA4MDE0 MWU3ZDQwHhcNMjUxMjA2MDEwMjI2WhcNMjUxMjA3MDEwMjI2WjAzMTEwLwYDVQQD Eyg0MjAxNDVjNDMwMDY4OTkzMWIyYmRjNWMyYzNkMzFkY2MxYWVhNWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmqCFVOn2wem0MRxiMDud659G4dr 1mZYwFmfcyXgNiL+noMuquJSxSMHTDyIbPp8wL59bR9fNJCSpyLgFGFo9E6Rbxdi l+qt+dMxL/HbS4uJPCEUZLhsMxh2YKCAQvoJ9sfdYweD58IibCbd96G85DEprk8Q NfJ5fl6Qrrv5jmicA8hgvv15wTxBo5NS21CsUN1z7IOuumR/kXFEDb+dbuZ0T+z4 kLFxAHvjZX2q9J+jxtdHhCB3PL0f2FS+98ClAA7bGmvU7Z+z22hCdMHE6ktP2j/4 uTHmBX2nSkFrLNPrDDwgA9WMYNtPUs0TeUUFp9/cynqStmKGJXZ2rvyXSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIBRcQwBomTGyvcXCw9MdzBrqXVMB8GA1UdIwQY MBaAFPBaF907643ISPvnYpBh1ggBQefUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZvWDNUdnJqY2hJLS1kaWtHSFdDQUZCNTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yYjJjZGYtMmVlNS00Njg5LTg2M2It M2QxM2U5Nzc2ZmY3LzEvOEZvWDNUdnJqY2hJLS1kaWtHSFdDQUZCNTlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yYjJjZGYtMmVlNS00Njg5LTg2M2ItM2QxM2U5Nzc2ZmY3 LzEvOEZvWDNUdnJqY2hJLS1kaWtHSFdDQUZCNTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoP/caQpC w2XLrLy9pIXyYmeh6kaQI7dzP/q9uRw03fQchsyKwhBdQg0TvhnsSfqnukU+lZSH UCNlAIbXyFvu+EHYDH1wnRqB4GHCzBcO1PLNTh/hdC7BppRIrB//ImbR0bx3EqRG kGytG89DqbmQuBfASpmzCeJ8KreLzj6qm42BdaVzK+XLJlDNqyBTu+/s2zenRHCd VFaV7D/iLgOT3J+8ygI4I+J+8Q6WgfxhZQY9Q3eS6v5Q2UD9h2WfXNo+nJGDUz5i TtmgH89mes9RMr4cinOfvrE4EUK5S7go9AnBe8MOabmhLTUZZw3S3c1p5zJPualv /u4XSQcRyk6eAw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:50 2025 by rpki-client