This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft File: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft (raw, json) Hash identifier: /nty7GBd6PZOLMBDQQ6yPwpxs6ATVwu120qZI3oyHTU= Subject key identifier: B1:90:A1:DB:02:22:E3:6C:69:28:0B:D0:62:32:04:DE:63:05:20:2F Authority key identifier: F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99 Certificate issuer: /CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699 Certificate serial: 019AF208E48375919C4C8CF51DD01DA2FED0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft Manifest number: 07FB Signing time: Sat 06 Dec 2025 05:01:00 +0000 Manifest this update: Sat 06 Dec 2025 05:01:00 +0000 Manifest next update: Sun 07 Dec 2025 05:01:00 +0000 Files and hashes: 1: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl (hash: aIfCEUsN5ha4gNKpug2cIC20lT+y5UT5RUmIxYqw1dY=) 2: iI30nfDsBhExpS3xd7Ao_hR6634.roa (hash: Ri4PPxwNbTb8t+Vmf7x4SKgeY8qYnc9vjqMssowa560=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e4:83:75:91:9c:4c:8c:f5:1d:d0:1d:a2:fe:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699 Validity Not Before: Dec 6 05:01:00 2025 GMT Not After : Dec 7 05:01:00 2025 GMT Subject: CN=b190a1db0222e36c69280bd0623204de6305202f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ed:65:62:94:4a:02:1f:73:9a:e7:2b:fb:59: 80:9a:33:a6:fc:97:1c:17:5e:50:52:f0:44:2a:a7: 1c:fd:98:9e:24:d3:32:57:d4:9d:fb:35:cd:4f:ea: ec:b8:15:33:21:06:ed:b5:9a:a1:74:a4:00:f5:73: 87:29:ca:76:6f:28:e3:06:cf:1b:30:3f:38:2e:e4: 6c:17:28:a0:d7:3c:49:75:f0:5b:7b:50:4c:31:c3: e6:25:d1:d1:d7:68:94:f1:14:ac:f8:29:dc:d8:7b: 43:ac:a9:a3:61:a6:11:49:74:88:c6:1c:9a:25:41: 44:21:19:6a:d7:36:6b:fa:ff:84:38:ec:11:63:41: 01:7c:67:dd:af:aa:1a:a8:0d:f0:27:2d:6b:65:14: 09:72:cf:ff:ca:a6:9f:52:e9:0b:a1:ec:ae:92:c9: 32:55:fe:e7:7c:10:80:53:23:63:d2:ae:1c:32:21: 76:fa:bf:1a:61:ae:94:d8:f0:a8:0a:5a:ca:e9:c1: 12:b2:4c:34:1b:62:b2:35:40:c6:71:97:4c:51:39: b3:26:c3:33:19:1a:38:c8:42:ce:68:c6:eb:eb:f7: d8:b3:37:ea:d6:32:02:a9:b8:5a:eb:d7:41:d4:f2: f3:94:69:fa:d5:d2:07:40:8b:71:b8:99:6e:b3:37: 5c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:90:A1:DB:02:22:E3:6C:69:28:0B:D0:62:32:04:DE:63:05:20:2F X509v3 Authority Key Identifier: keyid:F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:27:ba:bd:75:3c:22:cd:ac:b3:50:d1:b7:68:b7:ac:f2:36: c4:5f:d3:76:4d:55:b6:ec:00:86:b7:ca:75:8b:94:f9:90:92: 8f:7a:1a:93:15:34:bf:dc:1a:b3:10:ca:4b:ee:35:3b:4a:b4: f9:0e:b9:1d:a1:62:a5:96:04:32:74:38:af:90:46:bb:b9:d7: 1c:92:51:04:38:f3:82:63:c2:06:2f:f8:6b:14:09:84:93:c2: cc:c8:36:05:0c:c1:14:91:c2:85:c1:57:7d:76:5b:33:04:a0: 39:83:84:1b:60:7b:2e:b1:76:04:4d:6c:43:a0:18:a0:e5:eb: c3:af:ba:a9:c8:d8:3e:79:bc:4f:3b:d4:d8:6e:61:fd:00:64: d9:c9:80:fb:79:63:21:9b:34:33:66:89:f0:0d:30:66:11:05: 9a:5c:d3:8d:1a:7e:1c:3e:c1:03:3e:8b:15:47:f2:10:a7:3c: bc:79:b6:b0:6a:dc:4b:cf:74:56:db:25:5d:91:ff:ee:1f:aa: 24:42:18:44:4e:3e:07:4a:cd:82:6f:16:28:df:f2:02:f1:a2: 3a:07:1f:c1:98:6a:9b:32:8b:f4:e8:6a:d5:72:2c:03:ee:75: 94:ae:69:ca:10:9f:81:b7:63:47:fc:f3:bf:f1:0d:e7:b3:a4: 82:d0:c3:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOSDdZGcTIz1HdAdov7QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYzA2NDQ2MGVhNmQ1Y2ZkM2Y4OGRjMWNmNGVkMDc1MDJi YmI2OTkwHhcNMjUxMjA2MDUwMTAwWhcNMjUxMjA3MDUwMTAwWjAzMTEwLwYDVQQD EyhiMTkwYTFkYjAyMjJlMzZjNjkyODBiZDA2MjMyMDRkZTYzMDUyMDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+1lYpRKAh9zmucr+1mAmjOm/Jcc F15QUvBEKqcc/ZieJNMyV9Sd+zXNT+rsuBUzIQbttZqhdKQA9XOHKcp2byjjBs8b MD84LuRsFyig1zxJdfBbe1BMMcPmJdHR12iU8RSs+Cnc2HtDrKmjYaYRSXSIxhya JUFEIRlq1zZr+v+EOOwRY0EBfGfdr6oaqA3wJy1rZRQJcs//yqafUukLoeyuksky Vf7nfBCAUyNj0q4cMiF2+r8aYa6U2PCoClrK6cESskw0G2KyNUDGcZdMUTmzJsMz GRo4yELOaMbr6/fYszfq1jICqbha69dB1PLzlGn61dIHQItxuJluszdcJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGQodsCIuNsaSgL0GIyBN5jBSAvMB8GA1UdIwQY MBaAFPHAZEYOptXP0/iNwc9O0HUCu7aZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGNCa1JnNm0xY19ULUkzQnowN1FkUUs3dHBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mNDUwNmUtZmI4OC00OGE5LTgyODUt YzlhY2ZlM2YzMTIxLzEvOGNCa1JnNm0xY19ULUkzQnowN1FkUUs3dHBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9mNDUwNmUtZmI4OC00OGE5LTgyODUtYzlhY2ZlM2YzMTIx LzEvOGNCa1JnNm0xY19ULUkzQnowN1FkUUs3dHBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALye6vXU8 Is2ss1DRt2i3rPI2xF/Tdk1VtuwAhrfKdYuU+ZCSj3oakxU0v9wasxDKS+41O0q0 +Q65HaFipZYEMnQ4r5BGu7nXHJJRBDjzgmPCBi/4axQJhJPCzMg2BQzBFJHChcFX fXZbMwSgOYOEG2B7LrF2BE1sQ6AYoOXrw6+6qcjYPnm8TzvU2G5h/QBk2cmA+3lj IZs0M2aJ8A0wZhEFmlzTjRp+HD7BAz6LFUfyEKc8vHm2sGrcS890VtslXZH/7h+q JEIYRE4+B0rNgm8WKN/yAvGiOgcfwZhqmzKL9Ohq1XIsA+51lK5pyhCfgbdjR/zz v/EN57OkgtDDGg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:17:49 2025 by rpki-client