This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft File: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft (raw, json) Hash identifier: fhp61SrWh3oHO0TnmfOsqyqnpGh+Wz0QtI9qhEoMyc4= Subject key identifier: 86:C8:14:74:6B:4D:96:F8:C5:E5:7E:32:1B:A3:BC:6A:63:D4:69:85 Authority key identifier: F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59 Certificate issuer: /CN=f22219eca54ab269c8aab9b0ff416e7293829b59 Certificate serial: 019AF31D53CFA4945BCDFB95B4BFEB1FE373 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft Manifest number: 0B2E Signing time: Sat 06 Dec 2025 10:02:56 +0000 Manifest this update: Sat 06 Dec 2025 10:02:56 +0000 Manifest next update: Sun 07 Dec 2025 10:02:56 +0000 Files and hashes: 1: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl (hash: QF43CbX7z91O+zGghcoc6jP1lFc5509HNh0KhHZqGTw=) 2: GZ1s7d54viav3wnjL9leWDPX9XE.roa (hash: havZ3bJj+OM6go5VLxui+205cgsq5mlbJ3gC7fDy5Sc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:53:cf:a4:94:5b:cd:fb:95:b4:bf:eb:1f:e3:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f22219eca54ab269c8aab9b0ff416e7293829b59 Validity Not Before: Dec 6 10:02:56 2025 GMT Not After : Dec 7 10:02:56 2025 GMT Subject: CN=86c814746b4d96f8c5e57e321ba3bc6a63d46985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:71:44:5c:fb:86:4c:25:c3:6d:9c:2e:5c:00: 94:48:b3:15:b3:78:de:fb:d0:e9:4c:d3:9e:09:b0: ae:ca:b0:fa:fa:ef:0c:f6:02:24:4c:c0:12:79:71: f2:76:c2:b0:78:c6:37:61:c4:45:82:ce:41:96:1a: c6:29:99:39:89:bd:4f:2c:88:b7:53:8a:54:e4:84: fd:0f:07:5a:73:a9:49:7c:c4:e2:9f:3b:d1:ea:22: d3:9b:50:5c:1b:aa:76:ad:a2:7c:5e:c3:8d:4c:61: fa:f9:40:22:ab:0b:27:c3:89:26:36:23:b3:2d:f6: b5:f4:32:91:c4:20:ce:04:76:db:19:a5:c6:f6:35: db:41:2b:7e:7c:50:17:5f:fd:4a:c9:f6:bd:30:2e: ee:a1:ac:5f:f8:3b:5b:8c:22:f9:59:29:0f:4f:c4: 21:d0:e7:e4:aa:bb:51:6e:fc:11:32:b8:ec:d8:e5: 12:fd:7f:f6:0d:69:00:e1:50:8f:fe:04:bd:00:f2: bb:01:84:2a:31:d7:6a:f3:f3:28:2d:97:b5:24:be: 27:79:ba:5e:f9:22:9d:4f:2d:c5:89:08:ec:aa:0d: b4:de:08:57:62:32:8b:e4:e2:15:8a:74:ad:89:10: ee:6f:d9:04:0e:44:e8:50:be:a3:12:38:a5:8c:d9: 01:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C8:14:74:6B:4D:96:F8:C5:E5:7E:32:1B:A3:BC:6A:63:D4:69:85 X509v3 Authority Key Identifier: keyid:F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:0b:86:cb:54:bb:16:d8:b0:be:84:19:50:e8:06:0e:96:c9: e2:7f:86:56:01:01:e0:59:54:5d:60:a8:e6:0f:37:c7:ae:32: 32:52:ed:90:ab:f3:89:aa:2d:a3:b6:e8:5a:9d:da:82:37:e3: be:f5:f0:10:a1:bd:f3:2d:93:f3:a3:bc:81:ef:48:93:e6:54: 6c:a9:7a:26:4f:ed:c7:34:1a:f9:b6:da:b9:ed:4e:6a:91:47: aa:c2:4d:00:94:9b:b7:75:39:04:0f:2c:85:50:2c:80:61:aa: ec:d7:fc:b6:92:cf:16:ac:5b:c8:b7:b0:6d:a2:2b:77:5d:fe: 24:61:92:09:ac:cf:4c:f9:33:91:62:a7:47:fd:03:a5:1c:6e: 80:74:6f:ce:95:59:04:7a:a9:95:cf:b9:da:e2:f4:2e:e8:bb: 89:02:00:82:0e:57:86:9b:9d:97:c1:99:f4:5e:91:a2:4f:3c: 08:1f:5f:c4:cb:7d:3b:b6:46:3f:34:9d:39:b8:de:f1:2f:dd: 9d:1a:87:5d:ea:a9:74:23:b4:0a:dd:02:26:ac:72:3e:b4:84: 80:a9:eb:b6:5c:3e:70:71:99:37:13:e1:04:ce:bb:26:0c:73: c8:90:1f:26:7b:16:0d:f4:bb:dc:2b:86:b9:1d:8c:cb:5b:c1: b8:13:0a:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHVPPpJRbzfuVtL/rH+NzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMjIxOWVjYTU0YWIyNjljOGFhYjliMGZmNDE2ZTcyOTM4 MjliNTkwHhcNMjUxMjA2MTAwMjU2WhcNMjUxMjA3MTAwMjU2WjAzMTEwLwYDVQQD Eyg4NmM4MTQ3NDZiNGQ5NmY4YzVlNTdlMzIxYmEzYmM2YTYzZDQ2OTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXFEXPuGTCXDbZwuXACUSLMVs3je +9DpTNOeCbCuyrD6+u8M9gIkTMASeXHydsKweMY3YcRFgs5BlhrGKZk5ib1PLIi3 U4pU5IT9Dwdac6lJfMTinzvR6iLTm1BcG6p2raJ8XsONTGH6+UAiqwsnw4kmNiOz Lfa19DKRxCDOBHbbGaXG9jXbQSt+fFAXX/1Kyfa9MC7uoaxf+DtbjCL5WSkPT8Qh 0OfkqrtRbvwRMrjs2OUS/X/2DWkA4VCP/gS9APK7AYQqMddq8/MoLZe1JL4nebpe +SKdTy3FiQjsqg203ghXYjKL5OIVinStiRDub9kEDkToUL6jEjiljNkBCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbIFHRrTZb4xeV+MhujvGpj1GmFMB8GA1UdIwQY MBaAFPIiGeylSrJpyKq5sP9BbnKTgptZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGlJWjdLVktzbW5JcXJtd18wRnVjcE9DbTFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jYjE0NjctMjQxYS00YmM1LWJhYTYt NmYzNjNlODNhNzhlLzEvOGlJWjdLVktzbW5JcXJtd18wRnVjcE9DbTFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9jYjE0NjctMjQxYS00YmM1LWJhYTYtNmYzNjNlODNhNzhl LzEvOGlJWjdLVktzbW5JcXJtd18wRnVjcE9DbTFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIguGy1S7 FtiwvoQZUOgGDpbJ4n+GVgEB4FlUXWCo5g83x64yMlLtkKvziaoto7boWp3agjfj vvXwEKG98y2T86O8ge9Ik+ZUbKl6Jk/txzQa+bbaue1OapFHqsJNAJSbt3U5BA8s hVAsgGGq7Nf8tpLPFqxbyLewbaIrd13+JGGSCazPTPkzkWKnR/0DpRxugHRvzpVZ BHqplc+52uL0Lui7iQIAgg5Xhpudl8GZ9F6Rok88CB9fxMt9O7ZGPzSdObje8S/d nRqHXeqpdCO0Ct0CJqxyPrSEgKnrtlw+cHGZNxPhBM67JgxzyJAfJnsWDfS73CuG uR2My1vBuBMKww== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:41 2025 by rpki-client