This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft File: 12TH8_eLh21rBDwWzdvd6x55W5w.mft (raw, json) Hash identifier: W5wkoNbhzyF3aviaYkCW14b1PmO8/aG35jGc8zF7NMc= Subject key identifier: 83:96:03:67:11:83:BD:CF:5C:FA:BE:24:22:65:17:B6:08:65:4C:83 Authority key identifier: D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C Certificate issuer: /CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c Certificate serial: 019AF5AEB22698CB0977A251DF56A22B18C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft Manifest number: 0763 Signing time: Sat 06 Dec 2025 22:00:57 +0000 Manifest this update: Sat 06 Dec 2025 22:00:57 +0000 Manifest next update: Sun 07 Dec 2025 22:00:57 +0000 Files and hashes: 1: 12TH8_eLh21rBDwWzdvd6x55W5w.crl (hash: foQbfyhg0CCGsyimQoKFVurlP7H4AE3jytTYyiXi4Aw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:b2:26:98:cb:09:77:a2:51:df:56:a2:2b:18:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c Validity Not Before: Dec 6 22:00:57 2025 GMT Not After : Dec 7 22:00:57 2025 GMT Subject: CN=839603671183bdcf5cfabe24226517b608654c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:70:a2:8a:d3:6c:c0:05:37:06:de:ec:8f:e1: 26:67:f6:91:10:4a:c8:e8:bf:1f:a4:3b:1f:66:52: c2:34:b3:51:cc:bc:ea:f7:17:6a:5a:e0:f1:a3:2e: 41:c3:eb:37:d7:56:9a:ff:0e:83:22:82:16:72:c9: 3c:12:fc:5f:13:23:38:61:bd:66:e3:82:78:60:77: ec:9e:f7:d4:68:c4:0c:09:e2:01:ed:4a:b8:b2:fe: 6c:4b:a1:9d:29:30:14:3a:1f:e5:54:5b:ea:3c:c6: d7:11:1c:ef:3b:d8:06:d1:3a:2b:0c:3a:be:3a:de: d2:81:44:59:d9:99:b1:91:64:22:72:3c:89:63:90: c2:e9:97:3c:0d:a5:4c:e8:77:d1:e1:c9:de:41:dc: 29:a4:3d:ec:95:c3:35:ee:86:53:37:33:22:6c:3b: 29:32:94:b3:d1:95:fc:fd:d9:93:5e:78:1d:20:65: fa:24:fc:8d:26:81:e7:3e:da:2d:ca:0b:c7:dd:6d: 5b:a5:0d:b0:6e:65:80:4c:24:42:6f:85:bf:30:b0: 57:f6:b8:20:14:02:cc:60:75:53:b2:d1:08:14:d1: 8a:3c:59:e6:81:3c:e4:fb:57:8e:97:28:53:82:a2: 7a:7c:18:ff:65:01:d0:f9:4e:72:7f:98:2a:c4:7e: 6e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:96:03:67:11:83:BD:CF:5C:FA:BE:24:22:65:17:B6:08:65:4C:83 X509v3 Authority Key Identifier: keyid:D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:db:b2:9e:80:d3:58:f2:81:99:9f:8f:4f:f7:d6:45:3c:0c: c7:3f:33:ac:da:c2:b1:ff:e1:38:51:04:df:b3:2e:49:1d:11: 97:c8:44:1a:ac:59:06:dc:d2:32:f9:34:c8:14:8a:15:b4:26: 07:07:2f:14:97:b1:fa:43:1e:d3:f2:be:31:58:82:b4:4a:f0: 10:89:0d:d3:ec:5a:26:7a:d2:66:59:34:7e:22:9d:95:cd:be: c7:6b:74:70:e9:84:08:66:9b:74:91:39:1a:94:f3:00:36:ce: 11:66:d1:7a:bd:e3:4b:8c:8a:b0:07:e7:ab:72:0f:2c:cd:26: 7b:f3:4c:25:4f:47:91:c6:fa:0f:5d:ef:fe:6f:f3:f1:b6:56: 3e:2a:4a:1b:05:ec:34:e0:7f:b5:16:d4:63:c1:3a:45:0f:b2: 7a:ee:85:8a:80:8f:fb:99:16:a2:07:8c:31:57:23:2b:c4:4a: 10:4f:00:ad:98:41:fc:0a:c1:02:6e:af:b6:a2:f1:1b:8c:b1: 2d:40:d2:12:53:3d:77:2f:f8:ab:15:94:ac:59:7a:14:5e:db: a1:6e:57:b6:12:0b:16:a9:8a:c1:32:ba:3e:ff:0e:73:40:9c: 5b:86:08:7e:f7:31:d2:0e:fe:d3:ca:20:93:54:85:8e:2d:0a: 40:dd:9b:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rrImmMsJd6JR31aiKxjFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NjRjN2YzZjc4Yjg3NmQ2YjA0M2MxNmNkZGJkZGViMWU3 OTViOWMwHhcNMjUxMjA2MjIwMDU3WhcNMjUxMjA3MjIwMDU3WjAzMTEwLwYDVQQD Eyg4Mzk2MDM2NzExODNiZGNmNWNmYWJlMjQyMjY1MTdiNjA4NjU0YzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHCiitNswAU3Bt7sj+EmZ/aREErI 6L8fpDsfZlLCNLNRzLzq9xdqWuDxoy5Bw+s311aa/w6DIoIWcsk8EvxfEyM4Yb1m 44J4YHfsnvfUaMQMCeIB7Uq4sv5sS6GdKTAUOh/lVFvqPMbXERzvO9gG0TorDDq+ Ot7SgURZ2ZmxkWQicjyJY5DC6Zc8DaVM6HfR4cneQdwppD3slcM17oZTNzMibDsp MpSz0ZX8/dmTXngdIGX6JPyNJoHnPtotygvH3W1bpQ2wbmWATCRCb4W/MLBX9rgg FALMYHVTstEIFNGKPFnmgTzk+1eOlyhTgqJ6fBj/ZQHQ+U5yf5gqxH5u+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOWA2cRg73PXPq+JCJlF7YIZUyDMB8GA1UdIwQY MBaAFNdkx/P3i4dtawQ8Fs3b3eseeVucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJUSDhfZUxoMjFyQkR3V3pkdmQ2eDU1VzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84MjZkZTYtNTAzOS00MDM3LTg4MDIt NWUyY2JmOTQyNDA1LzEvMTJUSDhfZUxoMjFyQkR3V3pkdmQ2eDU1VzV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS84MjZkZTYtNTAzOS00MDM3LTg4MDItNWUyY2JmOTQyNDA1 LzEvMTJUSDhfZUxoMjFyQkR3V3pkdmQ2eDU1VzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYduynoDT WPKBmZ+PT/fWRTwMxz8zrNrCsf/hOFEE37MuSR0Rl8hEGqxZBtzSMvk0yBSKFbQm BwcvFJex+kMe0/K+MViCtErwEIkN0+xaJnrSZlk0fiKdlc2+x2t0cOmECGabdJE5 GpTzADbOEWbRer3jS4yKsAfnq3IPLM0me/NMJU9Hkcb6D13v/m/z8bZWPipKGwXs NOB/tRbUY8E6RQ+yeu6FioCP+5kWogeMMVcjK8RKEE8ArZhB/ArBAm6vtqLxG4yx LUDSElM9dy/4qxWUrFl6FF7boW5XthILFqmKwTK6Pv8Oc0CcW4YIfvcx0g7+08og k1SFji0KQN2b4Q== -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:42 2025 by rpki-client