This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft File: 8rwR5uzToK8-5DlNy7ez75AYfTA.mft (raw, json) Hash identifier: WOFxzbXwIRiOFT0lOChR27BNduW0WWbrfkGjL627G+w= Subject key identifier: 94:9B:8C:61:CE:16:DD:04:4A:34:59:C5:DA:58:AA:0B:D6:80:62:89 Authority key identifier: F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30 Certificate issuer: /CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30 Certificate serial: 019B3D23880CA3A8DDE3085B1A564A083475 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft Manifest number: 0B0B Signing time: Sat 20 Dec 2025 19:01:37 +0000 Manifest this update: Sat 20 Dec 2025 19:01:37 +0000 Manifest next update: Sun 21 Dec 2025 19:01:37 +0000 Files and hashes: 1: 8rwR5uzToK8-5DlNy7ez75AYfTA.crl (hash: 0CwRbO05D+gt1LhLJp8nkJi3qs46u8XHleUVgpf+MBc=) 2: Jt10BH3qKoOGqx6R1oafXbYBRvg.roa (hash: 9VB1KYRqUDPucDZfXSnHKaNbHiQLBOlnBbvyv/YEMkA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:88:0c:a3:a8:dd:e3:08:5b:1a:56:4a:08:34:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30 Validity Not Before: Dec 20 19:01:37 2025 GMT Not After : Dec 21 19:01:37 2025 GMT Subject: CN=949b8c61ce16dd044a3459c5da58aa0bd6806289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0f:f9:1b:1b:3d:c7:79:cd:ba:24:f5:77:32: 42:09:9f:fb:27:b2:be:78:cc:b9:34:63:42:7e:4b: e7:0c:a6:02:5e:6c:23:b1:d0:ac:60:a5:26:81:99: c7:88:ac:5b:bd:10:94:db:c4:4b:9b:40:26:55:1a: cd:f2:80:04:02:7a:ac:8b:43:99:81:8f:55:6e:d9: 47:08:7d:89:60:2e:0e:78:0d:a9:fb:fd:a7:d0:9c: ce:d6:6b:54:26:cd:06:8a:26:82:d7:c2:66:5c:ed: 86:2a:75:88:ad:5d:ee:e4:16:3f:52:0b:3d:62:9e: 4e:67:c8:09:a4:8e:eb:e6:4f:7b:5b:5d:e7:7b:2c: 42:a3:62:c5:95:15:cb:33:df:99:57:cb:a2:dd:df: 80:29:ec:bc:57:64:87:6d:1f:6b:e3:33:94:65:51: 46:2b:ad:57:73:9b:18:8f:ec:2d:2f:4a:9a:52:5e: 79:20:29:ee:c1:f5:8b:0e:c0:56:8e:ac:60:13:a6: 11:8a:df:c3:42:fd:c3:a2:b7:ff:b9:0d:40:4c:f6: f8:f8:f4:58:92:f5:cf:4f:e1:90:2f:ae:59:8b:c7: 2d:0a:aa:d6:7f:c8:a0:9b:d1:c0:35:3d:cd:cb:93: 0e:d0:09:ce:4e:54:88:41:05:98:33:a7:e1:e7:4e: 94:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9B:8C:61:CE:16:DD:04:4A:34:59:C5:DA:58:AA:0B:D6:80:62:89 X509v3 Authority Key Identifier: keyid:F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:f4:b4:80:db:63:54:cf:2c:6a:ae:5d:b9:36:2f:e5:6d:39: e9:f6:fa:fb:dc:5a:f9:87:92:3b:37:3f:f1:92:63:94:16:1c: 27:cd:fc:74:0e:dd:e2:07:ef:b4:98:c9:28:02:05:df:a0:93: 57:fe:d6:77:13:6e:27:a3:d8:7b:d2:aa:5c:0f:c4:b6:ed:31: a3:17:d9:a4:48:25:42:3a:4c:37:d9:7c:27:06:72:b3:d6:81: b2:a3:19:97:1b:55:96:fe:d6:62:e5:60:99:14:b4:c2:d5:38: f8:3e:e9:2a:9f:eb:13:e2:94:3c:c6:28:f0:0e:ae:8d:47:56: 26:1f:d8:a6:a6:82:e7:52:59:36:cd:a6:c3:bb:de:63:b7:1c: f7:3f:e6:80:c9:09:1d:9e:bf:dc:cb:1b:15:47:8b:dc:34:40: 89:84:72:0e:f4:cf:1a:1a:42:a7:47:ab:81:a9:33:25:fa:8f: 4d:4b:35:d0:75:6a:68:a4:a2:c7:f7:bf:44:76:eb:59:38:3f: c6:3f:61:2b:87:61:86:6d:cd:d4:37:98:d6:cf:d5:ca:10:6c: 41:a6:da:19:28:59:14:80:b9:f7:cc:f6:52:45:4a:e8:a4:58: d5:e6:e7:f0:a6:79:1e:83:4d:45:1c:1b:1f:7b:48:81:c0:c7: da:60:64:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I4gMo6jd4whbGlZKCDR1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYmMxMWU2ZWNkM2EwYWYzZWU0Mzk0ZGNiYjdiM2VmOTAx ODdkMzAwHhcNMjUxMjIwMTkwMTM3WhcNMjUxMjIxMTkwMTM3WjAzMTEwLwYDVQQD Eyg5NDliOGM2MWNlMTZkZDA0NGEzNDU5YzVkYTU4YWEwYmQ2ODA2Mjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w/5Gxs9x3nNuiT1dzJCCZ/7J7K+ eMy5NGNCfkvnDKYCXmwjsdCsYKUmgZnHiKxbvRCU28RLm0AmVRrN8oAEAnqsi0OZ gY9VbtlHCH2JYC4OeA2p+/2n0JzO1mtUJs0GiiaC18JmXO2GKnWIrV3u5BY/Ugs9 Yp5OZ8gJpI7r5k97W13neyxCo2LFlRXLM9+ZV8ui3d+AKey8V2SHbR9r4zOUZVFG K61Xc5sYj+wtL0qaUl55ICnuwfWLDsBWjqxgE6YRit/DQv3Dorf/uQ1ATPb4+PRY kvXPT+GQL65Zi8ctCqrWf8igm9HANT3Ny5MO0AnOTlSIQQWYM6fh506URwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSbjGHOFt0ESjRZxdpYqgvWgGKJMB8GA1UdIwQY MBaAFPK8Eebs06CvPuQ5Tcu3s++QGH0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHJ3UjV1elRvSzgtNURsTnk3ZXo3NUFZZlRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wZDIzNDQtOTlkNy00MzEzLWIxYjYt N2M0MjQ3YWU1YzFiLzEvOHJ3UjV1elRvSzgtNURsTnk3ZXo3NUFZZlRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8wZDIzNDQtOTlkNy00MzEzLWIxYjYtN2M0MjQ3YWU1YzFi LzEvOHJ3UjV1elRvSzgtNURsTnk3ZXo3NUFZZlRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPS0gNtj VM8saq5duTYv5W056fb6+9xa+YeSOzc/8ZJjlBYcJ838dA7d4gfvtJjJKAIF36CT V/7WdxNuJ6PYe9KqXA/Etu0xoxfZpEglQjpMN9l8JwZys9aBsqMZlxtVlv7WYuVg mRS0wtU4+D7pKp/rE+KUPMYo8A6ujUdWJh/YpqaC51JZNs2mw7veY7cc9z/mgMkJ HZ6/3MsbFUeL3DRAiYRyDvTPGhpCp0ergakzJfqPTUs10HVqaKSix/e/RHbrWTg/ xj9hK4dhhm3N1DeY1s/VyhBsQabaGShZFIC598z2UkVK6KRY1ebn8KZ5HoNNRRwb H3tIgcDH2mBkWA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:46:04 2025 by rpki-client