This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft File: 8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json) Hash identifier: WN15XLkb0nydEYoj4OntRtxpTy9Xpxz6jG3DOR/pK+w= Subject key identifier: FC:EF:51:2C:C5:6B:89:1D:51:11:FA:D2:A1:D5:4A:20:7E:4A:78:5D Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B Certificate issuer: /CN=f3eee69f89f2452dcae8982947b2d1469537967b Certificate serial: 019B4A032E59DBED4A3D6FE4ECEB3A6EF1B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft Manifest number: 178E Signing time: Tue 23 Dec 2025 07:01:20 +0000 Manifest this update: Tue 23 Dec 2025 07:01:20 +0000 Manifest next update: Wed 24 Dec 2025 07:01:20 +0000 Files and hashes: 1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: FSd5bGT2mAu5EMdjTHKYrOHLJt83cb/jLfyLlE2NZ5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:2e:59:db:ed:4a:3d:6f:e4:ec:eb:3a:6e:f1:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b Validity Not Before: Dec 23 07:01:20 2025 GMT Not After : Dec 24 07:01:20 2025 GMT Subject: CN=fcef512cc56b891d5111fad2a1d54a207e4a785d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:dd:d4:22:33:96:0b:b1:ef:bc:2b:77:3d:38: d8:79:3c:e9:5c:d6:d1:13:f7:a9:53:bc:f0:99:60: de:0f:da:fc:7b:34:aa:be:ca:ca:42:9f:68:5d:d1: 0a:b6:4f:97:d2:75:80:2c:55:03:9f:3d:35:c4:00: 55:0d:c4:19:35:48:6c:d4:5d:f6:c2:dd:5e:6c:a3: 52:cc:df:c9:68:b5:5a:29:a8:01:9c:ff:f7:af:81: a6:86:ca:4a:a5:79:b5:22:20:f1:41:a8:5a:38:2e: 60:5c:02:a7:4a:fe:2f:02:9b:ad:f2:d1:85:ec:e8: 0e:45:f2:3b:1b:bd:a9:47:87:97:95:9f:95:c6:6a: fb:7c:cd:32:0d:ea:1b:01:dc:21:1e:13:74:84:06: 12:6e:b2:1b:32:3b:7f:8c:9e:ac:90:e4:f7:e7:61: 5c:25:81:5e:56:ec:7e:cc:f1:e8:b0:4f:e9:4f:41: c3:2a:eb:77:19:05:61:c5:d8:9c:f4:21:f1:1a:a0: 36:91:6e:d7:30:fa:ac:42:b0:77:5d:65:37:81:30: 5b:11:8e:8b:b0:2a:7b:8a:d5:49:42:da:17:07:9a: 10:14:6e:de:a4:6a:27:44:a8:9c:98:f2:7b:09:f5: 85:c6:94:53:55:e1:46:14:38:fe:2c:29:93:98:0f: 4b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EF:51:2C:C5:6B:89:1D:51:11:FA:D2:A1:D5:4A:20:7E:4A:78:5D X509v3 Authority Key Identifier: keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:02:37:bb:a8:c4:ec:6e:91:3e:9f:ee:87:1c:ed:9a:5e:de: e8:c2:d8:5e:df:66:d4:cf:74:78:76:01:6b:47:09:64:be:82: 27:32:09:42:4b:73:2a:9a:e7:dc:ce:9a:ef:fc:e9:7b:df:74: 23:c2:6d:b6:41:94:98:71:5d:de:e1:30:19:39:d5:47:8d:9a: 79:4c:f4:c9:8b:37:1c:5b:59:84:99:2a:a0:ae:dc:02:ea:a0: 20:8f:17:a3:e7:b4:7d:03:29:3b:64:21:f8:79:50:c6:6a:fd: b0:c0:6c:4a:50:14:86:d9:72:43:86:84:51:2e:55:56:77:19: 18:55:63:65:ce:8f:bd:9a:a2:79:09:55:bb:4a:75:94:06:d0: 93:9c:98:a9:75:d9:a5:63:82:ef:09:e8:80:d0:51:2a:4c:66: d3:48:6e:f7:a9:c2:b7:7e:04:ac:22:16:4d:15:d4:12:6e:59: 1e:e6:0e:8d:7a:5f:d7:ba:e5:61:41:7d:f0:50:59:8f:a2:a5: 6a:f1:01:81:06:55:f9:c9:63:70:d8:d4:8d:8f:ec:ca:ba:36: be:99:ff:6a:38:4a:d9:2e:89:b1:21:24:70:ef:31:5f:e0:2a: 13:d5:61:dd:91:70:05:a0:e2:fb:66:a9:b6:e2:c3:c6:46:ea: 97:f7:eb:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAy5Z2+1KPW/k7Os6bvG1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZWVlNjlmODlmMjQ1MmRjYWU4OTgyOTQ3YjJkMTQ2OTUz Nzk2N2IwHhcNMjUxMjIzMDcwMTIwWhcNMjUxMjI0MDcwMTIwWjAzMTEwLwYDVQQD EyhmY2VmNTEyY2M1NmI4OTFkNTExMWZhZDJhMWQ1NGEyMDdlNGE3ODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt3UIjOWC7HvvCt3PTjYeTzpXNbR E/epU7zwmWDeD9r8ezSqvsrKQp9oXdEKtk+X0nWALFUDnz01xABVDcQZNUhs1F32 wt1ebKNSzN/JaLVaKagBnP/3r4GmhspKpXm1IiDxQahaOC5gXAKnSv4vAput8tGF 7OgORfI7G72pR4eXlZ+Vxmr7fM0yDeobAdwhHhN0hAYSbrIbMjt/jJ6skOT352Fc JYFeVux+zPHosE/pT0HDKut3GQVhxdic9CHxGqA2kW7XMPqsQrB3XWU3gTBbEY6L sCp7itVJQtoXB5oQFG7epGonRKicmPJ7CfWFxpRTVeFGFDj+LCmTmA9L3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzvUSzFa4kdURH60qHVSiB+SnhdMB8GA1UdIwQY MBaAFPPu5p+J8kUtyuiYKUey0UaVN5Z7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOC03bW40bnlSUzNLNkpncFI3TFJScFUzbG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lODYwNzQtZTZkMC00OWJlLTk1OTIt N2M0MjcyMzRkNWZmLzEvOC03bW40bnlSUzNLNkpncFI3TFJScFUzbG5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9lODYwNzQtZTZkMC00OWJlLTk1OTItN2M0MjcyMzRkNWZm LzEvOC03bW40bnlSUzNLNkpncFI3TFJScFUzbG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAugI3u6jE 7G6RPp/uhxztml7e6MLYXt9m1M90eHYBa0cJZL6CJzIJQktzKprn3M6a7/zpe990 I8JttkGUmHFd3uEwGTnVR42aeUz0yYs3HFtZhJkqoK7cAuqgII8Xo+e0fQMpO2Qh +HlQxmr9sMBsSlAUhtlyQ4aEUS5VVncZGFVjZc6PvZqieQlVu0p1lAbQk5yYqXXZ pWOC7wnogNBRKkxm00hu96nCt34ErCIWTRXUEm5ZHuYOjXpf17rlYUF98FBZj6Kl avEBgQZV+cljcNjUjY/syro2vpn/ajhK2S6JsSEkcO8xX+AqE9Vh3ZFwBaDi+2ap tuLDxkbql/frmg== -----END CERTIFICATE-----Generated at Tue Dec 23 16:42:44 2025 by rpki-client