This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft File: 8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json) Hash identifier: 9Ab4EOw6roamRpBAg5Q6DuTDmM7MRlC1Rohyg00lYug= Subject key identifier: 8E:E1:00:DC:63:0F:83:AE:AC:18:7F:75:E9:5F:B1:EF:83:01:6B:56 Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6 Certificate issuer: /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6 Certificate serial: 019B13823FABFAFE90DDCF8D16132B90A08E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft Manifest number: 06F3 Signing time: Fri 12 Dec 2025 17:01:01 +0000 Manifest this update: Fri 12 Dec 2025 17:01:01 +0000 Manifest next update: Sat 13 Dec 2025 17:01:01 +0000 Files and hashes: 1: 1-a6iBHASMUxMW7asjxbfE0QEd5w.roa (hash: m3RXlatEBF9cA7N2EEjPPwV4+LMKEGb0hrpMsfXqqsk=) 2: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: CHF0rufQjX6p7wnKtbI8DPXxFPkuzXDttuZ/sTAvoQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 16:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:82:3f:ab:fa:fe:90:dd:cf:8d:16:13:2b:90:a0:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6 Validity Not Before: Dec 12 17:01:01 2025 GMT Not After : Dec 13 17:01:01 2025 GMT Subject: CN=8ee100dc630f83aeac187f75e95fb1ef83016b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:ab:ae:f6:45:0e:0d:8e:33:1d:cd:ed:20: 15:ee:81:71:2f:4e:70:6c:e8:67:46:48:1f:03:c9: 9a:34:4d:57:e4:11:4b:6f:ae:ed:72:3a:18:7d:07: 7c:ee:a7:81:96:fe:e0:f1:5f:8d:be:90:60:d3:c0: f1:50:d9:46:93:a2:92:af:1f:f8:b4:4b:03:e7:bb: a8:3a:ea:61:75:9b:28:3b:85:c1:d8:06:be:8a:c9: e6:a3:5b:12:e1:a3:51:5c:3e:e2:41:3f:c1:cb:14: 10:96:40:64:84:68:bf:d5:3e:8b:e4:3a:12:2f:a4: 35:f7:05:2d:0f:3c:fb:ac:1a:04:58:24:8b:71:f1: f9:57:fa:47:a1:5e:0f:09:19:da:35:a1:04:c2:09: 1c:6d:ed:23:e2:0a:35:61:31:0a:cf:cf:44:1f:3a: d6:7d:ee:b5:7c:06:1f:36:41:2b:a4:a3:6b:e0:63: 70:4c:39:a4:74:31:a3:a1:20:15:25:5d:c7:75:9d: a5:55:82:f8:dc:a1:49:bc:cf:5c:71:32:41:8d:47: 13:1f:9b:1d:a9:9c:22:c1:24:86:88:0d:6d:37:f6: d7:23:30:9f:89:b8:6b:f8:3e:b4:2b:42:48:7b:49: b5:37:88:88:d0:78:c0:9f:1e:b8:ad:d7:24:cd:44: 82:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E1:00:DC:63:0F:83:AE:AC:18:7F:75:E9:5F:B1:EF:83:01:6B:56 X509v3 Authority Key Identifier: keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:27:6f:7a:8d:11:83:bf:1f:a1:9e:f5:7a:17:46:bf:c2:f7: f7:83:a0:87:51:13:90:d9:e4:3a:6d:6b:e4:35:45:45:af:71: 4e:87:26:20:4f:a2:ad:3c:46:06:30:9a:f4:ea:35:19:22:08: ab:54:67:51:84:7d:28:03:90:7a:92:79:bc:0a:51:37:de:17: b0:95:7c:83:48:d0:e4:f0:44:a6:b8:5b:67:c1:f7:33:b1:d5: 3e:99:60:e5:89:94:b6:48:ad:8c:ed:8a:f5:5a:77:e4:13:81: 1a:d5:45:58:d6:3f:dd:8f:aa:41:65:62:2d:ae:c6:27:bc:fe: 4b:82:ff:63:54:05:db:44:f2:76:d9:f1:c0:c3:5a:22:31:f4: 3a:8b:6a:3d:b5:0b:27:bf:f6:41:ac:b2:6e:69:23:3e:3b:90: e7:85:54:42:0e:b0:00:00:9d:b1:fb:bd:a5:52:06:f3:62:b1: c2:47:7b:2a:d4:4d:54:61:f0:d2:fd:5c:7b:15:d0:0d:d4:98: 5c:c5:b2:6a:87:99:79:be:2d:dc:b3:79:8e:be:df:3d:99:ca: 34:6e:8f:e1:63:91:16:53:60:7f:72:9f:79:43:cf:dc:9e:21: 31:c8:c5:e7:03:fa:12:34:81:c9:10:10:4a:20:ca:b6:5e:96: 40:29:15:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsTgj+r+v6Q3c+NFhMrkKCOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDJiYThhMmE5NmEwN2I1YjY0Y2FmODczMjkwZTIwNzhk OTY0YTYwHhcNMjUxMjEyMTcwMTAxWhcNMjUxMjEzMTcwMTAxWjAzMTEwLwYDVQQD Eyg4ZWUxMDBkYzYzMGY4M2FlYWMxODdmNzVlOTVmYjFlZjgzMDE2YjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujurrvZFDg2OMx3N7SAV7oFxL05w bOhnRkgfA8maNE1X5BFLb67tcjoYfQd87qeBlv7g8V+NvpBg08DxUNlGk6KSrx/4 tEsD57uoOuphdZsoO4XB2Aa+isnmo1sS4aNRXD7iQT/ByxQQlkBkhGi/1T6L5DoS L6Q19wUtDzz7rBoEWCSLcfH5V/pHoV4PCRnaNaEEwgkcbe0j4go1YTEKz89EHzrW fe61fAYfNkErpKNr4GNwTDmkdDGjoSAVJV3HdZ2lVYL43KFJvM9ccTJBjUcTH5sd qZwiwSSGiA1tN/bXIzCfibhr+D60K0JIe0m1N4iI0HjAnx64rdckzUSCGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7hANxjD4OurBh/delfse+DAWtWMB8GA1UdIwQY MBaAFPHSuooqlqB7W2TK+HMpDiB42WSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84MDc1YTAtMGM1ZS00Yzc4LWJkYjEt ZDE2ODk4MDE2Y2ZlLzEvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84MDc1YTAtMGM1ZS00Yzc4LWJkYjEtZDE2ODk4MDE2Y2Zl LzEvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSdveo0R g78foZ71ehdGv8L394Ogh1ETkNnkOm1r5DVFRa9xTocmIE+irTxGBjCa9Oo1GSII q1RnUYR9KAOQepJ5vApRN94XsJV8g0jQ5PBEprhbZ8H3M7HVPplg5YmUtkitjO2K 9Vp35BOBGtVFWNY/3Y+qQWViLa7GJ7z+S4L/Y1QF20TydtnxwMNaIjH0OotqPbUL J7/2QayybmkjPjuQ54VUQg6wAACdsfu9pVIG82Kxwkd7KtRNVGHw0v1cexXQDdSY XMWyaoeZeb4t3LN5jr7fPZnKNG6P4WORFlNgf3KfeUPP3J4hMcjF5wP6EjSByRAQ SiDKtl6WQCkV5g== -----END CERTIFICATE-----Generated at Sat Dec 13 01:55:09 2025 by rpki-client