This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft File: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft (raw, json) Hash identifier: n37a6Pp8OHOcrGp3hLA/Fedx92rJ9xTJqk7K+66dXsY= Subject key identifier: 33:77:73:B8:77:03:9F:DD:30:FB:AA:3B:E6:E5:22:E3:02:63:6F:BF Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E Certificate issuer: /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e Certificate serial: 019B329EE423210F7B96BFE6E1F6CDA4BC09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft Manifest number: 120F Signing time: Thu 18 Dec 2025 18:00:32 +0000 Manifest this update: Thu 18 Dec 2025 18:00:32 +0000 Manifest next update: Fri 19 Dec 2025 18:00:32 +0000 Files and hashes: 1: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl (hash: DwzFJiVd7jnVmYY+pGw4YrWntkON37MVLPAYKn8p/Wo=) 2: VJ4tqhsbAxvbZbMk4UpOcvURbX8.roa (hash: rFhoSBbOl1/XJywdO7kEvMzIk6v7w1dBiBMHnGzvKJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 18:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:9e:e4:23:21:0f:7b:96:bf:e6:e1:f6:cd:a4:bc:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e Validity Not Before: Dec 18 18:00:32 2025 GMT Not After : Dec 19 18:00:32 2025 GMT Subject: CN=337773b877039fdd30fbaa3be6e522e302636fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a1:d8:0b:16:20:c0:6b:60:da:d3:bb:9f:1d: 3f:3b:23:ff:b6:16:d1:04:9e:df:43:d7:3c:79:fe: c6:23:6a:0c:9e:40:e5:e0:5d:4b:93:d0:16:71:12: cf:a6:1e:eb:ae:a4:28:98:2f:2a:14:57:3b:19:67: 23:1a:cb:56:b8:71:5d:23:29:be:6f:21:66:6a:72: 34:f4:8a:c8:e7:a2:f9:b0:94:f5:d4:ee:04:73:24: a6:5a:eb:d6:ba:ff:58:24:16:bf:18:6c:96:81:93: 42:bf:7d:f2:27:8b:aa:44:91:e8:96:de:64:7d:82: a2:13:6d:8d:9f:48:93:f3:9e:14:82:4d:48:e4:de: b4:39:60:82:30:1e:72:86:d6:d9:16:22:ac:c7:55: 29:53:61:3d:8c:8b:16:15:6b:17:01:88:44:da:50: 89:c8:90:b7:c7:27:9c:2d:e2:d6:05:e4:19:cf:b8: e5:b6:38:57:88:dd:d9:2d:c7:c4:96:93:41:f9:fc: 73:17:ee:af:03:af:0d:c7:dd:be:64:90:ea:c7:7e: 32:86:cd:02:16:2d:7c:a9:52:42:91:fc:c0:40:df: 72:93:c7:3b:d3:62:0a:1c:49:7e:2d:95:5e:4a:45: 7f:e1:1a:9b:43:a5:c8:87:47:10:eb:e4:b5:9a:53: 48:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:77:73:B8:77:03:9F:DD:30:FB:AA:3B:E6:E5:22:E3:02:63:6F:BF X509v3 Authority Key Identifier: keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:14:b8:5d:1c:8a:17:d0:02:cc:a1:73:d6:ad:a8:96:cc:93: 15:e4:cf:35:b2:3a:88:0f:bb:84:9a:a9:e3:2c:02:89:d3:93: 2a:2f:cd:a0:2a:0a:79:8b:88:c2:b9:9a:d1:57:3d:76:74:3e: 00:94:67:7b:6d:d1:87:e8:02:02:c7:9d:a8:48:4d:2b:8b:a0: d7:a9:1c:3a:b1:c8:9f:01:57:d3:53:d7:2d:46:39:7b:ed:47: c5:64:c0:58:32:d6:5e:d8:c1:a5:18:9b:f5:f4:ed:8e:1f:ca: 6a:be:e9:a3:12:be:3d:1e:40:d6:27:01:fd:05:6c:ac:7c:8a: 09:aa:17:d7:2a:29:4a:36:7d:c1:d7:5c:c2:0e:57:ba:1b:84: ac:6e:bc:9f:80:85:57:55:a8:4d:96:a4:40:09:aa:a7:49:a1: 09:5c:f6:bf:f9:f3:eb:78:62:5d:eb:d3:88:09:58:bc:30:21: 6f:bb:49:eb:b2:43:3e:6f:13:4f:25:ed:d1:31:33:92:2a:b2: fc:0b:97:de:e0:60:35:7f:18:4f:b5:a1:20:a0:6c:5f:8e:5e: a9:e6:83:4c:72:11:bb:2f:e2:8f:1c:d3:af:cf:92:dc:c1:f6: 8a:64:4a:b8:c0:73:1e:93:04:68:9f:c6:a6:b9:4b:e9:4e:4f: 16:a5:69:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsynuQjIQ97lr/m4fbNpLwJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNGE2MzE4YjJlZDZkMGM4MjM0Zjk4MjA4Zjg4ZGUwZTlk NDY5OGUwHhcNMjUxMjE4MTgwMDMyWhcNMjUxMjE5MTgwMDMyWjAzMTEwLwYDVQQD EygzMzc3NzNiODc3MDM5ZmRkMzBmYmFhM2JlNmU1MjJlMzAyNjM2ZmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKHYCxYgwGtg2tO7nx0/OyP/thbR BJ7fQ9c8ef7GI2oMnkDl4F1Lk9AWcRLPph7rrqQomC8qFFc7GWcjGstWuHFdIym+ byFmanI09IrI56L5sJT11O4EcySmWuvWuv9YJBa/GGyWgZNCv33yJ4uqRJHolt5k fYKiE22Nn0iT854Ugk1I5N60OWCCMB5yhtbZFiKsx1UpU2E9jIsWFWsXAYhE2lCJ yJC3xyecLeLWBeQZz7jltjhXiN3ZLcfElpNB+fxzF+6vA68Nx92+ZJDqx34yhs0C Fi18qVJCkfzAQN9yk8c702IKHEl+LZVeSkV/4RqbQ6XIh0cQ6+S1mlNIswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDN3c7h3A5/dMPuqO+blIuMCY2+/MB8GA1UdIwQY MBaAFPFKYxiy7W0MgjT5ggj4jeDp1GmOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFVwakdMTHRiUXlDTlBtQ0NQaU40T25VYVk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8zMzU3OTctOWIyMS00YzUwLWIwNDQt Yzg2ZWQ0ODYyNTAxLzEvOFVwakdMTHRiUXlDTlBtQ0NQaU40T25VYVk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8zMzU3OTctOWIyMS00YzUwLWIwNDQtYzg2ZWQ0ODYyNTAx LzEvOFVwakdMTHRiUXlDTlBtQ0NQaU40T25VYVk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxS4XRyK F9ACzKFz1q2olsyTFeTPNbI6iA+7hJqp4ywCidOTKi/NoCoKeYuIwrma0Vc9dnQ+ AJRne23Rh+gCAsedqEhNK4ug16kcOrHInwFX01PXLUY5e+1HxWTAWDLWXtjBpRib 9fTtjh/Kar7poxK+PR5A1icB/QVsrHyKCaoX1yopSjZ9wddcwg5XuhuErG68n4CF V1WoTZakQAmqp0mhCVz2v/nz63hiXevTiAlYvDAhb7tJ67JDPm8TTyXt0TEzkiqy /AuX3uBgNX8YT7WhIKBsX45eqeaDTHIRuy/ijxzTr8+S3MH2imRKuMBzHpMEaJ/G prlL6U5PFqVpiQ== -----END CERTIFICATE-----Generated at Fri Dec 19 03:46:00 2025 by rpki-client