This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft File: 8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft (raw, json) Hash identifier: +gsqAAG1k9D5Hngr2RA35xEhLLwAssr4qMYxW0ZCZ6g= Subject key identifier: 44:08:BC:07:4E:40:D1:06:04:37:03:B8:F0:7B:F7:46:97:13:18:DB Authority key identifier: F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC Certificate issuer: /CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc Certificate serial: 019B1BAA8AD80C290ED48752821EDF8DE386 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft Manifest number: 16D0 Signing time: Sun 14 Dec 2025 07:02:00 +0000 Manifest this update: Sun 14 Dec 2025 07:02:00 +0000 Manifest next update: Mon 15 Dec 2025 07:02:00 +0000 Files and hashes: 1: 8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl (hash: ku35mWQ51yRMLcd9vbs0zhhfV7Wg86Cc31SEPTNY9pg=) 2: C3nJIzqXqtfT9J07ejsBxjCr7Es.roa (hash: 0iPZreySqxS1TmgmvlfhSgIdLiwkUUv4lfeOkL5knpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:aa:8a:d8:0c:29:0e:d4:87:52:82:1e:df:8d:e3:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc Validity Not Before: Dec 14 07:02:00 2025 GMT Not After : Dec 15 07:02:00 2025 GMT Subject: CN=4408bc074e40d106043703b8f07bf746971318db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:eb:b5:2f:f7:39:6f:3d:fd:67:77:95:5e:1a: 28:25:56:fb:e2:cd:83:ac:2e:96:cb:06:d5:01:d3: 1c:4c:02:5e:b8:7a:6e:97:78:ab:bf:8c:b4:30:4a: f6:73:4f:8b:5f:ca:04:39:50:86:4d:c3:c5:95:d8: 1d:34:ba:1b:02:29:d5:9a:f4:47:85:ff:47:42:ae: 7c:ac:17:ed:6a:9b:46:97:16:da:25:f6:07:fe:da: 7d:c8:0c:89:ba:f4:74:01:02:00:c5:58:99:d8:74: e6:32:c3:18:bb:a1:2f:f2:84:99:49:f9:77:a2:5e: df:13:fb:0e:c1:65:41:73:87:1e:c8:62:58:39:2b: 78:d2:9d:42:c8:73:37:be:48:14:c3:50:e4:17:fe: d4:d5:47:44:82:e9:03:b7:74:72:14:aa:8e:9c:77: 4e:b8:c2:13:20:63:5f:35:c6:27:93:08:88:9f:5a: a4:db:2e:72:52:49:29:3e:ec:6f:90:a9:df:2e:04: a2:86:01:a5:35:e0:f0:1e:76:f4:ec:77:e0:c3:eb: e3:64:6e:df:77:82:6f:c4:40:72:38:4f:7e:01:c8: 37:a6:04:27:24:74:e5:46:25:dc:a2:f9:ca:7a:05: 41:e8:11:5f:b0:ce:50:32:01:f9:5e:6a:f8:43:7e: 8a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:08:BC:07:4E:40:D1:06:04:37:03:B8:F0:7B:F7:46:97:13:18:DB X509v3 Authority Key Identifier: keyid:F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:53:e1:e2:7a:b2:a6:5e:8f:0d:8d:76:23:be:45:e5:2f:30: eb:de:22:90:2f:cc:f6:8b:56:b9:38:d6:a9:05:c3:80:e0:23: 2d:da:68:20:e6:60:a2:ad:0c:07:e1:75:65:f0:8e:98:76:eb: f5:61:19:89:0c:9c:2d:a4:70:5b:81:78:d5:13:19:51:e6:ae: a6:70:25:34:b4:64:71:48:61:a4:70:4e:76:5b:96:b6:22:61: 89:6a:cb:6c:9a:58:7c:bb:bb:98:a2:96:ff:c1:20:22:42:58: ec:3a:68:51:83:5c:fd:a6:f0:27:6f:68:f6:f6:42:da:c6:40: 16:28:e7:bf:73:27:ca:06:97:8f:9a:2f:0b:e8:aa:56:75:68: 6c:7b:c1:a6:be:4d:cb:e3:a4:59:46:fc:3f:9e:e2:6c:45:e7: b0:2a:98:80:bc:f1:5b:b6:02:6b:68:20:2a:1a:b9:59:af:4d: 2f:ed:02:8b:af:f0:98:98:d3:d1:32:3f:4b:b9:2e:b7:9a:b3: 0b:52:f5:fa:58:6f:33:77:7e:3e:94:da:41:c2:41:2b:26:90: 23:28:76:14:e7:ff:2f:95:b3:6e:3a:33:70:39:14:49:f2:fe: f4:e8:c3:a7:a8:31:78:30:0e:57:21:1b:30:7c:b5:9c:ab:b2: 17:33:18:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqorYDCkO1IdSgh7fjeOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZWY2YTZjZmNlMzQzZjkxNGM5YWQ5NGMzNDEwZGEwMGE3 Y2QxY2MwHhcNMjUxMjE0MDcwMjAwWhcNMjUxMjE1MDcwMjAwWjAzMTEwLwYDVQQD Eyg0NDA4YmMwNzRlNDBkMTA2MDQzNzAzYjhmMDdiZjc0Njk3MTMxOGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eu1L/c5bz39Z3eVXhooJVb74s2D rC6WywbVAdMcTAJeuHpul3irv4y0MEr2c0+LX8oEOVCGTcPFldgdNLobAinVmvRH hf9HQq58rBftaptGlxbaJfYH/tp9yAyJuvR0AQIAxViZ2HTmMsMYu6Ev8oSZSfl3 ol7fE/sOwWVBc4ceyGJYOSt40p1CyHM3vkgUw1DkF/7U1UdEgukDt3RyFKqOnHdO uMITIGNfNcYnkwiIn1qk2y5yUkkpPuxvkKnfLgSihgGlNeDwHnb07Hfgw+vjZG7f d4JvxEByOE9+Acg3pgQnJHTlRiXcovnKegVB6BFfsM5QMgH5Xmr4Q36K8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQIvAdOQNEGBDcDuPB790aXExjbMB8GA1UdIwQY MBaAFPPvamz840P5FMmtlMNBDaAKfNHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOC05cWJQempRX2tVeWEyVXcwRU5vQXA4MGN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85MzNlZGMtMjMwZi00YmZjLWJjNDct MmM0NzYzZDY0ZDQzLzEvOC05cWJQempRX2tVeWEyVXcwRU5vQXA4MGN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi85MzNlZGMtMjMwZi00YmZjLWJjNDctMmM0NzYzZDY0ZDQz LzEvOC05cWJQempRX2tVeWEyVXcwRU5vQXA4MGN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlPh4nqy pl6PDY12I75F5S8w694ikC/M9otWuTjWqQXDgOAjLdpoIOZgoq0MB+F1ZfCOmHbr 9WEZiQycLaRwW4F41RMZUeaupnAlNLRkcUhhpHBOdluWtiJhiWrLbJpYfLu7mKKW /8EgIkJY7DpoUYNc/abwJ29o9vZC2sZAFijnv3MnygaXj5ovC+iqVnVobHvBpr5N y+OkWUb8P57ibEXnsCqYgLzxW7YCa2ggKhq5Wa9NL+0Ci6/wmJjT0TI/S7kut5qz C1L1+lhvM3d+PpTaQcJBKyaQIyh2FOf/L5WzbjozcDkUSfL+9OjDp6gxeDAOVyEb MHy1nKuyFzMYfA== -----END CERTIFICATE-----Generated at Sun Dec 14 09:35:55 2025 by rpki-client