This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft File: 8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft (raw, json) Hash identifier: UZRMD1g/2MpD3aS8R44fOpQJ+HWi7atFfUE3UVpR/lM= Subject key identifier: F2:E6:EC:83:42:CD:9A:FD:EB:16:38:C7:38:0C:B6:1C:AB:3E:5E:0D Authority key identifier: F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC Certificate issuer: /CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc Certificate serial: 019B1F875E5644AA3E51CBCBF3167CDEBD29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft Manifest number: 16D2 Signing time: Mon 15 Dec 2025 01:02:03 +0000 Manifest this update: Mon 15 Dec 2025 01:02:03 +0000 Manifest next update: Tue 16 Dec 2025 01:02:03 +0000 Files and hashes: 1: 8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl (hash: wXa5aWRz7Gcj0jLKWeC8XLfjrhqJjJi4mLR+5ieCHfs=) 2: C3nJIzqXqtfT9J07ejsBxjCr7Es.roa (hash: 0iPZreySqxS1TmgmvlfhSgIdLiwkUUv4lfeOkL5knpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:5e:56:44:aa:3e:51:cb:cb:f3:16:7c:de:bd:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc Validity Not Before: Dec 15 01:02:03 2025 GMT Not After : Dec 16 01:02:03 2025 GMT Subject: CN=f2e6ec8342cd9afdeb1638c7380cb61cab3e5e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:99:82:c9:16:b5:d3:99:bc:73:b3:12:24:9c: 72:dd:cd:a2:5c:47:5a:aa:12:fe:e7:f3:9f:66:28: a7:0c:b7:e0:df:aa:94:f0:c8:5e:3d:79:84:b6:e4: ac:71:82:34:f8:9f:45:5d:b7:82:57:f8:11:67:e0: 13:f9:5a:bd:82:bc:fa:4b:cf:df:a6:50:97:39:d2: 1f:10:b7:66:c2:e2:e7:fb:0d:61:0b:c2:e4:08:e6: ec:33:d0:47:f2:41:db:6e:3a:77:8d:1f:f7:2c:24: fa:60:32:37:ca:37:ad:fb:dc:2e:14:ac:b2:2a:ee: 5a:ce:f2:01:a1:84:0a:d7:bd:4d:fb:4f:3f:e9:b1: 79:8c:5f:d0:7d:2c:44:69:63:d1:f3:fe:f4:8e:f8: d6:3c:41:e2:cb:93:d1:90:52:29:2e:b8:b1:81:7d: a6:87:cd:91:58:11:29:16:44:90:e8:a9:25:c4:d7: d5:7b:6f:3a:c4:a0:15:3c:2f:9c:f5:6f:9f:db:f9: c3:58:31:42:be:39:96:8d:ce:7c:e1:3b:d2:20:0c: 16:e8:f0:89:6d:63:9d:f5:00:de:14:f9:99:10:bc: 1c:e2:ab:1a:2d:e9:7d:1e:b8:1d:b3:7a:9e:b0:27: 0c:b3:62:a9:fc:0d:94:b6:cf:8f:6d:e6:9c:db:8d: ab:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E6:EC:83:42:CD:9A:FD:EB:16:38:C7:38:0C:B6:1C:AB:3E:5E:0D X509v3 Authority Key Identifier: keyid:F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:ff:bf:f4:96:e9:11:25:5b:30:de:8e:0d:05:4f:ca:31:8b: db:58:dc:c4:f9:aa:25:49:42:9b:10:2d:b7:a8:c2:aa:57:99: 53:10:3d:17:a0:a8:a9:9e:ea:fc:e5:08:74:f5:88:78:ff:72: 98:6b:6f:84:0d:70:75:7e:8b:5d:ee:c0:83:3d:36:0d:d0:c6: d7:05:b5:f4:28:f6:d4:e5:9e:11:2b:78:3e:30:d6:78:ad:c2: 97:65:c0:98:3b:4d:de:1e:63:71:5d:8f:ad:8e:34:af:8c:6c: c6:c1:4b:8b:51:5e:4b:7b:35:ee:97:a5:d9:09:93:31:81:5e: f9:6c:6e:66:7c:1c:2f:e9:7d:21:07:e6:b3:30:e0:19:d2:fa: 72:9d:00:01:57:77:e3:ad:5a:5a:4a:a6:18:38:5e:e7:de:57: 5a:f0:01:56:47:36:69:91:d4:f2:9f:65:f9:ec:73:28:52:f2: 3a:5a:ea:c5:17:91:27:e6:da:eb:5a:b6:d0:f4:5e:e9:7d:34: e9:91:5e:53:87:b1:d4:d9:c0:43:c3:33:eb:99:d5:cb:6a:64: 84:26:34:f4:e5:88:ee:71:5d:73:a2:19:af:14:5b:87:fc:c9: 9a:1e:05:98:4b:8d:b6:89:49:bb:1f:2c:aa:aa:5b:68:2a:39: 72:cd:7c:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfh15WRKo+UcvL8xZ83r0pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZWY2YTZjZmNlMzQzZjkxNGM5YWQ5NGMzNDEwZGEwMGE3 Y2QxY2MwHhcNMjUxMjE1MDEwMjAzWhcNMjUxMjE2MDEwMjAzWjAzMTEwLwYDVQQD EyhmMmU2ZWM4MzQyY2Q5YWZkZWIxNjM4YzczODBjYjYxY2FiM2U1ZTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZmCyRa105m8c7MSJJxy3c2iXEda qhL+5/OfZiinDLfg36qU8MhePXmEtuSscYI0+J9FXbeCV/gRZ+AT+Vq9grz6S8/f plCXOdIfELdmwuLn+w1hC8LkCObsM9BH8kHbbjp3jR/3LCT6YDI3yjet+9wuFKyy Ku5azvIBoYQK171N+08/6bF5jF/QfSxEaWPR8/70jvjWPEHiy5PRkFIpLrixgX2m h82RWBEpFkSQ6KklxNfVe286xKAVPC+c9W+f2/nDWDFCvjmWjc584TvSIAwW6PCJ bWOd9QDeFPmZELwc4qsaLel9Hrgds3qesCcMs2Kp/A2Uts+Pbeac242rxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLm7INCzZr96xY4xzgMthyrPl4NMB8GA1UdIwQY MBaAFPPvamz840P5FMmtlMNBDaAKfNHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOC05cWJQempRX2tVeWEyVXcwRU5vQXA4MGN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85MzNlZGMtMjMwZi00YmZjLWJjNDct MmM0NzYzZDY0ZDQzLzEvOC05cWJQempRX2tVeWEyVXcwRU5vQXA4MGN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi85MzNlZGMtMjMwZi00YmZjLWJjNDctMmM0NzYzZDY0ZDQz LzEvOC05cWJQempRX2tVeWEyVXcwRU5vQXA4MGN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/+/9Jbp ESVbMN6ODQVPyjGL21jcxPmqJUlCmxAtt6jCqleZUxA9F6CoqZ7q/OUIdPWIeP9y mGtvhA1wdX6LXe7Agz02DdDG1wW19Cj21OWeESt4PjDWeK3Cl2XAmDtN3h5jcV2P rY40r4xsxsFLi1FeS3s17pel2QmTMYFe+WxuZnwcL+l9IQfmszDgGdL6cp0AAVd3 461aWkqmGDhe595XWvABVkc2aZHU8p9l+exzKFLyOlrqxReRJ+ba61q20PRe6X00 6ZFeU4ex1NnAQ8Mz65nVy2pkhCY09OWI7nFdc6IZrxRbh/zJmh4FmEuNtolJux8s qqpbaCo5cs18Zg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:51:42 2025 by rpki-client