This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft File: 8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json) Hash identifier: GuMc49tyF6Qg30gaZCJ6xvXLwbhJoxrEHzgL7uQhFdQ= Subject key identifier: 2A:27:2C:A6:B3:DC:50:E7:FD:44:9B:04:51:91:16:2E:CF:B6:D7:A2 Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2 Certificate issuer: /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2 Certificate serial: 019B2176217D94B5A70C89FB5F02407C4228 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft Manifest number: 170B Signing time: Mon 15 Dec 2025 10:02:28 +0000 Manifest this update: Mon 15 Dec 2025 10:02:28 +0000 Manifest next update: Tue 16 Dec 2025 10:02:28 +0000 Files and hashes: 1: 0TX6bG3AW3Ort-Rt8qCc1TR12hM.roa (hash: XGv/DCUiOeegPa2KE+7yV2/GQEE1zmTFiu2PMDuWufY=) 2: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: DGSeFxRDI/jeDKMgqtLlunyvjH7JuD+Opwq4I9fG9a4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:21:7d:94:b5:a7:0c:89:fb:5f:02:40:7c:42:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2 Validity Not Before: Dec 15 10:02:28 2025 GMT Not After : Dec 16 10:02:28 2025 GMT Subject: CN=2a272ca6b3dc50e7fd449b045191162ecfb6d7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ee:46:77:1a:f2:3f:3c:0b:41:bc:55:52:b8: 14:4b:d3:b1:ac:cc:7a:bf:c2:6e:b1:e5:0f:4c:6e: 3f:25:92:7b:7f:c9:d6:52:e2:00:09:f1:1c:b3:ba: 6c:9e:fc:00:f3:39:78:5e:e3:7b:d9:6f:39:74:ca: 88:72:88:f3:7e:95:b6:10:62:55:5b:68:f9:ee:cb: 15:01:ce:71:cd:1c:ad:a3:9b:cc:d6:d8:23:98:ca: da:c3:99:5f:38:97:4c:6f:93:23:ea:b5:f9:7a:79: d4:16:fd:80:ac:ae:c0:df:5f:36:41:b7:18:67:86: 0a:64:58:32:1f:72:99:30:20:61:90:1e:16:12:6e: ea:10:9a:2a:92:da:43:15:76:91:6a:e5:a6:e9:da: 47:eb:91:a5:41:d1:08:13:0b:af:af:3f:88:cc:9a: c4:1f:b8:d0:bd:ed:09:c3:79:8e:47:49:06:e9:fc: 11:22:8e:1e:b2:5d:2a:ed:b8:38:65:94:c4:f9:a3: 22:bb:b3:01:60:32:91:35:c7:eb:99:2e:1d:4c:dc: ab:68:7b:4c:b7:04:15:67:d8:72:7c:13:c7:e3:3f: 2e:b4:21:ff:55:50:4b:4f:5a:82:b1:e3:09:14:10: f0:89:5d:ee:f5:0b:0d:a1:4f:e0:f7:30:4d:7d:06: 19:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:27:2C:A6:B3:DC:50:E7:FD:44:9B:04:51:91:16:2E:CF:B6:D7:A2 X509v3 Authority Key Identifier: keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:dc:8b:50:c4:b0:75:15:db:35:3d:e3:ca:e1:b9:ff:b9:94: f6:41:0d:3b:5d:04:60:6d:3c:f4:53:69:84:64:78:6b:e8:3b: 51:cc:0d:f3:77:b7:7c:2f:ee:b7:6b:f5:fb:3d:08:63:dd:2b: cf:b2:7f:fc:5f:b2:a8:7b:d1:5d:14:1d:b6:a0:65:1c:bf:14: 31:e5:93:e8:c0:42:37:df:22:a5:8c:5d:35:ad:04:9b:1e:be: ec:fd:5c:98:4c:3e:01:fa:14:72:6a:f6:b9:82:48:ed:94:47: 85:75:9a:75:b0:47:51:3b:9e:c2:83:e5:48:5b:74:f8:5d:4b: 7d:57:02:6b:90:dc:94:3a:35:5a:39:ef:b9:50:05:e7:19:8f: 86:64:bf:5b:9b:85:a3:14:73:14:5f:09:ba:1b:a8:a9:8c:31: 2f:e9:29:78:7a:dc:aa:36:dc:e7:6b:a4:84:d5:71:71:e1:a6: db:82:4e:21:0a:3b:da:25:4d:e8:e2:d2:eb:e1:8f:5d:95:1e: 63:c3:d7:c1:d2:5e:0f:ae:d7:e5:9a:03:4f:42:70:1b:86:36: 09:e3:80:ad:45:ac:84:52:68:ba:56:60:2f:25:12:43:f1:87: a0:10:5a:00:3e:04:be:a7:c4:39:6f:42:9c:41:13:91:17:6e: 1f:ef:e4:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdiF9lLWnDIn7XwJAfEIoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmIwZDBiZTI5NmRjMWI3MTlkMjQ0MGZiNmFkOWM3NWQw OGUyZTIwHhcNMjUxMjE1MTAwMjI4WhcNMjUxMjE2MTAwMjI4WjAzMTEwLwYDVQQD EygyYTI3MmNhNmIzZGM1MGU3ZmQ0NDliMDQ1MTkxMTYyZWNmYjZkN2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+5GdxryPzwLQbxVUrgUS9OxrMx6 v8JuseUPTG4/JZJ7f8nWUuIACfEcs7psnvwA8zl4XuN72W85dMqIcojzfpW2EGJV W2j57ssVAc5xzRyto5vM1tgjmMraw5lfOJdMb5Mj6rX5ennUFv2ArK7A3182QbcY Z4YKZFgyH3KZMCBhkB4WEm7qEJoqktpDFXaRauWm6dpH65GlQdEIEwuvrz+IzJrE H7jQve0Jw3mOR0kG6fwRIo4esl0q7bg4ZZTE+aMiu7MBYDKRNcfrmS4dTNyraHtM twQVZ9hyfBPH4z8utCH/VVBLT1qCseMJFBDwiV3u9QsNoU/g9zBNfQYZKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFConLKaz3FDn/USbBFGRFi7PtteiMB8GA1UdIwQY MBaAFPD7DQviltwbcZ0kQPtq2cddCOLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8zZGVkZjYtM2VjNy00YjQwLWFkYWEt YzBlMjc4NzM2Yzg4LzEvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8zZGVkZjYtM2VjNy00YjQwLWFkYWEtYzBlMjc4NzM2Yzg4 LzEvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9yLUMSw dRXbNT3jyuG5/7mU9kENO10EYG089FNphGR4a+g7UcwN83e3fC/ut2v1+z0IY90r z7J//F+yqHvRXRQdtqBlHL8UMeWT6MBCN98ipYxdNa0Emx6+7P1cmEw+AfoUcmr2 uYJI7ZRHhXWadbBHUTuewoPlSFt0+F1LfVcCa5DclDo1WjnvuVAF5xmPhmS/W5uF oxRzFF8JuhuoqYwxL+kpeHrcqjbc52ukhNVxceGm24JOIQo72iVN6OLS6+GPXZUe Y8PXwdJeD67X5ZoDT0JwG4Y2CeOArUWshFJoulZgLyUSQ/GHoBBaAD4EvqfEOW9C nEETkRduH+/k+w== -----END CERTIFICATE-----Generated at Mon Dec 15 20:16:10 2025 by rpki-client