This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft File: 8QMX8k1xpRbXUEO-kPWr4_ocklk.mft (raw, json) Hash identifier: zMtSdIDQ4hiXHpRmCiOjby68TTpNqXyBdoid2ytgaLo= Subject key identifier: C0:FF:74:CF:BE:A4:F4:F7:DC:1F:F0:0A:FE:A8:2B:5E:41:D2:A0:79 Authority key identifier: F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59 Certificate issuer: /CN=f10317f24d71a516d75043be90f5abe3fa1c9259 Certificate serial: 019B334450E846CD066E286BFEFAD6DBA7A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft Manifest number: 1337 Signing time: Thu 18 Dec 2025 21:01:13 +0000 Manifest this update: Thu 18 Dec 2025 21:01:13 +0000 Manifest next update: Fri 19 Dec 2025 21:01:13 +0000 Files and hashes: 1: 8QMX8k1xpRbXUEO-kPWr4_ocklk.crl (hash: Fqs8pPQrT3cIulXY+7pj/QvucrKlfnzrfrHOJUownHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:50:e8:46:cd:06:6e:28:6b:fe:fa:d6:db:a7:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f10317f24d71a516d75043be90f5abe3fa1c9259 Validity Not Before: Dec 18 21:01:13 2025 GMT Not After : Dec 19 21:01:13 2025 GMT Subject: CN=c0ff74cfbea4f4f7dc1ff00afea82b5e41d2a079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:05:16:e5:11:25:18:2c:fa:fd:7d:8f:f6:0d: d9:14:da:54:5b:7c:cf:78:b0:6f:60:a6:91:9a:f6: 8e:28:8a:59:76:ce:f9:d4:cb:d6:87:d7:3d:7d:9c: b5:a5:62:7d:01:bc:d9:d2:e8:3b:dc:22:d0:eb:09: 90:8d:48:4a:23:a7:e2:47:18:9c:ad:15:59:fa:30: c2:fa:08:f6:e3:57:78:d1:a1:c4:cc:48:96:b7:9a: 7a:7a:fe:38:c1:83:db:e6:a7:c6:2c:f3:92:96:50: b3:02:62:e5:18:47:68:f9:54:35:69:28:ad:0a:bb: db:fc:31:d9:9b:a1:ad:ad:85:79:f6:1a:48:73:1d: 6c:67:a7:6b:f6:a7:85:d9:a8:96:8c:86:6d:81:bd: d9:6d:61:b4:be:10:c0:82:4e:45:e3:3f:54:d1:70: ca:b5:8c:99:83:f4:21:02:b9:fe:b2:7c:cd:24:8f: 94:fe:67:a8:31:8c:15:fa:23:35:24:a3:1a:02:86: 85:7a:9b:f5:2c:a3:ba:fa:fd:4f:5c:39:54:dc:59: ee:57:76:9a:27:ec:d8:d2:b0:1f:e6:b0:04:33:ef: 4a:4b:b0:75:0a:e7:e1:07:6d:d1:d4:fe:86:ea:da: 09:2f:cc:41:cc:26:72:c5:03:53:a4:77:d8:a7:fd: 60:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FF:74:CF:BE:A4:F4:F7:DC:1F:F0:0A:FE:A8:2B:5E:41:D2:A0:79 X509v3 Authority Key Identifier: keyid:F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:fc:1f:99:ba:d7:32:95:a3:80:d1:82:98:06:1e:0c:3b:2d: 2b:f2:22:87:6b:38:ce:11:cc:52:23:50:c8:1e:f3:26:e7:8f: 58:2f:b7:8e:f4:46:f7:3b:eb:2b:b5:69:c6:68:db:3c:17:5d: 46:e3:9a:ac:84:43:40:6a:d0:22:f8:a7:7d:10:44:40:bd:ca: f0:78:3b:1f:64:0f:f1:70:b8:01:cc:1c:04:04:8d:c4:88:85: a3:7b:84:14:a3:00:2d:be:4a:5d:3c:c6:f9:ec:78:3a:d2:89: 98:8b:a2:6a:2d:99:12:d1:f0:0c:27:4b:e6:f8:0c:0e:fa:4d: f8:6f:23:f5:b7:47:09:c7:1c:89:fd:5d:a0:6f:28:cf:50:ff: 5e:1d:1c:79:82:b8:c5:33:0b:06:b3:12:5d:21:94:0f:68:33: ea:ca:3b:4a:77:af:f1:6a:20:11:bf:6c:1b:d0:8d:6c:46:03: d9:99:b1:c5:e8:4a:f7:cd:18:6d:d8:a2:4e:91:3e:8d:93:94: 75:54:02:b5:a3:63:91:ec:ac:60:3f:5f:1c:b4:e8:da:f2:c5: 6e:5a:58:36:38:96:a2:2f:b6:35:3e:8f:c4:a0:60:a1:32:94: bd:e2:20:8e:22:c6:29:42:44:c4:55:be:d8:2d:d8:e3:54:1b: 49:fa:0a:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRFDoRs0Gbihr/vrW26eoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMDMxN2YyNGQ3MWE1MTZkNzUwNDNiZTkwZjVhYmUzZmEx YzkyNTkwHhcNMjUxMjE4MjEwMTEzWhcNMjUxMjE5MjEwMTEzWjAzMTEwLwYDVQQD EyhjMGZmNzRjZmJlYTRmNGY3ZGMxZmYwMGFmZWE4MmI1ZTQxZDJhMDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgUW5RElGCz6/X2P9g3ZFNpUW3zP eLBvYKaRmvaOKIpZds751MvWh9c9fZy1pWJ9AbzZ0ug73CLQ6wmQjUhKI6fiRxic rRVZ+jDC+gj241d40aHEzEiWt5p6ev44wYPb5qfGLPOSllCzAmLlGEdo+VQ1aSit Crvb/DHZm6GtrYV59hpIcx1sZ6dr9qeF2aiWjIZtgb3ZbWG0vhDAgk5F4z9U0XDK tYyZg/QhArn+snzNJI+U/meoMYwV+iM1JKMaAoaFepv1LKO6+v1PXDlU3FnuV3aa J+zY0rAf5rAEM+9KS7B1CufhB23R1P6G6toJL8xBzCZyxQNTpHfYp/1gpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMD/dM++pPT33B/wCv6oK15B0qB5MB8GA1UdIwQY MBaAFPEDF/JNcaUW11BDvpD1q+P6HJJZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFFNWDhrMXhwUmJYVUVPLWtQV3I0X29ja2xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xMzVhMDMtZTExYS00NzBhLTg0NmMt NjZkNDlkZjUzZWYxLzEvOFFNWDhrMXhwUmJYVUVPLWtQV3I0X29ja2xrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8xMzVhMDMtZTExYS00NzBhLTg0NmMtNjZkNDlkZjUzZWYx LzEvOFFNWDhrMXhwUmJYVUVPLWtQV3I0X29ja2xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/wfmbrX MpWjgNGCmAYeDDstK/Iih2s4zhHMUiNQyB7zJuePWC+3jvRG9zvrK7VpxmjbPBdd RuOarIRDQGrQIvinfRBEQL3K8Hg7H2QP8XC4AcwcBASNxIiFo3uEFKMALb5KXTzG +ex4OtKJmIuiai2ZEtHwDCdL5vgMDvpN+G8j9bdHCcccif1doG8oz1D/Xh0ceYK4 xTMLBrMSXSGUD2gz6so7Snev8WogEb9sG9CNbEYD2ZmxxehK980YbdiiTpE+jZOU dVQCtaNjkeysYD9fHLTo2vLFblpYNjiWoi+2NT6PxKBgoTKUveIgjiLGKUJExFW+ 2C3Y41QbSfoKKw== -----END CERTIFICATE-----Generated at Fri Dec 19 03:21:56 2025 by rpki-client