This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json) Hash identifier: eVPBmiYQl9K8bDmaqxyhdmkrQQkLsuWGLWt+pSmXyVc= Subject key identifier: E9:67:BD:8A:38:C7:46:75:B2:12:BA:94:FE:B0:48:16:88:4B:82:72 Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7 Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7 Certificate serial: 019B24E3CCE83FB20FE8ECC4D5D9D830B56E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft Manifest number: 136C Signing time: Tue 16 Dec 2025 02:01:07 +0000 Manifest this update: Tue 16 Dec 2025 02:01:07 +0000 Manifest next update: Wed 17 Dec 2025 02:01:07 +0000 Files and hashes: 1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: uqIcCQbUBQreReG0uLnYGUujelEW6sHq0j5jyKmtjgQ=) 2: IPgK_RAdsHuRvKKv6Yp_JI973ng.roa (hash: tX54SYM7m1FlAg3IfdN7mYvGyQfWousk3Km0i1Rx1t4=) 3: X6FDOxTNKh52-I33xxvcwTU1qaA.roa (hash: 2Nya6BSwofcloqYL9ndMBA+GqP5w942e0XCFOKQVeZs=) 4: ox2Wfo3GjgI5qclmFBQzRvWFiwk.roa (hash: HIdOko7O9yGAFOy4Nnvp9Ps0Vn1M8Ss4upiUCfRzfB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 02:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:cc:e8:3f:b2:0f:e8:ec:c4:d5:d9:d8:30:b5:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7 Validity Not Before: Dec 16 02:01:07 2025 GMT Not After : Dec 17 02:01:07 2025 GMT Subject: CN=e967bd8a38c74675b212ba94feb04816884b8272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:35:84:1c:d8:a5:12:0c:b6:d5:6c:02:c2:5f: ac:13:8c:58:37:4d:ab:c0:39:22:4e:fc:97:41:67: 2b:42:bd:35:dc:8b:50:ec:0f:1f:04:ae:7c:72:19: 59:03:f0:1a:f8:6f:e5:d1:49:d4:63:88:67:14:15: 0f:fc:32:db:9d:0f:6d:da:99:34:25:73:f6:7a:9a: 02:ec:b9:a4:44:cd:f5:f7:4b:2f:5b:db:77:5f:aa: 2a:3b:73:d2:0c:33:87:b0:c5:7c:35:5c:92:25:97: 07:8e:9d:32:24:ab:97:0b:37:1b:e4:ff:e2:0e:66: 47:e8:bb:83:cb:ea:70:51:b5:38:06:13:e1:c2:33: 32:b6:1f:47:b0:e4:c1:dd:e0:b1:88:88:ad:9b:10: bd:bc:4e:fe:35:a3:01:23:ba:d1:f9:93:0e:05:45: e2:b3:90:f3:df:65:e9:df:e5:e3:d9:f2:99:92:24: 36:30:10:e3:9c:06:e4:22:01:f2:31:a0:58:6c:54: 7e:a4:35:a9:99:61:fd:92:d3:78:23:9a:5f:6f:ba: 1b:c6:58:83:f7:bf:0e:b1:25:73:fe:26:7c:e3:a4: 71:cb:ce:89:01:48:6b:7a:71:50:f5:b6:cc:66:71: f9:35:ea:3c:60:69:7c:cd:60:0e:7a:6e:63:15:05: 78:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:67:BD:8A:38:C7:46:75:B2:12:BA:94:FE:B0:48:16:88:4B:82:72 X509v3 Authority Key Identifier: keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3c:a0:45:90:4e:79:e1:7b:d7:4f:56:de:78:88:ff:31:12: 2e:eb:66:01:ea:b9:dc:9e:3c:56:bc:13:1f:e6:6c:ff:80:6d: b5:bf:db:93:af:97:ed:60:76:21:04:f1:6c:1a:6a:3a:8b:34: 33:0a:9f:60:fb:6c:a8:dd:b1:ff:5b:b9:6f:07:a7:65:89:3b: 71:33:43:91:26:b7:a5:e5:e2:2f:b4:93:31:d3:09:63:25:83: 50:0e:85:2d:59:ba:b4:fc:bb:b8:b8:11:60:f4:60:5c:0c:d8: 0b:82:18:7f:8e:56:bc:bf:0d:4a:38:2f:e0:5c:d2:49:6c:2d: 75:ac:4c:a9:80:fb:1c:9f:6f:96:fc:0f:d2:c8:bb:ee:f0:58: 17:c5:17:08:c6:86:bf:df:15:87:5b:6a:0e:44:5d:73:74:ba: 72:f5:ba:15:5f:e4:a4:8f:2c:a3:04:37:f4:d2:a4:11:34:53: 84:77:73:2c:4e:64:7d:56:94:eb:72:02:21:18:7b:ca:e6:99: 20:1a:fe:13:f8:4d:66:69:cd:a9:fd:a1:b4:b4:78:57:82:76: d3:a4:18:e9:e6:14:20:d0:59:c3:5e:a1:e7:d8:41:54:2d:48: 3c:ef:bc:f1:a7:4b:f6:e0:7a:e2:8c:4f:79:53:bd:cb:59:51: d3:f1:ac:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk48zoP7IP6OzE1dnYMLVuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYTI1M2NkZjUwN2EwM2UxZjU3OWQyMDJkOGRmMTFkNjhm NWMzZDcwHhcNMjUxMjE2MDIwMTA3WhcNMjUxMjE3MDIwMTA3WjAzMTEwLwYDVQQD EyhlOTY3YmQ4YTM4Yzc0Njc1YjIxMmJhOTRmZWIwNDgxNjg4NGI4MjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzWEHNilEgy21WwCwl+sE4xYN02r wDkiTvyXQWcrQr013ItQ7A8fBK58chlZA/Aa+G/l0UnUY4hnFBUP/DLbnQ9t2pk0 JXP2epoC7LmkRM3190svW9t3X6oqO3PSDDOHsMV8NVySJZcHjp0yJKuXCzcb5P/i DmZH6LuDy+pwUbU4BhPhwjMyth9HsOTB3eCxiIitmxC9vE7+NaMBI7rR+ZMOBUXi s5Dz32Xp3+Xj2fKZkiQ2MBDjnAbkIgHyMaBYbFR+pDWpmWH9ktN4I5pfb7obxliD 978OsSVz/iZ846Rxy86JAUhrenFQ9bbMZnH5Neo8YGl8zWAOem5jFQV41QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlnvYo4x0Z1shK6lP6wSBaIS4JyMB8GA1UdIwQY MBaAFPKiU831B6A+H1edIC2N8R1o9cPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjct YmU0ZDVkMDlkNzEwLzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjctYmU0ZDVkMDlkNzEw LzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjygRZBO eeF7109W3niI/zESLutmAeq53J48VrwTH+Zs/4Bttb/bk6+X7WB2IQTxbBpqOos0 MwqfYPtsqN2x/1u5bwenZYk7cTNDkSa3peXiL7STMdMJYyWDUA6FLVm6tPy7uLgR YPRgXAzYC4IYf45WvL8NSjgv4FzSSWwtdaxMqYD7HJ9vlvwP0si77vBYF8UXCMaG v98Vh1tqDkRdc3S6cvW6FV/kpI8sowQ39NKkETRThHdzLE5kfVaU63ICIRh7yuaZ IBr+E/hNZmnNqf2htLR4V4J206QY6eYUINBZw16h59hBVC1IPO+88adL9uB64oxP eVO9y1lR0/Gsug== -----END CERTIFICATE-----Generated at Tue Dec 16 12:51:08 2025 by rpki-client