This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft File: 8A5uimGIP2gBZbX0FUhfjw1PWo0.mft (raw, json) Hash identifier: YqCDMZ/Hroivaj+ttvOCYaRRI1nv1yLbLe+olUqrjL4= Subject key identifier: 88:1F:C2:EA:6B:4C:66:87:70:E6:F5:EE:5E:52:B3:92:AB:83:84:F5 Authority key identifier: F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D Certificate issuer: /CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d Certificate serial: 019B48825104E85308BB7792BC686132CCD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft Manifest number: 1487 Signing time: Tue 23 Dec 2025 00:00:58 +0000 Manifest this update: Tue 23 Dec 2025 00:00:58 +0000 Manifest next update: Wed 24 Dec 2025 00:00:58 +0000 Files and hashes: 1: 8A5uimGIP2gBZbX0FUhfjw1PWo0.crl (hash: /CAZGYJCWphkoHYULxrZp4brsTO/Os5kfu8r2cNyqGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:51:04:e8:53:08:bb:77:92:bc:68:61:32:cc:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d Validity Not Before: Dec 23 00:00:58 2025 GMT Not After : Dec 24 00:00:58 2025 GMT Subject: CN=881fc2ea6b4c668770e6f5ee5e52b392ab8384f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:58:65:da:5f:36:e8:6d:68:c5:64:79:e9:1c: be:e9:52:49:9f:90:9d:25:88:99:ed:a2:75:82:e1: 60:6f:9e:c2:7b:bc:29:8d:43:4d:c7:33:78:16:63: ef:15:af:37:7f:40:8f:ae:6b:24:65:c9:79:42:c4: 9d:32:1c:84:c0:c1:a3:19:3a:a0:2a:d7:e7:4b:01: 4f:0d:0d:fa:c1:e5:da:96:7d:9c:1a:de:99:73:9b: 85:c5:9c:13:a2:7a:a9:ad:81:eb:fb:7b:4d:51:91: 47:bf:24:47:0a:45:20:91:3a:bb:b7:54:0f:47:ad: f5:8e:03:26:e6:10:ae:0e:23:af:2c:8e:fc:49:ab: de:3c:8c:66:ae:bd:dd:f1:b4:93:68:a6:01:ec:be: 7b:15:4e:b0:24:d8:1f:c5:d6:c2:f5:98:54:0f:d3: 02:51:7a:a1:e5:72:85:8a:fa:57:ac:0d:e0:3a:7a: a5:84:fd:10:bb:c5:ab:a7:5e:bc:e1:25:6d:da:62: f9:f9:08:95:ff:a6:14:89:3b:bf:8a:df:5c:16:06: 7d:7d:43:f6:28:db:41:c1:12:79:0a:d9:2e:e4:e7: 31:82:af:ac:f0:04:43:2a:b4:f0:2b:82:ca:e5:26: 12:d4:f0:7b:b0:4c:2a:37:6a:1c:f6:24:8c:8a:f6: e3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1F:C2:EA:6B:4C:66:87:70:E6:F5:EE:5E:52:B3:92:AB:83:84:F5 X509v3 Authority Key Identifier: keyid:F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:45:76:59:2b:4a:a8:02:88:01:22:b7:60:e9:80:b8:bc:47: c6:a7:f7:fd:67:11:27:9a:91:50:55:84:88:ea:07:ac:31:b7: 5d:53:81:58:37:31:10:78:f8:dc:a0:99:59:39:dc:8c:ee:13: 71:69:ae:3a:44:1b:00:c1:e2:bd:f5:80:2d:91:fc:5a:2f:ac: f9:da:8b:e6:9a:67:ba:6e:e5:ba:56:0d:27:23:7f:1e:5f:81: ba:a0:f2:65:9e:86:a9:eb:55:b7:15:87:1a:d4:83:16:de:bc: bb:ce:49:0a:e7:17:9a:d0:6b:b1:20:ee:97:b9:24:72:71:14: 3e:5d:3d:03:0b:51:d9:e3:6b:44:77:bd:89:e2:71:7d:dc:9a: 4f:cc:31:c0:8c:8c:44:12:59:0c:90:40:92:5e:88:9f:90:eb: bc:71:db:2e:82:48:61:b9:84:d1:3a:b2:3c:ca:e7:1b:a1:bf: 00:0c:5a:a4:a8:01:ca:1e:75:ee:4b:f1:84:f8:69:e2:93:f0: f8:dd:7f:00:bb:6d:cc:67:7d:14:87:89:1a:de:a0:76:3d:96: 71:46:63:85:ce:8d:31:0d:18:ba:a0:d0:0e:70:d5:87:c0:80: e0:0a:c9:c7:12:5d:2c:b5:67:10:64:12:2b:ab:86:ae:c2:00: 3c:1c:b2:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIglEE6FMIu3eSvGhhMszZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMGU2ZThhNjE4ODNmNjgwMTY1YjVmNDE1NDg1ZjhmMGQ0 ZjVhOGQwHhcNMjUxMjIzMDAwMDU4WhcNMjUxMjI0MDAwMDU4WjAzMTEwLwYDVQQD Eyg4ODFmYzJlYTZiNGM2Njg3NzBlNmY1ZWU1ZTUyYjM5MmFiODM4NGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVhl2l826G1oxWR56Ry+6VJJn5Cd JYiZ7aJ1guFgb57Ce7wpjUNNxzN4FmPvFa83f0CPrmskZcl5QsSdMhyEwMGjGTqg KtfnSwFPDQ36weXaln2cGt6Zc5uFxZwTonqprYHr+3tNUZFHvyRHCkUgkTq7t1QP R631jgMm5hCuDiOvLI78SavePIxmrr3d8bSTaKYB7L57FU6wJNgfxdbC9ZhUD9MC UXqh5XKFivpXrA3gOnqlhP0Qu8Wrp1684SVt2mL5+QiV/6YUiTu/it9cFgZ9fUP2 KNtBwRJ5Ctku5Ocxgq+s8ARDKrTwK4LK5SYS1PB7sEwqN2oc9iSMivbjTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgfwuprTGaHcOb17l5Ss5Krg4T1MB8GA1UdIwQY MBaAFPAObophiD9oAWW19BVIX48NT1qNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEE1dWltR0lQMmdCWmJYMEZVaGZqdzFQV28wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS84NDI4MTUtMTM4YS00M2RhLTg3MmMt M2NmZjE0ODI4ZGZkLzEvOEE1dWltR0lQMmdCWmJYMEZVaGZqdzFQV28wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS84NDI4MTUtMTM4YS00M2RhLTg3MmMtM2NmZjE0ODI4ZGZk LzEvOEE1dWltR0lQMmdCWmJYMEZVaGZqdzFQV28wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN0V2WStK qAKIASK3YOmAuLxHxqf3/WcRJ5qRUFWEiOoHrDG3XVOBWDcxEHj43KCZWTncjO4T cWmuOkQbAMHivfWALZH8Wi+s+dqL5ppnum7lulYNJyN/Hl+BuqDyZZ6GqetVtxWH GtSDFt68u85JCucXmtBrsSDul7kkcnEUPl09AwtR2eNrRHe9ieJxfdyaT8wxwIyM RBJZDJBAkl6In5DrvHHbLoJIYbmE0TqyPMrnG6G/AAxapKgByh517kvxhPhp4pPw +N1/ALttzGd9FIeJGt6gdj2WcUZjhc6NMQ0YuqDQDnDVh8CA4ArJxxJdLLVnEGQS K6uGrsIAPByyYA== -----END CERTIFICATE-----Generated at Tue Dec 23 06:45:51 2025 by rpki-client