This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json) Hash identifier: T2ssVG1xLd3yQaVP6oAqmfq36ezWV6C7kXcoBoIt+54= Subject key identifier: 51:03:5B:69:5A:5C:08:5A:CE:B1:F2:58:E9:2D:35:42:BD:2D:66:61 Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95 Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195 Certificate serial: 019B0F375448D8A3386ED397B01F85E646BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft Manifest number: 11D6 Signing time: Thu 11 Dec 2025 21:00:42 +0000 Manifest this update: Thu 11 Dec 2025 21:00:42 +0000 Manifest next update: Fri 12 Dec 2025 21:00:42 +0000 Files and hashes: 1: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: UDABCvHqlsCoiXrfphRDON7NqA9ppUwWODfEC5JKZhQ=) 2: dPscEX-Zy8evMbxWuU7vJ2Ixhv8.roa (hash: D+72QcpH+TK76A0ijjgkoRMMQ5NsFbRIC95DTaeOIrc=) 3: eKaWRxU48jVjME70Pg-sKw71ysM.roa (hash: Fvcwn/TmHPQrbKfRxQXdczBfOElJLonqigBoxqw+IFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:54:48:d8:a3:38:6e:d3:97:b0:1f:85:e6:46:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195 Validity Not Before: Dec 11 21:00:42 2025 GMT Not After : Dec 12 21:00:42 2025 GMT Subject: CN=51035b695a5c085aceb1f258e92d3542bd2d6661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7b:75:11:46:6f:ec:14:43:f4:b3:5d:f0:cf: e9:cf:c5:4d:6a:14:ee:e5:fa:e8:3f:49:b9:86:67: df:78:24:80:ae:28:f5:bd:a7:f0:59:9f:2d:58:49: 5c:11:f0:ea:cb:15:b1:92:b9:83:53:ef:df:5b:73: 67:c7:e1:95:1a:7e:13:ec:1d:0a:89:e9:b5:d3:b5: 31:af:92:7a:a3:f9:69:b2:b8:72:b2:18:6f:3c:07: 96:83:7f:90:50:3a:3e:9a:c3:f9:55:11:e0:7d:8b: d0:f5:77:87:ac:85:81:04:f8:40:a0:26:5a:9f:ee: d5:c9:c5:34:07:40:07:2e:ab:76:63:1c:5d:0c:75: 11:64:42:04:44:d6:04:e5:4b:4f:a1:d6:e4:ab:64: 82:b3:7c:67:ba:51:6e:0c:3e:96:74:be:a8:c8:e9: dd:1f:c0:b2:c8:05:f9:37:e2:ca:c6:36:56:d9:ab: 76:8b:06:a9:17:9b:3e:a9:db:d1:5e:b1:3d:53:c6: d3:59:a5:a6:6a:77:20:e6:fe:b2:a7:06:df:80:e7: f0:1a:76:7e:a9:72:fe:01:c2:4c:25:9f:5b:cb:7b: 5c:c9:8e:78:8b:81:a2:3b:1b:4d:40:51:c3:82:fb: 9c:61:64:60:44:81:58:db:c9:d5:84:3d:45:ff:e5: 1e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:03:5B:69:5A:5C:08:5A:CE:B1:F2:58:E9:2D:35:42:BD:2D:66:61 X509v3 Authority Key Identifier: keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:9a:90:5f:c3:59:3f:99:57:ba:44:b2:86:8b:4b:be:ff:c3: 9f:c3:ad:00:c4:7e:dc:71:d4:19:13:16:07:b7:00:95:b9:e2: ed:26:03:b5:71:a1:3d:d1:d2:71:72:18:4c:e8:c1:34:f0:2d: 25:a8:90:c9:d9:93:40:f2:87:ae:87:65:08:08:ef:a9:e6:fb: 8d:9b:de:dd:da:82:bd:44:54:65:b7:09:92:da:36:ed:6f:ff: 06:e2:36:5c:3f:d8:8e:7e:64:a1:b3:96:74:a2:56:99:49:a4: e2:fd:c8:30:76:26:74:55:71:de:0e:f2:05:7c:0c:dd:42:9c: b3:a0:c9:37:76:74:8b:86:43:5b:28:b1:85:8d:75:3a:8d:c2: b7:a4:40:6a:5f:d9:cf:c0:71:a2:4c:86:6b:99:71:8a:f0:87: 37:78:ba:dc:cd:7d:85:10:48:34:71:cb:4e:e4:0b:e3:99:6c: 4e:d3:7b:63:29:63:8b:9e:2a:be:e0:db:80:b6:64:12:3c:76: eb:b0:9f:88:57:9e:aa:38:cb:4c:f4:08:1d:77:d6:96:36:5c: 06:48:93:6d:43:92:fa:e3:77:67:e7:15:75:bd:e8:f6:2c:e0: bd:75:b0:c0:ef:8c:ae:6a:c7:8c:40:58:b6:86:c4:be:0f:24: 3d:56:7e:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN1RI2KM4btOXsB+F5ka8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjFkZjQ0YjM0NjgyM2NjZThjNjY0M2I1ZmE2OTE5YWZi MjMxOTUwHhcNMjUxMjExMjEwMDQyWhcNMjUxMjEyMjEwMDQyWjAzMTEwLwYDVQQD Eyg1MTAzNWI2OTVhNWMwODVhY2ViMWYyNThlOTJkMzU0MmJkMmQ2NjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnt1EUZv7BRD9LNd8M/pz8VNahTu 5froP0m5hmffeCSArij1vafwWZ8tWElcEfDqyxWxkrmDU+/fW3Nnx+GVGn4T7B0K iem107Uxr5J6o/lpsrhyshhvPAeWg3+QUDo+msP5VRHgfYvQ9XeHrIWBBPhAoCZa n+7VycU0B0AHLqt2YxxdDHURZEIERNYE5UtPodbkq2SCs3xnulFuDD6WdL6oyOnd H8CyyAX5N+LKxjZW2at2iwapF5s+qdvRXrE9U8bTWaWmancg5v6ypwbfgOfwGnZ+ qXL+AcJMJZ9by3tcyY54i4GiOxtNQFHDgvucYWRgRIFY28nVhD1F/+UemwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEDW2laXAhazrHyWOktNUK9LWZhMB8GA1UdIwQY MBaAFPJh30SzRoI8zoxmQ7X6aRmvsjGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMt NTc1ODYxNTYzNTRlLzEvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMtNTc1ODYxNTYzNTRl LzEvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzpqQX8NZ P5lXukSyhotLvv/Dn8OtAMR+3HHUGRMWB7cAlbni7SYDtXGhPdHScXIYTOjBNPAt JaiQydmTQPKHrodlCAjvqeb7jZve3dqCvURUZbcJkto27W//BuI2XD/Yjn5kobOW dKJWmUmk4v3IMHYmdFVx3g7yBXwM3UKcs6DJN3Z0i4ZDWyixhY11Oo3Ct6RAal/Z z8BxokyGa5lxivCHN3i63M19hRBINHHLTuQL45lsTtN7Yylji54qvuDbgLZkEjx2 67CfiFeeqjjLTPQIHXfWljZcBkiTbUOS+uN3Z+cVdb3o9izgvXWwwO+MrmrHjEBY tobEvg8kPVZ+6Q== -----END CERTIFICATE-----Generated at Fri Dec 12 03:43:11 2025 by rpki-client