This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft File: 8bmuyqN97cDywE9RvJY_zS5KrMw.mft (raw, json) Hash identifier: dNpLIAIwzWTVIFBHv5pAGN2n9++/lwpl0zDfQoblDW8= Subject key identifier: A1:C9:E3:8C:78:D8:F4:C4:46:A2:F5:48:33:72:8B:64:49:3F:0B:25 Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC Certificate issuer: /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc Certificate serial: 019B3A8F767C152226EC590C06917A3A585A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft Manifest number: 0588 Signing time: Sat 20 Dec 2025 07:00:38 +0000 Manifest this update: Sat 20 Dec 2025 07:00:38 +0000 Manifest next update: Sun 21 Dec 2025 07:00:38 +0000 Files and hashes: 1: 8bmuyqN97cDywE9RvJY_zS5KrMw.crl (hash: qAZj2SCwh94d2H2lI9KbxskDVFCP/2zn5MqqN3RDAqE=) 2: wN3I7D42_Scvh3kTX6wbZgc3STg.roa (hash: +5WZ8eZml5reiYd5KuhYrJcZjNCC9ofGPFNFq+2Hrx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:76:7c:15:22:26:ec:59:0c:06:91:7a:3a:58:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc Validity Not Before: Dec 20 07:00:38 2025 GMT Not After : Dec 21 07:00:38 2025 GMT Subject: CN=a1c9e38c78d8f4c446a2f54833728b64493f0b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:65:6f:f6:08:22:fc:f8:58:a9:c6:0b:cd: 1b:8b:0d:c8:ec:8d:34:06:66:51:01:61:a4:1c:a5: d0:17:7c:83:7b:07:06:fb:c5:b0:7b:ab:d4:6c:9b: 05:07:32:7c:4a:bd:45:25:d6:b9:a2:3f:9f:22:4a: ab:ac:82:5e:7f:f5:ba:32:97:32:76:9f:db:1c:d3: af:f9:9d:02:a3:94:91:fb:5c:d6:f9:cc:c1:5a:d5: a7:74:19:85:3d:c7:e3:3a:82:f1:37:36:c6:98:7b: de:30:cc:24:20:96:45:68:7f:cd:ab:42:89:de:59: 51:c5:77:db:9c:0e:4a:3d:b2:c2:be:8d:1a:22:dd: c9:22:2f:47:ae:85:84:22:88:23:f9:36:e9:7d:40: 94:c5:dd:48:a1:47:98:ca:7c:bb:4e:fb:25:32:2e: a9:bf:e9:61:8b:df:dc:cb:4b:57:09:02:54:86:c6: 7c:07:e8:37:9e:3b:dc:90:bc:e2:41:43:0e:3e:5f: bf:8d:0c:03:6e:c3:82:17:23:26:7b:3a:8a:00:93: 75:44:c1:17:21:a4:fd:f3:11:6c:df:fa:ae:ca:cc: de:4b:e0:24:18:2f:6d:c5:f4:34:b5:6b:16:5d:cf: 97:fa:d6:6f:27:c8:7b:09:e3:c9:f0:b2:0e:b5:68: 9f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C9:E3:8C:78:D8:F4:C4:46:A2:F5:48:33:72:8B:64:49:3F:0B:25 X509v3 Authority Key Identifier: keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f5:55:b0:e2:92:ee:a7:30:a9:e4:c3:b5:69:3f:20:47:e6: 7e:cd:01:0e:32:bc:03:fc:46:b3:ac:d8:3f:3d:33:8f:ae:f7: 4b:e0:86:c8:43:e0:53:c9:d8:78:f4:b7:16:01:3e:2f:2b:98: 1c:fb:b8:98:c3:02:d6:0a:ac:9e:d0:b8:90:7d:43:27:f1:bd: ab:ea:82:99:b4:8f:a7:8d:d8:1a:5c:b2:b8:f1:dc:03:9f:f6: 05:7d:50:7d:cd:fb:f5:b5:6d:38:06:7e:19:1c:5b:1b:f8:43: 35:e4:c3:58:fd:96:eb:a7:d4:1d:59:71:55:05:94:ae:b0:b9: b1:70:5a:b6:45:32:79:3b:64:97:81:3b:13:66:61:ac:58:de: 09:a8:c7:76:d3:67:f7:79:01:9a:5d:1f:44:98:47:01:f2:c1: ac:ae:70:a3:33:5c:85:46:8d:c6:85:f2:04:a5:cf:9d:f7:0e: 11:ea:2e:ca:f5:e9:d4:c4:9a:34:0f:2d:e2:90:2b:d3:0f:43: 46:45:09:9f:36:34:30:98:da:36:ab:cd:41:8a:e3:ce:99:50: 2a:59:96:41:7c:59:04:4d:92:5f:b5:c6:22:04:4f:47:c7:04: 82:78:22:ab:ec:1d:a9:ee:a2:78:d4:0f:a4:be:50:0d:91:25: 3a:b7:c3:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j3Z8FSIm7FkMBpF6OlhaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYjlhZWNhYTM3ZGVkYzBmMmMwNGY1MWJjOTYzZmNkMmU0 YWFjY2MwHhcNMjUxMjIwMDcwMDM4WhcNMjUxMjIxMDcwMDM4WjAzMTEwLwYDVQQD EyhhMWM5ZTM4Yzc4ZDhmNGM0NDZhMmY1NDgzMzcyOGI2NDQ5M2YwYjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlllb/YIIvz4WKnGC80biw3I7I00 BmZRAWGkHKXQF3yDewcG+8Wwe6vUbJsFBzJ8Sr1FJda5oj+fIkqrrIJef/W6Mpcy dp/bHNOv+Z0Co5SR+1zW+czBWtWndBmFPcfjOoLxNzbGmHveMMwkIJZFaH/Nq0KJ 3llRxXfbnA5KPbLCvo0aIt3JIi9HroWEIogj+TbpfUCUxd1IoUeYyny7TvslMi6p v+lhi9/cy0tXCQJUhsZ8B+g3njvckLziQUMOPl+/jQwDbsOCFyMmezqKAJN1RMEX IaT98xFs3/quyszeS+AkGC9txfQ0tWsWXc+X+tZvJ8h7CePJ8LIOtWif+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHJ44x42PTERqL1SDNyi2RJPwslMB8GA1UdIwQY MBaAFPG5rsqjfe3A8sBPUbyWP80uSqzMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGJtdXlxTjk3Y0R5d0U5UnZKWV96UzVLck13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80YmQ3MGMtMDk0YS00M2QwLWFkZGEt MDRmYmQ2ODE4OTZhLzEvOGJtdXlxTjk3Y0R5d0U5UnZKWV96UzVLck13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC80YmQ3MGMtMDk0YS00M2QwLWFkZGEtMDRmYmQ2ODE4OTZh LzEvOGJtdXlxTjk3Y0R5d0U5UnZKWV96UzVLck13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/VVsOKS 7qcwqeTDtWk/IEfmfs0BDjK8A/xGs6zYPz0zj673S+CGyEPgU8nYePS3FgE+LyuY HPu4mMMC1gqsntC4kH1DJ/G9q+qCmbSPp43YGlyyuPHcA5/2BX1Qfc379bVtOAZ+ GRxbG/hDNeTDWP2W66fUHVlxVQWUrrC5sXBatkUyeTtkl4E7E2ZhrFjeCajHdtNn 93kBml0fRJhHAfLBrK5wozNchUaNxoXyBKXPnfcOEeouyvXp1MSaNA8t4pAr0w9D RkUJnzY0MJjaNqvNQYrjzplQKlmWQXxZBE2SX7XGIgRPR8cEgngiq+wdqe6ieNQP pL5QDZElOrfDrg== -----END CERTIFICATE-----Generated at Sat Dec 20 10:34:59 2025 by rpki-client