This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft File: 8_74sMHKR-cW2iGdMQKAKH026-M.mft (raw, json) Hash identifier: mrSAhhVy7Dtmm6nprHx1mjtWLKTAVFy5B6fidyX9mJg= Subject key identifier: CB:10:D1:13:40:69:72:78:CF:76:11:A3:24:4E:05:CB:5A:49:6D:DC Authority key identifier: F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3 Certificate issuer: /CN=f3fef8b0c1ca47e716da219d310280287d36ebe3 Certificate serial: 019B2551E4F16A2276347F24C849EE919A91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft Manifest number: 0E08 Signing time: Tue 16 Dec 2025 04:01:22 +0000 Manifest this update: Tue 16 Dec 2025 04:01:22 +0000 Manifest next update: Wed 17 Dec 2025 04:01:22 +0000 Files and hashes: 1: 8_74sMHKR-cW2iGdMQKAKH026-M.crl (hash: JWj4tZ4mGcmynOnONsk77rRLlP3TMIXbs/ZKFKyGMjg=) 2: Nh4smUq7Nayhm_h4hcJhFSXbd98.roa (hash: 0tOyxit0JfWpS02swEQXMIpCvZrxbPbACrr2wxwWLsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:e4:f1:6a:22:76:34:7f:24:c8:49:ee:91:9a:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3fef8b0c1ca47e716da219d310280287d36ebe3 Validity Not Before: Dec 16 04:01:22 2025 GMT Not After : Dec 17 04:01:22 2025 GMT Subject: CN=cb10d11340697278cf7611a3244e05cb5a496ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3f:ee:bd:47:8f:d7:aa:77:82:c0:26:94:bf: 42:6e:b1:d3:3e:2d:9e:c4:9f:9b:7b:78:b3:31:19: a4:3d:bb:b6:d3:36:c7:71:32:1a:f9:4f:84:21:a2: 63:d3:e3:47:fc:f9:03:a2:19:5a:61:11:16:b1:6b: 3d:7f:3e:75:e6:ac:21:2e:3f:fa:f2:62:b9:eb:d1: 5e:2a:85:12:d4:e8:ae:8a:70:c5:1e:59:ad:59:94: 48:26:f4:02:fa:2a:a5:76:57:2d:fe:09:a6:05:65: 89:e0:8a:1f:da:56:0a:5b:5e:11:04:df:c5:65:bb: 2e:6c:34:c8:fa:bb:d0:0c:0e:17:c4:af:4f:69:d5: 5a:8e:e7:54:5a:7f:ce:e1:4d:7d:65:7c:8b:d3:1e: 6e:1f:41:93:ad:cd:e2:4b:fe:ea:46:34:28:f0:69: 26:78:6b:79:ad:b6:ab:4e:c0:a7:ec:3e:b4:31:7f: 5e:c7:c9:d0:85:eb:1f:79:dc:ee:40:9c:f6:8b:0b: a6:13:e8:a4:05:a0:6b:fc:ae:7d:c5:e2:b4:c1:e4: 11:db:b7:ba:9b:69:f1:98:d2:da:13:eb:8f:46:d0: 0b:9b:7f:9b:3e:e6:68:1e:0a:27:eb:17:52:ed:59: b5:c2:ca:29:5f:8a:8b:64:9a:a0:09:55:f4:f4:52: 0a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:10:D1:13:40:69:72:78:CF:76:11:A3:24:4E:05:CB:5A:49:6D:DC X509v3 Authority Key Identifier: keyid:F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ec:6a:cc:32:19:59:7a:08:a0:62:d8:ef:c1:87:6c:d3:c2: 8f:ef:b3:f2:2c:bb:70:57:96:f1:f9:6f:6e:2a:f7:76:50:9c: 5c:a8:c1:44:13:d5:43:4f:e8:29:c4:3b:f0:cb:e0:a2:9c:08: 46:96:2f:53:2e:1c:25:ec:27:5d:80:ef:0e:ab:ed:3d:ef:04: c7:f8:34:d0:1c:80:6a:60:72:c7:4f:ed:e3:de:19:1b:02:ab: b8:8f:c8:45:7f:07:c8:bc:de:63:96:95:21:62:8e:95:39:95: 73:dc:1c:0e:77:4a:9a:84:9e:8c:19:7a:ee:25:36:dc:8b:97: a1:72:59:98:39:fd:a5:33:cd:3d:34:22:bc:7d:65:14:5d:be: ed:d3:16:55:d3:e4:0a:fe:4d:d3:f9:50:26:d5:24:ec:a0:4d: 27:a0:fb:21:65:a4:02:51:32:73:ab:74:14:19:f0:02:1d:78: b1:6f:ff:eb:6c:21:02:b9:03:e2:c7:5f:c6:34:fd:65:99:96: aa:14:03:71:53:58:27:19:f3:ed:07:a0:07:e0:62:58:b7:f1: ad:26:67:9d:0c:a3:85:2d:05:d4:88:a9:f6:d9:b0:75:71:6c: 39:08:57:b7:39:ea:18:f3:e9:3b:a8:4a:9c:93:c6:9a:8b:92: 4f:74:b7:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUeTxaiJ2NH8kyEnukZqRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZmVmOGIwYzFjYTQ3ZTcxNmRhMjE5ZDMxMDI4MDI4N2Qz NmViZTMwHhcNMjUxMjE2MDQwMTIyWhcNMjUxMjE3MDQwMTIyWjAzMTEwLwYDVQQD EyhjYjEwZDExMzQwNjk3Mjc4Y2Y3NjExYTMyNDRlMDVjYjVhNDk2ZGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz/uvUeP16p3gsAmlL9CbrHTPi2e xJ+be3izMRmkPbu20zbHcTIa+U+EIaJj0+NH/PkDohlaYREWsWs9fz515qwhLj/6 8mK569FeKoUS1OiuinDFHlmtWZRIJvQC+iqldlct/gmmBWWJ4Iof2lYKW14RBN/F ZbsubDTI+rvQDA4XxK9PadVajudUWn/O4U19ZXyL0x5uH0GTrc3iS/7qRjQo8Gkm eGt5rbarTsCn7D60MX9ex8nQhesfedzuQJz2iwumE+ikBaBr/K59xeK0weQR27e6 m2nxmNLaE+uPRtALm3+bPuZoHgon6xdS7Vm1wsopX4qLZJqgCVX09FIKgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsQ0RNAaXJ4z3YRoyROBctaSW3cMB8GA1UdIwQY MBaAFPP++LDBykfnFtohnTECgCh9NuvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOF83NHNNSEtSLWNXMmlHZE1RS0FLSDAyNi1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kNWJkOTgtZmYzNC00MjYzLThkMGYt Zjg3YzUwZGY2ZmI3LzEvOF83NHNNSEtSLWNXMmlHZE1RS0FLSDAyNi1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9kNWJkOTgtZmYzNC00MjYzLThkMGYtZjg3YzUwZGY2ZmI3 LzEvOF83NHNNSEtSLWNXMmlHZE1RS0FLSDAyNi1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALexqzDIZ WXoIoGLY78GHbNPCj++z8iy7cFeW8flvbir3dlCcXKjBRBPVQ0/oKcQ78MvgopwI RpYvUy4cJewnXYDvDqvtPe8Ex/g00ByAamByx0/t494ZGwKruI/IRX8HyLzeY5aV IWKOlTmVc9wcDndKmoSejBl67iU23IuXoXJZmDn9pTPNPTQivH1lFF2+7dMWVdPk Cv5N0/lQJtUk7KBNJ6D7IWWkAlEyc6t0FBnwAh14sW//62whArkD4sdfxjT9ZZmW qhQDcVNYJxnz7QegB+BiWLfxrSZnnQyjhS0F1Iip9tmwdXFsOQhXtznqGPPpO6hK nJPGmouST3S32A== -----END CERTIFICATE-----Generated at Tue Dec 16 09:45:40 2025 by rpki-client