This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft File: n8UDUANWwjcveVsQ0PfVid9p_Is.mft (raw, json) Hash identifier: N/hpEtDs9EK7mpR8MvIlgxSwY4ttairBlCUBZu6a2tE= Subject key identifier: A2:41:B7:7D:77:AA:D2:41:F2:CF:2F:63:5B:10:45:87:B2:9C:8E:B9 Authority key identifier: 9F:C5:03:50:03:56:C2:37:2F:79:5B:10:D0:F7:D5:89:DF:69:FC:8B Certificate issuer: /CN=9fc503500356c2372f795b10d0f7d589df69fc8b Certificate serial: 019B10133EE675D9AA94E64788FACAA74529 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft Manifest number: 176E Signing time: Fri 12 Dec 2025 01:00:55 +0000 Manifest this update: Fri 12 Dec 2025 01:00:55 +0000 Manifest next update: Sat 13 Dec 2025 01:00:55 +0000 Files and hashes: 1: n8UDUANWwjcveVsQ0PfVid9p_Is.crl (hash: CRRRYdDiQG6E6CS7I02FQHrGxvDJeoyxe+t0dtSBCzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:3e:e6:75:d9:aa:94:e6:47:88:fa:ca:a7:45:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fc503500356c2372f795b10d0f7d589df69fc8b Validity Not Before: Dec 12 01:00:55 2025 GMT Not After : Dec 13 01:00:55 2025 GMT Subject: CN=a241b77d77aad241f2cf2f635b104587b29c8eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:81:b1:27:7e:51:d2:6c:c6:7b:5d:90:c7:f1: 40:08:11:da:30:e5:1e:68:43:65:ce:da:c7:44:a3: 69:9d:2d:5c:14:19:48:1b:29:8a:6d:97:b7:55:f3: c2:96:03:ba:b7:c1:60:ef:13:ff:55:c6:d4:93:e3: f9:76:37:cb:d1:28:71:67:39:a9:8c:7e:98:92:f9: 7a:32:9d:4c:60:83:84:42:07:3b:13:3f:55:a3:8e: ed:82:f4:d1:1b:4a:e2:9c:72:93:d1:2b:64:33:0e: 69:18:8d:b2:d4:d1:da:3c:13:e4:ce:cc:71:f0:6e: 50:80:42:0f:ae:46:90:29:1e:1a:9b:90:ba:ff:f5: 88:dd:9c:9f:43:c6:8a:21:20:41:83:ad:f4:f4:26: db:73:36:bb:65:ca:db:31:63:09:ff:35:7f:c0:7d: 0b:eb:2e:73:ec:38:a8:5a:ee:58:f9:b4:f5:f3:84: 47:5e:a0:fe:29:40:67:77:6e:dc:38:7c:41:aa:17: e7:a1:da:29:a2:58:23:1c:0f:6e:e3:c2:a8:28:75: 98:02:1a:20:fb:64:86:e0:63:1f:ba:1b:ed:d4:a0: 30:87:ce:f0:bd:8c:1c:52:c5:f5:ea:3e:85:68:2f: 5c:32:ea:08:1b:e9:d4:76:6d:c2:f5:7e:f8:3f:24: 7e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:41:B7:7D:77:AA:D2:41:F2:CF:2F:63:5B:10:45:87:B2:9C:8E:B9 X509v3 Authority Key Identifier: keyid:9F:C5:03:50:03:56:C2:37:2F:79:5B:10:D0:F7:D5:89:DF:69:FC:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:85:a1:5d:35:82:5f:45:70:70:ad:68:3f:cb:07:07:bf:1e: 1e:a2:53:b4:2f:0a:a3:da:d5:c8:0b:f1:e1:2e:bf:a0:17:1f: 82:01:ec:3d:d0:f4:69:e5:67:9f:f7:28:a0:25:ad:60:c8:04: 3f:a1:da:cd:a7:be:75:5f:1d:35:6c:b3:e3:13:91:f7:60:75: 50:5b:59:09:4f:61:33:2d:04:44:8e:7c:7c:cd:e4:e0:88:83: 44:55:43:ec:9a:9c:2d:88:95:b6:33:da:b6:70:bc:38:e2:a6: 0b:7b:df:16:65:12:2d:ef:89:3d:0f:f5:74:44:cd:34:b2:21: 83:be:61:cc:a0:59:1e:5c:0e:34:a9:02:97:ff:ed:3c:d1:79: a9:af:5a:0a:f4:02:df:2a:e1:7e:3a:be:8e:05:da:9a:9d:ea: e1:a6:54:70:89:2d:a0:8c:59:c5:e2:91:7e:0c:e8:24:32:d6: 0e:2a:63:fe:7d:b9:16:57:8f:4c:4f:d2:54:b7:95:f3:c6:e7: d3:e3:66:1d:75:93:86:70:b7:28:0f:e4:2a:50:37:0b:90:58: ed:fb:ed:c3:61:5b:44:8f:49:d7:49:3f:0d:a5:e1:b2:86:f5: ee:77:dc:9a:a3:f4:ff:61:05:9a:20:88:66:e9:da:66:07:d4: ec:2d:3c:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQEz7mddmqlOZHiPrKp0UpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYzUwMzUwMDM1NmMyMzcyZjc5NWIxMGQwZjdkNTg5ZGY2 OWZjOGIwHhcNMjUxMjEyMDEwMDU1WhcNMjUxMjEzMDEwMDU1WjAzMTEwLwYDVQQD EyhhMjQxYjc3ZDc3YWFkMjQxZjJjZjJmNjM1YjEwNDU4N2IyOWM4ZWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoGxJ35R0mzGe12Qx/FACBHaMOUe aENlztrHRKNpnS1cFBlIGymKbZe3VfPClgO6t8Fg7xP/VcbUk+P5djfL0ShxZzmp jH6Ykvl6Mp1MYIOEQgc7Ez9Vo47tgvTRG0rinHKT0StkMw5pGI2y1NHaPBPkzsxx 8G5QgEIPrkaQKR4am5C6//WI3ZyfQ8aKISBBg6309Cbbcza7ZcrbMWMJ/zV/wH0L 6y5z7DioWu5Y+bT184RHXqD+KUBnd27cOHxBqhfnodopolgjHA9u48KoKHWYAhog +2SG4GMfuhvt1KAwh87wvYwcUsX16j6FaC9cMuoIG+nUdm3C9X74PyR+mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJBt313qtJB8s8vY1sQRYeynI65MB8GA1UdIwQY MBaAFJ/FA1ADVsI3L3lbEND31YnfafyLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjhVRFVBTld3amN2ZVZzUTBQZlZpZDlwX0lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83OTFjMzktZDgzOC00OWUzLTg5ZWEt ODQwODE2NmJiNzYxLzEvbjhVRFVBTld3amN2ZVZzUTBQZlZpZDlwX0lzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC83OTFjMzktZDgzOC00OWUzLTg5ZWEtODQwODE2NmJiNzYx LzEvbjhVRFVBTld3amN2ZVZzUTBQZlZpZDlwX0lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4WhXTWC X0VwcK1oP8sHB78eHqJTtC8Ko9rVyAvx4S6/oBcfggHsPdD0aeVnn/cooCWtYMgE P6Hazae+dV8dNWyz4xOR92B1UFtZCU9hMy0ERI58fM3k4IiDRFVD7JqcLYiVtjPa tnC8OOKmC3vfFmUSLe+JPQ/1dETNNLIhg75hzKBZHlwONKkCl//tPNF5qa9aCvQC 3yrhfjq+jgXamp3q4aZUcIktoIxZxeKRfgzoJDLWDipj/n25FlePTE/SVLeV88bn 0+NmHXWThnC3KA/kKlA3C5BY7fvtw2FbRI9J10k/DaXhsob17nfcmqP0/2EFmiCI ZunaZgfU7C08gw== -----END CERTIFICATE-----Generated at Fri Dec 12 06:58:38 2025 by rpki-client