This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft File: 8vZyvbewdlkUflh9RDGqYE92o4Q.mft (raw, json) Hash identifier: g0TEi6k/JsT2qOjw9IR2dTAnwzSwyDJAnPgwjKsjf2M= Subject key identifier: 66:C2:64:76:93:BF:CA:FC:FC:8B:0A:37:9F:42:A3:F2:38:A0:2A:19 Authority key identifier: F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84 Certificate issuer: /CN=f2f672bdb7b07659147e587d4431aa604f76a384 Certificate serial: 019B1570F0F72C58131A966C0BE5CAE2F890 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft Manifest number: 1706 Signing time: Sat 13 Dec 2025 02:01:21 +0000 Manifest this update: Sat 13 Dec 2025 02:01:21 +0000 Manifest next update: Sun 14 Dec 2025 02:01:21 +0000 Files and hashes: 1: 8vZyvbewdlkUflh9RDGqYE92o4Q.crl (hash: BKdNJW2Nl4ZPtmYve1Z4mAe2b4q6OQc18wPZ5NOdXFU=) 2: MZX1sQ-Npgh0Pud-IcGKNSLyo0k.roa (hash: U9/To+oLXeceO29CXxgG6V0U8rAZo8+5KCoNTba0dLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:15:70:f0:f7:2c:58:13:1a:96:6c:0b:e5:ca:e2:f8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f672bdb7b07659147e587d4431aa604f76a384 Validity Not Before: Dec 13 02:01:21 2025 GMT Not After : Dec 14 02:01:21 2025 GMT Subject: CN=66c2647693bfcafcfc8b0a379f42a3f238a02a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e4:5f:1f:18:72:d0:8f:ed:24:00:1b:95:ac: d3:da:1e:93:e7:58:d6:aa:99:a3:6b:74:7e:9e:98: d8:f1:a5:0e:b9:86:22:36:88:4c:2b:6e:7d:b1:ae: 92:eb:0a:cf:24:97:b5:74:d7:a8:56:19:9b:27:17: cf:89:78:1d:20:65:b3:f6:90:7b:a4:ac:10:0e:3c: 1a:52:e9:85:c0:b4:24:23:ab:8d:f1:94:0a:c7:6f: 99:46:58:9f:09:f6:6e:63:81:f3:13:c6:52:4e:0c: 22:21:a5:87:52:c2:38:dc:60:29:10:22:b0:0c:db: e2:bb:1e:d4:6e:f1:bb:e7:fe:68:67:79:40:95:3a: 5c:c4:b0:ab:49:0c:ae:2b:47:a0:7e:c0:70:48:4f: 37:c2:ff:94:f4:54:bc:0b:26:0d:ee:f5:b3:a1:4b: e9:dc:6e:6c:23:5f:78:4e:07:37:cd:d9:5c:f8:11: 67:8f:53:2b:7a:19:8c:41:1a:e1:86:33:e3:34:8d: 18:ef:e5:29:4e:86:13:5f:ba:14:07:2e:09:43:06: 6e:53:bd:6a:89:7f:19:68:03:83:23:c7:66:56:d6: 24:0a:fb:21:be:de:da:9a:52:8e:3a:de:da:80:11: b8:7c:ab:83:49:a8:5d:9a:8f:a8:5e:3b:60:d5:6b: bc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C2:64:76:93:BF:CA:FC:FC:8B:0A:37:9F:42:A3:F2:38:A0:2A:19 X509v3 Authority Key Identifier: keyid:F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b5:4a:d9:6f:4f:47:ff:f2:5a:50:5c:aa:c7:2a:58:b9:3e: 09:d3:f0:e7:2c:b6:39:4f:55:ad:d8:94:78:f0:3e:16:0a:1c: c7:af:e1:3c:d1:79:b4:ce:5a:6f:15:5e:4a:c6:8e:41:12:1a: bf:14:39:b5:71:dc:83:f0:fe:9a:d6:ed:8b:d3:f3:34:c3:48: 6e:7a:10:22:d5:cf:39:cc:42:c2:37:d3:d0:8b:6f:53:ad:fe: d0:86:6d:5d:35:32:aa:a2:b5:5f:b5:17:40:20:e1:21:89:5d: 4c:fa:83:04:d7:ab:c6:c8:54:45:ce:8e:39:6a:5a:11:3a:5d: a4:b4:67:30:04:2e:8f:e5:84:c1:ac:ab:b0:09:30:1e:05:83: d1:91:58:4c:87:eb:24:3e:82:4b:33:80:f0:65:ac:b1:91:4e: d5:c9:f4:43:38:69:48:f6:e9:56:56:2d:ca:52:cb:b4:d2:f8: 82:59:63:81:16:39:db:62:2f:d9:a6:d8:45:b9:6b:8b:2a:7c: 97:1f:7b:3e:c0:bf:75:18:aa:a1:01:70:60:5d:b4:e2:f6:98: e0:8e:52:21:89:8f:fc:2b:3f:9d:d4:80:e4:f0:41:14:4f:fd: 22:6c:a8:7a:e8:a7:15:91:54:07:76:98:d0:c7:ea:2e:5e:59: 4b:44:e1:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsVcPD3LFgTGpZsC+XK4viQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZjY3MmJkYjdiMDc2NTkxNDdlNTg3ZDQ0MzFhYTYwNGY3 NmEzODQwHhcNMjUxMjEzMDIwMTIxWhcNMjUxMjE0MDIwMTIxWjAzMTEwLwYDVQQD Eyg2NmMyNjQ3NjkzYmZjYWZjZmM4YjBhMzc5ZjQyYTNmMjM4YTAyYTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+RfHxhy0I/tJAAblazT2h6T51jW qpmja3R+npjY8aUOuYYiNohMK259sa6S6wrPJJe1dNeoVhmbJxfPiXgdIGWz9pB7 pKwQDjwaUumFwLQkI6uN8ZQKx2+ZRlifCfZuY4HzE8ZSTgwiIaWHUsI43GApECKw DNviux7UbvG75/5oZ3lAlTpcxLCrSQyuK0egfsBwSE83wv+U9FS8CyYN7vWzoUvp 3G5sI194Tgc3zdlc+BFnj1MrehmMQRrhhjPjNI0Y7+UpToYTX7oUBy4JQwZuU71q iX8ZaAODI8dmVtYkCvshvt7amlKOOt7agBG4fKuDSahdmo+oXjtg1Wu8awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbCZHaTv8r8/IsKN59Co/I4oCoZMB8GA1UdIwQY MBaAFPL2cr23sHZZFH5YfUQxqmBPdqOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8zYjFmNTYtODcwNy00NzJjLTg5NzEt NjI2ZWY4OGYyMWE5LzEvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8zYjFmNTYtODcwNy00NzJjLTg5NzEtNjI2ZWY4OGYyMWE5 LzEvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbVK2W9P R//yWlBcqscqWLk+CdPw5yy2OU9VrdiUePA+Fgocx6/hPNF5tM5abxVeSsaOQRIa vxQ5tXHcg/D+mtbti9PzNMNIbnoQItXPOcxCwjfT0ItvU63+0IZtXTUyqqK1X7UX QCDhIYldTPqDBNerxshURc6OOWpaETpdpLRnMAQuj+WEwayrsAkwHgWD0ZFYTIfr JD6CSzOA8GWssZFO1cn0QzhpSPbpVlYtylLLtNL4glljgRY522Iv2abYRblriyp8 lx97PsC/dRiqoQFwYF204vaY4I5SIYmP/Cs/ndSA5PBBFE/9ImyoeuinFZFUB3aY 0MfqLl5ZS0ThTg== -----END CERTIFICATE-----Generated at Sat Dec 13 10:46:18 2025 by rpki-client