This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft File: 8G37T34-N0VYDoyPxHAj_7H6kW0.mft (raw, json) Hash identifier: 72FtJnV7/CGu7qyRE+cBCjL8gM5IJyu2dHYA2AD3rnc= Subject key identifier: 5D:C3:04:7B:2E:AF:B7:AE:82:A7:97:C7:6D:E9:76:6D:C9:6C:41:7B Authority key identifier: F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D Certificate issuer: /CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d Certificate serial: 019B5976568289C23F702BCB90E0BE4D0BAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft Manifest number: 06CE Signing time: Fri 26 Dec 2025 07:01:26 +0000 Manifest this update: Fri 26 Dec 2025 07:01:26 +0000 Manifest next update: Sat 27 Dec 2025 07:01:26 +0000 Files and hashes: 1: 8G37T34-N0VYDoyPxHAj_7H6kW0.crl (hash: KEG+XmqGb62XuZDShmDASsjW9pqhYydMq63rH/J8E7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:56:82:89:c2:3f:70:2b:cb:90:e0:be:4d:0b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d Validity Not Before: Dec 26 07:01:26 2025 GMT Not After : Dec 27 07:01:26 2025 GMT Subject: CN=5dc3047b2eafb7ae82a797c76de9766dc96c417b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f9:99:6f:a3:12:c6:97:e0:95:55:17:78:92: 42:55:f5:51:2c:c2:6b:4e:b3:47:f4:29:62:89:28: 92:c1:d4:ce:b5:b5:14:ec:75:8a:10:4c:67:8b:fd: 08:34:23:ca:e5:d9:c0:d4:04:a3:cb:c2:ed:49:36: dd:8c:01:68:7f:b1:26:3f:a8:40:fa:59:c3:88:c3: 13:f0:d3:66:7e:a3:57:14:40:23:bb:7e:e3:68:4c: af:67:aa:56:32:5e:a9:69:ed:1b:95:68:3e:da:21: db:c7:69:17:b3:74:15:b7:3a:a9:91:2b:b1:4d:69: 47:1b:16:42:a8:d0:9c:c3:7c:d3:84:bb:3e:e8:90: 15:92:9f:27:5c:66:9c:90:b9:d8:80:9d:9d:b2:a0: 6a:e2:cb:aa:4c:2e:3a:2c:15:2c:79:0e:a6:03:c7: b2:78:21:5b:5a:cb:40:78:63:64:2b:c3:12:f3:5b: 85:eb:0e:21:11:17:e4:e0:99:57:26:57:e0:09:f7: 9b:55:08:10:61:60:1c:9c:e2:37:96:22:eb:b3:a2: b2:ce:0b:64:3b:e6:b2:63:d4:92:9b:e1:4c:46:10: 0a:ab:54:9d:19:97:79:81:ee:7d:0d:d2:92:df:ba: 7a:6e:df:9b:26:e5:2d:7e:bb:bb:be:40:85:c7:a6: 46:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C3:04:7B:2E:AF:B7:AE:82:A7:97:C7:6D:E9:76:6D:C9:6C:41:7B X509v3 Authority Key Identifier: keyid:F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e9:01:41:ac:fc:c8:25:63:32:74:99:5e:82:ac:5c:ad:14:72: 21:bf:fe:82:db:1e:55:fa:68:47:d3:da:f9:6b:ea:dc:b4:83: c6:bd:a2:91:c5:20:16:e6:89:24:cb:c5:70:17:2d:11:9e:94: 33:d3:70:53:6c:3d:58:15:75:89:af:37:ed:ad:11:b7:03:a2: 3c:72:aa:71:e6:59:fe:6f:e8:3c:ba:3b:84:bc:b0:b8:e6:30: d7:a5:df:42:dd:24:58:e6:4d:f5:23:e5:a6:a3:71:24:9f:fd: 81:17:b9:ba:5e:06:b7:31:ba:c4:72:6a:f5:af:7b:71:a0:d3: c0:65:38:e6:29:20:ec:0e:eb:57:02:db:74:7a:37:7e:76:4e: 4e:e2:9b:34:79:f3:08:a1:03:dd:5c:55:a8:96:06:f3:b2:92: e8:a7:64:cc:4b:94:07:3b:1a:64:46:9f:75:45:29:c4:5e:dd: 95:e3:06:c6:bb:04:2c:5f:33:f1:d0:d6:5a:2d:cd:ad:54:a4: 56:aa:7b:1b:26:98:27:91:de:47:d9:f3:e4:4e:48:ec:7a:c1: 5d:a3:34:3c:71:48:1b:6c:93:6b:3f:a4:b3:c2:df:eb:ea:db: c9:d4:ec:d3:eb:a4:de:83:37:55:99:13:19:9b:08:ad:2d:61: 6b:c9:4b:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdlaCicI/cCvLkOC+TQuuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNmRmYjRmN2UzZTM3NDU1ODBlOGM4ZmM0NzAyM2ZmYjFm YTkxNmQwHhcNMjUxMjI2MDcwMTI2WhcNMjUxMjI3MDcwMTI2WjAzMTEwLwYDVQQD Eyg1ZGMzMDQ3YjJlYWZiN2FlODJhNzk3Yzc2ZGU5NzY2ZGM5NmM0MTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/mZb6MSxpfglVUXeJJCVfVRLMJr TrNH9CliiSiSwdTOtbUU7HWKEExni/0INCPK5dnA1ASjy8LtSTbdjAFof7EmP6hA +lnDiMMT8NNmfqNXFEAju37jaEyvZ6pWMl6pae0blWg+2iHbx2kXs3QVtzqpkSux TWlHGxZCqNCcw3zThLs+6JAVkp8nXGackLnYgJ2dsqBq4suqTC46LBUseQ6mA8ey eCFbWstAeGNkK8MS81uF6w4hERfk4JlXJlfgCfebVQgQYWAcnOI3liLrs6Kyzgtk O+ayY9SSm+FMRhAKq1SdGZd5ge59DdKS37p6bt+bJuUtfru7vkCFx6ZGLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3DBHsur7eugqeXx23pdm3JbEF7MB8GA1UdIwQY MBaAFPBt+09+PjdFWA6Mj8RwI/+x+pFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEczN1QzNC1OMFZZRG95UHhIQWpfN0g2a1cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82ZTFkZjgtNmViYy00YjJlLTkxYjQt YjAzZjk0ODgwNGJlLzEvOEczN1QzNC1OMFZZRG95UHhIQWpfN0g2a1cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82ZTFkZjgtNmViYy00YjJlLTkxYjQtYjAzZjk0ODgwNGJl LzEvOEczN1QzNC1OMFZZRG95UHhIQWpfN0g2a1cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6QFBrPzI JWMydJlegqxcrRRyIb/+gtseVfpoR9Pa+Wvq3LSDxr2ikcUgFuaJJMvFcBctEZ6U M9NwU2w9WBV1ia837a0RtwOiPHKqceZZ/m/oPLo7hLywuOYw16XfQt0kWOZN9SPl pqNxJJ/9gRe5ul4GtzG6xHJq9a97caDTwGU45ikg7A7rVwLbdHo3fnZOTuKbNHnz CKED3VxVqJYG87KS6KdkzEuUBzsaZEafdUUpxF7dleMGxrsELF8z8dDWWi3NrVSk Vqp7GyaYJ5HeR9nz5E5I7HrBXaM0PHFIG2yTaz+ks8Lf6+rbydTs0+uk3oM3VZkT GZsIrS1ha8lL9A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:05 2025 by rpki-client