This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft File: P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft (raw, json) Hash identifier: 6fA5dc9zEehxL6MzZHTTC0tICNYId6FRjTJIPIruP3s= Subject key identifier: 49:CD:44:ED:65:DA:1E:E4:35:DB:85:3A:3E:F0:11:62:70:E3:BD:BC Authority key identifier: 3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A Certificate issuer: /CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a Certificate serial: 019B1013D816A8000A1112D57DFD432CE427 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft Manifest number: 0489 Signing time: Fri 12 Dec 2025 01:01:34 +0000 Manifest this update: Fri 12 Dec 2025 01:01:34 +0000 Manifest next update: Sat 13 Dec 2025 01:01:34 +0000 Files and hashes: 1: P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl (hash: oEDzHcFa0U4MaI6UzMIAWEka4bssC+Zw1IBev32fg+4=) 2: PQ28rfbk5yXRYjcz-QOCkZ4ENM0.roa (hash: YSotQz0qiTv7LM37y7e6zhLaYImvG6ufZU+Z40/a72I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:d8:16:a8:00:0a:11:12:d5:7d:fd:43:2c:e4:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a Validity Not Before: Dec 12 01:01:34 2025 GMT Not After : Dec 13 01:01:34 2025 GMT Subject: CN=49cd44ed65da1ee435db853a3ef0116270e3bdbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:63:84:2f:8f:38:a1:43:2d:5f:a0:2c:16:40: b0:bf:98:e9:fa:bb:c6:eb:b0:60:ea:62:ca:60:54: c6:38:09:64:9b:b8:95:a3:82:cf:63:85:01:e3:ff: 95:91:f0:07:85:dd:bb:23:d3:c2:73:95:d6:af:df: 31:26:76:ce:d8:45:13:fe:e6:d7:c4:c4:ae:66:de: 6b:bd:44:7c:f6:8c:e7:cc:b4:48:86:59:71:82:24: d2:a5:bd:2c:6a:20:46:5b:05:72:1d:9c:51:0a:48: 10:8b:7b:40:98:0d:3b:c8:7f:28:32:1d:33:13:3a: 03:65:1f:f3:74:1f:f8:10:85:a9:7a:b3:3a:4c:1c: ae:30:8d:79:55:31:7d:70:be:5a:d3:87:c5:54:b4: 7c:bc:05:04:d4:0e:0f:e6:7c:27:31:5d:74:19:2f: 3c:a6:ca:db:2c:94:35:05:f5:bc:11:60:5d:a5:96: a1:7d:25:62:dd:1b:7e:86:3c:c4:62:a9:08:a6:d7: 9f:d4:c4:12:8e:c3:a8:16:67:01:a7:70:8b:b8:37: 98:ee:74:5c:80:1c:15:f7:b3:4b:f3:db:9e:51:c5: c0:ea:40:45:dd:6f:37:7c:22:35:dd:40:74:59:ed: 29:93:b2:00:94:42:d6:85:b9:8c:5f:4d:87:2f:73: 97:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CD:44:ED:65:DA:1E:E4:35:DB:85:3A:3E:F0:11:62:70:E3:BD:BC X509v3 Authority Key Identifier: keyid:3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:5a:30:69:6e:c5:a9:62:70:cb:0c:a3:3c:98:d1:91:ad:38: a9:95:2b:ea:37:bf:31:84:fa:48:4e:15:b0:cf:bc:57:77:ff: 8e:92:af:e5:de:82:15:40:f3:40:d6:8c:48:73:b5:a2:df:45: 46:3f:06:6d:83:ac:c6:f1:3e:88:8f:7f:76:fb:02:66:99:4d: 6c:fe:f6:e4:4c:90:2c:32:ae:46:0d:09:91:0b:b5:63:2b:51: 4a:51:8e:6a:e9:1e:62:a7:69:8f:b7:84:bc:0e:5f:8f:84:f1: 80:b8:7d:fd:d8:db:93:c3:e3:f8:f5:8d:fa:01:93:fc:ae:52: b1:9e:bb:ae:f2:fc:54:43:25:19:74:78:18:46:d4:e0:59:64: 53:0a:0c:cc:d0:73:29:fe:a8:cb:ed:69:2a:1d:61:f7:42:79: f2:38:ea:3c:16:7c:1f:0a:db:1c:c9:23:f7:ef:85:6e:07:53: f6:d3:39:91:12:52:7f:18:da:c9:38:5c:cd:d2:9e:d2:be:36: d0:0a:bb:b5:be:f5:d6:f5:65:be:e8:25:67:e0:4e:14:07:a3: e2:81:2c:14:cf:18:26:02:36:e2:9d:8d:f2:f6:dc:5a:72:5b: 97:83:35:56:80:70:28:12:7a:d1:20:e9:34:4b:d4:e3:8d:49: f4:1e:49:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE9gWqAAKERLVff1DLOQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmY2ZmOThhYWE1YjQ4ZGM2MTU4ZDJmYzY1ZjI1YzUwOTdi NWUyNmEwHhcNMjUxMjEyMDEwMTM0WhcNMjUxMjEzMDEwMTM0WjAzMTEwLwYDVQQD Eyg0OWNkNDRlZDY1ZGExZWU0MzVkYjg1M2EzZWYwMTE2MjcwZTNiZGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGOEL484oUMtX6AsFkCwv5jp+rvG 67Bg6mLKYFTGOAlkm7iVo4LPY4UB4/+VkfAHhd27I9PCc5XWr98xJnbO2EUT/ubX xMSuZt5rvUR89oznzLRIhllxgiTSpb0saiBGWwVyHZxRCkgQi3tAmA07yH8oMh0z EzoDZR/zdB/4EIWperM6TByuMI15VTF9cL5a04fFVLR8vAUE1A4P5nwnMV10GS88 psrbLJQ1BfW8EWBdpZahfSVi3Rt+hjzEYqkIptef1MQSjsOoFmcBp3CLuDeY7nRc gBwV97NL89ueUcXA6kBF3W83fCI13UB0We0pk7IAlELWhbmMX02HL3OXtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnNRO1l2h7kNduFOj7wEWJw4728MB8GA1UdIwQY MBaAFD/P+YqqW0jcYVjS/GXyXFCXteJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDhfNWlxcGJTTnhoV05MOFpmSmNVSmUxNG1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zYzUwMjYtNTAxMS00Njg5LTgzNjct N2I0ZTVlMTg0NzM1LzEvUDhfNWlxcGJTTnhoV05MOFpmSmNVSmUxNG1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zYzUwMjYtNTAxMS00Njg5LTgzNjctN2I0ZTVlMTg0NzM1 LzEvUDhfNWlxcGJTTnhoV05MOFpmSmNVSmUxNG1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlowaW7F qWJwywyjPJjRka04qZUr6je/MYT6SE4VsM+8V3f/jpKv5d6CFUDzQNaMSHO1ot9F Rj8GbYOsxvE+iI9/dvsCZplNbP725EyQLDKuRg0JkQu1YytRSlGOaukeYqdpj7eE vA5fj4TxgLh9/djbk8Pj+PWN+gGT/K5SsZ67rvL8VEMlGXR4GEbU4FlkUwoMzNBz Kf6oy+1pKh1h90J58jjqPBZ8HwrbHMkj9++FbgdT9tM5kRJSfxjayThczdKe0r42 0Aq7tb711vVlvuglZ+BOFAej4oEsFM8YJgI24p2N8vbcWnJbl4M1VoBwKBJ60SDp NEvU441J9B5JBA== -----END CERTIFICATE-----Generated at Fri Dec 12 04:04:14 2025 by rpki-client