This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft File: 8jgjdZZpSOIWiOi6E4OkowngVi8.mft (raw, json) Hash identifier: 4TnFuneDMpf76omoyiYA1ujF6z68HaDCprARJUxIDA0= Subject key identifier: F0:DC:49:5F:F9:56:46:05:54:4C:EF:75:E0:92:00:FE:53:9A:FA:67 Authority key identifier: F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F Certificate issuer: /CN=f2382375966948e21688e8ba1383a4a309e0562f Certificate serial: 019B4625DB1D65D2755FB791AE5DDDF535BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 13:00:44 +0000 Manifest this update: Mon 22 Dec 2025 13:00:44 +0000 Manifest next update: Tue 23 Dec 2025 13:00:44 +0000 Files and hashes: 1: 8jgjdZZpSOIWiOi6E4OkowngVi8.crl (hash: JtMiXdS16L7lJvDcUlaq105ejbCkc2ADc4K1w2c1m5I=) 2: K1nEMmqR-bv_HJOMVOAQTlZLbDU.roa (hash: W5Jwdvi7etvP6GxGLNbBoK0ap2sodrYQoCXcswND0as=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:25:db:1d:65:d2:75:5f:b7:91:ae:5d:dd:f5:35:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2382375966948e21688e8ba1383a4a309e0562f Validity Not Before: Dec 22 13:00:44 2025 GMT Not After : Dec 23 13:00:44 2025 GMT Subject: CN=f0dc495ff9564605544cef75e09200fe539afa67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2b:ff:e5:85:a8:11:fe:e9:31:2d:ba:c7:2a: 6a:46:e0:34:4e:7e:4c:70:34:91:a7:94:be:f0:ba: 6b:9f:2e:f0:7e:37:c7:65:d1:ab:7d:b2:de:c9:b8: 1f:fa:3c:cc:98:7b:a3:03:bb:39:93:ae:82:20:4e: 98:4e:f8:48:aa:d1:62:9a:e6:7c:96:0b:0e:2e:8c: bd:f6:69:bd:67:51:8e:3c:73:7a:cc:47:1b:36:1d: 9a:69:ae:18:d0:47:d1:d8:81:dd:4e:51:1d:1c:30: bd:93:85:68:f4:37:b8:87:e2:9e:19:c3:1d:79:55: 18:2c:6c:94:b3:de:29:3e:2c:2a:b5:6c:e6:3d:b3: 09:33:71:65:55:bc:a3:dd:bf:37:44:cf:87:b2:12: 7d:02:55:fb:12:94:60:69:62:61:1f:88:5e:4c:c6: 89:7f:bb:4a:91:09:64:cf:04:7d:b5:56:1a:58:4b: d3:de:9d:db:1a:9f:73:80:c4:c1:e8:71:00:d7:a5: 1b:cb:87:f9:e4:47:06:67:cc:e8:5f:b3:d9:5a:55: 00:b7:31:20:81:fc:a4:2d:02:ad:2b:d2:7b:61:8f: 2f:ec:ed:54:04:87:ad:8d:92:70:5d:d8:af:e5:e7: bb:33:52:5b:75:cc:2d:30:3d:98:72:18:f9:ec:d6: 5a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DC:49:5F:F9:56:46:05:54:4C:EF:75:E0:92:00:FE:53:9A:FA:67 X509v3 Authority Key Identifier: keyid:F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:21:53:9c:3c:c3:3f:00:40:45:bc:46:04:de:73:f4:f1:69: 1f:66:7a:09:c5:a3:35:37:3c:d7:f3:53:3f:f9:a1:a0:7b:e2: 88:b8:4d:e4:91:48:08:d3:77:70:10:41:a6:17:69:09:82:e2: 94:72:c1:22:59:31:6e:d1:5c:f8:b8:8c:0a:77:ce:fe:f4:ed: ae:6e:10:57:a3:ec:bf:9c:dd:d4:01:71:a0:7c:7b:00:12:59: 37:c3:4a:1c:8b:ee:32:76:d9:23:95:b6:39:de:a0:7d:a7:27: 56:e6:c4:8e:9f:83:ed:e5:56:b4:a5:8b:b0:50:f7:dc:df:2a: 62:d4:0b:2f:c8:34:3f:f1:88:d2:02:a2:34:3e:52:29:c4:35: e8:2b:0c:c5:c2:20:9a:2c:87:34:bc:b8:04:05:79:28:7c:f9: 2c:c9:25:42:6e:1f:9b:ea:13:63:c9:0d:3b:08:50:f1:96:bc: d4:ab:c6:9a:a9:f4:5f:84:5c:b0:db:75:30:ee:1a:ba:74:ad: a3:62:bc:c3:62:2f:7b:b9:0f:81:0a:8e:43:cb:6e:2c:48:1b: 6c:b8:a8:7b:e3:ec:b2:75:21:2b:07:3f:03:48:dc:1f:da:e1: 89:58:23:b5:55:af:01:40:6d:ab:c9:cb:99:b8:d9:3d:c6:29: 55:62:90:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJdsdZdJ1X7eRrl3d9TW6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMzgyMzc1OTY2OTQ4ZTIxNjg4ZThiYTEzODNhNGEzMDll MDU2MmYwHhcNMjUxMjIyMTMwMDQ0WhcNMjUxMjIzMTMwMDQ0WjAzMTEwLwYDVQQD EyhmMGRjNDk1ZmY5NTY0NjA1NTQ0Y2VmNzVlMDkyMDBmZTUzOWFmYTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyv/5YWoEf7pMS26xypqRuA0Tn5M cDSRp5S+8Lprny7wfjfHZdGrfbLeybgf+jzMmHujA7s5k66CIE6YTvhIqtFimuZ8 lgsOLoy99mm9Z1GOPHN6zEcbNh2aaa4Y0EfR2IHdTlEdHDC9k4Vo9De4h+KeGcMd eVUYLGyUs94pPiwqtWzmPbMJM3FlVbyj3b83RM+HshJ9AlX7EpRgaWJhH4heTMaJ f7tKkQlkzwR9tVYaWEvT3p3bGp9zgMTB6HEA16Uby4f55EcGZ8zoX7PZWlUAtzEg gfykLQKtK9J7YY8v7O1UBIetjZJwXdiv5ee7M1JbdcwtMD2Ychj57NZabwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDcSV/5VkYFVEzvdeCSAP5TmvpnMB8GA1UdIwQY MBaAFPI4I3WWaUjiFojouhODpKMJ4FYvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGpnamRaWnBTT0lXaU9pNkU0T2tvd25nVmk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hZDBmMWEtNmI5NC00ZTBkLThhNGEt ZDJmZDlmZmMzMWJmLzEvOGpnamRaWnBTT0lXaU9pNkU0T2tvd25nVmk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9hZDBmMWEtNmI5NC00ZTBkLThhNGEtZDJmZDlmZmMzMWJm LzEvOGpnamRaWnBTT0lXaU9pNkU0T2tvd25nVmk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiFTnDzD PwBARbxGBN5z9PFpH2Z6CcWjNTc81/NTP/mhoHviiLhN5JFICNN3cBBBphdpCYLi lHLBIlkxbtFc+LiMCnfO/vTtrm4QV6Psv5zd1AFxoHx7ABJZN8NKHIvuMnbZI5W2 Od6gfacnVubEjp+D7eVWtKWLsFD33N8qYtQLL8g0P/GI0gKiND5SKcQ16CsMxcIg miyHNLy4BAV5KHz5LMklQm4fm+oTY8kNOwhQ8Za81KvGmqn0X4RcsNt1MO4aunSt o2K8w2Ive7kPgQqOQ8tuLEgbbLioe+PssnUhKwc/A0jcH9rhiVgjtVWvAUBtq8nL mbjZPcYpVWKQRA== -----END CERTIFICATE-----Generated at Mon Dec 22 20:42:59 2025 by rpki-client