This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft File: u8o_JdVGILUO-FIGV2NNOwlrrFc.mft (raw, json) Hash identifier: rkJ1Y2EAKaxFBbBj2U2LXkGzCa72BiwZGmid3+zgxAc= Subject key identifier: 98:B1:DC:22:7F:87:4B:FB:2C:1A:26:3B:01:22:E2:84:04:B1:D7:63 Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57 Certificate issuer: /CN=bbca3f25d54620b50ef8520657634d3b096bac57 Certificate serial: 019AF8E707F34574FDCA3140CC9B32A7539B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft Manifest number: 0F97 Signing time: Sun 07 Dec 2025 13:01:21 +0000 Manifest this update: Sun 07 Dec 2025 13:01:21 +0000 Manifest next update: Mon 08 Dec 2025 13:01:21 +0000 Files and hashes: 1: 9JR9kLeC3mROCyumxdx5UUDi6gE.roa (hash: AP5tnA/PZA5j1wHvMVeBn0pLZ2nrXdAqQyrDJzaFfaA=) 2: u8o_JdVGILUO-FIGV2NNOwlrrFc.crl (hash: +S7plrrn9/eZJO4BjoFdTB6K0OCoja1vsoAuA/Ctr4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:e7:07:f3:45:74:fd:ca:31:40:cc:9b:32:a7:53:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57 Validity Not Before: Dec 7 13:01:21 2025 GMT Not After : Dec 8 13:01:21 2025 GMT Subject: CN=98b1dc227f874bfb2c1a263b0122e28404b1d763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:44:b3:5e:be:cb:b1:60:e4:8e:b9:b2:48:6d: db:d2:06:38:c5:12:25:7e:ed:46:1c:0c:f0:7a:bc: c7:61:13:35:8c:4a:6d:47:a7:9e:19:25:f2:b2:0f: 62:85:43:55:01:f3:e4:9d:4d:d8:20:7f:1a:74:91: 4e:12:67:89:c6:2e:48:fe:75:1c:05:d2:99:d2:d8: bf:e2:2e:f9:09:87:16:b6:2a:20:d5:cf:a7:05:5a: 36:74:17:79:a9:d3:f9:e5:1c:1b:40:15:28:e5:a7: b0:b5:ad:8d:9b:06:3d:d1:72:dc:7d:3f:8b:c8:60: 42:58:7a:62:ee:91:98:13:7b:8b:f6:e9:c9:c6:f6: 87:53:fd:e6:f5:65:b6:c5:6c:0a:0b:5b:5d:fc:2f: 5a:00:0d:06:d2:8e:15:ea:63:11:9f:16:e1:c4:95: ac:4a:14:4a:b0:23:ac:5b:da:14:78:bc:e4:db:b6: c7:66:06:96:ff:49:37:34:69:ec:62:d3:8f:7f:a4: 15:0b:c4:a6:dd:3c:92:64:8b:a0:e2:1d:a8:6b:54: e6:75:54:ae:ad:0c:42:55:ab:71:c2:aa:d0:38:d4: 38:1d:61:54:40:33:18:d9:d3:e2:ed:31:e9:1f:59: 5f:92:aa:ab:8f:ca:0e:29:22:f0:15:4c:b3:03:6b: ca:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B1:DC:22:7F:87:4B:FB:2C:1A:26:3B:01:22:E2:84:04:B1:D7:63 X509v3 Authority Key Identifier: keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ce:8c:5a:2b:64:38:c5:df:c5:b7:d6:bd:e8:1d:5d:ec:a5: 4b:6c:80:c9:3e:5e:81:1f:6c:c7:ff:c5:83:8a:31:b8:f1:d8: 53:95:94:b9:1b:52:6b:aa:0f:6f:af:05:4f:34:ea:ee:10:f5: ef:94:83:f8:9b:b4:6f:24:cb:20:70:ab:29:c2:b9:1e:fc:07: da:cb:22:18:08:a5:09:c9:cb:a5:f9:be:52:63:11:8e:0c:ea: 35:0c:fb:92:45:7f:d6:36:bc:63:c4:bf:84:aa:38:b0:fb:5b: 4d:3e:dd:65:0c:c8:53:56:1f:82:8c:ae:37:09:19:b3:97:da: 28:ce:4d:cf:48:ab:55:33:d3:89:7f:19:2f:98:98:78:3b:ea: e9:d3:42:52:05:66:49:58:2b:96:e1:4d:4e:da:e1:61:44:9a: 81:60:78:56:01:ff:82:46:28:4a:83:36:09:95:3d:83:d3:7f: 76:88:9f:10:1f:ca:51:9a:da:76:28:71:9f:18:71:c6:5e:7d: 5a:f1:77:ba:04:5a:34:5b:3f:f2:86:23:69:e7:8e:93:92:df: dc:ff:73:03:51:4a:20:bc:49:a2:07:8f:c7:b1:39:69:d3:de: ae:7e:95:91:a7:1e:d7:6d:d2:d9:8c:58:62:3d:3b:bf:ea:6b: d0:68:ff:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr45wfzRXT9yjFAzJsyp1ObMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiY2EzZjI1ZDU0NjIwYjUwZWY4NTIwNjU3NjM0ZDNiMDk2 YmFjNTcwHhcNMjUxMjA3MTMwMTIxWhcNMjUxMjA4MTMwMTIxWjAzMTEwLwYDVQQD Eyg5OGIxZGMyMjdmODc0YmZiMmMxYTI2M2IwMTIyZTI4NDA0YjFkNzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyESzXr7LsWDkjrmySG3b0gY4xRIl fu1GHAzwerzHYRM1jEptR6eeGSXysg9ihUNVAfPknU3YIH8adJFOEmeJxi5I/nUc BdKZ0ti/4i75CYcWtiog1c+nBVo2dBd5qdP55RwbQBUo5aewta2NmwY90XLcfT+L yGBCWHpi7pGYE3uL9unJxvaHU/3m9WW2xWwKC1td/C9aAA0G0o4V6mMRnxbhxJWs ShRKsCOsW9oUeLzk27bHZgaW/0k3NGnsYtOPf6QVC8Sm3TySZIug4h2oa1TmdVSu rQxCVatxwqrQONQ4HWFUQDMY2dPi7THpH1lfkqqrj8oOKSLwFUyzA2vKxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJix3CJ/h0v7LBomOwEi4oQEsddjMB8GA1UdIwQY MBaAFLvKPyXVRiC1DvhSBldjTTsJa6xXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdThvX0pkVkdJTFVPLUZJR1YyTk5Pd2xyckZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi81NjFkMjQtZTkyMS00ZWM4LWE2MTEt NGRjMjBjNWI2MjY4LzEvdThvX0pkVkdJTFVPLUZJR1YyTk5Pd2xyckZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi81NjFkMjQtZTkyMS00ZWM4LWE2MTEtNGRjMjBjNWI2MjY4 LzEvdThvX0pkVkdJTFVPLUZJR1YyTk5Pd2xyckZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARc6MWitk OMXfxbfWvegdXeylS2yAyT5egR9sx//Fg4oxuPHYU5WUuRtSa6oPb68FTzTq7hD1 75SD+Ju0byTLIHCrKcK5HvwH2ssiGAilCcnLpfm+UmMRjgzqNQz7kkV/1ja8Y8S/ hKo4sPtbTT7dZQzIU1YfgoyuNwkZs5faKM5Nz0irVTPTiX8ZL5iYeDvq6dNCUgVm SVgrluFNTtrhYUSagWB4VgH/gkYoSoM2CZU9g9N/doifEB/KUZradihxnxhxxl59 WvF3ugRaNFs/8oYjaeeOk5Lf3P9zA1FKILxJogePx7E5adPern6Vkace123S2YxY Yj07v+pr0Gj/7Q== -----END CERTIFICATE-----Generated at Sun Dec 7 15:29:36 2025 by rpki-client