This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft File: 8x6drOnnIGMJy2yeW4YX6YWd3IU.mft (raw, json) Hash identifier: byCydGPMa980a/63Kkh+y7r5GdA3lAEz8JLaRf7tZ/8= Subject key identifier: 63:BD:D5:03:40:AE:A4:87:3C:DE:D2:65:0B:23:47:3A:4D:DF:8B:CB Authority key identifier: F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85 Certificate issuer: /CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85 Certificate serial: 019B59E42950223E807C185E8F3E389B778A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft Manifest number: 0257 Signing time: Fri 26 Dec 2025 09:01:23 +0000 Manifest this update: Fri 26 Dec 2025 09:01:23 +0000 Manifest next update: Sat 27 Dec 2025 09:01:23 +0000 Files and hashes: 1: 8x6drOnnIGMJy2yeW4YX6YWd3IU.crl (hash: tE7+gdTctudwij23Zr05KcOyhfUJSJt+aX4uZIz1HII=) 2: Y_V2AX-hKmiZJha1bvfVKTCTgXI.roa (hash: D45qS/LlK8mwdIW6eNsRENlHm2CkkbRz9HSr40lXt7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:29:50:22:3e:80:7c:18:5e:8f:3e:38:9b:77:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85 Validity Not Before: Dec 26 09:01:23 2025 GMT Not After : Dec 27 09:01:23 2025 GMT Subject: CN=63bdd50340aea4873cded2650b23473a4ddf8bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f5:00:d9:6c:28:d6:74:84:28:77:54:13:7e: bc:df:5b:c4:31:03:ac:2c:2d:24:a6:c0:3a:21:d6: 66:1d:70:03:aa:f0:dd:4e:f8:23:d2:64:bd:dd:ec: 0d:6b:5a:f8:30:d6:c6:4d:c9:76:6d:5d:ea:72:62: 3c:93:8d:a8:d0:66:b8:b3:17:13:21:9d:86:be:f9: d1:fb:a3:0a:79:80:4c:c7:f4:ce:cd:dd:ad:9e:66: 50:7e:0f:95:43:7d:0f:63:1d:8b:73:f2:1e:83:ff: 42:51:de:0c:7e:54:1d:42:2a:83:81:cd:47:6e:06: 89:57:53:40:97:c5:64:b8:11:26:59:d2:38:5b:f1: f8:64:70:0a:8a:7d:0b:05:7c:a1:b6:5c:43:22:68: 13:ee:1d:94:58:bb:96:19:81:4b:cd:89:78:c1:e0: 84:0c:7d:80:78:dd:a7:78:95:49:dd:52:7f:d3:ae: fe:f3:02:0f:13:8b:b9:91:9a:35:ec:c5:82:f3:0d: fd:c2:38:3d:29:0b:47:91:a2:ce:a9:79:f2:93:e6: d5:b3:19:25:3d:42:57:f4:37:4f:01:46:b4:5b:f8: e1:38:b8:31:9a:4e:bf:65:83:02:15:43:fe:04:d5: e5:e6:b6:d8:47:8a:d8:41:e1:b1:ef:a5:14:d1:87: 72:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BD:D5:03:40:AE:A4:87:3C:DE:D2:65:0B:23:47:3A:4D:DF:8B:CB X509v3 Authority Key Identifier: keyid:F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:1b:6b:d4:21:90:15:96:4b:e9:91:4e:0d:f6:98:ce:15:0d: 45:04:15:e1:94:45:c4:54:4c:58:15:7e:9a:c2:37:0e:55:fc: 47:93:02:fa:9b:bf:85:18:6d:f9:84:1f:2a:77:a3:88:3e:ed: ca:7b:37:f4:a3:38:7b:96:78:09:b4:ea:97:c0:f5:03:03:32: 80:aa:fd:2a:83:d2:17:85:36:cf:ef:8b:1f:ff:b1:82:3c:0d: 88:72:2c:15:0f:11:1c:d1:5d:08:05:1d:6a:32:a9:70:68:2d: 45:59:26:4e:1c:73:c1:bf:d7:1d:09:f3:d4:1d:58:69:45:ea: 95:c1:47:8a:58:ca:73:e4:2e:6e:87:26:12:cb:7b:3d:59:26: 06:ad:d0:3f:a1:57:e2:6d:3d:9f:b0:58:c9:c2:4a:7d:ab:1a: 6e:f8:cb:ff:1c:ac:6d:10:4d:eb:b1:0e:1b:10:bd:83:30:de: 7b:bb:f8:59:fd:55:63:73:87:92:4b:18:a7:aa:bb:a4:15:55: 26:e7:42:a8:db:d5:d8:25:ea:a3:14:fe:28:51:a3:90:3d:35: 80:df:5e:26:b0:a9:aa:f1:28:1f:c3:33:fd:f7:3e:3e:d1:a1: fc:78:a9:91:c7:54:c5:d8:8c:ce:ee:7e:0a:61:80:96:83:2b: aa:08:1f:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5ClQIj6AfBhejz44m3eKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMWU5ZGFjZTllNzIwNjMwOWNiNmM5ZTViODYxN2U5ODU5 ZGRjODUwHhcNMjUxMjI2MDkwMTIzWhcNMjUxMjI3MDkwMTIzWjAzMTEwLwYDVQQD Eyg2M2JkZDUwMzQwYWVhNDg3M2NkZWQyNjUwYjIzNDczYTRkZGY4YmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvUA2Wwo1nSEKHdUE36831vEMQOs LC0kpsA6IdZmHXADqvDdTvgj0mS93ewNa1r4MNbGTcl2bV3qcmI8k42o0Ga4sxcT IZ2GvvnR+6MKeYBMx/TOzd2tnmZQfg+VQ30PYx2Lc/Ieg/9CUd4MflQdQiqDgc1H bgaJV1NAl8VkuBEmWdI4W/H4ZHAKin0LBXyhtlxDImgT7h2UWLuWGYFLzYl4weCE DH2AeN2neJVJ3VJ/067+8wIPE4u5kZo17MWC8w39wjg9KQtHkaLOqXnyk+bVsxkl PUJX9DdPAUa0W/jhOLgxmk6/ZYMCFUP+BNXl5rbYR4rYQeGx76UU0Ydy2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGO91QNArqSHPN7SZQsjRzpN34vLMB8GA1UdIwQY MBaAFPMenazp5yBjCctsnluGF+mFndyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHg2ZHJPbm5JR01KeTJ5ZVc0WVg2WVdkM0lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yZGUyNWEtYzk0ZS00YTQ5LWE2MWYt NDNhMTk0ZTlkOThhLzEvOHg2ZHJPbm5JR01KeTJ5ZVc0WVg2WVdkM0lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yZGUyNWEtYzk0ZS00YTQ5LWE2MWYtNDNhMTk0ZTlkOThh LzEvOHg2ZHJPbm5JR01KeTJ5ZVc0WVg2WVdkM0lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRtr1CGQ FZZL6ZFODfaYzhUNRQQV4ZRFxFRMWBV+msI3DlX8R5MC+pu/hRht+YQfKnejiD7t yns39KM4e5Z4CbTql8D1AwMygKr9KoPSF4U2z++LH/+xgjwNiHIsFQ8RHNFdCAUd ajKpcGgtRVkmThxzwb/XHQnz1B1YaUXqlcFHiljKc+QubocmEst7PVkmBq3QP6FX 4m09n7BYycJKfasabvjL/xysbRBN67EOGxC9gzDee7v4Wf1VY3OHkksYp6q7pBVV JudCqNvV2CXqoxT+KFGjkD01gN9eJrCpqvEoH8Mz/fc+PtGh/HipkcdUxdiMzu5+ CmGAloMrqggf+A== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:07 2025 by rpki-client