This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft File: 8PPwSfPyhFHj4b9ouXT_28jEFMc.mft (raw, json) Hash identifier: Uf9/GTORQqoKLvXJnUUv2llsPPrPm30v+JyHJ8G0QrM= Subject key identifier: 28:7A:70:00:48:3F:FA:78:3B:09:D8:C8:35:C7:29:5E:1E:D5:1C:86 Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7 Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7 Certificate serial: 019B20995806D52A7D0BA54D9F69ED25B842 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft Manifest number: 12FB Signing time: Mon 15 Dec 2025 06:01:18 +0000 Manifest this update: Mon 15 Dec 2025 06:01:18 +0000 Manifest next update: Tue 16 Dec 2025 06:01:18 +0000 Files and hashes: 1: 8PPwSfPyhFHj4b9ouXT_28jEFMc.crl (hash: 5MZMS5HJpi/EpxxTVKzkEqfQrkKy59NDzjXb8p1odQM=) 2: q-Co2Fge0yCMSGAUZ61yCAp-agg.roa (hash: Kkd9tz/x2Ysb/9fgNXffDi1aqzj4oQgrCbFcbQdhMNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 06:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:99:58:06:d5:2a:7d:0b:a5:4d:9f:69:ed:25:b8:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7 Validity Not Before: Dec 15 06:01:18 2025 GMT Not After : Dec 16 06:01:18 2025 GMT Subject: CN=287a7000483ffa783b09d8c835c7295e1ed51c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:37:64:29:02:80:f4:e5:0e:04:b2:b7:95: 75:4b:6c:f0:31:28:48:81:71:88:a4:00:67:92:ae: cd:2f:78:ac:2d:81:ab:45:2f:ae:bd:12:77:46:ed: a6:23:1c:93:9e:b6:f5:ca:a6:ea:80:fb:06:19:c4: bf:a4:a1:d1:a1:b6:e8:d7:e2:66:02:0a:c1:48:24: e2:f8:a3:89:f1:c0:4a:57:d4:79:66:f7:cc:54:52: 70:fb:b7:c1:6f:8f:55:6d:af:9d:6c:12:e1:d4:e3: c4:10:0d:8d:37:32:81:4f:35:0c:dc:60:5c:11:0c: 5a:f7:8e:0a:5c:e8:99:54:d1:d7:e9:e7:1c:c5:20: c2:95:7e:9b:79:fb:e6:d7:13:3b:f6:69:ae:8f:94: 98:28:34:71:17:7b:03:43:12:15:2b:22:ea:99:3a: 22:a7:ed:c8:b8:a1:b9:3c:c9:24:99:27:4e:13:93: c7:55:2d:8c:f2:e0:2d:c8:c6:a6:90:32:0a:d9:12: dd:b7:e7:ad:0e:58:92:e7:ff:b3:71:5b:4d:96:97: b8:8d:a3:60:19:e0:bd:52:a4:22:15:fe:fa:f7:0e: d5:b7:a2:e0:eb:35:83:db:d5:69:28:5e:72:ff:a9: e6:fc:7e:40:a3:75:23:f2:dd:3e:6a:23:26:df:5b: a3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7A:70:00:48:3F:FA:78:3B:09:D8:C8:35:C7:29:5E:1E:D5:1C:86 X509v3 Authority Key Identifier: keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:4f:22:d5:f3:95:37:e5:12:1e:39:a4:d7:6c:14:b4:db:6d: b5:f2:f4:06:75:0d:85:4d:8b:c7:cb:e4:67:81:4e:4e:62:fd: 33:41:64:f2:ed:ac:cf:ce:ab:3a:ec:e0:93:5e:a5:23:39:5b: 26:cd:90:e7:d1:f5:5c:64:de:fb:13:84:62:52:71:9b:16:33: 9a:ef:6c:c3:9e:4a:13:8a:3c:92:f6:d5:b4:51:95:90:3c:27: a0:4f:49:97:d5:d8:ce:8c:f3:26:03:bb:7a:1d:52:0c:f3:ca: ab:eb:e1:15:a5:e2:65:4e:98:a6:c7:b7:c9:bf:e2:c4:34:bc: 65:59:9a:5b:b3:66:b7:d8:19:f2:e8:13:d3:5d:a9:4c:ed:fb: 44:51:22:25:ff:12:77:ef:f4:9d:db:ac:29:e4:da:37:75:ae: d3:cb:d6:b7:eb:af:e5:9d:3c:49:36:c1:f0:8a:c8:e0:16:9b: 93:68:54:22:84:10:50:08:90:58:c9:bb:a5:9e:21:f9:59:73: 39:82:c0:aa:04:0f:ea:67:48:1a:7f:58:c1:b6:49:7c:de:5c: 07:01:5b:9e:ac:31:81:46:85:48:47:8c:7d:bb:fc:42:c1:82: 9c:c1:2e:ce:d2:fc:78:2c:7c:e0:32:1d:94:e9:09:92:77:4f: 58:f0:0c:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgmVgG1Sp9C6VNn2ntJbhCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZjNmMDQ5ZjNmMjg0NTFlM2UxYmY2OGI5NzRmZmRiYzhj NDE0YzcwHhcNMjUxMjE1MDYwMTE4WhcNMjUxMjE2MDYwMTE4WjAzMTEwLwYDVQQD EygyODdhNzAwMDQ4M2ZmYTc4M2IwOWQ4YzgzNWM3Mjk1ZTFlZDUxYzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9M3ZCkCgPTlDgSyt5V1S2zwMShI gXGIpABnkq7NL3isLYGrRS+uvRJ3Ru2mIxyTnrb1yqbqgPsGGcS/pKHRobbo1+Jm AgrBSCTi+KOJ8cBKV9R5ZvfMVFJw+7fBb49Vba+dbBLh1OPEEA2NNzKBTzUM3GBc EQxa944KXOiZVNHX6eccxSDClX6befvm1xM79mmuj5SYKDRxF3sDQxIVKyLqmToi p+3IuKG5PMkkmSdOE5PHVS2M8uAtyMamkDIK2RLdt+etDliS5/+zcVtNlpe4jaNg GeC9UqQiFf769w7Vt6Lg6zWD29VpKF5y/6nm/H5Ao3Uj8t0+aiMm31ujOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCh6cABIP/p4OwnYyDXHKV4e1RyGMB8GA1UdIwQY MBaAFPDz8Enz8oRR4+G/aLl0/9vIxBTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgt NWU1MjNiYThjOWQ3LzEvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgtNWU1MjNiYThjOWQ3 LzEvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfk8i1fOV N+USHjmk12wUtNtttfL0BnUNhU2Lx8vkZ4FOTmL9M0Fk8u2sz86rOuzgk16lIzlb Js2Q59H1XGTe+xOEYlJxmxYzmu9sw55KE4o8kvbVtFGVkDwnoE9Jl9XYzozzJgO7 eh1SDPPKq+vhFaXiZU6Ypse3yb/ixDS8ZVmaW7Nmt9gZ8ugT012pTO37RFEiJf8S d+/0ndusKeTaN3Wu08vWt+uv5Z08STbB8IrI4Babk2hUIoQQUAiQWMm7pZ4h+Vlz OYLAqgQP6mdIGn9YwbZJfN5cBwFbnqwxgUaFSEeMfbv8QsGCnMEuztL8eCx84DId lOkJkndPWPAMCA== -----END CERTIFICATE-----Generated at Mon Dec 15 13:15:00 2025 by rpki-client