This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft File: 8PPwSfPyhFHj4b9ouXT_28jEFMc.mft (raw, json) Hash identifier: 6+l3l5NUMxPXys+kPprBy5o2jJf0yv1c6WGcDNGcIcY= Subject key identifier: FB:F7:22:B6:5F:68:30:23:A8:90:84:8E:5C:CD:C1:50:05:F4:0A:2C Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7 Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7 Certificate serial: 019B24761EFBA7DBF1CA3BF7CE85129F3BFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft Manifest number: 12FD Signing time: Tue 16 Dec 2025 00:01:19 +0000 Manifest this update: Tue 16 Dec 2025 00:01:19 +0000 Manifest next update: Wed 17 Dec 2025 00:01:19 +0000 Files and hashes: 1: 8PPwSfPyhFHj4b9ouXT_28jEFMc.crl (hash: DeHqbpaw9i67mH1DLlMzvpdN1+eL1jclMX6J20YrR4Q=) 2: q-Co2Fge0yCMSGAUZ61yCAp-agg.roa (hash: Kkd9tz/x2Ysb/9fgNXffDi1aqzj4oQgrCbFcbQdhMNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:76:1e:fb:a7:db:f1:ca:3b:f7:ce:85:12:9f:3b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7 Validity Not Before: Dec 16 00:01:19 2025 GMT Not After : Dec 17 00:01:19 2025 GMT Subject: CN=fbf722b65f683023a890848e5ccdc15005f40a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:26:b6:fe:e4:2f:e5:a0:88:03:bb:74:09:4f: 38:ac:60:cf:34:73:b6:ba:21:90:08:0e:8d:a6:50: 9b:d4:e0:2b:d1:d5:4b:c6:ed:6a:01:9c:bf:91:2a: eb:7a:1f:93:33:5c:6e:59:fc:63:b7:4b:26:e8:4c: 5a:de:9c:9f:dd:99:a1:ec:33:93:b8:b6:d6:4c:e7: 08:7e:5b:1b:b2:67:b6:cc:48:43:69:43:d1:74:7f: ab:3c:44:43:74:2d:30:53:ae:5b:50:8d:4d:0b:91: 2d:d6:18:d8:d6:f5:91:c1:30:bf:d9:39:87:2f:aa: d4:e4:d4:83:6d:51:28:13:5e:9f:74:d4:4e:ae:9f: 59:14:7c:3c:f0:a0:d0:e3:9c:3d:94:61:a5:a9:35: 55:a3:7c:c8:71:9e:0f:ec:30:e6:99:4e:50:e5:53: 27:58:37:dc:61:6b:1d:c0:72:de:65:3e:05:ed:e2: 15:0b:57:13:3d:82:12:e2:e1:0f:3f:44:ba:e7:c0: ff:2e:ec:d6:e1:f3:e2:70:b8:4f:7f:86:10:53:cd: 9c:3a:46:f0:ff:be:35:3e:13:c2:b8:a9:1d:ba:05: 0e:ec:b8:0c:17:07:07:b1:2a:02:75:2a:73:64:c8: 21:70:1c:dc:81:5e:6d:94:dc:5b:c1:02:b8:0e:7d: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F7:22:B6:5F:68:30:23:A8:90:84:8E:5C:CD:C1:50:05:F4:0A:2C X509v3 Authority Key Identifier: keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c2:75:9e:90:f3:e3:c2:f9:d1:22:8b:9d:7e:4c:01:18:0f: 7d:b1:bb:23:2d:92:6d:b2:9a:ce:4f:e3:16:09:ef:8d:90:3d: 19:c2:e8:29:0e:0b:18:4b:b2:13:1a:67:c5:5f:7e:f3:99:23: ff:a8:4a:f4:11:e1:2c:73:a0:99:82:22:3a:ac:fa:7b:f5:1a: 7a:c2:5d:5c:2b:66:9a:87:8c:43:50:4a:5a:8c:8d:31:c7:c7: 4f:0a:84:ed:c0:fe:b2:20:0d:9d:e9:ac:8d:57:63:98:6c:05: 2c:f5:59:9a:5f:cc:bb:8e:27:d5:95:5d:35:da:d1:17:2d:1e: db:aa:49:72:ea:56:fb:29:07:80:f8:b2:19:4b:02:31:bf:88: d6:58:d7:c4:39:8e:62:b9:f8:a5:5a:3a:fd:d5:92:42:23:f8: 76:5f:ee:65:2a:f6:4d:02:4f:10:d2:4d:8d:9c:0e:45:e0:29: 93:3a:8c:08:10:ef:11:ff:8d:26:f1:a2:73:19:f0:80:ef:fd: 96:47:57:28:11:1b:16:94:60:e7:f6:00:be:7b:72:ae:56:d2: 44:1f:ca:dd:fa:1d:d7:1c:d5:84:7e:d8:03:01:4d:fe:f9:ac: 74:8b:ff:10:52:41:7d:a4:42:28:4e:60:ae:f7:9b:17:28:d7: f1:34:75:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdh77p9vxyjv3zoUSnzv9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZjNmMDQ5ZjNmMjg0NTFlM2UxYmY2OGI5NzRmZmRiYzhj NDE0YzcwHhcNMjUxMjE2MDAwMTE5WhcNMjUxMjE3MDAwMTE5WjAzMTEwLwYDVQQD EyhmYmY3MjJiNjVmNjgzMDIzYTg5MDg0OGU1Y2NkYzE1MDA1ZjQwYTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Sa2/uQv5aCIA7t0CU84rGDPNHO2 uiGQCA6NplCb1OAr0dVLxu1qAZy/kSrreh+TM1xuWfxjt0sm6Exa3pyf3Zmh7DOT uLbWTOcIflsbsme2zEhDaUPRdH+rPERDdC0wU65bUI1NC5Et1hjY1vWRwTC/2TmH L6rU5NSDbVEoE16fdNROrp9ZFHw88KDQ45w9lGGlqTVVo3zIcZ4P7DDmmU5Q5VMn WDfcYWsdwHLeZT4F7eIVC1cTPYIS4uEPP0S658D/LuzW4fPicLhPf4YQU82cOkbw /741PhPCuKkdugUO7LgMFwcHsSoCdSpzZMghcBzcgV5tlNxbwQK4Dn37HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPv3IrZfaDAjqJCEjlzNwVAF9AosMB8GA1UdIwQY MBaAFPDz8Enz8oRR4+G/aLl0/9vIxBTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgt NWU1MjNiYThjOWQ3LzEvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgtNWU1MjNiYThjOWQ3 LzEvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsJ1npDz 48L50SKLnX5MARgPfbG7Iy2SbbKazk/jFgnvjZA9GcLoKQ4LGEuyExpnxV9+85kj /6hK9BHhLHOgmYIiOqz6e/UaesJdXCtmmoeMQ1BKWoyNMcfHTwqE7cD+siANnems jVdjmGwFLPVZml/Mu44n1ZVdNdrRFy0e26pJcupW+ykHgPiyGUsCMb+I1ljXxDmO Yrn4pVo6/dWSQiP4dl/uZSr2TQJPENJNjZwOReApkzqMCBDvEf+NJvGicxnwgO/9 lkdXKBEbFpRg5/YAvntyrlbSRB/K3fod1xzVhH7YAwFN/vmsdIv/EFJBfaRCKE5g rvebFyjX8TR19w== -----END CERTIFICATE-----Generated at Tue Dec 16 06:39:10 2025 by rpki-client