This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft File: 08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json) Hash identifier: /w6cyEiQt75tRa4sCa9++hcZAYk2qmNI9B06WUstP1c= Subject key identifier: 58:A1:EA:CD:86:DC:11:3D:CD:E6:49:12:51:22:18:A7:7B:CE:9D:A2 Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Certificate serial: 019B0F010A7F5DD6E5D375748EAF4097DDBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft Manifest number: 135B Signing time: Thu 11 Dec 2025 20:01:25 +0000 Manifest this update: Thu 11 Dec 2025 20:01:25 +0000 Manifest next update: Fri 12 Dec 2025 20:01:25 +0000 Files and hashes: 1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: sa3Ed9gxBoT0nKpiBUVrabEEgC80Xdw4qGEUVUYCfBY=) 2: 6aIDrHAQdqqMFE56BK8XfWOU_Ms.roa (hash: oFrmwXogC8oKHLCNQdEFArp+bpvPywSbnLOxVtG4xEI=) 3: 74e7Npx1h-r2J9zWBwJrx-lKSuM.roa (hash: l9QAre4knUC/HY+BUGQlz/8DoDnZPGKFrZRqBUSeSOA=) 4: JR5xcAQWVgTPGyjPg7XJgFbWGnU.roa (hash: 4C25vRmgSuVzjJ8c0h/sdLRJbeJ7vJx3vVEJHRg1ZU8=) 5: X2yZO2edNKoReeE3NkBnnhmtntU.roa (hash: sfJzWSG7BV00ScgX4fUDxiq+ugnNF5D43yAp8P+p9UE=) 6: fkXF0PUhEAWisKtRHR-GAF1e_HU.roa (hash: RCFEekK0DmAiSwdyY0Msx63FTAgjydQrcYldw9jfJCo=) 7: rfgHyHyXnUEbHJgxdZkojcPjDmw.roa (hash: AKt21H+5INTrQEQI/BGd5/NNqHfVuyNscFCNibV7y5w=) 8: t-vvyyJncvAAfAa96YEzMwSH7gE.roa (hash: +EAIODGI0gSrFAD6b3Gzh1imFWAdsumE5Q8Vo1ZApM4=) 9: w_kbWva8bPy_BJIaV4ykob78GrA.roa (hash: E/+pwYk30W429Hx1ACBcwVtYRPMkzzJrjllRBSavTZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:01:0a:7f:5d:d6:e5:d3:75:74:8e:af:40:97:dd:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Validity Not Before: Dec 11 20:01:25 2025 GMT Not After : Dec 12 20:01:25 2025 GMT Subject: CN=58a1eacd86dc113dcde64912512218a77bce9da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3e:98:8c:01:fe:08:b6:54:d4:7e:e7:23:35: ff:bb:94:d4:50:50:49:1e:c7:50:4a:35:3e:c1:d1: e9:67:1a:f3:a5:7a:4a:03:b0:71:56:94:27:2f:e1: bd:61:14:4c:12:7a:6c:04:ba:76:7c:59:20:1c:e3: 99:de:24:df:1c:75:cc:56:ef:73:fc:1a:f8:3a:89: ae:e5:21:6b:d9:20:2b:99:bb:cb:10:3c:70:65:3e: ca:f0:f8:ab:8a:16:ec:30:92:e7:67:d3:99:8a:ca: 5b:58:28:44:b2:05:11:bc:93:e0:83:9e:42:53:3d: da:a0:86:4e:9b:15:4d:00:6c:0b:a1:ea:4c:da:1e: db:1f:11:95:08:f5:4c:13:76:79:96:9c:76:a2:a1: 7c:64:7e:d3:9b:e4:51:59:e5:72:6f:62:75:87:5b: 5b:e8:d1:79:eb:a1:fd:5f:6c:79:ea:9a:ac:af:6e: d7:71:e5:08:0f:0a:a3:dc:e0:36:2e:6d:15:52:11: 26:8a:b2:b8:79:a3:e6:85:61:68:cc:0e:b8:83:a1: 96:e3:f7:b9:a0:b2:1b:c7:43:9f:b6:d9:6c:0f:8e: 87:03:fd:53:80:c3:40:77:89:cd:47:55:1e:14:3b: 52:97:cc:3c:dc:41:8d:3a:ca:7a:7d:61:21:93:ee: 1f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A1:EA:CD:86:DC:11:3D:CD:E6:49:12:51:22:18:A7:7B:CE:9D:A2 X509v3 Authority Key Identifier: keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:35:3b:82:f8:f7:78:0a:74:2b:e5:ac:f5:da:13:6b:18:29: 3c:36:51:ad:45:b7:59:04:cb:92:75:ad:db:48:5c:73:dd:23: f3:00:d6:35:5f:c1:a3:fd:a0:70:2e:c5:4e:dc:67:e2:ee:5e: b1:9c:fb:83:e0:18:e1:30:37:08:27:99:49:ca:9f:5b:48:bc: 82:97:0a:37:9a:a1:ad:b8:f9:21:ac:91:1d:b0:4f:e8:4b:4f: 8e:de:92:31:59:3b:99:f0:17:12:87:51:e8:d9:f1:87:6c:a1: 91:34:18:6b:9f:e3:11:a0:b9:08:0f:16:8b:a4:55:cb:61:fd: 50:3e:c2:f6:87:be:ed:d4:9d:af:14:f3:0b:3b:68:c9:69:73: 7e:a0:81:00:63:82:65:1c:99:65:68:ad:49:d4:5c:81:3f:10: e6:9e:5e:77:40:b2:50:b4:d1:aa:1a:1a:c6:ec:7c:2f:08:3c: dc:bb:36:00:98:d1:85:d0:79:14:ce:48:04:9a:ae:39:86:77: 57:ab:da:20:fa:9b:95:c6:2a:b3:23:89:db:27:f3:42:f5:58: 2d:c8:71:47:fe:03:31:71:95:f3:e3:4a:b0:6d:90:fa:69:53: 6f:f7:d4:37:a4:02:17:77:e9:70:8d:63:51:f5:d1:6c:8a:1e: 69:fe:5a:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAQp/Xdbl03V0jq9Al926MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5 Mzg2MWMwHhcNMjUxMjExMjAwMTI1WhcNMjUxMjEyMjAwMTI1WjAzMTEwLwYDVQQD Eyg1OGExZWFjZDg2ZGMxMTNkY2RlNjQ5MTI1MTIyMThhNzdiY2U5ZGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z6YjAH+CLZU1H7nIzX/u5TUUFBJ HsdQSjU+wdHpZxrzpXpKA7BxVpQnL+G9YRRMEnpsBLp2fFkgHOOZ3iTfHHXMVu9z /Br4Oomu5SFr2SArmbvLEDxwZT7K8PirihbsMJLnZ9OZispbWChEsgURvJPgg55C Uz3aoIZOmxVNAGwLoepM2h7bHxGVCPVME3Z5lpx2oqF8ZH7Tm+RRWeVyb2J1h1tb 6NF566H9X2x56pqsr27XceUIDwqj3OA2Lm0VUhEmirK4eaPmhWFozA64g6GW4/e5 oLIbx0OfttlsD46HA/1TgMNAd4nNR1UeFDtSl8w83EGNOsp6fWEhk+4fMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFih6s2G3BE9zeZJElEiGKd7zp2iMB8GA1UdIwQY MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt ODQyNjk0MTJkNTYxLzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjU7gvj3 eAp0K+Ws9doTaxgpPDZRrUW3WQTLknWt20hcc90j8wDWNV/Bo/2gcC7FTtxn4u5e sZz7g+AY4TA3CCeZScqfW0i8gpcKN5qhrbj5IayRHbBP6EtPjt6SMVk7mfAXEodR 6Nnxh2yhkTQYa5/jEaC5CA8Wi6RVy2H9UD7C9oe+7dSdrxTzCztoyWlzfqCBAGOC ZRyZZWitSdRcgT8Q5p5ed0CyULTRqhoaxux8Lwg83Ls2AJjRhdB5FM5IBJquOYZ3 V6vaIPqblcYqsyOJ2yfzQvVYLchxR/4DMXGV8+NKsG2Q+mlTb/fUN6QCF3fpcI1j UfXRbIoeaf5a9w== -----END CERTIFICATE-----Generated at Fri Dec 12 01:34:44 2025 by rpki-client