This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft File: 8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json) Hash identifier: oKLWQqmpniDo53fz01E9GTQBZilUwJU03D+w4PWKz/A= Subject key identifier: EF:20:A8:B1:99:0D:93:2E:5F:3D:48:19:F3:0E:82:B1:C8:DE:20:47 Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c Certificate serial: 019B0F6EC9D2AFB1CB6CC2C0E106EF633411 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 22:01:17 +0000 Manifest this update: Thu 11 Dec 2025 22:01:17 +0000 Manifest next update: Fri 12 Dec 2025 22:01:17 +0000 Files and hashes: 1: 4ghkRfOquB-e7Fok48kTrT0aVAU.roa (hash: 6SkfRPpDusU3pdgmnRmAtb8LYqLwuaj5aFdgg7X05Uw=) 2: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: Hlyc31Quck4kqs3l94HHHsbidzE2jQDcUwy9dLd3hR8=) 3: k86L2r6PyseZfyszmOgSsSpazQk.roa (hash: IsdULHTb1wucLEEG+EnermzxJ4zmYkO1E7qf8JXpI3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:c9:d2:af:b1:cb:6c:c2:c0:e1:06:ef:63:34:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c Validity Not Before: Dec 11 22:01:17 2025 GMT Not After : Dec 12 22:01:17 2025 GMT Subject: CN=ef20a8b1990d932e5f3d4819f30e82b1c8de2047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a3:36:71:ba:db:0d:62:c7:fc:17:b0:c1:e8: da:1c:38:11:e2:c4:ab:ca:9a:08:b1:39:fd:c9:c1: f5:a0:2f:93:c0:02:86:27:ca:b3:09:e1:ee:56:28: ea:3b:ea:87:f3:ca:9d:6e:b9:a4:57:0e:cd:53:fd: 4b:c5:b5:37:b0:57:e7:77:7c:c3:6e:6c:0c:08:d4: 6b:5c:1e:c1:fd:34:cf:73:d0:c8:dc:f3:fa:08:51: 5c:5e:ac:f7:49:f9:b4:33:e6:da:fe:12:14:10:d6: d6:51:04:e1:9d:2d:75:27:eb:27:c4:9c:27:f0:bb: 07:d6:90:1e:a5:25:ef:a0:ee:a2:34:f2:34:8b:e4: c9:07:df:58:2d:3c:8e:ce:4b:14:66:77:95:b8:ad: 66:ed:5a:9e:f6:ea:78:54:69:0f:66:c1:6e:f6:b5: 49:e0:4e:8f:09:4c:94:81:fc:60:32:30:90:26:4e: 67:61:20:65:95:e3:fa:3d:87:c8:2f:15:d8:d4:b4: f4:13:69:ea:fc:01:cf:63:0e:06:79:47:90:5e:71: b9:93:b5:1a:ec:dd:ad:4b:37:8d:73:85:53:ef:c3: 5c:2e:2a:d2:b4:48:fa:0d:8b:c5:7c:e8:3e:7d:3c: 77:07:c5:a7:27:f1:14:d7:d9:3f:ce:f0:61:40:43: 70:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:20:A8:B1:99:0D:93:2E:5F:3D:48:19:F3:0E:82:B1:C8:DE:20:47 X509v3 Authority Key Identifier: keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:6b:2f:74:42:68:3a:86:30:a4:de:c9:a1:4a:c4:b2:99:fc: 5f:8f:cc:18:1b:19:cd:b6:e6:c5:bd:71:77:c3:67:63:45:9f: c8:a5:af:7e:fc:45:50:52:4c:83:90:b7:bb:61:6b:ff:2c:6b: a2:d9:69:a2:a8:20:18:85:05:08:8e:d2:fe:b5:e6:13:9c:75: 8d:05:a6:70:80:37:12:e6:ae:40:c7:c9:0c:8e:f6:18:17:2f: 13:56:cb:d6:77:d4:3e:4e:61:69:b6:aa:a9:f2:40:8c:96:0b: e7:ac:b2:7f:de:79:60:47:72:08:3e:a2:64:a8:b3:49:e6:0b: 02:41:c4:a6:3e:1a:1e:7d:a1:f0:d3:a6:3a:60:56:30:75:11: 9a:47:0a:10:96:c4:ae:b6:67:35:a2:2f:65:ae:67:69:7d:0b: 1d:57:38:fb:84:41:6c:9a:01:a2:32:f2:11:1a:9a:9d:63:a3: 8b:7a:78:62:44:9a:4e:55:f4:bf:7c:14:90:14:5f:20:b1:6b: 06:95:26:77:39:24:00:cd:03:fc:32:1e:cc:3d:c0:2f:f6:20: 10:1a:cb:df:89:87:ab:01:35:e9:7a:14:c2:11:32:6b:6d:95: 4c:15:3d:21:26:bf:30:e7:fc:be:43:fe:01:7d:89:6a:8f:f4: f8:09:57:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbsnSr7HLbMLA4QbvYzQRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZGQ3OTViZTM2ZTRiNWIzMDllYmM4ZTA0ZWE3Mzk0MTM1 YzcxNGMwHhcNMjUxMjExMjIwMTE3WhcNMjUxMjEyMjIwMTE3WjAzMTEwLwYDVQQD EyhlZjIwYThiMTk5MGQ5MzJlNWYzZDQ4MTlmMzBlODJiMWM4ZGUyMDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KM2cbrbDWLH/BewwejaHDgR4sSr ypoIsTn9ycH1oC+TwAKGJ8qzCeHuVijqO+qH88qdbrmkVw7NU/1LxbU3sFfnd3zD bmwMCNRrXB7B/TTPc9DI3PP6CFFcXqz3Sfm0M+ba/hIUENbWUQThnS11J+snxJwn 8LsH1pAepSXvoO6iNPI0i+TJB99YLTyOzksUZneVuK1m7Vqe9up4VGkPZsFu9rVJ 4E6PCUyUgfxgMjCQJk5nYSBlleP6PYfILxXY1LT0E2nq/AHPYw4GeUeQXnG5k7Ua 7N2tSzeNc4VT78NcLirStEj6DYvFfOg+fTx3B8WnJ/EU19k/zvBhQENwvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8gqLGZDZMuXz1IGfMOgrHI3iBHMB8GA1UdIwQY MBaAFPHdeVvjbktbMJ68jgTqc5QTXHFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGQxNVctTnVTMXN3bnJ5T0JPcHpsQk5jY1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85NzliZGItMDFhMy00ZDE3LTg3NDYt ZmU0NDc3MmQ1YWUxLzEvOGQxNVctTnVTMXN3bnJ5T0JPcHpsQk5jY1V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85NzliZGItMDFhMy00ZDE3LTg3NDYtZmU0NDc3MmQ1YWUx LzEvOGQxNVctTnVTMXN3bnJ5T0JPcHpsQk5jY1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGsvdEJo OoYwpN7JoUrEspn8X4/MGBsZzbbmxb1xd8NnY0WfyKWvfvxFUFJMg5C3u2Fr/yxr otlpoqggGIUFCI7S/rXmE5x1jQWmcIA3EuauQMfJDI72GBcvE1bL1nfUPk5habaq qfJAjJYL56yyf955YEdyCD6iZKizSeYLAkHEpj4aHn2h8NOmOmBWMHURmkcKEJbE rrZnNaIvZa5naX0LHVc4+4RBbJoBojLyERqanWOji3p4YkSaTlX0v3wUkBRfILFr BpUmdzkkAM0D/DIezD3AL/YgEBrL34mHqwE16XoUwhEya22VTBU9ISa/MOf8vkP+ AX2Jao/0+AlXlQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:31:32 2025 by rpki-client