This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft File: _PyV8biAEebcM9BBuYsxMHdsQo8.mft (raw, json) Hash identifier: zkmKpirooGBZV3Q0tf95SupzP9PlixcwVn1to6UlmLI= Subject key identifier: AB:1D:5F:CC:0E:BE:F4:5B:FC:F9:9D:38:B0:26:89:EA:E0:D8:21:EC Authority key identifier: FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F Certificate issuer: /CN=fcfc95f1b88011e6dc33d041b98b3130776c428f Certificate serial: 019B0F00C178F0BA323E59BCF96D41E8EB55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft Manifest number: 08E3 Signing time: Thu 11 Dec 2025 20:01:06 +0000 Manifest this update: Thu 11 Dec 2025 20:01:06 +0000 Manifest next update: Fri 12 Dec 2025 20:01:06 +0000 Files and hashes: 1: _PyV8biAEebcM9BBuYsxMHdsQo8.crl (hash: e1+Z3xeZxcruU33n7gQHZuV+XA8upuDCcnSUyaOobEM=) 2: wbsu-F9aDLpOh1E-iGGerHKMETE.roa (hash: 4WuiCYXkI7bOEQ/qzC3UfWfQ5q7CLtdWh5T4lSpp9Nw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:c1:78:f0:ba:32:3e:59:bc:f9:6d:41:e8:eb:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcfc95f1b88011e6dc33d041b98b3130776c428f Validity Not Before: Dec 11 20:01:06 2025 GMT Not After : Dec 12 20:01:06 2025 GMT Subject: CN=ab1d5fcc0ebef45bfcf99d38b02689eae0d821ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0e:93:3e:dc:b5:89:33:fc:df:fb:00:4a:08: 02:5c:48:b9:5f:a7:4a:2c:f5:99:c6:2e:82:d7:d6: 21:3e:56:c0:6a:70:5e:d2:dc:d0:d0:e3:2d:2b:17: 35:fb:77:41:01:03:57:5b:84:60:b7:6b:bd:ca:83: ee:b2:f8:63:f2:f7:64:ac:af:4d:12:36:58:31:30: e5:dd:32:5d:55:83:f0:a4:1f:1d:cb:ac:d8:c5:e3: 37:3c:5a:d2:bf:f0:fc:90:4b:46:3a:4d:c8:7b:59: 58:3c:64:ae:67:98:ce:d2:d6:37:42:ee:6c:eb:c2: f4:f9:85:9b:3f:f9:5d:77:12:11:e7:57:a2:c9:5e: e1:12:06:a6:fa:43:07:86:68:5c:7a:7a:57:4a:80: 23:79:99:60:31:f6:5c:c5:32:f6:fd:a2:74:9c:07: 87:c7:e1:65:f2:35:5f:89:a6:2f:86:8f:52:73:b5: c5:f3:56:7a:3d:ea:1b:67:38:41:b0:f2:f3:ba:05: 48:36:16:ce:55:8d:b0:90:fa:ec:39:05:9a:14:79: f4:66:40:0a:74:54:26:52:22:a4:5a:04:9d:b5:62: 44:25:22:20:9b:a4:88:80:88:6a:b1:a0:33:84:ad: 40:6e:7e:1e:66:f7:f8:b4:b2:d3:6f:4c:e5:63:ec: 43:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1D:5F:CC:0E:BE:F4:5B:FC:F9:9D:38:B0:26:89:EA:E0:D8:21:EC X509v3 Authority Key Identifier: keyid:FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:24:1a:b1:f7:c2:f1:6f:c5:07:27:69:a4:53:ca:2e:ad:88: e5:d1:9f:d9:a8:ae:71:21:12:e3:0d:e8:59:e3:1b:2b:97:7e: ce:80:27:8f:2b:77:7f:e1:12:bc:21:74:74:c6:80:29:73:22: b9:dd:fd:e7:78:ad:6f:a0:37:7c:07:d4:40:97:dd:70:99:b0: 90:8e:f6:07:32:b0:04:b3:07:85:91:d4:2e:16:e9:37:11:bf: 98:d0:8d:7c:c5:71:1a:18:6e:25:8d:43:e4:f1:9e:87:1f:93: bd:4e:fc:7c:2b:d6:ea:50:8a:51:5d:04:b6:d2:7c:2f:a2:a6: d1:28:e3:a5:9e:84:24:55:43:37:5f:f4:24:25:56:74:98:57: b5:ba:d8:02:9f:72:fd:61:c2:22:15:78:a0:ec:67:2e:c9:55: 28:21:f1:ab:b5:7c:ea:7e:e6:e2:50:6f:aa:ef:a0:0d:77:51: 69:1b:cd:46:c0:73:8b:1c:a1:02:ec:16:f4:6e:46:33:8d:cf: b1:e6:b5:5a:92:e0:7a:38:39:6b:3e:4a:c5:46:e2:fc:dc:eb: 35:49:5a:f2:71:b1:00:95:fb:3b:63:cc:a8:c8:69:2b:cc:de: c9:e3:61:6b:b9:33:1e:77:b0:d7:2e:65:3c:e7:99:8c:cf:5d: 6a:37:73:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAMF48LoyPlm8+W1B6OtVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZmM5NWYxYjg4MDExZTZkYzMzZDA0MWI5OGIzMTMwNzc2 YzQyOGYwHhcNMjUxMjExMjAwMTA2WhcNMjUxMjEyMjAwMTA2WjAzMTEwLwYDVQQD EyhhYjFkNWZjYzBlYmVmNDViZmNmOTlkMzhiMDI2ODllYWUwZDgyMWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng6TPty1iTP83/sASggCXEi5X6dK LPWZxi6C19YhPlbAanBe0tzQ0OMtKxc1+3dBAQNXW4Rgt2u9yoPusvhj8vdkrK9N EjZYMTDl3TJdVYPwpB8dy6zYxeM3PFrSv/D8kEtGOk3Ie1lYPGSuZ5jO0tY3Qu5s 68L0+YWbP/lddxIR51eiyV7hEgam+kMHhmhcenpXSoAjeZlgMfZcxTL2/aJ0nAeH x+Fl8jVfiaYvho9Sc7XF81Z6PeobZzhBsPLzugVINhbOVY2wkPrsOQWaFHn0ZkAK dFQmUiKkWgSdtWJEJSIgm6SIgIhqsaAzhK1Abn4eZvf4tLLTb0zlY+xDVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsdX8wOvvRb/PmdOLAmierg2CHsMB8GA1UdIwQY MBaAFPz8lfG4gBHm3DPQQbmLMTB3bEKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1B5VjhiaUFFZWJjTTlCQnVZc3hNSGRzUW84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zNzJkMjktMDc1ZS00N2ZhLTljOGYt OGY0YjA2NDVkNjA0LzEvX1B5VjhiaUFFZWJjTTlCQnVZc3hNSGRzUW84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8zNzJkMjktMDc1ZS00N2ZhLTljOGYtOGY0YjA2NDVkNjA0 LzEvX1B5VjhiaUFFZWJjTTlCQnVZc3hNSGRzUW84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCQasffC 8W/FBydppFPKLq2I5dGf2aiucSES4w3oWeMbK5d+zoAnjyt3f+ESvCF0dMaAKXMi ud3953itb6A3fAfUQJfdcJmwkI72BzKwBLMHhZHULhbpNxG/mNCNfMVxGhhuJY1D 5PGehx+TvU78fCvW6lCKUV0EttJ8L6Km0SjjpZ6EJFVDN1/0JCVWdJhXtbrYAp9y /WHCIhV4oOxnLslVKCHxq7V86n7m4lBvqu+gDXdRaRvNRsBzixyhAuwW9G5GM43P sea1WpLgejg5az5KxUbi/NzrNUla8nGxAJX7O2PMqMhpK8zeyeNha7kzHnew1y5l POeZjM9dajdzag== -----END CERTIFICATE-----Generated at Fri Dec 12 00:00:14 2025 by rpki-client