This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft File: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft (raw, json) Hash identifier: 6JUdsDZK4od1Pf0im11wqs2R7j4qItvd5tzbwYtaJqY= Subject key identifier: DA:DA:50:79:F2:DE:4B:C4:3D:58:FD:27:42:B5:BA:0C:66:0F:90:80 Authority key identifier: F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59 Certificate issuer: /CN=f22219eca54ab269c8aab9b0ff416e7293829b59 Certificate serial: 019B255350EEFCAFD019F441512B0D19F4C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft Manifest number: 0B48 Signing time: Tue 16 Dec 2025 04:02:55 +0000 Manifest this update: Tue 16 Dec 2025 04:02:55 +0000 Manifest next update: Wed 17 Dec 2025 04:02:55 +0000 Files and hashes: 1: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl (hash: zaSBeJTSWbt5VOtYJbu1sXhlOeBMk4TDfgQVZrmYFDE=) 2: GZ1s7d54viav3wnjL9leWDPX9XE.roa (hash: havZ3bJj+OM6go5VLxui+205cgsq5mlbJ3gC7fDy5Sc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:53:50:ee:fc:af:d0:19:f4:41:51:2b:0d:19:f4:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f22219eca54ab269c8aab9b0ff416e7293829b59 Validity Not Before: Dec 16 04:02:55 2025 GMT Not After : Dec 17 04:02:55 2025 GMT Subject: CN=dada5079f2de4bc43d58fd2742b5ba0c660f9080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fe:8b:41:cd:17:f2:4a:64:3d:b1:21:1e:b5: 65:a5:78:79:03:61:35:eb:e2:89:c6:39:51:14:24: a4:c3:a7:22:22:9d:81:85:6c:12:a1:32:22:f7:ca: 6d:b9:ca:cd:48:40:41:a3:a2:1e:67:5e:d0:c1:a3: cb:43:6f:ed:0d:df:3f:b9:19:ff:c9:2c:f5:6f:4a: b6:bf:00:cc:1b:49:ab:18:b2:4d:66:89:49:c4:ff: 4e:40:ad:6b:b6:fc:5b:dd:27:c5:98:ef:7f:89:89: d6:8b:31:ae:26:86:9f:f7:d7:d8:7c:5b:2d:80:43: c4:99:2d:d4:f9:f6:23:cd:ad:ac:c7:39:de:cb:3b: 28:ab:c2:3e:c3:15:a3:fb:f7:aa:40:38:7a:df:76: 4b:65:b1:68:80:87:22:b9:24:01:ab:4a:92:1e:8e: 7c:9c:53:39:c7:94:ad:16:b5:66:88:a7:6b:a9:08: 5e:f1:73:52:0e:81:27:3b:5d:c0:3d:cf:d3:9d:85: 45:ca:6f:6e:30:15:5a:e4:81:34:1c:9d:72:2c:a0: fb:3f:ad:96:4d:40:f0:b3:fc:b9:0a:7b:44:ff:28: 4c:cc:de:4f:5d:3a:d4:a3:d8:d4:7d:95:c1:74:2b: 68:d6:cb:15:58:79:de:ef:d9:a8:07:2e:12:8d:85: 35:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DA:50:79:F2:DE:4B:C4:3D:58:FD:27:42:B5:BA:0C:66:0F:90:80 X509v3 Authority Key Identifier: keyid:F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:f5:db:76:c6:02:72:45:d0:3e:18:07:25:2d:b5:2d:8e:e7: 18:9f:43:d0:c8:41:19:a8:d0:c5:34:3c:08:66:87:9c:73:ae: 13:f6:29:f5:b5:70:05:e8:54:2c:3c:26:7e:d5:57:27:1c:a3: f5:42:ae:f7:3a:86:aa:1e:bd:06:b4:f4:d6:78:3a:6c:ca:df: 99:55:e3:e4:a8:c4:16:3f:f6:d1:b7:9c:14:d1:cc:45:bb:21: 84:45:dd:93:f0:2e:0f:2c:8f:05:35:16:7f:ad:ca:4c:19:c5: 28:bc:ce:dd:c8:74:91:24:f3:cd:28:e9:af:75:7b:54:bd:d0: dc:45:52:c8:74:29:ba:fe:4a:cf:a0:23:e6:1f:04:74:9a:72: e3:0b:8f:91:62:75:e5:e1:40:23:47:1b:9f:45:c2:da:5d:97: e0:57:ae:3a:5e:06:fb:72:8d:b4:ea:fc:17:c6:f7:29:e7:40: f8:0e:4a:04:be:89:1d:58:88:ec:46:3a:60:8d:af:3f:58:ec: 54:1b:21:00:0b:ce:2e:f9:a3:ea:39:0b:7c:af:19:7c:f2:52: 45:2a:8a:d1:0c:b6:ac:de:f3:51:cc:b6:92:6b:46:8e:3f:05: 5c:a2:6c:f9:82:28:c6:96:dc:88:79:70:de:84:71:a1:21:9c: 7f:d7:3f:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslU1Du/K/QGfRBUSsNGfTEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMjIxOWVjYTU0YWIyNjljOGFhYjliMGZmNDE2ZTcyOTM4 MjliNTkwHhcNMjUxMjE2MDQwMjU1WhcNMjUxMjE3MDQwMjU1WjAzMTEwLwYDVQQD EyhkYWRhNTA3OWYyZGU0YmM0M2Q1OGZkMjc0MmI1YmEwYzY2MGY5MDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/6LQc0X8kpkPbEhHrVlpXh5A2E1 6+KJxjlRFCSkw6ciIp2BhWwSoTIi98ptucrNSEBBo6IeZ17QwaPLQ2/tDd8/uRn/ ySz1b0q2vwDMG0mrGLJNZolJxP9OQK1rtvxb3SfFmO9/iYnWizGuJoaf99fYfFst gEPEmS3U+fYjza2sxzneyzsoq8I+wxWj+/eqQDh633ZLZbFogIciuSQBq0qSHo58 nFM5x5StFrVmiKdrqQhe8XNSDoEnO13APc/TnYVFym9uMBVa5IE0HJ1yLKD7P62W TUDws/y5CntE/yhMzN5PXTrUo9jUfZXBdCto1ssVWHne79moBy4SjYU1XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNraUHny3kvEPVj9J0K1ugxmD5CAMB8GA1UdIwQY MBaAFPIiGeylSrJpyKq5sP9BbnKTgptZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGlJWjdLVktzbW5JcXJtd18wRnVjcE9DbTFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jYjE0NjctMjQxYS00YmM1LWJhYTYt NmYzNjNlODNhNzhlLzEvOGlJWjdLVktzbW5JcXJtd18wRnVjcE9DbTFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9jYjE0NjctMjQxYS00YmM1LWJhYTYtNmYzNjNlODNhNzhl LzEvOGlJWjdLVktzbW5JcXJtd18wRnVjcE9DbTFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPXbdsYC ckXQPhgHJS21LY7nGJ9D0MhBGajQxTQ8CGaHnHOuE/Yp9bVwBehULDwmftVXJxyj 9UKu9zqGqh69BrT01ng6bMrfmVXj5KjEFj/20becFNHMRbshhEXdk/AuDyyPBTUW f63KTBnFKLzO3ch0kSTzzSjpr3V7VL3Q3EVSyHQpuv5Kz6Aj5h8EdJpy4wuPkWJ1 5eFAI0cbn0XC2l2X4FeuOl4G+3KNtOr8F8b3KedA+A5KBL6JHViI7EY6YI2vP1js VBshAAvOLvmj6jkLfK8ZfPJSRSqK0Qy2rN7zUcy2kmtGjj8FXKJs+YIoxpbciHlw 3oRxoSGcf9c/3Q== -----END CERTIFICATE-----Generated at Tue Dec 16 12:11:31 2025 by rpki-client