This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft File: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft (raw, json) Hash identifier: LjQ3uyu9u5WHWO1EJai78wMhQWKIAELdMprxIBLHv1U= Subject key identifier: FC:B6:1E:EE:2E:71:2F:A9:46:09:A5:01:02:0D:49:2F:11:BD:C2:5D Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Certificate serial: 019B49273829AD3703F3293721CA65BE2646 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft Manifest number: 1232 Signing time: Tue 23 Dec 2025 03:01:05 +0000 Manifest this update: Tue 23 Dec 2025 03:01:05 +0000 Manifest next update: Wed 24 Dec 2025 03:01:05 +0000 Files and hashes: 1: 5ZNnU0ul1PvuB6V3S-Y8qQNgW4Y.roa (hash: RgXKHj2HAygr87kEjLFNnsJCWJ6hg9g9jGeFNERw+T8=) 2: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl (hash: SXDcOiKUH7oxu7xsomW1LWoJwAYIsXkcZbixVo1iHYM=) 3: 9c9IMdwPViHHlGIXa-EYvM5rE2c.roa (hash: Y48jer5SEM8eKuN0ygvkfPpOfOkBQ0uV7/NANNuOcto=) 4: DYGgwKgBr-X-UJNWrHRoiByEE0k.roa (hash: 0UcPzEKGR92DACoKDDn5wkyZ0r0HCl4oapCFAXQREB8=) 5: Xi938_LG0fo08PcIDueZffuVF3Q.roa (hash: 5cOzoa9nCO1ZRf33mVdI0qSK+ZoAQbsBPtAf2Kylv28=) 6: oAsyO0CJws2AMTge7-6JSychHyY.roa (hash: OT9pAjZ/E5OdooOn7gC+YSxibLo6Rf5dBxQdNRyss9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:27:38:29:ad:37:03:f3:29:37:21:ca:65:be:26:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Validity Not Before: Dec 23 03:01:05 2025 GMT Not After : Dec 24 03:01:05 2025 GMT Subject: CN=fcb61eee2e712fa94609a501020d492f11bdc25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:0b:82:bb:6f:5b:2d:1f:c4:7b:60:42:bb:1b: 3b:36:7e:4b:4d:1d:92:f5:8b:1c:9e:ec:97:26:e7: 95:05:28:50:a8:8b:ae:53:e7:e8:05:0c:d6:61:ac: e7:56:55:d1:7b:af:64:24:ff:68:62:eb:ba:02:79: d8:c8:c6:1b:b7:00:a2:5a:87:71:82:cf:13:c4:ad: ee:a3:dc:bc:e3:fe:18:2e:05:b0:55:b8:4c:f9:2f: 8f:91:a3:9a:20:24:bb:77:9d:35:b4:af:a8:b5:01: 15:1f:0f:78:a7:96:05:70:11:9e:b0:9c:50:70:6c: ee:ad:23:d1:12:42:cc:f6:d2:cc:8f:5e:d5:4d:06: da:02:4b:9c:d1:c7:d6:3b:c0:32:ca:1c:0c:93:1b: 63:ec:82:96:06:1d:f9:37:31:fc:57:12:6b:ec:0e: 07:79:ac:1c:58:24:2d:e5:6d:b7:b8:b2:37:84:04: f2:82:a7:a6:d3:8e:02:5e:99:b5:ea:6f:d1:88:dc: e2:2a:60:33:0c:c4:13:13:9a:28:82:c0:ed:e2:25: 52:bb:17:35:8b:82:52:2e:90:7e:bf:1c:4d:9c:7a: d1:a1:88:85:40:ab:42:60:27:22:56:cb:1e:b2:61: ad:5a:69:19:4c:8c:c5:fd:1c:57:68:bf:c7:5d:0b: 27:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B6:1E:EE:2E:71:2F:A9:46:09:A5:01:02:0D:49:2F:11:BD:C2:5D X509v3 Authority Key Identifier: keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:38:a8:a6:10:ae:f0:e2:07:53:ae:c9:e7:53:78:24:6a:f8: a8:6e:be:de:61:64:06:3b:62:ac:8f:a5:3e:02:f4:cb:6b:47: 32:68:27:95:45:80:fd:ba:08:5c:03:fe:5b:a9:f3:48:ef:b3: 08:8f:89:a7:e1:e1:b8:27:4d:5e:b3:16:f7:0e:a1:e8:87:f0: 13:ee:e4:4e:3b:2f:56:e6:95:ea:62:d1:8d:11:40:05:86:f4: f2:be:40:cb:53:dd:72:ca:64:44:f8:4b:14:dc:a4:87:1e:ed: c0:f4:75:dd:74:4d:09:48:f7:f2:9f:93:5d:66:17:68:42:5b: 2b:09:17:10:38:04:77:7f:5c:19:2f:a8:72:55:1f:9c:0f:03: 1e:55:de:ea:b0:37:f6:82:c8:b7:c1:9a:57:93:64:0a:02:61: b3:7d:48:e3:cf:90:4d:e0:2d:6e:77:90:3c:d2:f6:5e:d0:2e: 93:7d:be:cc:6c:30:07:08:a0:50:e7:6f:fc:d3:a1:98:f2:bf: 13:0b:24:63:28:2d:38:a1:fa:57:bb:a2:58:9c:58:e5:78:eb: 29:32:23:07:d1:c6:bc:94:2c:cd:8d:df:49:a8:29:35:1a:64: 54:66:3e:cc:78:e9:1d:7b:f8:03:9a:c3:7c:3a:84:80:dc:49: 7c:c4:e6:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJzgprTcD8yk3IcplviZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYmQwMmVhNDRhOWJlZTM1YjYzZDFhYjNlMjViMTRmMTlh MzVhNTUwHhcNMjUxMjIzMDMwMTA1WhcNMjUxMjI0MDMwMTA1WjAzMTEwLwYDVQQD EyhmY2I2MWVlZTJlNzEyZmE5NDYwOWE1MDEwMjBkNDkyZjExYmRjMjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8wuCu29bLR/Ee2BCuxs7Nn5LTR2S 9YscnuyXJueVBShQqIuuU+foBQzWYaznVlXRe69kJP9oYuu6AnnYyMYbtwCiWodx gs8TxK3uo9y84/4YLgWwVbhM+S+PkaOaICS7d501tK+otQEVHw94p5YFcBGesJxQ cGzurSPREkLM9tLMj17VTQbaAkuc0cfWO8AyyhwMkxtj7IKWBh35NzH8VxJr7A4H eawcWCQt5W23uLI3hATygqem044CXpm16m/RiNziKmAzDMQTE5oogsDt4iVSuxc1 i4JSLpB+vxxNnHrRoYiFQKtCYCciVssesmGtWmkZTIzF/RxXaL/HXQsnAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPy2Hu4ucS+pRgmlAQINSS8RvcJdMB8GA1UdIwQY MBaAFPG9AupEqb7jW2PRqz4lsU8Zo1pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEt ZmUwYTY1OGQ5ZGVkLzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEtZmUwYTY1OGQ5ZGVk LzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTiophCu 8OIHU67J51N4JGr4qG6+3mFkBjtirI+lPgL0y2tHMmgnlUWA/boIXAP+W6nzSO+z CI+Jp+HhuCdNXrMW9w6h6IfwE+7kTjsvVuaV6mLRjRFABYb08r5Ay1PdcspkRPhL FNykhx7twPR13XRNCUj38p+TXWYXaEJbKwkXEDgEd39cGS+oclUfnA8DHlXe6rA3 9oLIt8GaV5NkCgJhs31I48+QTeAtbneQPNL2XtAuk32+zGwwBwigUOdv/NOhmPK/ EwskYygtOKH6V7uiWJxY5XjrKTIjB9HGvJQszY3fSagpNRpkVGY+zHjpHXv4A5rD fDqEgNxJfMTmGw== -----END CERTIFICATE-----Generated at Tue Dec 23 06:06:42 2025 by rpki-client