This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft File: 8fF-vMKlJa_PySIYFZyvUogpeNI.mft (raw, json) Hash identifier: S95/EBQ43OT9x1pUs4KJSgA7HoFJm4e4PFgAklTrrq0= Subject key identifier: A6:8F:68:BF:A7:0B:D0:3F:C0:0C:9C:0A:05:9E:76:B3:B1:1F:80:59 Authority key identifier: F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2 Certificate issuer: /CN=f1f17ebcc2a525afcfc92218159caf52882978d2 Certificate serial: 019AF208A161A2FA1422801484C85E76284A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft Manifest number: 07C1 Signing time: Sat 06 Dec 2025 05:00:43 +0000 Manifest this update: Sat 06 Dec 2025 05:00:43 +0000 Manifest next update: Sun 07 Dec 2025 05:00:43 +0000 Files and hashes: 1: 8fF-vMKlJa_PySIYFZyvUogpeNI.crl (hash: 2WPPMTmTh/ICprfN7phrVxw8h+Vb7kVYD6xANCnfmDI=) 2: xG5nFDK1Nyvy5vl4sT_P7td-s98.roa (hash: 9ZslVC10Wq5A6L0EoqSP1oGGII0oefI9/cuRC4XS49Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a1:61:a2:fa:14:22:80:14:84:c8:5e:76:28:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f17ebcc2a525afcfc92218159caf52882978d2 Validity Not Before: Dec 6 05:00:43 2025 GMT Not After : Dec 7 05:00:43 2025 GMT Subject: CN=a68f68bfa70bd03fc00c9c0a059e76b3b11f8059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:95:06:d7:5f:56:a8:55:4c:ab:98:53:68:97: 26:2d:81:2f:3d:fc:22:ec:26:0f:4e:f6:d6:ae:47: 4b:0c:ed:6c:3a:d8:2d:87:fc:80:0c:53:32:e2:ca: e1:4a:53:cd:70:ea:78:c7:4d:02:c9:5e:12:8b:7e: 51:0f:03:17:de:79:aa:b2:bc:32:42:49:92:63:10: fd:ea:a0:8d:f6:19:83:60:34:65:89:5b:2a:61:e3: fc:1b:61:50:bd:eb:6c:aa:99:2e:25:5a:19:b3:29: 98:ff:4c:bb:09:bc:05:42:dd:dd:03:10:76:71:78: c5:e0:bd:cc:55:f9:e7:8b:a2:bf:ef:31:de:fc:76: e1:3e:05:1b:93:34:0a:d2:84:11:13:cd:fb:17:37: 6b:0d:44:14:f6:a5:a6:9f:8c:82:64:3b:9a:33:ab: 55:f7:e5:59:cc:fd:21:2b:34:f9:34:66:4e:ac:c6: 15:02:fb:85:6f:9b:98:2e:c7:3d:c9:49:16:e1:7c: c5:f7:b3:fa:3f:90:87:10:c4:c2:38:35:b0:da:c5: 48:55:52:bd:20:d8:76:ac:0e:66:87:83:25:51:3a: 2f:72:b2:af:87:1d:07:71:1b:aa:69:40:12:25:68: 06:09:49:f1:b1:97:a8:67:b9:37:e9:27:fa:43:a3: 22:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8F:68:BF:A7:0B:D0:3F:C0:0C:9C:0A:05:9E:76:B3:B1:1F:80:59 X509v3 Authority Key Identifier: keyid:F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:c0:7d:40:00:fb:26:71:5d:9d:0d:07:d9:ee:ef:77:07:83: 93:a9:fd:32:03:07:8e:55:31:73:88:92:e7:8e:18:fc:19:a8: ed:43:3d:7a:5b:02:e9:73:67:4b:ad:ff:e9:dc:6b:f6:77:6d: 81:14:c9:59:38:2a:8c:b3:8d:5c:52:f8:07:e3:dd:3f:f0:07: e9:d7:ba:28:6a:10:42:6c:9f:80:33:40:a3:23:0b:67:c5:6c: 2f:74:7b:3f:a5:7e:31:b4:1a:5b:3e:29:9e:77:73:e3:39:6d: 5b:19:02:3e:50:9d:42:1e:53:94:b0:ac:ed:43:ae:f2:64:7b: 34:b0:30:d4:0a:c5:b2:bd:d1:a2:a6:9e:ca:ce:8a:bc:2a:a3: 08:42:c2:c6:1f:c1:4d:b9:0e:b7:f4:72:d6:d9:81:0f:f2:f0: 56:20:35:a2:62:65:46:f7:0d:87:8c:3b:cd:f1:64:09:cd:78: 4a:65:a4:35:4e:78:24:6e:9e:1c:f1:4e:0b:5e:91:e0:be:e2: 81:04:97:9e:09:dc:81:a8:ce:18:99:8d:ee:c6:c9:08:1f:98: e8:da:87:0b:dc:89:1a:c1:a2:83:6e:1e:c9:34:3f:84:dd:55: 19:2e:9a:62:55:dd:b8:ce:ba:ea:2e:6f:27:61:48:e3:ff:09: 65:bd:78:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKFhovoUIoAUhMhedihKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjE3ZWJjYzJhNTI1YWZjZmM5MjIxODE1OWNhZjUyODgy OTc4ZDIwHhcNMjUxMjA2MDUwMDQzWhcNMjUxMjA3MDUwMDQzWjAzMTEwLwYDVQQD EyhhNjhmNjhiZmE3MGJkMDNmYzAwYzljMGEwNTllNzZiM2IxMWY4MDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5UG119WqFVMq5hTaJcmLYEvPfwi 7CYPTvbWrkdLDO1sOtgth/yADFMy4srhSlPNcOp4x00CyV4Si35RDwMX3nmqsrwy QkmSYxD96qCN9hmDYDRliVsqYeP8G2FQvetsqpkuJVoZsymY/0y7CbwFQt3dAxB2 cXjF4L3MVfnni6K/7zHe/HbhPgUbkzQK0oQRE837FzdrDUQU9qWmn4yCZDuaM6tV 9+VZzP0hKzT5NGZOrMYVAvuFb5uYLsc9yUkW4XzF97P6P5CHEMTCODWw2sVIVVK9 INh2rA5mh4MlUTovcrKvhx0HcRuqaUASJWgGCUnxsZeoZ7k36Sf6Q6MiGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKaPaL+nC9A/wAycCgWedrOxH4BZMB8GA1UdIwQY MBaAFPHxfrzCpSWvz8kiGBWcr1KIKXjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hNzJkYTEtYWY4MS00Nzg3LWEwODUt ZmYzNGE4YWU5MDFhLzEvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hNzJkYTEtYWY4MS00Nzg3LWEwODUtZmYzNGE4YWU5MDFh LzEvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8B9QAD7 JnFdnQ0H2e7vdweDk6n9MgMHjlUxc4iS544Y/Bmo7UM9elsC6XNnS63/6dxr9ndt gRTJWTgqjLONXFL4B+PdP/AH6de6KGoQQmyfgDNAoyMLZ8VsL3R7P6V+MbQaWz4p nndz4zltWxkCPlCdQh5TlLCs7UOu8mR7NLAw1ArFsr3Roqaeys6KvCqjCELCxh/B TbkOt/Ry1tmBD/LwViA1omJlRvcNh4w7zfFkCc14SmWkNU54JG6eHPFOC16R4L7i gQSXngncgajOGJmN7sbJCB+Y6NqHC9yJGsGig24eyTQ/hN1VGS6aYlXduM666i5v J2FI4/8JZb14kQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:47 2025 by rpki-client