This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft File: 8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json) Hash identifier: J1dOUjCVg0Ru3AIp1DBkxYwP8RbINWh5o2gKwjfnKgE= Subject key identifier: 3F:DD:F2:BB:95:94:8F:72:9F:44:AA:8A:48:E3:C8:02:81:A2:FB:27 Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6 Certificate issuer: /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6 Certificate serial: 019B32687482F5C0B762C7F6E6A6DE7157DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft Manifest number: 0703 Signing time: Thu 18 Dec 2025 17:01:04 +0000 Manifest this update: Thu 18 Dec 2025 17:01:04 +0000 Manifest next update: Fri 19 Dec 2025 17:01:04 +0000 Files and hashes: 1: 1-a6iBHASMUxMW7asjxbfE0QEd5w.roa (hash: m3RXlatEBF9cA7N2EEjPPwV4+LMKEGb0hrpMsfXqqsk=) 2: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: BOT5tDm78/OvvOuhxlRP1/Lu0JOKwBz8YTkpw0NQ8K8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:74:82:f5:c0:b7:62:c7:f6:e6:a6:de:71:57:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6 Validity Not Before: Dec 18 17:01:04 2025 GMT Not After : Dec 19 17:01:04 2025 GMT Subject: CN=3fddf2bb95948f729f44aa8a48e3c80281a2fb27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ff:a2:a0:7f:7a:ec:72:8d:5d:93:1e:9f:c5: 9c:96:33:27:fc:31:11:17:01:cd:db:bd:07:40:72: d6:bb:7c:6d:8c:57:fa:ca:1f:c1:f1:03:6b:3c:22: 0d:11:14:2a:3e:8e:b2:93:60:60:de:54:27:10:8d: 59:e7:53:7e:8f:46:0e:ac:9e:9d:14:29:96:2c:1a: 72:8c:c6:3f:26:19:7c:a0:cf:69:bc:63:e8:06:3f: 46:ff:02:11:cf:1d:b9:1c:7a:a4:d3:67:83:80:8a: 66:1d:b7:6f:05:a2:23:6b:cb:da:86:bf:72:25:7f: 8c:56:0d:47:32:57:28:8c:51:90:d5:7d:79:3d:ff: 53:e7:5e:33:60:d0:c9:b1:41:58:8b:76:c5:fb:d3: 7d:4f:22:17:0b:c4:1d:98:c0:95:66:c9:0e:38:25: e6:c1:b7:f1:b2:63:a4:a0:69:90:30:63:40:02:bd: c4:5a:63:76:f7:09:3c:bb:fb:02:85:18:19:d0:b8: 33:0e:8e:2f:40:a9:54:a1:8f:e9:8a:fd:a8:17:0d: af:17:45:76:09:08:24:45:87:0d:6a:ec:c0:e6:96: 5a:d2:18:69:94:e2:b8:5e:31:80:bc:42:27:3f:ce: 64:10:28:5d:4b:00:fe:d1:2a:52:20:48:d1:5b:32: 6f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DD:F2:BB:95:94:8F:72:9F:44:AA:8A:48:E3:C8:02:81:A2:FB:27 X509v3 Authority Key Identifier: keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:15:f4:e5:ef:c0:8d:da:df:c9:6d:c2:10:bb:9b:91:eb:1a: 5e:be:a8:c3:b8:16:bf:ef:7a:a9:80:ca:eb:43:b8:fc:e3:73: 24:f5:22:ec:4f:6c:bf:43:09:7d:1f:70:25:84:5c:a4:87:00: ff:11:4c:c5:b1:f1:55:e2:19:f2:c4:71:aa:c2:45:6f:6b:37: fd:c1:82:d3:25:dd:23:dc:1a:c2:b5:16:13:24:27:91:2e:d7: b0:d5:54:ed:3d:a8:e5:ef:c9:54:c9:29:66:90:1d:e3:19:45: 1e:61:10:f7:89:ea:e9:b1:8e:95:76:b3:63:41:60:9a:4b:bc: 2f:8d:86:0f:e4:55:7a:aa:be:52:fe:26:11:6f:d2:88:e4:fe: 96:11:e5:23:54:a2:c8:8f:69:0d:2f:6a:41:8a:9d:2b:b7:30: da:b3:cb:56:a8:25:f6:d0:d7:ce:9a:92:9c:ef:0a:a1:08:71: a2:5c:ec:34:32:1a:57:69:a2:f6:60:8c:a1:cc:59:61:e8:62: 0d:18:c1:df:1a:6a:68:cc:0f:50:2a:ce:21:9f:35:1b:1b:a5: 63:27:bd:17:1f:3e:b8:c5:5b:3e:c6:2b:37:fb:ad:dd:d6:40: d7:98:fb:0f:3d:31:3b:c6:76:7c:c1:3b:a1:6e:88:1f:a8:a4: 7a:f5:51:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaHSC9cC3Ysf25qbecVfbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDJiYThhMmE5NmEwN2I1YjY0Y2FmODczMjkwZTIwNzhk OTY0YTYwHhcNMjUxMjE4MTcwMTA0WhcNMjUxMjE5MTcwMTA0WjAzMTEwLwYDVQQD EygzZmRkZjJiYjk1OTQ4ZjcyOWY0NGFhOGE0OGUzYzgwMjgxYTJmYjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv+ioH967HKNXZMen8WcljMn/DER FwHN270HQHLWu3xtjFf6yh/B8QNrPCINERQqPo6yk2Bg3lQnEI1Z51N+j0YOrJ6d FCmWLBpyjMY/Jhl8oM9pvGPoBj9G/wIRzx25HHqk02eDgIpmHbdvBaIja8vahr9y JX+MVg1HMlcojFGQ1X15Pf9T514zYNDJsUFYi3bF+9N9TyIXC8QdmMCVZskOOCXm wbfxsmOkoGmQMGNAAr3EWmN29wk8u/sChRgZ0LgzDo4vQKlUoY/piv2oFw2vF0V2 CQgkRYcNauzA5pZa0hhplOK4XjGAvEInP85kEChdSwD+0SpSIEjRWzJvGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/d8ruVlI9yn0SqikjjyAKBovsnMB8GA1UdIwQY MBaAFPHSuooqlqB7W2TK+HMpDiB42WSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84MDc1YTAtMGM1ZS00Yzc4LWJkYjEt ZDE2ODk4MDE2Y2ZlLzEvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84MDc1YTAtMGM1ZS00Yzc4LWJkYjEtZDE2ODk4MDE2Y2Zl LzEvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhX05e/A jdrfyW3CELubkesaXr6ow7gWv+96qYDK60O4/ONzJPUi7E9sv0MJfR9wJYRcpIcA /xFMxbHxVeIZ8sRxqsJFb2s3/cGC0yXdI9wawrUWEyQnkS7XsNVU7T2o5e/JVMkp ZpAd4xlFHmEQ94nq6bGOlXazY0Fgmku8L42GD+RVeqq+Uv4mEW/SiOT+lhHlI1Si yI9pDS9qQYqdK7cw2rPLVqgl9tDXzpqSnO8KoQhxolzsNDIaV2mi9mCMocxZYehi DRjB3xpqaMwPUCrOIZ81GxulYye9Fx8+uMVbPsYrN/ut3dZA15j7Dz0xO8Z2fME7 oW6IH6ikevVRHw== -----END CERTIFICATE-----Generated at Fri Dec 19 02:46:35 2025 by rpki-client