This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft File: 8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json) Hash identifier: uRpnGkCbwU2nJP/RisAs1t9+JAA/zr4Y33TThHnLA1A= Subject key identifier: A2:5E:B7:0B:74:B3:8C:4C:A5:31:05:24:48:6F:D9:41:0D:B6:85:CB Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6 Certificate issuer: /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6 Certificate serial: 019AF2AD6D87716F443890E2F9024837D289 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft Manifest number: 06E2 Signing time: Sat 06 Dec 2025 08:00:43 +0000 Manifest this update: Sat 06 Dec 2025 08:00:43 +0000 Manifest next update: Sun 07 Dec 2025 08:00:43 +0000 Files and hashes: 1: 1-a6iBHASMUxMW7asjxbfE0QEd5w.roa (hash: m3RXlatEBF9cA7N2EEjPPwV4+LMKEGb0hrpMsfXqqsk=) 2: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: jAd85YeyFRnQ1jS1uOOZhYZjkj3mG/K6clWY1+Yl0D8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:6d:87:71:6f:44:38:90:e2:f9:02:48:37:d2:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6 Validity Not Before: Dec 6 08:00:43 2025 GMT Not After : Dec 7 08:00:43 2025 GMT Subject: CN=a25eb70b74b38c4ca5310524486fd9410db685cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:22:41:03:fa:da:d5:ad:70:27:d7:29:d8:a4: c3:ce:10:17:89:cb:34:b7:c2:5e:07:e2:b3:df:5d: 0c:aa:e0:b2:02:6b:6e:1f:a7:34:76:eb:cd:ce:76: b2:5f:a6:54:42:1f:45:bd:21:30:bf:15:58:a5:ce: 82:74:26:75:f4:b6:17:37:c6:c7:90:b2:98:3d:dc: 6e:61:8f:bb:94:02:be:5b:51:2b:6e:c6:2c:47:00: b5:4f:f9:78:1a:16:7b:da:bc:f8:4e:75:21:1b:04: 11:50:76:6f:06:64:cd:6a:51:fa:6b:43:2b:5b:ae: 1c:17:a1:96:e8:12:1b:2d:24:08:05:63:ee:3f:a6: a1:80:d3:63:37:2d:63:e4:2e:9b:36:e9:82:8d:42: e2:2d:e8:d2:d0:97:63:4b:e8:b3:42:31:73:9a:92: 7e:d5:05:65:db:ae:57:44:06:bf:97:95:12:85:0d: e8:f6:36:22:2c:f5:be:d4:01:d3:24:a0:01:9e:c1: 9b:91:b1:a6:90:39:fa:1e:49:5f:7a:a5:e7:4d:69: 61:2d:5f:3b:68:4a:c6:cb:bd:db:a9:14:ed:41:8a: ee:b1:3f:42:a8:a1:42:66:ff:30:74:b9:4b:6f:0e: c3:65:cf:c5:2b:2b:78:7a:1f:50:be:11:24:f0:05: 9c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5E:B7:0B:74:B3:8C:4C:A5:31:05:24:48:6F:D9:41:0D:B6:85:CB X509v3 Authority Key Identifier: keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:27:3f:0c:11:93:2f:2e:01:9d:83:4b:bc:87:14:22:5d:96: 0a:b8:59:4d:3a:ab:ce:cf:e1:77:2a:b4:da:8d:52:44:31:5d: 5c:81:07:81:1c:3b:a6:a3:7b:72:99:7f:23:3e:f8:81:6c:ad: b2:e9:52:b1:1d:39:1f:59:dc:e1:24:35:33:a6:39:fb:f8:70: bb:fe:3b:e1:46:b7:18:7d:ce:a0:df:b8:50:7a:6a:fb:11:d1: bc:1f:e8:b0:e0:d8:a6:44:42:64:d7:32:22:f2:6a:46:6a:77: 6c:2f:6d:9e:17:24:a0:55:0d:ac:50:e1:d0:80:92:c7:dc:8f: df:dc:80:14:e3:17:11:3f:95:eb:1e:4d:71:5a:04:eb:c7:8a: 3d:8f:55:83:0e:88:5b:2f:45:2d:df:fc:1b:71:37:ee:79:60: 25:49:69:f1:81:b5:36:8e:77:79:42:fb:e2:3b:41:41:35:6f: 6b:fb:c2:81:4e:24:bb:fe:98:d8:bf:c3:0c:a3:90:90:66:c1: 30:70:2d:2b:f2:90:3b:83:64:19:87:72:bf:7b:2d:2f:b3:9b: d9:f1:ca:c6:41:ae:17:4e:52:2b:89:43:07:6e:6d:90:fa:2d: b7:09:7a:45:06:f7:9f:24:d2:97:36:0d:07:39:f6:ed:93:cc: 56:37:52:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrW2HcW9EOJDi+QJIN9KJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDJiYThhMmE5NmEwN2I1YjY0Y2FmODczMjkwZTIwNzhk OTY0YTYwHhcNMjUxMjA2MDgwMDQzWhcNMjUxMjA3MDgwMDQzWjAzMTEwLwYDVQQD EyhhMjVlYjcwYjc0YjM4YzRjYTUzMTA1MjQ0ODZmZDk0MTBkYjY4NWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SJBA/ra1a1wJ9cp2KTDzhAXics0 t8JeB+Kz310MquCyAmtuH6c0duvNznayX6ZUQh9FvSEwvxVYpc6CdCZ19LYXN8bH kLKYPdxuYY+7lAK+W1ErbsYsRwC1T/l4GhZ72rz4TnUhGwQRUHZvBmTNalH6a0Mr W64cF6GW6BIbLSQIBWPuP6ahgNNjNy1j5C6bNumCjULiLejS0JdjS+izQjFzmpJ+ 1QVl265XRAa/l5UShQ3o9jYiLPW+1AHTJKABnsGbkbGmkDn6HklfeqXnTWlhLV87 aErGy73bqRTtQYrusT9CqKFCZv8wdLlLbw7DZc/FKyt4eh9QvhEk8AWcIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJetwt0s4xMpTEFJEhv2UENtoXLMB8GA1UdIwQY MBaAFPHSuooqlqB7W2TK+HMpDiB42WSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84MDc1YTAtMGM1ZS00Yzc4LWJkYjEt ZDE2ODk4MDE2Y2ZlLzEvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84MDc1YTAtMGM1ZS00Yzc4LWJkYjEtZDE2ODk4MDE2Y2Zl LzEvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAic/DBGT Ly4BnYNLvIcUIl2WCrhZTTqrzs/hdyq02o1SRDFdXIEHgRw7pqN7cpl/Iz74gWyt sulSsR05H1nc4SQ1M6Y5+/hwu/474Ua3GH3OoN+4UHpq+xHRvB/osODYpkRCZNcy IvJqRmp3bC9tnhckoFUNrFDh0ICSx9yP39yAFOMXET+V6x5NcVoE68eKPY9Vgw6I Wy9FLd/8G3E37nlgJUlp8YG1No53eUL74jtBQTVva/vCgU4ku/6Y2L/DDKOQkGbB MHAtK/KQO4NkGYdyv3stL7Ob2fHKxkGuF05SK4lDB25tkPottwl6RQb3nyTSlzYN Bzn27ZPMVjdSgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:48:31 2025 by rpki-client