This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft File: 8KMtISmjhsmgr9u5FeDb8TC6cNU.mft (raw, json) Hash identifier: hvk8Q6hhbiYwKWvEQ2NM73ul5N5+jCoiPqtsNBpnr3s= Subject key identifier: 00:24:28:EA:57:4C:30:DD:D8:8E:BA:05:79:F9:B6:EE:1D:E5:F9:45 Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5 Certificate issuer: /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5 Certificate serial: 019AF08866C9D3CD5BA75E0E3907E39CC86A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft Manifest number: 0960 Signing time: Fri 05 Dec 2025 22:01:02 +0000 Manifest this update: Fri 05 Dec 2025 22:01:02 +0000 Manifest next update: Sat 06 Dec 2025 22:01:02 +0000 Files and hashes: 1: 8KMtISmjhsmgr9u5FeDb8TC6cNU.crl (hash: wA47EGQbgJ597MsnFElwQtauyKtPgyMkdN7oaJOzYtI=) 2: jB8O0EexbXRJ48aM1Kli0Ktl1vI.roa (hash: IcThWozF746RiVAe4jDaPPGv0zWnJg0lyhHJVcObykM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:66:c9:d3:cd:5b:a7:5e:0e:39:07:e3:9c:c8:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5 Validity Not Before: Dec 5 22:01:02 2025 GMT Not After : Dec 6 22:01:02 2025 GMT Subject: CN=002428ea574c30ddd88eba0579f9b6ee1de5f945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3d:7c:d7:82:ea:3b:b9:9e:6e:a9:ad:e8:95: 67:65:a2:18:35:a8:67:f8:a1:81:89:86:d6:8a:98: 8d:2b:62:21:5b:d4:c8:81:b8:e6:ca:6b:8c:be:27: b3:29:bf:87:c3:4c:ad:d6:68:da:ea:5a:cc:db:64: 20:d4:d7:ab:00:12:d6:6b:9e:2f:f7:a9:af:1c:ec: 3b:e4:6a:83:b9:0d:4e:b5:a6:05:ef:13:d9:45:f0: 90:c2:60:92:01:28:12:53:36:bd:4e:1e:0b:11:46: f8:55:b2:b4:65:d4:88:f8:4e:84:75:0e:21:f4:c1: 0e:15:71:ba:7b:5e:a1:93:84:2f:97:7a:d1:c4:e3: 18:ff:1d:57:1c:14:a1:98:cc:31:57:90:7f:08:22: a1:57:b1:6a:f8:ba:24:05:82:16:7d:53:c0:08:05: db:c3:3c:de:ec:a1:d4:c8:2d:21:43:67:be:4b:06: 68:60:29:ee:22:b6:ef:60:3e:5b:93:21:1a:1c:c0: 97:0f:33:f8:05:2f:a3:b4:c0:b0:2f:d1:50:85:2c: 9d:a7:93:3a:42:a8:9d:c1:7c:12:30:d9:26:67:fd: 38:0b:fd:c4:8c:8b:13:23:d1:3b:d4:49:3a:d0:a4: 49:a1:14:ea:c6:6e:5b:82:e5:14:5e:bb:af:c8:71: 5d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:24:28:EA:57:4C:30:DD:D8:8E:BA:05:79:F9:B6:EE:1D:E5:F9:45 X509v3 Authority Key Identifier: keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:4d:20:9d:80:14:43:11:4c:58:bf:83:e4:7e:67:b1:84:49: ad:16:cc:7b:af:41:9a:3a:31:90:b6:5a:ab:ed:6d:71:40:03: b3:20:49:cc:17:e0:7a:36:fc:da:0b:5b:d8:b6:4d:e3:ae:ab: dd:d1:e0:46:45:eb:0e:92:93:17:24:1a:a5:87:30:12:fe:85: 5c:46:42:6f:fb:24:ee:35:58:97:f7:c5:a4:24:eb:31:8f:56: fa:e7:9d:92:3e:e6:ef:dc:c8:9c:28:b9:f7:fe:77:ba:87:17: d3:29:61:98:da:75:5d:3f:81:82:73:7f:38:74:c8:05:57:71: 14:5b:1d:6a:b0:ed:9c:7e:4c:42:c3:3e:d5:8b:9b:81:cd:65: 1b:1d:4d:5a:f9:ab:f9:aa:d8:03:3a:ee:cb:78:e4:40:4c:5d: 62:da:4c:e4:35:78:10:a0:b4:18:ea:70:8d:90:a9:68:41:7f: d7:98:f6:6c:b9:97:6e:20:3e:22:7f:2f:99:1c:29:dd:ba:03: 0a:7f:eb:33:27:01:b5:ea:ba:1a:59:21:d9:62:2c:76:9e:92: 18:8c:71:fa:6b:ea:a8:e5:2b:ca:b1:c5:a7:de:92:ef:5a:92: 97:2e:d5:c0:66:69:44:36:95:c0:0f:b8:0a:85:10:23:d0:53: 3c:22:24:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiGbJ081bp14OOQfjnMhqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYTMyZDIxMjlhMzg2YzlhMGFmZGJiOTE1ZTBkYmYxMzBi YTcwZDUwHhcNMjUxMjA1MjIwMTAyWhcNMjUxMjA2MjIwMTAyWjAzMTEwLwYDVQQD EygwMDI0MjhlYTU3NGMzMGRkZDg4ZWJhMDU3OWY5YjZlZTFkZTVmOTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD1814LqO7mebqmt6JVnZaIYNahn +KGBiYbWipiNK2IhW9TIgbjmymuMviezKb+Hw0yt1mja6lrM22Qg1NerABLWa54v 96mvHOw75GqDuQ1OtaYF7xPZRfCQwmCSASgSUza9Th4LEUb4VbK0ZdSI+E6EdQ4h 9MEOFXG6e16hk4Qvl3rRxOMY/x1XHBShmMwxV5B/CCKhV7Fq+LokBYIWfVPACAXb wzze7KHUyC0hQ2e+SwZoYCnuIrbvYD5bkyEaHMCXDzP4BS+jtMCwL9FQhSydp5M6 QqidwXwSMNkmZ/04C/3EjIsTI9E71Ek60KRJoRTqxm5bguUUXruvyHFdGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAkKOpXTDDd2I66BXn5tu4d5flFMB8GA1UdIwQY MBaAFPCjLSEpo4bJoK/buRXg2/EwunDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEtNdElTbWpoc21ncjl1NUZlRGI4VEM2Y05VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81OGI4ZTItMTIxNS00YmIwLTk2ZGYt MmYwODM4MGFlNmM3LzEvOEtNdElTbWpoc21ncjl1NUZlRGI4VEM2Y05VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy81OGI4ZTItMTIxNS00YmIwLTk2ZGYtMmYwODM4MGFlNmM3 LzEvOEtNdElTbWpoc21ncjl1NUZlRGI4VEM2Y05VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADU0gnYAU QxFMWL+D5H5nsYRJrRbMe69BmjoxkLZaq+1tcUADsyBJzBfgejb82gtb2LZN466r 3dHgRkXrDpKTFyQapYcwEv6FXEZCb/sk7jVYl/fFpCTrMY9W+uedkj7m79zInCi5 9/53uocX0ylhmNp1XT+BgnN/OHTIBVdxFFsdarDtnH5MQsM+1Yubgc1lGx1NWvmr +arYAzruy3jkQExdYtpM5DV4EKC0GOpwjZCpaEF/15j2bLmXbiA+In8vmRwp3boD Cn/rMycBteq6Glkh2WIsdp6SGIxx+mvqqOUryrHFp96S71qSly7VwGZpRDaVwA+4 CoUQI9BTPCIkqg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:30 2025 by rpki-client