This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft File: 8kufSnwM67H5f6JAO2Me5tFuxjM.mft (raw, json) Hash identifier: fri8g8YvhCgSiU+SYglTg88jZPkYeLUmnLk9bfWPQao= Subject key identifier: F4:42:78:72:29:46:77:61:97:50:3F:76:88:3C:99:06:29:0A:69:FD Authority key identifier: F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33 Certificate issuer: /CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633 Certificate serial: 019AF1D19D516644F16647BF646909AB5397 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft Manifest number: B7 Signing time: Sat 06 Dec 2025 04:00:37 +0000 Manifest this update: Sat 06 Dec 2025 04:00:37 +0000 Manifest next update: Sun 07 Dec 2025 04:00:37 +0000 Files and hashes: 1: 8kufSnwM67H5f6JAO2Me5tFuxjM.crl (hash: 14Hsh5i0okg+duI0PGaXhcKaQ+RQlJpCgP4x0BV7DPg=) 2: zVCCoN-U0ius3abDeot_YngoJfc.roa (hash: fP+nwjzWvUa3O/fKfTzCwxd5RWiCPK08gubU5L+iEvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9d:51:66:44:f1:66:47:bf:64:69:09:ab:53:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633 Validity Not Before: Dec 6 04:00:37 2025 GMT Not After : Dec 7 04:00:37 2025 GMT Subject: CN=f44278722946776197503f76883c9906290a69fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:de:30:e7:08:8e:0a:ec:27:9b:f8:8b:f2:c6: 44:4f:72:2a:75:17:3b:bf:fa:70:74:2b:a0:a2:bb: 8f:fb:87:fd:38:39:2e:bf:46:c1:b7:20:c5:95:67: 75:b5:76:a8:da:d6:0d:14:fe:bc:0c:13:f2:04:ca: d1:c1:05:c5:a6:64:0c:4c:57:97:c7:79:05:1e:31: 1e:1c:75:80:3b:00:de:34:5a:87:87:58:60:bf:75: 58:f4:51:e4:ad:70:6c:17:bc:8d:7c:f0:7f:1a:1e: aa:bc:78:0b:27:ca:a4:4b:7a:86:13:62:89:07:eb: 85:f3:10:86:4b:89:8a:04:49:06:d9:65:ff:25:e7: 04:c3:04:db:3a:5c:ad:ce:15:df:a2:7e:51:5e:09: 91:63:1b:6d:a1:58:92:74:24:ce:07:44:c7:44:11: 31:36:ff:5e:a0:bf:24:ea:d1:a1:2a:5f:9b:21:c7: 61:38:ec:d9:7d:4d:29:e4:60:ec:fe:50:f4:a0:35: e6:c4:38:2f:7b:48:1e:c0:fc:1a:04:f0:65:1e:9b: 34:05:f1:0a:ce:f0:13:ac:df:c8:c5:38:cd:a6:e6: 2d:5f:31:a7:f3:ca:26:81:dd:46:90:e6:13:90:ec: 13:8d:bb:3e:fe:78:38:83:43:96:06:0c:f3:e6:a3: 04:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:42:78:72:29:46:77:61:97:50:3F:76:88:3C:99:06:29:0A:69:FD X509v3 Authority Key Identifier: keyid:F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:7b:f6:b5:8d:4b:2a:fe:c4:4d:e8:d6:81:fa:6c:2f:f2:45: f1:77:38:e7:ac:d2:f1:4d:8d:fe:01:6d:40:a1:17:72:46:62: 1d:52:e3:5b:20:9a:fe:51:40:3b:0f:bd:53:f5:2c:a5:c5:84: f2:ae:f3:e4:bd:db:62:61:b1:c6:63:92:f7:db:94:27:6c:4b: f1:34:a9:3f:b9:57:2c:0c:c3:ff:4e:28:0e:3b:b4:25:82:b2: c6:ae:9d:b2:06:4c:40:d5:d4:9c:50:1a:d5:d9:0a:34:fd:b1: a2:f3:e1:d5:e0:1f:63:44:18:6a:e2:f9:b2:bd:84:a5:50:34: 99:bd:59:71:a3:c2:a5:64:17:b8:d7:2e:6b:57:fd:c0:7b:ca: 3f:10:47:00:2d:81:91:41:f8:1b:25:95:60:b4:3d:cf:b0:fe: 15:1e:91:e8:84:b0:67:d9:5f:f5:b9:22:6d:f2:36:ae:d2:70: 06:e3:e4:88:21:3b:17:c0:4a:ef:10:bc:cc:b9:16:a4:10:f4: aa:42:ff:7c:e2:5b:0b:5d:f5:5e:bb:e3:77:5e:56:04:8a:53: 07:94:cb:d9:99:06:a3:7d:94:aa:81:15:cf:2e:32:ea:4f:49: a3:f9:13:ea:e4:01:7b:95:48:e0:f2:e5:a4:35:6a:6c:81:88: fe:10:17:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Z1RZkTxZke/ZGkJq1OXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNGI5ZjRhN2MwY2ViYjFmOTdmYTI0MDNiNjMxZWU2ZDE2 ZWM2MzMwHhcNMjUxMjA2MDQwMDM3WhcNMjUxMjA3MDQwMDM3WjAzMTEwLwYDVQQD EyhmNDQyNzg3MjI5NDY3NzYxOTc1MDNmNzY4ODNjOTkwNjI5MGE2OWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6N4w5wiOCuwnm/iL8sZET3IqdRc7 v/pwdCugoruP+4f9ODkuv0bBtyDFlWd1tXao2tYNFP68DBPyBMrRwQXFpmQMTFeX x3kFHjEeHHWAOwDeNFqHh1hgv3VY9FHkrXBsF7yNfPB/Gh6qvHgLJ8qkS3qGE2KJ B+uF8xCGS4mKBEkG2WX/JecEwwTbOlytzhXfon5RXgmRYxttoViSdCTOB0THRBEx Nv9eoL8k6tGhKl+bIcdhOOzZfU0p5GDs/lD0oDXmxDgve0gewPwaBPBlHps0BfEK zvATrN/IxTjNpuYtXzGn88omgd1GkOYTkOwTjbs+/ng4g0OWBgzz5qMErQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRCeHIpRndhl1A/dog8mQYpCmn9MB8GA1UdIwQY MBaAFPJLn0p8DOux+X+iQDtjHubRbsYzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zZGUyMDgtMzQ3ZS00NmQ3LTljYzkt OWM4ZWFiNzZkYTk4LzEvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zZGUyMDgtMzQ3ZS00NmQ3LTljYzktOWM4ZWFiNzZkYTk4 LzEvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnv2tY1L Kv7ETejWgfpsL/JF8Xc456zS8U2N/gFtQKEXckZiHVLjWyCa/lFAOw+9U/UspcWE 8q7z5L3bYmGxxmOS99uUJ2xL8TSpP7lXLAzD/04oDju0JYKyxq6dsgZMQNXUnFAa 1dkKNP2xovPh1eAfY0QYauL5sr2EpVA0mb1ZcaPCpWQXuNcua1f9wHvKPxBHAC2B kUH4GyWVYLQ9z7D+FR6R6ISwZ9lf9bkibfI2rtJwBuPkiCE7F8BK7xC8zLkWpBD0 qkL/fOJbC131Xrvjd15WBIpTB5TL2ZkGo32UqoEVzy4y6k9Jo/kT6uQBe5VI4PLl pDVqbIGI/hAXdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:14 2025 by rpki-client