This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft File: 8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft (raw, json) Hash identifier: 2hjaomrbDdGqJjapBDP847Bfkp5rXyA1uy5EHrDT5PA= Subject key identifier: 36:29:EC:CA:36:E1:DA:6D:80:10:B0:64:96:D0:55:94:F3:AD:3B:1A Authority key identifier: F3:EF:52:ED:81:6C:F4:BF:7D:02:9F:FB:0A:BC:10:1A:FD:2C:64:B5 Certificate issuer: /CN=f3ef52ed816cf4bf7d029ffb0abc101afd2c64b5 Certificate serial: 019AF31BEB53B0F178D28C38BB26AC9743B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft Manifest number: 0248 Signing time: Sat 06 Dec 2025 10:01:24 +0000 Manifest this update: Sat 06 Dec 2025 10:01:24 +0000 Manifest next update: Sun 07 Dec 2025 10:01:24 +0000 Files and hashes: 1: 8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl (hash: pUHb5V4vH5Sv8xmxubt/S/rTt2NQdbMwptNOnlsy1KQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:eb:53:b0:f1:78:d2:8c:38:bb:26:ac:97:43:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3ef52ed816cf4bf7d029ffb0abc101afd2c64b5 Validity Not Before: Dec 6 10:01:24 2025 GMT Not After : Dec 7 10:01:24 2025 GMT Subject: CN=3629ecca36e1da6d8010b06496d05594f3ad3b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5c:2a:b4:1f:03:6a:d9:98:97:f3:de:71:de: 98:bc:c2:98:86:a3:05:6c:a5:e9:ac:51:da:51:3b: d2:d3:91:a8:3d:81:b1:fa:10:33:33:39:5d:cb:c1: 3f:e1:00:4d:eb:ea:d7:eb:05:a6:5d:65:9e:6e:ee: a8:41:59:67:8a:80:32:60:22:09:ae:a3:9b:b9:4c: 90:30:01:e3:53:f8:ce:8a:7d:3d:90:9b:8c:dd:81: 32:d9:cf:07:2f:2e:e3:9c:30:60:f9:7b:2d:6f:f7: 4f:cf:13:21:87:af:72:78:05:a7:13:7c:c4:a0:9e: 7c:02:96:a6:3f:32:4c:13:6b:1a:82:e0:ad:b3:d1: 85:96:f6:59:6a:8e:69:65:78:6b:95:7a:53:a3:89: e1:fa:37:21:9d:08:d5:c2:a0:2b:0c:da:d3:79:eb: 4a:66:c5:72:09:15:28:03:81:3f:2a:7b:a7:d7:67: b8:20:dd:28:83:fb:aa:74:05:ad:e6:94:b2:a3:83: 52:c0:67:34:cc:ea:90:1c:ee:2a:cb:20:f9:5a:bd: 08:08:e2:8c:83:c9:66:2d:16:3a:83:0b:b1:e3:a5: ba:c3:e5:1d:e6:af:27:fb:5f:be:9d:db:02:5d:64: b8:71:4c:b5:67:2c:72:15:3f:ad:7d:08:e4:4b:bf: 4e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:29:EC:CA:36:E1:DA:6D:80:10:B0:64:96:D0:55:94:F3:AD:3B:1A X509v3 Authority Key Identifier: keyid:F3:EF:52:ED:81:6C:F4:BF:7D:02:9F:FB:0A:BC:10:1A:FD:2C:64:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:22:0f:97:59:22:14:5e:17:5d:68:69:fc:f1:ef:ed:9c:1a: 9a:c7:d5:70:ef:e3:d1:54:cb:48:78:8f:b9:ea:ad:41:e6:2c: 1f:36:7f:80:48:d1:2e:5b:5b:8b:84:5a:28:08:e3:5d:32:cc: 65:8a:68:6e:c4:ad:87:27:b1:61:6d:9f:04:10:4f:e3:73:d2: b8:56:84:72:a8:d2:f3:e3:9f:4f:ea:e0:6e:b3:2c:a5:62:0f: 43:f0:f1:a2:f3:81:0c:05:4f:ff:a1:2c:05:85:fd:41:63:af: 3c:07:1f:00:45:74:f0:16:a8:d8:bb:ac:4f:fc:d8:7f:1f:67: 0a:c0:2a:7e:30:bb:e7:74:82:aa:6d:e4:c2:28:f3:d8:f2:b8: bf:3c:f3:20:ea:cc:15:25:48:46:f2:d0:c6:71:0f:89:47:08: e7:2c:88:7b:2e:96:41:b6:53:6e:cf:fa:c8:a5:d3:ee:55:f0: 9a:7c:c5:aa:aa:88:b8:91:f9:9f:a0:a0:19:dd:50:d3:a6:02: c5:63:2d:c0:94:17:52:b7:d0:df:4c:2b:53:48:1a:88:fb:91: 36:b2:78:c1:fb:df:ae:a0:34:aa:2d:02:b5:c3:7f:db:c1:50: 5f:53:58:fa:07:3b:f0:a3:8e:35:1f:b6:c4:a3:15:fb:1a:4d: 8e:94:9d:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+tTsPF40ow4uyasl0OzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZWY1MmVkODE2Y2Y0YmY3ZDAyOWZmYjBhYmMxMDFhZmQy YzY0YjUwHhcNMjUxMjA2MTAwMTI0WhcNMjUxMjA3MTAwMTI0WjAzMTEwLwYDVQQD EygzNjI5ZWNjYTM2ZTFkYTZkODAxMGIwNjQ5NmQwNTU5NGYzYWQzYjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlwqtB8DatmYl/Pecd6YvMKYhqMF bKXprFHaUTvS05GoPYGx+hAzMzldy8E/4QBN6+rX6wWmXWWebu6oQVlnioAyYCIJ rqObuUyQMAHjU/jOin09kJuM3YEy2c8HLy7jnDBg+Xstb/dPzxMhh69yeAWnE3zE oJ58ApamPzJME2saguCts9GFlvZZao5pZXhrlXpTo4nh+jchnQjVwqArDNrTeetK ZsVyCRUoA4E/Knun12e4IN0og/uqdAWt5pSyo4NSwGc0zOqQHO4qyyD5Wr0ICOKM g8lmLRY6gwux46W6w+Ud5q8n+1++ndsCXWS4cUy1ZyxyFT+tfQjkS79OqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYp7Mo24dptgBCwZJbQVZTzrTsaMB8GA1UdIwQY MBaAFPPvUu2BbPS/fQKf+wq8EBr9LGS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOC05UzdZRnM5TDk5QXBfN0Nyd1FHdjBzWkxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83NjY2NGMtMWUwNS00MDQ0LWEwYzUt ZWIyYzJlODY4MDdmLzEvOC05UzdZRnM5TDk5QXBfN0Nyd1FHdjBzWkxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy83NjY2NGMtMWUwNS00MDQ0LWEwYzUtZWIyYzJlODY4MDdm LzEvOC05UzdZRnM5TDk5QXBfN0Nyd1FHdjBzWkxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyIPl1ki FF4XXWhp/PHv7ZwamsfVcO/j0VTLSHiPueqtQeYsHzZ/gEjRLltbi4RaKAjjXTLM ZYpobsSthyexYW2fBBBP43PSuFaEcqjS8+OfT+rgbrMspWIPQ/DxovOBDAVP/6Es BYX9QWOvPAcfAEV08Bao2LusT/zYfx9nCsAqfjC753SCqm3kwijz2PK4vzzzIOrM FSVIRvLQxnEPiUcI5yyIey6WQbZTbs/6yKXT7lXwmnzFqqqIuJH5n6CgGd1Q06YC xWMtwJQXUrfQ30wrU0gaiPuRNrJ4wfvfrqA0qi0CtcN/28FQX1NY+gc78KOONR+2 xKMV+xpNjpSd7A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:19 2025 by rpki-client