This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft File: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft (raw, json) Hash identifier: ME0gDnaxGwXScWgjmFRzbRdPn+/F7WHuMGbjD8HITn0= Subject key identifier: F6:1F:26:11:1F:86:54:89:0B:5F:0B:17:92:51:A2:39:FE:FE:D5:DD Authority key identifier: F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA Certificate issuer: /CN=f210bac96aff25b2aa931c4297446be37ffe2ada Certificate serial: 019AF465963273A83316FF0BEE21C089DB13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft Manifest number: 16F6 Signing time: Sat 06 Dec 2025 16:01:29 +0000 Manifest this update: Sat 06 Dec 2025 16:01:29 +0000 Manifest next update: Sun 07 Dec 2025 16:01:29 +0000 Files and hashes: 1: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl (hash: glgK+VaD22710VXzxSTUPuK8RyJpxlsizlI5Nd9X6nM=) 2: 9iL04rGDZoryywio-gmg9h9zCvU.roa (hash: gqClxkuVstSkbo5JxbBFKE2JBuMbwOG9F1HTwbBvxv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:96:32:73:a8:33:16:ff:0b:ee:21:c0:89:db:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f210bac96aff25b2aa931c4297446be37ffe2ada Validity Not Before: Dec 6 16:01:29 2025 GMT Not After : Dec 7 16:01:29 2025 GMT Subject: CN=f61f26111f8654890b5f0b179251a239fefed5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cf:26:ad:16:eb:3d:55:2e:35:42:53:aa:0b: ba:9d:ad:78:a3:a7:b5:b5:58:ec:e0:d5:19:1f:56: d2:84:16:1c:db:88:cb:11:70:2c:ae:01:5d:89:e2: e9:8e:74:71:7f:93:99:29:1e:7d:e3:03:88:e3:d8: cf:25:05:6f:e5:6d:ec:a5:45:84:14:46:e6:79:95: 2c:68:8e:3c:3c:9a:18:24:89:5b:e5:77:24:96:51: af:85:c4:a9:13:df:37:dd:d9:03:5f:22:2b:bf:fa: b3:c1:ed:e1:aa:95:7b:9c:4d:10:6a:ae:ce:fb:e4: 5a:2d:0e:62:47:d1:e1:f8:57:2d:d1:bf:f4:8b:b6: 89:d8:8f:b8:40:2a:72:fe:dc:fc:62:75:99:6e:6e: 72:74:3a:08:dc:af:a4:3d:d5:94:e0:30:7a:f5:03: c6:63:b0:b4:34:4b:25:12:0c:a1:34:71:c7:c9:36: 3b:45:06:c1:18:75:7e:46:a1:c6:68:09:5a:cb:ac: 41:5f:fd:08:10:32:d7:18:77:34:73:fb:96:c1:4e: b4:a0:73:86:a2:2a:7d:17:f0:72:e6:c8:5f:b1:da: e6:0c:6c:d7:30:fc:3f:6c:00:e2:56:f2:2b:ba:ce: c4:7e:be:7e:b9:e9:65:93:be:1f:9d:b4:22:16:2f: c9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1F:26:11:1F:86:54:89:0B:5F:0B:17:92:51:A2:39:FE:FE:D5:DD X509v3 Authority Key Identifier: keyid:F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:d5:a5:c2:f3:7a:4a:9c:7a:ef:07:95:9e:58:02:3a:79:ef: fc:99:3e:8e:9d:13:3c:a0:4f:de:ab:a4:1d:fb:d3:b9:ee:9c: b5:3e:da:7d:88:9e:2f:df:80:c5:2f:63:77:43:17:ea:fb:3e: 0b:a0:6d:f9:0c:bb:7e:f2:10:a8:68:4f:fe:65:3f:df:68:79: 4d:d1:75:f5:97:1d:56:bc:59:c2:d4:9e:ad:3a:68:dc:d8:ac: eb:c8:cf:82:7c:a3:2e:40:7d:de:90:0c:a4:96:ec:b3:c4:05: 75:a7:19:5a:e3:bb:d9:5c:b9:92:7a:f7:87:cb:d1:78:0d:0d: a4:04:4e:99:bf:56:1c:30:63:72:29:a3:a2:55:b2:b5:78:b8: c7:df:d0:8a:c8:35:a4:3b:ec:ab:ac:33:1d:0b:6a:63:68:e9: c0:64:56:a0:4b:67:5c:3a:ac:5b:c6:34:04:d9:b4:e2:80:a9: 6e:c3:a1:58:24:ce:f5:78:d2:e1:16:13:ec:e4:14:71:e8:98: f7:94:78:28:81:27:48:2d:28:04:27:71:8b:1b:5a:9a:9e:b9: 7e:03:4b:60:28:dd:b8:a1:0b:d2:1f:14:f0:7a:cc:43:d4:0d: 0e:d2:d3:76:28:5a:79:5b:d0:e9:b7:f8:80:c8:42:36:0c:db: 30:84:95:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZZYyc6gzFv8L7iHAidsTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMTBiYWM5NmFmZjI1YjJhYTkzMWM0Mjk3NDQ2YmUzN2Zm ZTJhZGEwHhcNMjUxMjA2MTYwMTI5WhcNMjUxMjA3MTYwMTI5WjAzMTEwLwYDVQQD EyhmNjFmMjYxMTFmODY1NDg5MGI1ZjBiMTc5MjUxYTIzOWZlZmVkNWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps8mrRbrPVUuNUJTqgu6na14o6e1 tVjs4NUZH1bShBYc24jLEXAsrgFdieLpjnRxf5OZKR594wOI49jPJQVv5W3spUWE FEbmeZUsaI48PJoYJIlb5XckllGvhcSpE9833dkDXyIrv/qzwe3hqpV7nE0Qaq7O ++RaLQ5iR9Hh+Fct0b/0i7aJ2I+4QCpy/tz8YnWZbm5ydDoI3K+kPdWU4DB69QPG Y7C0NEslEgyhNHHHyTY7RQbBGHV+RqHGaAlay6xBX/0IEDLXGHc0c/uWwU60oHOG oip9F/By5shfsdrmDGzXMPw/bADiVvIrus7Efr5+uellk74fnbQiFi/JiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYfJhEfhlSJC18LF5JRojn+/tXdMB8GA1UdIwQY MBaAFPIQuslq/yWyqpMcQpdEa+N//iraMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGhDNnlXcl9KYktxa3h4Q2wwUnI0M18tS3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTI0MjEtMWEzZC00OGY1LTk0OWYt YTMyOTM5NDY5OGQyLzEvOGhDNnlXcl9KYktxa3h4Q2wwUnI0M18tS3RvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iNTI0MjEtMWEzZC00OGY1LTk0OWYtYTMyOTM5NDY5OGQy LzEvOGhDNnlXcl9KYktxa3h4Q2wwUnI0M18tS3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdWlwvN6 Spx67weVnlgCOnnv/Jk+jp0TPKBP3qukHfvTue6ctT7afYieL9+AxS9jd0MX6vs+ C6Bt+Qy7fvIQqGhP/mU/32h5TdF19ZcdVrxZwtSerTpo3Nis68jPgnyjLkB93pAM pJbss8QFdacZWuO72Vy5knr3h8vReA0NpAROmb9WHDBjcimjolWytXi4x9/Qisg1 pDvsq6wzHQtqY2jpwGRWoEtnXDqsW8Y0BNm04oCpbsOhWCTO9XjS4RYT7OQUceiY 95R4KIEnSC0oBCdxixtamp65fgNLYCjduKEL0h8U8HrMQ9QNDtLTdihaeVvQ6bf4 gMhCNgzbMISV+A== -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:35 2025 by rpki-client