This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json) Hash identifier: L7EKu1Av6ZGArlxcVcHN6cTvbPyFQOpNXEyvbe/Y+s4= Subject key identifier: 58:B8:A2:12:F0:5F:47:BA:D4:B8:08:0A:83:75:15:93:19:B9:1A:B9 Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02 Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402 Certificate serial: 019AF12D5FB41984A226EDDA8F3456680F59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft Manifest number: 149B Signing time: Sat 06 Dec 2025 01:01:13 +0000 Manifest this update: Sat 06 Dec 2025 01:01:13 +0000 Manifest next update: Sun 07 Dec 2025 01:01:13 +0000 Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: YIZO4p9QjbegqRXD5VFCKrpiB8Vd4KX43yqV0cclC9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:5f:b4:19:84:a2:26:ed:da:8f:34:56:68:0f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402 Validity Not Before: Dec 6 01:01:13 2025 GMT Not After : Dec 7 01:01:13 2025 GMT Subject: CN=58b8a212f05f47bad4b8080a8375159319b91ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:42:c1:9f:65:c0:63:e3:a2:86:a5:cc:38:ab: 3a:9c:4e:34:f1:19:9a:1c:ce:65:7f:1f:fd:1b:e6: fd:7a:c4:d1:df:4b:01:1a:56:05:c3:cb:11:ad:7f: 50:8a:14:c5:a9:94:8e:e8:08:be:31:2c:13:99:20: fc:f0:d2:3a:09:72:dc:e1:60:28:a2:06:62:dd:b9: a0:52:6e:80:1b:04:b8:70:34:05:19:b1:2d:85:f6: 5e:00:a1:e7:37:c4:fa:d5:63:90:04:81:53:2d:10: 1e:23:ea:4e:f0:22:b2:e9:88:41:83:62:59:89:29: 88:d1:c3:ed:91:a0:b6:7a:0a:99:d5:97:ac:cd:71: fc:b2:61:54:ac:eb:2d:66:a4:76:b9:fb:86:0b:f5: 78:56:11:16:30:ef:96:aa:ee:83:06:10:2c:d5:fb: d6:73:b1:60:ff:96:fe:48:e5:2a:b6:23:be:01:3d: 72:5a:89:8f:4f:60:91:6e:7c:04:71:3a:6b:66:ac: fd:ca:70:cf:66:62:58:5d:5a:f2:98:82:c4:37:10: 32:9f:a4:b6:d5:c4:84:66:a8:71:57:f6:2c:de:0c: 19:5a:4f:1a:ff:e9:bf:29:8e:42:e4:db:1c:6a:f3: 87:b2:88:96:02:f0:2f:94:56:55:98:e1:39:6f:d3: 1c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B8:A2:12:F0:5F:47:BA:D4:B8:08:0A:83:75:15:93:19:B9:1A:B9 X509v3 Authority Key Identifier: keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:e3:0e:74:fc:32:e8:f4:fe:ca:db:87:3c:d6:d3:db:82:ab: ea:1d:4e:04:87:50:32:3e:1b:31:02:33:49:69:85:e8:45:bd: d7:77:c0:95:4b:b3:15:b9:42:5e:0d:59:84:cd:36:bc:14:f4: 3a:d5:e6:37:a7:fb:53:9d:e8:7a:2e:a0:cc:0c:b5:23:42:d7: 80:9e:ad:32:7e:4a:2b:80:bb:34:f5:a9:33:a8:ee:4f:5a:79: ef:e4:16:1e:49:44:0b:68:a7:45:05:82:61:ac:ca:0f:3d:c1: b4:82:07:33:e4:e4:07:96:ed:17:4f:3d:be:4c:99:f0:ef:3e: 9c:21:4d:2a:18:b8:df:8c:e8:c2:c7:cd:6f:dd:57:38:14:de: ae:f7:cc:f7:1f:85:fe:79:6f:9f:27:20:50:6a:86:94:75:01: b7:72:c2:e1:9c:b0:50:a6:60:f9:98:c0:da:48:95:16:ed:0b: 4f:81:e8:b7:f0:70:e6:ce:7e:fe:2a:70:22:94:d5:f0:28:e5: 05:37:1a:62:75:63:06:c4:30:40:c4:af:2b:41:7d:48:89:22: 65:b6:e4:76:9c:e6:32:94:68:88:12:a3:45:c9:59:bc:d6:e4: 51:16:b3:89:b8:c7:39:0c:1f:89:b1:78:9c:9b:13:79:58:6e: b1:f9:d2:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLV+0GYSiJu3ajzRWaA9ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYTBjNjdmZjg1OWY1NTVhZjg5MjE5Mzg4ODdjNjA4NTI2 OWE0MDIwHhcNMjUxMjA2MDEwMTEzWhcNMjUxMjA3MDEwMTEzWjAzMTEwLwYDVQQD Eyg1OGI4YTIxMmYwNWY0N2JhZDRiODA4MGE4Mzc1MTU5MzE5YjkxYWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArULBn2XAY+OihqXMOKs6nE408Rma HM5lfx/9G+b9esTR30sBGlYFw8sRrX9QihTFqZSO6Ai+MSwTmSD88NI6CXLc4WAo ogZi3bmgUm6AGwS4cDQFGbEthfZeAKHnN8T61WOQBIFTLRAeI+pO8CKy6YhBg2JZ iSmI0cPtkaC2egqZ1ZeszXH8smFUrOstZqR2ufuGC/V4VhEWMO+Wqu6DBhAs1fvW c7Fg/5b+SOUqtiO+AT1yWomPT2CRbnwEcTprZqz9ynDPZmJYXVrymILENxAyn6S2 1cSEZqhxV/Ys3gwZWk8a/+m/KY5C5NscavOHsoiWAvAvlFZVmOE5b9Mc8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFi4ohLwX0e61LgICoN1FZMZuRq5MB8GA1UdIwQY MBaAFPGgxn/4WfVVr4khk4iHxghSaaQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yZGY4ZWQtMWE3My00ZWQyLTgxOGEt YjQxOTk5ZTVjZjU0LzEvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yZGY4ZWQtMWE3My00ZWQyLTgxOGEtYjQxOTk5ZTVjZjU0 LzEvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOMOdPwy 6PT+ytuHPNbT24Kr6h1OBIdQMj4bMQIzSWmF6EW913fAlUuzFblCXg1ZhM02vBT0 OtXmN6f7U53oei6gzAy1I0LXgJ6tMn5KK4C7NPWpM6juT1p57+QWHklEC2inRQWC YazKDz3BtIIHM+TkB5btF089vkyZ8O8+nCFNKhi434zowsfNb91XOBTervfM9x+F /nlvnycgUGqGlHUBt3LC4ZywUKZg+ZjA2kiVFu0LT4Hot/Bw5s5+/ipwIpTV8Cjl BTcaYnVjBsQwQMSvK0F9SIkiZbbkdpzmMpRoiBKjRclZvNbkURazibjHOQwfibF4 nJsTeVhusfnSNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:07 2025 by rpki-client