This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft File: 8VzG8-5-0llTHW0Izp4JNztxYGI.mft (raw, json) Hash identifier: nH8sauoohn+QoYyZ000ZO54pBfptwUEw4s/m7y9eEcU= Subject key identifier: 83:15:5B:C6:86:36:5A:D5:CA:09:CE:40:BF:EC:A9:3F:41:A4:4C:57 Authority key identifier: F1:5C:C6:F3:EE:7E:D2:59:53:1D:6D:08:CE:9E:09:37:3B:71:60:62 Certificate issuer: /CN=f15cc6f3ee7ed259531d6d08ce9e09373b716062 Certificate serial: 019AF5AEDD4EC4C2FBE7931EF66FA9FAEA22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft Manifest number: 0500 Signing time: Sat 06 Dec 2025 22:01:09 +0000 Manifest this update: Sat 06 Dec 2025 22:01:09 +0000 Manifest next update: Sun 07 Dec 2025 22:01:09 +0000 Files and hashes: 1: 8VzG8-5-0llTHW0Izp4JNztxYGI.crl (hash: haIEb+MLAc7+jIjoqN/iE7BsHcONiNQliED4bJA0rDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:dd:4e:c4:c2:fb:e7:93:1e:f6:6f:a9:fa:ea:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f15cc6f3ee7ed259531d6d08ce9e09373b716062 Validity Not Before: Dec 6 22:01:09 2025 GMT Not After : Dec 7 22:01:09 2025 GMT Subject: CN=83155bc686365ad5ca09ce40bfeca93f41a44c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1f:74:3f:71:bd:51:46:01:75:14:b5:37:d3: 7e:96:4a:d6:16:55:7d:95:a7:28:60:42:21:31:c4: 85:8e:eb:09:06:68:28:96:76:bd:47:d5:76:8a:9f: 70:5c:8e:7e:75:fd:3b:eb:a8:84:2d:94:ab:85:b7: ff:78:46:17:e9:04:fe:ea:37:9c:f3:5a:34:fa:c0: bc:70:0c:3e:52:d1:f0:85:d4:a9:06:c7:ea:8d:5b: 88:4d:ed:34:c3:b0:43:d0:2e:64:fa:46:1d:78:67: 4e:2c:02:49:97:ad:99:9c:09:2a:82:1a:07:c5:46: 25:6b:3a:2c:fb:7c:a8:35:35:8b:16:a9:f4:38:e8: d4:6b:bd:4e:22:54:be:87:8f:77:02:76:79:81:14: b2:f8:84:44:fb:93:37:31:9e:5e:30:67:d6:dd:61: 26:a5:e6:2b:45:26:ee:b7:56:f7:6c:57:30:f6:64: 76:88:82:02:2f:70:7f:d4:42:0a:a1:3f:82:f6:db: 8d:95:04:22:72:8f:53:54:20:b7:32:26:8d:cc:f8: 03:66:41:b5:31:a9:69:cd:fa:49:70:81:33:5e:ad: 13:57:07:1e:3d:a4:62:b1:db:55:d8:ad:83:13:3c: 00:ee:7c:5e:86:3c:a7:22:be:e1:1c:98:f5:eb:08: ec:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:15:5B:C6:86:36:5A:D5:CA:09:CE:40:BF:EC:A9:3F:41:A4:4C:57 X509v3 Authority Key Identifier: keyid:F1:5C:C6:F3:EE:7E:D2:59:53:1D:6D:08:CE:9E:09:37:3B:71:60:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:38:7f:38:db:00:21:e8:1a:21:15:7e:fb:5b:a5:22:be:7c: 00:3b:05:85:31:c3:1c:71:d6:15:b5:e1:f7:e0:be:ea:5b:f2: 04:5f:20:36:fc:34:20:ca:8b:35:3b:59:87:db:69:8d:f1:7e: bc:41:fa:88:be:f5:d4:0e:e4:ae:ed:df:e4:d8:78:7e:7f:e5: cc:8d:eb:f8:24:ac:94:09:86:e3:31:9e:70:d5:58:fb:b4:ad: b0:df:9c:91:f8:20:29:54:dd:14:a2:03:9c:7e:fb:cc:df:63: 83:35:dc:1f:72:91:6e:50:64:37:b9:67:07:73:52:14:49:19: 3d:8c:b5:1d:eb:8b:8e:71:bb:63:16:25:51:c0:6a:10:df:44: 7d:e7:e0:48:ff:12:63:5d:a4:01:30:cf:43:66:c2:39:42:f0: 45:58:77:2d:5b:17:32:39:11:9c:63:da:ea:c8:9d:c2:14:19: 43:c3:7d:02:be:db:a9:9f:bb:a1:24:58:0d:19:c5:22:10:e0: 3d:c8:c4:2e:a2:b7:16:b3:f2:2f:05:83:dc:eb:9d:e1:ac:ca: da:ca:ef:ca:fa:ea:17:8a:41:69:ad:fc:2d:63:60:4a:0b:84: 60:b1:54:57:9a:e3:ba:64:12:1d:23:fb:09:0d:c1:c2:bc:8b: 5c:0b:cc:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rt1OxML755Me9m+p+uoiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNWNjNmYzZWU3ZWQyNTk1MzFkNmQwOGNlOWUwOTM3M2I3 MTYwNjIwHhcNMjUxMjA2MjIwMTA5WhcNMjUxMjA3MjIwMTA5WjAzMTEwLwYDVQQD Eyg4MzE1NWJjNjg2MzY1YWQ1Y2EwOWNlNDBiZmVjYTkzZjQxYTQ0YzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR90P3G9UUYBdRS1N9N+lkrWFlV9 lacoYEIhMcSFjusJBmgolna9R9V2ip9wXI5+df0766iELZSrhbf/eEYX6QT+6jec 81o0+sC8cAw+UtHwhdSpBsfqjVuITe00w7BD0C5k+kYdeGdOLAJJl62ZnAkqghoH xUYlazos+3yoNTWLFqn0OOjUa71OIlS+h493AnZ5gRSy+IRE+5M3MZ5eMGfW3WEm peYrRSbut1b3bFcw9mR2iIICL3B/1EIKoT+C9tuNlQQico9TVCC3MiaNzPgDZkG1 MalpzfpJcIEzXq0TVwcePaRisdtV2K2DEzwA7nxehjynIr7hHJj16wjs2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMVW8aGNlrVygnOQL/sqT9BpExXMB8GA1UdIwQY MBaAFPFcxvPuftJZUx1tCM6eCTc7cWBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFZ6RzgtNS0wbGxUSFcwSXpwNEpOenR4WUdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84N2U5YjctZWFkNC00YjViLWJjODgt NjkxZWU0MWE2MDE0LzEvOFZ6RzgtNS0wbGxUSFcwSXpwNEpOenR4WUdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi84N2U5YjctZWFkNC00YjViLWJjODgtNjkxZWU0MWE2MDE0 LzEvOFZ6RzgtNS0wbGxUSFcwSXpwNEpOenR4WUdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjh/ONsA IegaIRV++1ulIr58ADsFhTHDHHHWFbXh9+C+6lvyBF8gNvw0IMqLNTtZh9tpjfF+ vEH6iL711A7kru3f5Nh4fn/lzI3r+CSslAmG4zGecNVY+7StsN+ckfggKVTdFKID nH77zN9jgzXcH3KRblBkN7lnB3NSFEkZPYy1HeuLjnG7YxYlUcBqEN9EfefgSP8S Y12kATDPQ2bCOULwRVh3LVsXMjkRnGPa6sidwhQZQ8N9Ar7bqZ+7oSRYDRnFIhDg PcjELqK3FrPyLwWD3Oud4azK2srvyvrqF4pBaa38LWNgSguEYLFUV5rjumQSHSP7 CQ3BwryLXAvM/w== -----END CERTIFICATE-----Generated at Sun Dec 7 01:57:30 2025 by rpki-client