This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft File: 8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft (raw, json) Hash identifier: t5cyxV+GXKA5/4Nx6PvUMFRoNWmXWiaxYH59eQEx2Ss= Subject key identifier: D6:41:ED:4D:1F:92:D7:FF:0C:2E:1E:D5:E5:D5:52:39:F8:56:0B:17 Authority key identifier: F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC Certificate issuer: /CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc Certificate serial: 019B30E984FEC4588B2C740C2DE2317AD418 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft Manifest number: 16DB Signing time: Thu 18 Dec 2025 10:02:48 +0000 Manifest this update: Thu 18 Dec 2025 10:02:48 +0000 Manifest next update: Fri 19 Dec 2025 10:02:48 +0000 Files and hashes: 1: 8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl (hash: e9pddTtwLYY1aJ1xLCXhp0ukfjaNANvZAGRvtZ+bUQc=) 2: C3nJIzqXqtfT9J07ejsBxjCr7Es.roa (hash: 0iPZreySqxS1TmgmvlfhSgIdLiwkUUv4lfeOkL5knpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:84:fe:c4:58:8b:2c:74:0c:2d:e2:31:7a:d4:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc Validity Not Before: Dec 18 10:02:48 2025 GMT Not After : Dec 19 10:02:48 2025 GMT Subject: CN=d641ed4d1f92d7ff0c2e1ed5e5d55239f8560b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:23:2e:56:c5:31:c7:0a:65:bc:06:a0:c6:14: 58:9c:cc:bb:16:bd:f7:28:35:a5:c6:78:24:15:73: 3c:19:09:81:c2:0e:77:07:55:52:3e:a4:17:49:5c: 93:f6:82:c5:5d:cd:47:75:e1:c1:44:68:aa:0a:08: 1c:5f:f0:95:c1:cd:99:6a:18:b2:c6:56:c4:32:16: 92:33:78:87:ba:89:ee:ee:5b:1c:2f:01:cb:1e:ca: 24:21:cb:72:8c:ef:e5:00:26:d8:84:fd:2f:81:31: 5f:61:0d:ad:2e:9a:a8:04:89:c7:05:13:42:40:bc: 7f:48:a8:e0:17:e4:0f:71:17:a4:4c:f6:e0:9f:9b: df:9d:52:33:07:0c:52:82:13:c4:b5:8a:ab:61:61: c7:30:70:68:65:66:e8:95:75:a9:ed:08:38:a3:c8: 63:24:1a:db:2d:fe:c9:7b:af:a0:6c:47:2e:29:f4: bd:fe:b2:a9:2f:7d:d6:28:a6:ef:16:85:86:6c:c7: ed:56:2f:a1:e4:ca:8e:0f:1e:1f:c3:7b:c7:35:30: ba:53:04:6b:ec:52:36:4e:f2:0c:0c:fe:11:e5:70: 31:3d:62:22:c1:5c:b6:6a:0f:83:71:87:dd:88:d4: f6:07:61:a0:f0:1e:03:a1:3a:53:3e:b5:17:b9:c3: 47:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:41:ED:4D:1F:92:D7:FF:0C:2E:1E:D5:E5:D5:52:39:F8:56:0B:17 X509v3 Authority Key Identifier: keyid:F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f5:5e:86:07:f8:73:34:b7:ad:29:ea:fc:21:b2:4b:d9:b0: a5:a5:90:f4:6f:73:fc:ce:aa:a4:97:25:55:58:e7:6b:0a:42: a9:c8:ec:34:0f:5b:d6:1e:0f:35:7d:64:27:8e:88:21:03:dc: 1c:c9:87:92:d7:c7:8a:1f:af:56:2b:21:07:01:64:1a:ca:ef: 49:f1:b2:ac:78:87:aa:91:9e:b6:01:d6:15:21:d6:da:7b:2c: c5:cf:bb:35:bc:b2:70:80:ab:48:0f:5f:1b:6c:85:87:52:6e: 80:a4:f9:d1:bc:57:3e:af:63:4f:a2:cc:fb:74:5b:84:9e:35: 1f:9d:ce:cb:13:88:e9:57:82:13:b8:2f:92:4e:b0:87:12:01: 61:2a:14:e5:41:24:91:26:2b:4c:a6:5c:26:da:96:c0:f2:ff: 32:39:13:4f:a0:d8:76:79:60:0c:76:d2:05:b1:6b:c5:f1:c0: 3b:30:57:3d:36:c2:27:37:a4:8d:1d:3c:e3:cb:02:47:87:2b: ae:30:45:de:63:e6:ec:33:a0:24:e3:e7:b4:64:5b:29:89:f2: 71:a4:65:1f:d2:c3:13:6d:f0:75:f7:d0:bb:90:f8:20:48:01: e3:50:70:49:53:ea:4b:79:c7:e5:e4:8f:be:a2:e0:0b:12:e8: d9:a4:d4:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6YT+xFiLLHQMLeIxetQYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZWY2YTZjZmNlMzQzZjkxNGM5YWQ5NGMzNDEwZGEwMGE3 Y2QxY2MwHhcNMjUxMjE4MTAwMjQ4WhcNMjUxMjE5MTAwMjQ4WjAzMTEwLwYDVQQD EyhkNjQxZWQ0ZDFmOTJkN2ZmMGMyZTFlZDVlNWQ1NTIzOWY4NTYwYjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriMuVsUxxwplvAagxhRYnMy7Fr33 KDWlxngkFXM8GQmBwg53B1VSPqQXSVyT9oLFXc1HdeHBRGiqCggcX/CVwc2Zahiy xlbEMhaSM3iHuonu7lscLwHLHsokIctyjO/lACbYhP0vgTFfYQ2tLpqoBInHBRNC QLx/SKjgF+QPcRekTPbgn5vfnVIzBwxSghPEtYqrYWHHMHBoZWbolXWp7Qg4o8hj JBrbLf7Je6+gbEcuKfS9/rKpL33WKKbvFoWGbMftVi+h5MqODx4fw3vHNTC6UwRr 7FI2TvIMDP4R5XAxPWIiwVy2ag+DcYfdiNT2B2Gg8B4DoTpTPrUXucNHwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZB7U0fktf/DC4e1eXVUjn4VgsXMB8GA1UdIwQY MBaAFPPvamz840P5FMmtlMNBDaAKfNHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOC05cWJQempRX2tVeWEyVXcwRU5vQXA4MGN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85MzNlZGMtMjMwZi00YmZjLWJjNDct MmM0NzYzZDY0ZDQzLzEvOC05cWJQempRX2tVeWEyVXcwRU5vQXA4MGN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi85MzNlZGMtMjMwZi00YmZjLWJjNDctMmM0NzYzZDY0ZDQz LzEvOC05cWJQempRX2tVeWEyVXcwRU5vQXA4MGN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfVehgf4 czS3rSnq/CGyS9mwpaWQ9G9z/M6qpJclVVjnawpCqcjsNA9b1h4PNX1kJ46IIQPc HMmHktfHih+vVishBwFkGsrvSfGyrHiHqpGetgHWFSHW2nssxc+7NbyycICrSA9f G2yFh1JugKT50bxXPq9jT6LM+3RbhJ41H53OyxOI6VeCE7gvkk6whxIBYSoU5UEk kSYrTKZcJtqWwPL/MjkTT6DYdnlgDHbSBbFrxfHAOzBXPTbCJzekjR0848sCR4cr rjBF3mPm7DOgJOPntGRbKYnycaRlH9LDE23wdffQu5D4IEgB41BwSVPqS3nH5eSP vqLgCxLo2aTUnw== -----END CERTIFICATE-----Generated at Thu Dec 18 18:30:25 2025 by rpki-client