This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft File: 8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json) Hash identifier: kwK6ErdZz/0ngekKKyrJDKwFi39UmiKL6eodPzyQdMM= Subject key identifier: FC:A6:CC:3E:58:C7:28:29:BE:96:88:8C:84:B3:B1:81:F7:6D:51:6B Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A Certificate issuer: /CN=f06de29e9356df44707c8396d918e6b289129c4a Certificate serial: 019AF20960664A1C2B0E1AF55B6BF6570FD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft Manifest number: 02C4 Signing time: Sat 06 Dec 2025 05:01:31 +0000 Manifest this update: Sat 06 Dec 2025 05:01:31 +0000 Manifest next update: Sun 07 Dec 2025 05:01:31 +0000 Files and hashes: 1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: waUtY5qTbOqY7I09pmxUm8lJiPl+3WBn8cRgW5XL/As=) 2: FruHS8sKA0UVPBPUKiJYlzj46rI.roa (hash: If8vnhAP47c8P1zX/kOfX6rctIeesg8CbkDyipSuox4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:60:66:4a:1c:2b:0e:1a:f5:5b:6b:f6:57:0f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a Validity Not Before: Dec 6 05:01:31 2025 GMT Not After : Dec 7 05:01:31 2025 GMT Subject: CN=fca6cc3e58c72829be96888c84b3b181f76d516b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:47:b6:1f:8f:5c:63:a4:67:dc:61:20:97:6c: fc:22:b6:c2:0e:c9:7d:ea:17:e7:c6:0c:81:b6:74: bf:9c:3d:b7:e2:be:6a:89:eb:14:4c:53:e4:68:51: 6f:68:cf:30:e3:b3:16:80:2e:07:fd:b3:c9:60:f9: 78:2c:fe:5a:76:2f:a0:21:3a:84:d2:ae:3e:4f:3f: 7c:bf:67:c5:6f:e9:87:b1:54:eb:89:28:85:1b:fe: 71:e2:b2:76:30:11:75:12:3f:47:36:92:a0:67:96: 2a:8a:66:76:83:92:d6:76:a9:90:c1:51:6c:f7:7d: da:0a:14:a0:5d:02:48:2d:c8:15:6d:d2:50:c3:8f: 5e:d6:33:81:56:92:06:0b:e2:39:18:51:60:02:d3: 3f:db:28:91:b4:b8:00:7c:47:3f:46:ba:98:da:83: 42:28:75:ac:e4:50:73:8e:3f:51:4e:ef:2c:53:90: 70:f5:bb:e0:01:11:b7:7f:b5:80:91:18:b8:b1:3d: cc:05:b3:a6:40:ea:7f:3f:95:43:a0:e3:4f:74:68: 41:6f:7d:d9:7d:ff:33:22:31:c2:6e:7e:3c:d4:5b: 58:1d:da:67:e5:60:7b:78:aa:b2:a8:71:09:0d:1c: 70:3a:d9:63:32:29:31:8f:f9:83:bf:e6:84:a0:0c: bc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A6:CC:3E:58:C7:28:29:BE:96:88:8C:84:B3:B1:81:F7:6D:51:6B X509v3 Authority Key Identifier: keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d4:50:c9:02:60:13:21:9d:21:04:de:66:e4:64:58:e3:a9: 33:96:c9:cf:46:7f:33:d4:92:e2:bc:91:1b:bf:b4:81:70:60: 9b:7c:54:dc:68:cb:dc:95:5c:14:52:dc:d7:c6:de:a1:fc:f6: c6:a9:5e:3c:a4:61:2a:34:d1:52:34:73:ad:71:e7:b9:a0:45: 36:36:9c:af:ae:55:1e:1c:90:8b:74:c3:f1:b7:07:9f:3a:2d: 92:7f:d2:a0:6b:a9:59:33:b5:27:38:60:b8:ce:f6:88:41:5d: f2:a7:c8:87:20:ec:05:35:95:7b:c9:ac:de:45:01:0a:19:6d: 17:6a:7e:15:a5:f4:d5:5f:d9:a0:f2:d9:7c:a6:ba:b7:64:89: a8:21:b1:ab:99:9b:2c:8a:4d:21:72:e9:e9:62:9b:d1:f7:87: 27:77:10:3c:44:23:3f:b3:ff:78:16:06:6f:81:ce:a3:1f:9f: b2:14:70:00:a6:49:bc:39:33:d0:c6:5b:06:aa:4b:a9:6d:41: 6d:31:2a:7c:0a:90:31:f3:cb:4a:68:d2:12:e9:6b:92:4d:d2: d5:69:07:6f:67:fc:a3:06:95:45:d0:79:df:6d:82:a5:ab:3f: 4d:d4:b4:d1:71:2b:52:71:56:a3:f7:33:ac:7b:ba:00:b0:04: 4f:fa:f0:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWBmShwrDhr1W2v2Vw/RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNmRlMjllOTM1NmRmNDQ3MDdjODM5NmQ5MThlNmIyODkx MjljNGEwHhcNMjUxMjA2MDUwMTMxWhcNMjUxMjA3MDUwMTMxWjAzMTEwLwYDVQQD EyhmY2E2Y2MzZTU4YzcyODI5YmU5Njg4OGM4NGIzYjE4MWY3NmQ1MTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzke2H49cY6Rn3GEgl2z8IrbCDsl9 6hfnxgyBtnS/nD234r5qiesUTFPkaFFvaM8w47MWgC4H/bPJYPl4LP5adi+gITqE 0q4+Tz98v2fFb+mHsVTriSiFG/5x4rJ2MBF1Ej9HNpKgZ5YqimZ2g5LWdqmQwVFs 933aChSgXQJILcgVbdJQw49e1jOBVpIGC+I5GFFgAtM/2yiRtLgAfEc/RrqY2oNC KHWs5FBzjj9RTu8sU5Bw9bvgARG3f7WAkRi4sT3MBbOmQOp/P5VDoONPdGhBb33Z ff8zIjHCbn481FtYHdpn5WB7eKqyqHEJDRxwOtljMikxj/mDv+aEoAy8CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPymzD5YxygpvpaIjISzsYH3bVFrMB8GA1UdIwQY MBaAFPBt4p6TVt9EcHyDltkY5rKJEpxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lNDRkNTgtMTVkNS00OGM3LWJlMjEt ZjgxNmQzYmU0MDEyLzEvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lNDRkNTgtMTVkNS00OGM3LWJlMjEtZjgxNmQzYmU0MDEy LzEvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9RQyQJg EyGdIQTeZuRkWOOpM5bJz0Z/M9SS4ryRG7+0gXBgm3xU3GjL3JVcFFLc18beofz2 xqlePKRhKjTRUjRzrXHnuaBFNjacr65VHhyQi3TD8bcHnzotkn/SoGupWTO1Jzhg uM72iEFd8qfIhyDsBTWVe8ms3kUBChltF2p+FaX01V/ZoPLZfKa6t2SJqCGxq5mb LIpNIXLp6WKb0feHJ3cQPEQjP7P/eBYGb4HOox+fshRwAKZJvDkz0MZbBqpLqW1B bTEqfAqQMfPLSmjSEulrkk3S1WkHb2f8owaVRdB5322Cpas/TdS00XErUnFWo/cz rHu6ALAET/rwLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:20 2025 by rpki-client