This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft File: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json) Hash identifier: kcJ5PBJxqzYYsKE/KbE6rPo00vmq6h/dy8c+F6S3MmI= Subject key identifier: 33:90:AD:A3:3A:F6:DF:B8:A0:16:0E:26:87:80:C6:1D:B4:F5:C9:B1 Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d Certificate serial: 019AF2ADAE15CC9AB22A55FAFB23AB671AA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft Manifest number: 1175 Signing time: Sat 06 Dec 2025 08:00:59 +0000 Manifest this update: Sat 06 Dec 2025 08:00:59 +0000 Manifest next update: Sun 07 Dec 2025 08:00:59 +0000 Files and hashes: 1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: vvh6hSzrnYrz3iYdM7Ay3GIYfvQYREbaQH8xr2Ulz2k=) 2: rPbx58T-x5ORRRx0tEYr-rx7t3U.roa (hash: vSn+krLvdIPvrWL0ipO2XK8jiZxa1ds2oZDzxWzd7dE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ae:15:cc:9a:b2:2a:55:fa:fb:23:ab:67:1a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d Validity Not Before: Dec 6 08:00:59 2025 GMT Not After : Dec 7 08:00:59 2025 GMT Subject: CN=3390ada33af6dfb8a0160e268780c61db4f5c9b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9e:a9:2b:65:51:c3:d5:28:31:2b:72:1b:d9: 2d:4f:32:7a:f7:33:28:17:e4:94:c6:57:ef:a4:31: 78:c0:d4:2d:8e:ec:18:bd:b8:ea:f0:b3:ba:07:16: 5e:b5:10:16:4a:c0:d9:94:16:5a:c3:70:e2:9b:89: 22:63:d5:08:fa:09:92:dd:bd:97:ad:31:e2:21:0f: 30:f5:1f:35:83:86:aa:eb:8a:25:36:83:61:8c:47: c5:de:06:76:b1:2c:ec:32:23:b3:7e:db:89:c6:25: de:68:35:ca:2d:c7:43:26:b1:44:fe:b2:c3:4c:1c: 74:c8:b1:37:60:33:db:18:ad:5e:23:08:1b:88:c4: 38:19:55:46:89:04:87:df:10:21:47:9b:c0:99:90: 26:fc:e1:5b:ae:4e:04:0c:7e:48:00:16:2c:2c:fc: 37:09:fb:8f:96:3f:14:cd:76:92:ce:92:8e:be:55: 55:35:bd:d6:f8:33:c3:9c:28:28:df:03:e7:20:38: 29:b0:e4:ab:0b:3f:e0:4b:19:7c:73:17:34:9c:dd: 05:77:bc:14:b8:4c:f6:1c:3c:b2:12:e5:23:43:7a: ef:af:b1:40:4b:55:51:93:5d:aa:9f:6a:33:95:a8: 11:46:d4:1e:c4:b9:36:67:8f:f0:17:56:7e:ed:c3: 2c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:90:AD:A3:3A:F6:DF:B8:A0:16:0E:26:87:80:C6:1D:B4:F5:C9:B1 X509v3 Authority Key Identifier: keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:4a:9c:a0:17:28:44:37:ec:fc:25:79:08:45:f1:bd:83:f7: 6d:89:8e:b9:45:9e:03:2e:47:40:cb:a0:34:f5:f3:db:64:ec: 76:20:66:5e:12:16:d5:e7:19:e8:22:96:35:af:06:bb:6a:7f: 35:88:50:27:e1:ca:a6:33:bb:12:dd:b1:77:0e:e6:64:50:96: 45:6c:7d:62:c4:1c:3a:de:9e:65:06:e5:e7:96:40:38:10:4e: 2c:a4:c3:5f:66:07:7d:ba:48:5d:d9:4c:09:27:66:0e:fd:8e: c2:f9:89:31:0b:31:59:5d:75:3a:e5:a4:80:0c:76:fd:6f:62: 56:6b:ee:7b:ff:6c:57:89:d9:9f:f0:b7:10:c7:fe:0b:35:cd: 76:f1:2f:ee:9c:05:83:a3:56:2b:21:7a:54:2c:d3:fb:8c:cd: c6:7b:cf:67:b3:2f:ee:dc:ef:27:a5:b2:99:51:45:3d:64:41: 02:db:56:1e:41:8d:6f:9e:6d:00:9e:89:be:48:e3:f9:cb:9c: d5:9c:85:cb:3b:1b:53:ba:b4:38:40:c0:56:e8:60:00:4d:0a: d5:a3:53:bd:a0:69:30:01:65:3a:88:99:aa:4f:58:40:eb:09: 1b:06:e8:5a:d9:38:dc:9b:4b:79:11:f6:f0:79:6b:57:37:3a: be:1d:18:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryra4VzJqyKlX6+yOrZxqgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNWM2YWYzZDAyMjYyMGY3MmM1M2I3NzBlODJlNWM3M2Fl NTUwNmQwHhcNMjUxMjA2MDgwMDU5WhcNMjUxMjA3MDgwMDU5WjAzMTEwLwYDVQQD EygzMzkwYWRhMzNhZjZkZmI4YTAxNjBlMjY4NzgwYzYxZGI0ZjVjOWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop6pK2VRw9UoMStyG9ktTzJ69zMo F+SUxlfvpDF4wNQtjuwYvbjq8LO6BxZetRAWSsDZlBZaw3Dim4kiY9UI+gmS3b2X rTHiIQ8w9R81g4aq64olNoNhjEfF3gZ2sSzsMiOzftuJxiXeaDXKLcdDJrFE/rLD TBx0yLE3YDPbGK1eIwgbiMQ4GVVGiQSH3xAhR5vAmZAm/OFbrk4EDH5IABYsLPw3 CfuPlj8UzXaSzpKOvlVVNb3W+DPDnCgo3wPnIDgpsOSrCz/gSxl8cxc0nN0Fd7wU uEz2HDyyEuUjQ3rvr7FAS1VRk12qn2ozlagRRtQexLk2Z4/wF1Z+7cMsyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOQraM69t+4oBYOJoeAxh209cmxMB8GA1UdIwQY MBaAFPBcavPQImIPcsU7dw6C5cc65VBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9mN2I3YzItNWQ4ZC00ZTg4LTg0NTQt MGE1MzIxNTZiMmE2LzEvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9mN2I3YzItNWQ4ZC00ZTg4LTg0NTQtMGE1MzIxNTZiMmE2 LzEvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABEqcoBco RDfs/CV5CEXxvYP3bYmOuUWeAy5HQMugNPXz22TsdiBmXhIW1ecZ6CKWNa8Gu2p/ NYhQJ+HKpjO7Et2xdw7mZFCWRWx9YsQcOt6eZQbl55ZAOBBOLKTDX2YHfbpIXdlM CSdmDv2OwvmJMQsxWV11OuWkgAx2/W9iVmvue/9sV4nZn/C3EMf+CzXNdvEv7pwF g6NWKyF6VCzT+4zNxnvPZ7Mv7tzvJ6WymVFFPWRBAttWHkGNb55tAJ6Jvkjj+cuc 1ZyFyzsbU7q0OEDAVuhgAE0K1aNTvaBpMAFlOoiZqk9YQOsJGwboWtk43JtLeRH2 8HlrVzc6vh0YHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:15 2025 by rpki-client