This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft File: 8GGl-jflzRAVCFJj7AKeGv95ONc.mft (raw, json) Hash identifier: Gur6TJ1drVcjwJOr9BJSHfgVLjQiT/QIwpbQVz9q4xA= Subject key identifier: F9:55:70:B9:92:7D:48:8E:5E:2F:35:04:88:4A:C8:24:BB:37:FD:73 Authority key identifier: F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7 Certificate issuer: /CN=f061a5fa37e5cd1015085263ec029e1aff7938d7 Certificate serial: 019AF2769915044A59B3EAB900079DC2B4EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft Manifest number: 06F9 Signing time: Sat 06 Dec 2025 07:00:49 +0000 Manifest this update: Sat 06 Dec 2025 07:00:49 +0000 Manifest next update: Sun 07 Dec 2025 07:00:49 +0000 Files and hashes: 1: 8GGl-jflzRAVCFJj7AKeGv95ONc.crl (hash: yEQ5QDuJZwqT3KWbirOp7cpSwsVQgtuF/uXNffrr/O4=) 2: ZD2S6baBTMbxPOLjQxmOZb9ReoU.roa (hash: iIrhMwDo93l/J/AT32VhLXHCXDQvEKjJ60z+mXLZ3rc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:99:15:04:4a:59:b3:ea:b9:00:07:9d:c2:b4:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f061a5fa37e5cd1015085263ec029e1aff7938d7 Validity Not Before: Dec 6 07:00:49 2025 GMT Not After : Dec 7 07:00:49 2025 GMT Subject: CN=f95570b9927d488e5e2f3504884ac824bb37fd73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:07:d7:58:1a:32:ae:df:6d:48:f9:23:2b:b0: 67:e5:8b:55:52:1a:36:b7:b8:7d:48:a6:43:93:dd: 38:3a:c9:52:61:31:a8:7b:4d:fc:57:78:ba:da:5a: bd:fc:49:7c:02:f1:f4:bf:15:51:a0:bc:5a:e2:36: e7:a5:fc:69:1b:66:ba:a6:9e:83:7d:85:25:da:8c: 27:a4:0f:44:58:8f:25:0a:f1:af:e5:fb:0a:12:03: 28:56:07:90:57:23:cc:2c:70:54:8b:05:56:78:55: b8:22:5d:76:05:6e:41:22:ec:1e:76:38:cf:f4:9f: 8c:7b:0a:72:91:4e:43:ce:25:ec:10:cd:33:26:1e: a4:5b:2f:45:1b:a7:f4:82:7f:6c:22:70:e9:49:0e: 32:3e:a4:d7:aa:76:94:05:fb:0e:69:c1:93:77:2c: ee:ca:0b:19:0f:62:0f:30:23:6f:fd:87:d5:fb:3f: ac:6a:52:62:83:37:2a:76:be:df:c7:f9:2c:53:71: 6f:d2:70:0e:1e:73:cd:14:0e:b9:ac:35:f6:0b:7e: 71:37:34:fa:dc:31:57:79:14:a0:3d:42:24:af:e9: fa:39:b0:17:0c:56:70:56:67:f2:76:c3:05:4b:ef: f8:00:aa:1e:1f:f0:e1:cd:f7:09:b3:fd:ed:7f:70: fb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:55:70:B9:92:7D:48:8E:5E:2F:35:04:88:4A:C8:24:BB:37:FD:73 X509v3 Authority Key Identifier: keyid:F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:83:e6:f3:58:cd:30:69:8e:c7:7d:61:e2:f3:f8:2c:f6:50: 45:be:bb:b7:a4:6e:5b:48:06:ab:b7:c1:49:23:f3:fe:b8:ef: ea:31:2f:55:6f:3a:11:2c:9b:18:aa:e2:20:b8:1b:f3:9b:29: 9a:4e:25:6d:f1:0e:bd:37:48:dd:1e:d5:29:74:9e:68:e5:5c: 49:09:fe:8c:d5:ed:a2:b7:4d:1c:fd:76:2b:45:0f:37:f1:87: 82:46:e8:55:54:08:a0:a8:d5:b4:39:86:4f:20:a4:ab:a0:59: 0f:38:13:07:28:46:9a:81:d9:97:23:fb:fc:6d:34:cf:3f:80: 0a:dd:61:fb:3c:e6:25:66:bb:e4:2a:46:fe:65:c5:f2:f1:70: 5f:fd:c9:40:01:31:78:7e:7e:58:14:e5:63:1a:f3:94:91:4b: fb:ee:b9:05:10:49:dd:0c:9f:86:20:eb:d0:5c:10:e2:8f:86: 7b:70:e9:90:97:56:fc:66:f7:d5:cc:0e:7b:77:5d:09:64:6b: 3d:e5:e8:8f:38:45:d6:c9:32:d1:c8:4d:51:cb:91:e9:19:21: 9a:4b:ae:65:1f:47:d7:b4:5a:99:3e:e2:b7:04:1b:c1:4b:a1: 77:fe:07:e6:bf:52:82:bc:5b:84:1c:ec:33:90:ef:8c:b7:39: a8:14:29:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpkVBEpZs+q5AAedwrTvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNjFhNWZhMzdlNWNkMTAxNTA4NTI2M2VjMDI5ZTFhZmY3 OTM4ZDcwHhcNMjUxMjA2MDcwMDQ5WhcNMjUxMjA3MDcwMDQ5WjAzMTEwLwYDVQQD EyhmOTU1NzBiOTkyN2Q0ODhlNWUyZjM1MDQ4ODRhYzgyNGJiMzdmZDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQfXWBoyrt9tSPkjK7Bn5YtVUho2 t7h9SKZDk904OslSYTGoe038V3i62lq9/El8AvH0vxVRoLxa4jbnpfxpG2a6pp6D fYUl2ownpA9EWI8lCvGv5fsKEgMoVgeQVyPMLHBUiwVWeFW4Il12BW5BIuwedjjP 9J+MewpykU5DziXsEM0zJh6kWy9FG6f0gn9sInDpSQ4yPqTXqnaUBfsOacGTdyzu ygsZD2IPMCNv/YfV+z+salJigzcqdr7fx/ksU3Fv0nAOHnPNFA65rDX2C35xNzT6 3DFXeRSgPUIkr+n6ObAXDFZwVmfydsMFS+/4AKoeH/DhzfcJs/3tf3D72QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlVcLmSfUiOXi81BIhKyCS7N/1zMB8GA1UdIwQY MBaAFPBhpfo35c0QFQhSY+wCnhr/eTjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEdHbC1qZmx6UkFWQ0ZKajdBS2VHdjk1T05jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jNzkwOTUtOGMyYi00MmEzLTk0NmYt MThiMTI4YzhiNDg2LzEvOEdHbC1qZmx6UkFWQ0ZKajdBS2VHdjk1T05jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9jNzkwOTUtOGMyYi00MmEzLTk0NmYtMThiMTI4YzhiNDg2 LzEvOEdHbC1qZmx6UkFWQ0ZKajdBS2VHdjk1T05jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYPm81jN MGmOx31h4vP4LPZQRb67t6RuW0gGq7fBSSPz/rjv6jEvVW86ESybGKriILgb85sp mk4lbfEOvTdI3R7VKXSeaOVcSQn+jNXtordNHP12K0UPN/GHgkboVVQIoKjVtDmG TyCkq6BZDzgTByhGmoHZlyP7/G00zz+ACt1h+zzmJWa75CpG/mXF8vFwX/3JQAEx eH5+WBTlYxrzlJFL++65BRBJ3QyfhiDr0FwQ4o+Ge3DpkJdW/Gb31cwOe3ddCWRr PeXojzhF1sky0chNUcuR6RkhmkuuZR9H17RamT7itwQbwUuhd/4H5r9SgrxbhBzs M5DvjLc5qBQpmw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:19:29 2025 by rpki-client