This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json) Hash identifier: spFBUd+X8x1tlsywMmXR2njnQWYRDdFFiDwUbbkfUks= Subject key identifier: 1C:F0:8A:22:ED:9E:31:BB:FC:38:3E:2A:3B:9E:54:48:A8:BC:FA:95 Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E Certificate issuer: /CN=f2a8516704f57492835b94d007027328c22fa40e Certificate serial: 019AF2767BD2C293020489F2171D36801377 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft Manifest number: 11E3 Signing time: Sat 06 Dec 2025 07:00:42 +0000 Manifest this update: Sat 06 Dec 2025 07:00:42 +0000 Manifest next update: Sun 07 Dec 2025 07:00:42 +0000 Files and hashes: 1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: hn6W6COALjZ3BeHgkazBJcm1RxQejr+haZ3sVFwHKq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7b:d2:c2:93:02:04:89:f2:17:1d:36:80:13:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e Validity Not Before: Dec 6 07:00:42 2025 GMT Not After : Dec 7 07:00:42 2025 GMT Subject: CN=1cf08a22ed9e31bbfc383e2a3b9e5448a8bcfa95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ec:6d:70:bd:b9:ec:b6:65:ba:16:ca:50:94: 7c:34:ee:9f:2c:07:f9:f7:74:c6:f5:e7:9a:4d:27: f6:f1:b4:02:51:b8:41:6e:33:a3:1f:ec:da:b3:a0: 6d:fc:4c:fb:4b:cf:ef:b9:57:47:30:19:e2:f1:06: 43:a6:6a:b8:e1:fd:69:8f:e5:8b:56:27:c1:47:f5: 2e:9d:07:30:da:a2:54:fc:b4:0b:b0:2d:0a:89:51: 74:3c:ac:f4:b1:d6:b3:99:0f:63:60:20:50:ac:25: 3e:a9:a9:29:ba:d7:48:09:f4:b8:46:a3:1c:4c:e7: 09:e9:e1:51:21:89:9c:ce:5d:7a:a9:9e:83:e1:73: cc:39:0e:3b:b2:1e:0a:6e:9b:7d:13:cf:ef:a2:4a: f6:0e:2a:ae:18:dc:76:62:5d:64:48:3d:d6:dd:55: 04:3c:0e:b4:27:94:a1:7e:db:4d:37:9c:6f:bc:93: 08:50:59:fc:b6:65:97:04:f9:4c:c0:0c:fb:cf:8b: 1d:03:3c:55:52:ef:0e:0d:a7:0e:26:9e:73:f2:f0: ab:f9:6b:85:2f:87:3f:93:41:67:d8:f3:41:57:01: 62:fc:e1:74:2f:5a:31:43:bc:5e:bf:c5:4a:9d:d0: 87:9d:57:3d:2b:1c:04:fa:32:74:4f:26:47:37:ea: 58:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F0:8A:22:ED:9E:31:BB:FC:38:3E:2A:3B:9E:54:48:A8:BC:FA:95 X509v3 Authority Key Identifier: keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:5b:b3:19:48:b3:7f:94:a6:57:65:17:6e:38:74:73:0a:35: f3:0e:54:1b:b0:1d:76:c7:b1:68:94:bd:56:bd:77:8f:79:53: ee:77:83:3c:d9:79:33:75:78:1f:2d:67:1a:51:58:bc:2f:2e: b1:4f:ef:86:90:77:f9:3e:2c:1f:a6:bf:2b:67:bd:6b:5e:3e: c9:84:83:86:58:ea:12:a8:77:ca:3b:08:bb:cc:1a:49:36:bc: 5b:a8:a5:46:f5:79:b3:73:e5:1a:c4:00:57:f0:4e:1f:92:33: 66:20:7e:ca:fb:97:5b:f3:d5:ef:83:55:25:18:2e:0f:f0:5f: 26:8d:aa:b9:31:78:c2:8b:92:ba:c9:2a:ef:76:d4:c0:9b:38: 1a:d7:61:0e:bb:bc:ab:ed:99:78:3c:bd:15:e1:a6:ee:96:50: 3e:9a:0c:d1:17:c9:a2:ad:25:d0:43:5c:0c:e9:fd:d3:46:5f: bb:79:b0:f7:bc:a3:da:b4:7e:a5:c6:be:ab:c4:2b:e3:5d:ab: 00:6c:00:13:4b:36:80:da:10:1c:ce:38:66:74:13:55:dc:64: 84:ae:95:d5:93:8f:4a:4a:d2:fe:14:74:15:cd:3a:6e:ef:2c: 41:84:2d:b0:ed:4b:7b:85:36:f5:44:9d:c8:2a:6b:c7:86:d2: b8:13:e2:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnvSwpMCBInyFx02gBN3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYTg1MTY3MDRmNTc0OTI4MzViOTRkMDA3MDI3MzI4YzIy ZmE0MGUwHhcNMjUxMjA2MDcwMDQyWhcNMjUxMjA3MDcwMDQyWjAzMTEwLwYDVQQD EygxY2YwOGEyMmVkOWUzMWJiZmMzODNlMmEzYjllNTQ0OGE4YmNmYTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+xtcL257LZluhbKUJR8NO6fLAf5 93TG9eeaTSf28bQCUbhBbjOjH+zas6Bt/Ez7S8/vuVdHMBni8QZDpmq44f1pj+WL VifBR/UunQcw2qJU/LQLsC0KiVF0PKz0sdazmQ9jYCBQrCU+qakputdICfS4RqMc TOcJ6eFRIYmczl16qZ6D4XPMOQ47sh4Kbpt9E8/vokr2DiquGNx2Yl1kSD3W3VUE PA60J5ShfttNN5xvvJMIUFn8tmWXBPlMwAz7z4sdAzxVUu8ODacOJp5z8vCr+WuF L4c/k0Fn2PNBVwFi/OF0L1oxQ7xev8VKndCHnVc9KxwE+jJ0TyZHN+pY7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzwiiLtnjG7/Dg+KjueVEiovPqVMB8GA1UdIwQY MBaAFPKoUWcE9XSSg1uU0AcCcyjCL6QOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHFoUlp3VDFkSktEVzVUUUJ3SnpLTUl2cEE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yNDdlYjctNGJiMC00YTFiLTk1ODkt N2Q0ZDk0MWEzN2QxLzEvOHFoUlp3VDFkSktEVzVUUUJ3SnpLTUl2cEE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8yNDdlYjctNGJiMC00YTFiLTk1ODktN2Q0ZDk0MWEzN2Qx LzEvOHFoUlp3VDFkSktEVzVUUUJ3SnpLTUl2cEE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgluzGUiz f5SmV2UXbjh0cwo18w5UG7AddsexaJS9Vr13j3lT7neDPNl5M3V4Hy1nGlFYvC8u sU/vhpB3+T4sH6a/K2e9a14+yYSDhljqEqh3yjsIu8waSTa8W6ilRvV5s3PlGsQA V/BOH5IzZiB+yvuXW/PV74NVJRguD/BfJo2quTF4wouSuskq73bUwJs4GtdhDru8 q+2ZeDy9FeGm7pZQPpoM0RfJoq0l0ENcDOn900Zfu3mw97yj2rR+pca+q8Qr412r AGwAE0s2gNoQHM44ZnQTVdxkhK6V1ZOPSkrS/hR0Fc06bu8sQYQtsO1Le4U29USd yCprx4bSuBPikg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:06:39 2025 by rpki-client