This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft File: 8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json) Hash identifier: 5oGheczpl9O3lAWV0kKa3JIm4C32KsbWADj3lOTRDAA= Subject key identifier: 08:BD:83:DF:DD:C1:40:D8:2A:E8:F1:5A:29:9D:C4:A5:37:C9:78:C1 Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2 Certificate issuer: /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2 Certificate serial: 019AF50BD2E0E80847E3FC7AD960DCE45B9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 19:03:04 +0000 Manifest this update: Sat 06 Dec 2025 19:03:04 +0000 Manifest next update: Sun 07 Dec 2025 19:03:04 +0000 Files and hashes: 1: 0TX6bG3AW3Ort-Rt8qCc1TR12hM.roa (hash: XGv/DCUiOeegPa2KE+7yV2/GQEE1zmTFiu2PMDuWufY=) 2: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: VvuRDdFJhQM0MpNzw7fInSwY/sbFqS35VSlnlfkpMck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:d2:e0:e8:08:47:e3:fc:7a:d9:60:dc:e4:5b:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2 Validity Not Before: Dec 6 19:03:04 2025 GMT Not After : Dec 7 19:03:04 2025 GMT Subject: CN=08bd83dfddc140d82ae8f15a299dc4a537c978c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4c:f9:1d:dd:ec:5a:f0:f2:c5:ed:41:a8:67: 14:06:92:50:ba:e5:26:19:bc:14:5a:3a:66:31:77: 01:e0:66:ad:37:1c:88:5b:a4:ca:a4:41:93:03:ac: 42:fc:4b:f4:16:9f:11:02:77:ce:53:67:fd:02:16: 66:7c:5b:92:f8:76:1d:76:61:bf:6d:2e:a7:ca:ea: d4:4c:30:5e:2d:c4:53:b0:5b:a3:46:d4:15:cf:ba: 6e:83:38:2f:ed:0a:e2:38:ba:38:57:00:3a:a6:3e: 4a:2c:4f:88:0f:63:ae:db:71:b0:34:96:83:b9:52: 83:70:fa:2b:49:39:d9:95:50:5a:96:17:df:e9:d1: 8d:19:e2:fa:c0:90:dd:fc:37:77:89:d7:ca:68:0a: a3:fa:48:0b:d8:6b:da:a0:f0:e5:52:5a:29:43:05: e7:cc:49:35:15:79:65:4c:df:77:ee:ba:14:62:23: d6:ce:4c:50:0f:39:37:77:0e:d8:59:57:78:b0:8c: c9:8c:cc:fb:6d:1e:60:53:8d:a0:0b:68:fc:dc:a0: 08:8f:94:11:56:ea:d3:4f:9a:2e:99:91:31:0d:38: 46:92:ee:72:d0:59:77:5c:18:4e:6a:e9:20:33:27: 52:e1:0d:51:5f:7c:21:6c:d6:f5:4b:0f:2b:a5:8a: 41:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BD:83:DF:DD:C1:40:D8:2A:E8:F1:5A:29:9D:C4:A5:37:C9:78:C1 X509v3 Authority Key Identifier: keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:53:98:eb:c2:77:ff:06:f8:d4:c0:cc:13:8a:ac:54:87:79: 0b:3f:62:b6:8d:05:ae:19:5d:4f:b7:19:bf:08:13:7a:e6:2a: e3:42:8f:79:e4:03:1e:88:6e:b8:e0:6f:39:96:20:0b:14:87: ad:5e:94:55:8f:3e:79:2a:df:b0:b0:77:f6:d2:9c:5e:2a:a1: 79:86:7d:b8:96:13:56:57:14:21:77:91:0a:ec:34:3f:b9:f1: fc:f1:6f:da:df:16:49:97:e3:31:9f:62:88:b1:3a:8f:1a:30: fa:63:6f:e3:30:ee:b0:ac:3d:85:2e:99:93:a7:b5:29:77:9e: b0:16:92:c5:76:7c:a0:20:f6:5d:a9:01:57:1b:8d:9e:57:74: ce:7a:ff:39:2a:b3:65:16:9f:e4:d4:aa:00:23:d2:26:c2:27: 33:fe:16:1b:aa:07:5b:a2:aa:c2:62:69:f7:a3:78:e5:75:26: 42:bb:54:6f:49:6c:3b:8f:77:c2:2c:43:b6:dd:63:75:f8:ce: e7:46:a8:55:ed:c7:84:73:2a:cd:01:ef:2f:4c:2e:8d:da:d2: 31:72:6f:df:bc:09:b4:09:6a:af:d6:db:d6:45:0f:b1:b5:cc: a4:1c:19:7f:03:3a:a9:0f:22:46:2b:f6:5e:1f:f0:34:c9:b7: 1b:a2:a6:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C9Lg6AhH4/x62WDc5FufMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmIwZDBiZTI5NmRjMWI3MTlkMjQ0MGZiNmFkOWM3NWQw OGUyZTIwHhcNMjUxMjA2MTkwMzA0WhcNMjUxMjA3MTkwMzA0WjAzMTEwLwYDVQQD EygwOGJkODNkZmRkYzE0MGQ4MmFlOGYxNWEyOTlkYzRhNTM3Yzk3OGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kz5Hd3sWvDyxe1BqGcUBpJQuuUm GbwUWjpmMXcB4GatNxyIW6TKpEGTA6xC/Ev0Fp8RAnfOU2f9AhZmfFuS+HYddmG/ bS6nyurUTDBeLcRTsFujRtQVz7pugzgv7QriOLo4VwA6pj5KLE+ID2Ou23GwNJaD uVKDcPorSTnZlVBalhff6dGNGeL6wJDd/Dd3idfKaAqj+kgL2GvaoPDlUlopQwXn zEk1FXllTN937roUYiPWzkxQDzk3dw7YWVd4sIzJjMz7bR5gU42gC2j83KAIj5QR VurTT5oumZExDThGku5y0Fl3XBhOaukgMydS4Q1RX3whbNb1Sw8rpYpBgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAi9g9/dwUDYKujxWimdxKU3yXjBMB8GA1UdIwQY MBaAFPD7DQviltwbcZ0kQPtq2cddCOLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8zZGVkZjYtM2VjNy00YjQwLWFkYWEt YzBlMjc4NzM2Yzg4LzEvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8zZGVkZjYtM2VjNy00YjQwLWFkYWEtYzBlMjc4NzM2Yzg4 LzEvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlOY68J3 /wb41MDME4qsVId5Cz9ito0FrhldT7cZvwgTeuYq40KPeeQDHohuuOBvOZYgCxSH rV6UVY8+eSrfsLB39tKcXiqheYZ9uJYTVlcUIXeRCuw0P7nx/PFv2t8WSZfjMZ9i iLE6jxow+mNv4zDusKw9hS6Zk6e1KXeesBaSxXZ8oCD2XakBVxuNnld0znr/OSqz ZRaf5NSqACPSJsInM/4WG6oHW6KqwmJp96N45XUmQrtUb0lsO493wixDtt1jdfjO 50aoVe3HhHMqzQHvL0wujdrSMXJv37wJtAlqr9bb1kUPsbXMpBwZfwM6qQ8iRiv2 Xh/wNMm3G6Km/g== -----END CERTIFICATE-----Generated at Sun Dec 7 00:34:13 2025 by rpki-client