This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft File: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft (raw, json) Hash identifier: FS+6Pbmi5rIqhBpNwSX+04izm1S8tpbzG3ZaXrDQK8U= Subject key identifier: D2:D0:D3:E6:D7:07:4B:85:E6:4C:EE:F5:73:C2:D2:69:8A:E2:63:01 Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85 Certificate issuer: /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085 Certificate serial: 019AF23F899030D052884111F42180EB872E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 06:00:41 +0000 Manifest this update: Sat 06 Dec 2025 06:00:41 +0000 Manifest next update: Sun 07 Dec 2025 06:00:41 +0000 Files and hashes: 1: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl (hash: /uesHCoTgXyrCTDBPOdYJTyt5CKNnasRnpUXJhUYCXQ=) 2: rT4QMLbWFUH0Mel-lifTyr0ioFc.roa (hash: wpH6c9l5MVs0PUcAmPxTy3wVy1NXeRT3Lk+wmtz29PE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:89:90:30:d0:52:88:41:11:f4:21:80:eb:87:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085 Validity Not Before: Dec 6 06:00:41 2025 GMT Not After : Dec 7 06:00:41 2025 GMT Subject: CN=d2d0d3e6d7074b85e64ceef573c2d2698ae26301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:79:11:db:93:da:9d:fb:f0:20:f5:d5:0b:4c: 69:c1:00:72:9a:cb:b2:9b:0b:40:04:36:60:15:b2: bf:ee:bf:81:7f:b6:12:b3:3e:5c:ae:20:e1:c3:b8: 89:1c:1a:de:2e:45:a6:1c:20:aa:9c:f0:68:53:4d: 0d:e7:d4:21:56:f2:c0:b3:12:89:5a:8c:be:b0:08: 13:d4:f8:1a:6a:82:de:65:4c:ea:25:4e:0f:c1:e3: aa:c6:79:ac:4e:9e:b8:85:a6:4e:c9:0b:97:a9:c1: 9b:de:f3:c3:e2:7a:c2:4e:27:ec:50:ee:19:98:40: b6:20:e2:b2:59:81:fe:ae:c1:6c:ed:8a:ec:81:bf: 3a:02:2b:51:ca:56:5a:b0:f3:d8:36:0d:c7:03:2b: cb:ce:89:b5:78:a5:d8:06:03:3c:5c:5f:61:6f:02: 62:1f:1a:90:34:98:97:02:01:d1:86:2e:2d:39:85: f7:ad:f5:68:66:c2:27:f7:0d:28:c0:82:e5:78:eb: a6:11:22:5e:34:aa:fb:3d:0d:70:ce:92:78:55:ed: 77:12:23:e8:60:a9:6f:46:75:e9:9d:33:bb:7b:59: 53:e9:19:dc:eb:35:5d:91:a0:a8:af:32:98:7d:4f: ba:0f:7c:a6:d5:47:db:d1:f6:c1:41:db:d0:80:f0: 09:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D0:D3:E6:D7:07:4B:85:E6:4C:EE:F5:73:C2:D2:69:8A:E2:63:01 X509v3 Authority Key Identifier: keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:1a:a1:5d:92:6a:9a:db:2b:be:61:71:1f:49:4e:d4:d6:6e: 28:17:65:dd:1f:56:86:05:e9:3e:19:ea:14:27:ef:51:50:b9: 2e:9d:dd:0b:72:d4:1a:68:e0:80:8a:e3:f9:76:78:4a:41:8e: 3c:9e:09:52:01:37:1c:a4:47:19:9b:f5:c2:55:0d:6e:d0:3c: 4a:f3:f2:0a:ad:70:db:fd:5d:d0:3c:25:1a:c6:70:43:e7:d0: 92:f3:94:61:16:30:44:6a:47:aa:f3:39:43:0b:ba:e4:9b:4f: b6:35:3b:fc:74:35:ae:be:52:6e:ee:a0:6a:2f:e1:70:c8:69: cc:c7:ae:d7:e9:99:c1:30:a8:11:0d:12:fb:57:47:dd:a8:5a: 75:1a:00:96:6a:fe:1a:d9:5e:f6:0f:ac:cd:80:7e:54:c1:d7: 7b:da:16:f3:7f:eb:12:e9:27:f7:72:33:16:1e:c5:9d:ff:1d: a8:bf:e8:e0:a6:ad:2e:35:c7:aa:bd:c5:3f:f3:80:6f:be:3a: 65:d1:6f:b5:83:00:83:b4:06:3f:d3:e2:2d:5d:a8:c3:3c:db: 6e:f4:89:ec:89:6e:07:b2:e7:da:6e:01:35:b0:3f:85:87:6c: 51:11:31:9c:96:bd:18:cd:56:70:3c:45:9d:24:c8:e7:dc:2f: 48:aa:30:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4mQMNBSiEER9CGA64cuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxOWE1ZDVjYjc5NDljZTFiZDIwOWRjMjEzOTkzNTIwZTAy ZDEwODUwHhcNMjUxMjA2MDYwMDQxWhcNMjUxMjA3MDYwMDQxWjAzMTEwLwYDVQQD EyhkMmQwZDNlNmQ3MDc0Yjg1ZTY0Y2VlZjU3M2MyZDI2OThhZTI2MzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnkR25PanfvwIPXVC0xpwQBymsuy mwtABDZgFbK/7r+Bf7YSsz5criDhw7iJHBreLkWmHCCqnPBoU00N59QhVvLAsxKJ Woy+sAgT1PgaaoLeZUzqJU4PweOqxnmsTp64haZOyQuXqcGb3vPD4nrCTifsUO4Z mEC2IOKyWYH+rsFs7Yrsgb86AitRylZasPPYNg3HAyvLzom1eKXYBgM8XF9hbwJi HxqQNJiXAgHRhi4tOYX3rfVoZsIn9w0owILleOumESJeNKr7PQ1wzpJ4Ve13EiPo YKlvRnXpnTO7e1lT6Rnc6zVdkaCorzKYfU+6D3ym1Ufb0fbBQdvQgPAJrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLQ0+bXB0uF5kzu9XPC0mmK4mMBMB8GA1UdIwQY MBaAFPGaXVy3lJzhvSCdwhOZNSDgLRCFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zMDliZmQtY2JlNy00MTQ0LWE2MzAt MmY4MGEwYTAyMDZhLzEvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8zMDliZmQtY2JlNy00MTQ0LWE2MzAtMmY4MGEwYTAyMDZh LzEvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxqhXZJq mtsrvmFxH0lO1NZuKBdl3R9WhgXpPhnqFCfvUVC5Lp3dC3LUGmjggIrj+XZ4SkGO PJ4JUgE3HKRHGZv1wlUNbtA8SvPyCq1w2/1d0DwlGsZwQ+fQkvOUYRYwRGpHqvM5 Qwu65JtPtjU7/HQ1rr5Sbu6gai/hcMhpzMeu1+mZwTCoEQ0S+1dH3ahadRoAlmr+ Gtle9g+szYB+VMHXe9oW83/rEukn93IzFh7Fnf8dqL/o4KatLjXHqr3FP/OAb746 ZdFvtYMAg7QGP9PiLV2owzzbbvSJ7IluB7Ln2m4BNbA/hYdsURExnJa9GM1WcDxF nSTI59wvSKowUw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:49 2025 by rpki-client