This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft File: 8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json) Hash identifier: pkOqNOnq2pE6cVIoMcbjlU/aR4SChdTCUkNbS3sXReY= Subject key identifier: E3:40:60:2A:E4:59:F5:4D:93:25:0B:FA:98:70:3B:80:E2:4F:C3:F2 Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c Certificate serial: 019AF23FA373F165700AA70F8C0FD36DDCC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 06:00:48 +0000 Manifest this update: Sat 06 Dec 2025 06:00:48 +0000 Manifest next update: Sun 07 Dec 2025 06:00:48 +0000 Files and hashes: 1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: HTGABjDhAOBMlr26Rwu4I+wHCZBwZ82Zvb0MSuRsNDw=) 2: yT1Jx8Ou-jYtMpuKi40cHf-H83c.roa (hash: Lx4YPLeLSMnJ3NGAZ4PST+Ci/ylYMYy1Z+vRgBl8ZqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a3:73:f1:65:70:0a:a7:0f:8c:0f:d3:6d:dc:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f26144c824959711b652d78c18702bf432f2195c Validity Not Before: Dec 6 06:00:48 2025 GMT Not After : Dec 7 06:00:48 2025 GMT Subject: CN=e340602ae459f54d93250bfa98703b80e24fc3f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:38:19:35:39:ce:9b:6d:26:21:e4:a5:b2:a0: ee:66:17:a6:a1:32:dd:00:fd:f9:84:44:3d:75:ab: f0:9e:b4:1b:b9:1f:f9:e2:40:63:e9:4c:30:35:3c: 11:a8:d7:ed:00:3a:e6:9e:6d:79:6c:23:8e:5a:19: 87:16:2e:52:c1:25:eb:44:63:7d:4c:f7:57:0a:aa: ae:8b:26:89:b8:8c:d5:78:42:b9:39:6d:bb:d7:c0: 2d:39:42:05:9d:d1:c9:c8:8b:f5:62:cb:bb:0f:b2: 33:8a:d6:a1:a4:b9:56:28:2d:60:45:83:5e:64:5a: 7e:11:11:97:f9:87:93:b6:1e:4c:1c:8e:f4:1b:fe: 3c:5a:b8:93:bf:a0:5a:47:ab:c3:2c:a0:cc:64:83: 28:fb:07:15:05:28:78:47:c7:00:19:66:82:4c:f1: d4:f7:02:fe:f4:60:db:70:84:6b:04:a2:a1:8e:51: 92:4c:7b:d8:a4:cc:ed:bb:b3:03:c7:ab:a2:12:6e: 2f:61:cf:c3:f9:90:c6:62:79:9b:c0:8a:0d:3a:cc: 0b:4e:87:70:e3:94:cf:4a:70:3a:62:ed:28:a3:fb: cc:1d:77:9f:cd:f0:f6:f7:e2:7f:49:f1:a5:e7:b6: 8f:12:6b:f8:34:b2:83:5a:9d:a7:42:af:b2:d5:70: b0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:40:60:2A:E4:59:F5:4D:93:25:0B:FA:98:70:3B:80:E2:4F:C3:F2 X509v3 Authority Key Identifier: keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:57:af:f2:d7:15:27:db:f6:2a:81:9c:ee:a4:b1:de:67:af: 65:69:4c:10:76:34:1d:da:1b:61:cc:f6:11:12:38:71:8d:dc: 3c:3d:53:c7:20:95:8e:62:f2:af:dd:b1:c1:6e:a5:55:af:87: c1:4d:30:da:f2:c0:dc:c3:bc:b2:2f:7f:b8:fb:75:94:24:89: f2:0f:1a:4b:eb:bd:33:7c:da:fe:6f:e2:d3:35:19:81:c4:75: ef:e9:0f:18:76:8a:c4:db:f2:55:68:8d:2d:c1:64:8d:f4:ee: 0e:2f:dd:16:65:bd:9b:55:79:a4:70:8c:ea:b4:fc:01:88:3b: a5:76:d1:c1:73:ee:d5:c8:d3:24:58:b6:7a:af:37:7f:0a:04: 6a:ed:b9:44:4f:d2:97:1e:0f:43:b2:2b:3d:7d:da:01:8e:bc: 13:b2:f6:fc:e9:ee:c9:33:ce:c4:22:9b:8e:65:fb:9c:83:b9: 6a:a2:65:7a:c5:6a:b8:c6:e8:5b:6e:2f:56:2d:00:91:4a:79: f7:a1:b8:0b:d4:62:b5:78:46:a8:7f:9a:e0:a0:dc:d7:12:12: 6d:4e:c9:ec:8e:37:c1:bc:51:63:74:1c:03:59:9f:5e:a8:b9: c3:73:f1:4d:fc:6a:cd:d3:dd:05:91:6b:69:9d:19:b2:e4:41: ca:1e:99:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6Nz8WVwCqcPjA/TbdzJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjE0NGM4MjQ5NTk3MTFiNjUyZDc4YzE4NzAyYmY0MzJm MjE5NWMwHhcNMjUxMjA2MDYwMDQ4WhcNMjUxMjA3MDYwMDQ4WjAzMTEwLwYDVQQD EyhlMzQwNjAyYWU0NTlmNTRkOTMyNTBiZmE5ODcwM2I4MGUyNGZjM2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTgZNTnOm20mIeSlsqDuZhemoTLd AP35hEQ9davwnrQbuR/54kBj6UwwNTwRqNftADrmnm15bCOOWhmHFi5SwSXrRGN9 TPdXCqquiyaJuIzVeEK5OW2718AtOUIFndHJyIv1Ysu7D7IzitahpLlWKC1gRYNe ZFp+ERGX+YeTth5MHI70G/48WriTv6BaR6vDLKDMZIMo+wcVBSh4R8cAGWaCTPHU 9wL+9GDbcIRrBKKhjlGSTHvYpMztu7MDx6uiEm4vYc/D+ZDGYnmbwIoNOswLTodw 45TPSnA6Yu0oo/vMHXefzfD29+J/SfGl57aPEmv4NLKDWp2nQq+y1XCw+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONAYCrkWfVNkyUL+phwO4DiT8PyMB8GA1UdIwQY MBaAFPJhRMgklZcRtlLXjBhwK/Qy8hlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1GRXlDU1ZseEcyVXRlTUdIQXI5REx5R1Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hNjZjMjUtMjcxMS00NjU5LWIxNjIt MzViNDgzYmI0Yzg0LzEvOG1GRXlDU1ZseEcyVXRlTUdIQXI5REx5R1Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hNjZjMjUtMjcxMS00NjU5LWIxNjItMzViNDgzYmI0Yzg0 LzEvOG1GRXlDU1ZseEcyVXRlTUdIQXI5REx5R1Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlev8tcV J9v2KoGc7qSx3mevZWlMEHY0HdobYcz2ERI4cY3cPD1TxyCVjmLyr92xwW6lVa+H wU0w2vLA3MO8si9/uPt1lCSJ8g8aS+u9M3za/m/i0zUZgcR17+kPGHaKxNvyVWiN LcFkjfTuDi/dFmW9m1V5pHCM6rT8AYg7pXbRwXPu1cjTJFi2eq83fwoEau25RE/S lx4PQ7IrPX3aAY68E7L2/OnuyTPOxCKbjmX7nIO5aqJlesVquMboW24vVi0AkUp5 96G4C9RitXhGqH+a4KDc1xISbU7J7I43wbxRY3QcA1mfXqi5w3PxTfxqzdPdBZFr aZ0ZsuRByh6ZGw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:57:01 2025 by rpki-client