This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft File: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft (raw, json) Hash identifier: 9FexpV3+Cs8LNrremkc+WE2Ito65JvCv73LzuSBxM0E= Subject key identifier: 14:45:C1:8F:E7:1C:CE:71:7E:87:27:FA:05:4A:29:15:34:BA:A9:30 Authority key identifier: F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C Certificate issuer: /CN=f2a959dc16715c8a54c8094267b8e491fe321d2c Certificate serial: 019AF2AD7E23AA06E4D3BB0437DCA5FFB89B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft Manifest number: 1662 Signing time: Sat 06 Dec 2025 08:00:47 +0000 Manifest this update: Sat 06 Dec 2025 08:00:47 +0000 Manifest next update: Sun 07 Dec 2025 08:00:47 +0000 Files and hashes: 1: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl (hash: MNnCThYoEq+vWh5fX+WrVi5dO/IKEdd6+ALDmLIfwjE=) 2: d2hoUpvor7BPW8nmpz4xnZjE2u4.roa (hash: hIY/GtYHLCsuos0GvnTm5ot49GmbZ9W7yYzcGZgrlOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:7e:23:aa:06:e4:d3:bb:04:37:dc:a5:ff:b8:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2a959dc16715c8a54c8094267b8e491fe321d2c Validity Not Before: Dec 6 08:00:47 2025 GMT Not After : Dec 7 08:00:47 2025 GMT Subject: CN=1445c18fe71cce717e8727fa054a291534baa930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:01:f8:7c:7e:1d:cd:60:e5:e6:f7:29:ec:75: c4:17:58:2f:3d:66:c9:eb:bc:e9:ae:bf:d7:93:e7: aa:f5:7b:a6:1a:74:22:b0:15:88:37:a1:29:fa:2a: 00:30:9c:92:60:ee:60:84:99:b8:a4:6f:d8:5f:f4: db:d1:4a:29:5a:8e:7d:35:62:da:02:ec:29:a4:56: 70:21:e0:f6:71:2f:19:47:33:f8:81:f1:a0:a0:46: 1c:0b:d1:0d:97:13:76:12:0f:6b:87:86:07:ec:b3: 11:e6:bc:5b:e9:67:b5:e9:60:36:a1:e0:b3:f8:0a: 50:2d:ee:dc:e4:b2:7c:23:d3:92:29:5f:9f:ee:47: c1:2f:c6:72:8e:d7:b7:72:4e:90:65:56:7a:f1:2d: d4:67:46:4c:18:59:8c:3c:97:d3:1c:1a:92:7a:c7: d3:20:81:6d:17:6c:56:37:42:bb:34:31:fc:d4:77: 9f:e6:2e:bc:ce:8c:fe:67:75:5c:65:95:93:5c:0e: 43:7f:46:38:b3:31:4a:a9:2b:2c:82:d4:8c:81:e8: 82:30:20:03:ab:0d:45:2b:ec:00:47:b7:06:67:c6: 25:6a:07:19:4b:94:41:0b:fa:9d:f6:e5:bd:79:2f: f3:8d:12:0b:0c:36:6c:03:75:4f:4a:0c:ac:da:6b: c7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:45:C1:8F:E7:1C:CE:71:7E:87:27:FA:05:4A:29:15:34:BA:A9:30 X509v3 Authority Key Identifier: keyid:F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:a5:36:59:41:17:71:11:ec:f9:50:92:fa:91:50:58:ce:b4: b9:33:e0:a9:28:49:3e:d3:e8:14:38:bb:ec:f5:d1:c8:81:64: 80:62:6c:13:73:ff:41:bc:39:1f:e0:08:b5:60:33:32:e4:c4: 6d:16:19:17:24:20:41:00:0e:49:df:c1:c4:c7:7e:68:0b:6c: 84:d7:ba:17:08:14:f6:83:61:ec:ef:22:e3:3a:71:45:15:40: 87:f1:0e:0d:26:c8:e1:13:af:b8:27:a0:f6:c3:4d:84:24:ea: 05:8f:ed:4c:94:20:df:c0:e4:ef:98:68:34:46:eb:2e:b6:75: 3e:f8:b2:09:28:ea:f7:65:ff:b7:7c:b7:7b:47:5c:1b:9f:1e: ac:2c:cf:ac:a6:3c:4b:9e:2c:3b:88:fc:3c:f2:db:f6:e5:0d: 36:10:94:45:d8:90:12:6e:62:c8:9f:e6:b3:e9:03:34:bd:c5: 76:f7:60:57:b9:46:7d:89:19:3f:20:91:68:c9:40:5f:d5:c6: 93:62:a4:12:3f:e5:e7:33:6b:53:34:a4:34:c7:71:72:6f:4e: 89:b7:c4:dc:58:9e:a6:87:cb:da:1f:0b:42:67:b4:96:5a:bc: 26:33:66:e4:8a:7e:bb:3d:57:a6:7c:67:71:99:c7:03:30:19: 9e:d2:4b:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrX4jqgbk07sEN9yl/7ibMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYTk1OWRjMTY3MTVjOGE1NGM4MDk0MjY3YjhlNDkxZmUz MjFkMmMwHhcNMjUxMjA2MDgwMDQ3WhcNMjUxMjA3MDgwMDQ3WjAzMTEwLwYDVQQD EygxNDQ1YzE4ZmU3MWNjZTcxN2U4NzI3ZmEwNTRhMjkxNTM0YmFhOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQH4fH4dzWDl5vcp7HXEF1gvPWbJ 67zprr/Xk+eq9XumGnQisBWIN6Ep+ioAMJySYO5ghJm4pG/YX/Tb0UopWo59NWLa AuwppFZwIeD2cS8ZRzP4gfGgoEYcC9ENlxN2Eg9rh4YH7LMR5rxb6We16WA2oeCz +ApQLe7c5LJ8I9OSKV+f7kfBL8Zyjte3ck6QZVZ68S3UZ0ZMGFmMPJfTHBqSesfT IIFtF2xWN0K7NDH81Hef5i68zoz+Z3VcZZWTXA5Df0Y4szFKqSssgtSMgeiCMCAD qw1FK+wAR7cGZ8YlagcZS5RBC/qd9uW9eS/zjRILDDZsA3VPSgys2mvHqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRFwY/nHM5xfocn+gVKKRU0uqkwMB8GA1UdIwQY MBaAFPKpWdwWcVyKVMgJQme45JH+Mh0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHFsWjNCWnhYSXBVeUFsQ1o3amtrZjR5SFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84OGEzODMtMDMwYy00NTQ1LTllOWMt NGViZWVjN2U4Mjc1LzEvOHFsWjNCWnhYSXBVeUFsQ1o3amtrZjR5SFN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi84OGEzODMtMDMwYy00NTQ1LTllOWMtNGViZWVjN2U4Mjc1 LzEvOHFsWjNCWnhYSXBVeUFsQ1o3amtrZjR5SFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0KU2WUEX cRHs+VCS+pFQWM60uTPgqShJPtPoFDi77PXRyIFkgGJsE3P/Qbw5H+AItWAzMuTE bRYZFyQgQQAOSd/BxMd+aAtshNe6FwgU9oNh7O8i4zpxRRVAh/EODSbI4ROvuCeg 9sNNhCTqBY/tTJQg38Dk75hoNEbrLrZ1PviyCSjq92X/t3y3e0dcG58erCzPrKY8 S54sO4j8PPLb9uUNNhCURdiQEm5iyJ/ms+kDNL3FdvdgV7lGfYkZPyCRaMlAX9XG k2KkEj/l5zNrUzSkNMdxcm9OibfE3FiepofL2h8LQme0llq8JjNm5Ip+uz1Xpnxn cZnHAzAZntJL1w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:25:51 2025 by rpki-client