This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft File: 8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft (raw, json) Hash identifier: FK2WM/thogETpun4cIA+hbZJP+rfadjcqYGdx4zZskA= Subject key identifier: BE:75:28:B5:8F:AA:A9:59:3A:D9:28:79:5A:8F:5F:6D:7A:2D:FA:67 Authority key identifier: F2:55:51:C7:04:7B:3B:F9:03:18:08:C2:1B:83:79:B9:B8:60:C4:26 Certificate issuer: /CN=f25551c7047b3bf9031808c21b8379b9b860c426 Certificate serial: 019AF12D4DBD29F21A4F3A320BC088AAACCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft Manifest number: 0272 Signing time: Sat 06 Dec 2025 01:01:09 +0000 Manifest this update: Sat 06 Dec 2025 01:01:09 +0000 Manifest next update: Sun 07 Dec 2025 01:01:09 +0000 Files and hashes: 1: 8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl (hash: VGIgqK/7UHewd9CJNmOl72azi7s+5f3WapwhSNO7QyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:4d:bd:29:f2:1a:4f:3a:32:0b:c0:88:aa:ac:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f25551c7047b3bf9031808c21b8379b9b860c426 Validity Not Before: Dec 6 01:01:09 2025 GMT Not After : Dec 7 01:01:09 2025 GMT Subject: CN=be7528b58faaa9593ad928795a8f5f6d7a2dfa67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b8:07:72:67:e2:e5:99:a1:eb:93:42:ba:d6: 08:5e:00:98:14:a1:48:b4:07:c2:da:a5:ee:e5:fc: b8:24:cd:1a:78:80:fa:33:2a:a4:f4:34:bb:89:7a: 31:9d:ba:6a:f9:c9:e0:b7:75:67:2c:f7:2c:bb:70: 19:5e:5a:95:bb:a1:1c:40:29:83:12:f3:40:7e:aa: 4b:6d:63:fe:d7:a9:07:ad:13:a3:04:38:ca:9a:60: 1f:68:6b:74:04:f7:d8:d7:33:c0:89:88:e3:07:e2: cf:92:55:ad:fc:f4:59:e1:56:19:f4:fe:23:6c:22: a7:42:f4:95:95:a5:0e:ae:42:e2:53:78:68:a7:1e: 39:cb:c9:98:14:60:83:8d:53:e6:c4:b4:af:94:d5: e1:cc:66:44:09:ce:eb:43:b6:ac:ab:92:b0:76:05: 9e:7f:a8:48:04:b6:fa:9a:29:62:0b:fb:3d:80:bf: f8:38:a3:9f:de:24:a7:69:fe:36:5c:96:98:7c:a4: 83:51:9e:07:64:c1:af:d7:b2:5e:b2:e3:b1:9d:f0: 32:f4:d8:76:e8:49:44:89:d9:fd:99:49:ac:c2:ff: 2f:0f:52:d1:bb:d4:d3:34:d3:61:7c:d9:47:ad:f6: 70:e7:a5:c0:f1:a6:60:31:9c:cf:80:55:b5:94:42: 91:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:75:28:B5:8F:AA:A9:59:3A:D9:28:79:5A:8F:5F:6D:7A:2D:FA:67 X509v3 Authority Key Identifier: keyid:F2:55:51:C7:04:7B:3B:F9:03:18:08:C2:1B:83:79:B9:B8:60:C4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:2a:f6:ab:41:6a:4b:7c:22:97:f2:19:c0:6a:c5:2e:59:de: fd:6d:87:9a:29:78:1b:4d:2c:b7:eb:4b:de:ce:ec:40:38:a8: c9:cf:01:37:87:cb:16:53:00:ee:66:29:2f:46:c7:73:a0:4c: ed:2f:b7:56:00:d3:fd:28:04:28:6d:ed:dc:22:17:81:b4:c2: 38:1b:54:e8:7b:0f:26:c1:79:59:dd:bd:9b:7e:19:9c:56:8f: 30:ba:3b:2c:cb:94:a5:a4:de:f8:b0:13:3d:5b:28:d9:b9:f7: e4:ef:b9:cb:bf:5d:12:0b:cc:f3:76:11:6a:44:20:f2:3c:8b: 1b:bd:8b:4c:0d:e5:d6:ba:ff:23:d8:55:ff:34:d6:97:f4:75: 70:e8:4f:86:58:fb:36:15:c5:73:26:e6:d4:13:08:f3:a6:7a: 94:0a:bf:7f:80:6d:07:52:58:e4:d3:7f:7a:b6:e5:93:f9:74: ad:1f:ec:d1:7d:5b:c0:94:73:cf:52:0d:5a:67:f3:e4:70:12: cc:31:be:a1:b7:c7:75:9c:c9:ad:da:b4:d2:6f:32:65:7f:1f: 6a:7c:eb:02:1e:c2:e3:9d:b9:6d:ba:3a:64:14:a1:b1:6a:93: 89:37:dd:61:82:c1:2c:1e:bb:ac:46:a0:8c:68:a2:06:39:44: a7:7e:a8:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLU29KfIaTzoyC8CIqqzNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNTU1MWM3MDQ3YjNiZjkwMzE4MDhjMjFiODM3OWI5Yjg2 MGM0MjYwHhcNMjUxMjA2MDEwMTA5WhcNMjUxMjA3MDEwMTA5WjAzMTEwLwYDVQQD EyhiZTc1MjhiNThmYWFhOTU5M2FkOTI4Nzk1YThmNWY2ZDdhMmRmYTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprgHcmfi5Zmh65NCutYIXgCYFKFI tAfC2qXu5fy4JM0aeID6Myqk9DS7iXoxnbpq+cngt3VnLPcsu3AZXlqVu6EcQCmD EvNAfqpLbWP+16kHrROjBDjKmmAfaGt0BPfY1zPAiYjjB+LPklWt/PRZ4VYZ9P4j bCKnQvSVlaUOrkLiU3hopx45y8mYFGCDjVPmxLSvlNXhzGZECc7rQ7asq5KwdgWe f6hIBLb6miliC/s9gL/4OKOf3iSnaf42XJaYfKSDUZ4HZMGv17JesuOxnfAy9Nh2 6ElEidn9mUmswv8vD1LRu9TTNNNhfNlHrfZw56XA8aZgMZzPgFW1lEKRIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL51KLWPqqlZOtkoeVqPX216LfpnMB8GA1UdIwQY MBaAFPJVUccEezv5AxgIwhuDebm4YMQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGxWUnh3UjdPX2tER0FqQ0c0TjV1YmhneENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xNTI1ZTgtNDkyYi00ZWE0LTkyMTIt NzU1NTRkZDQ0YjZkLzEvOGxWUnh3UjdPX2tER0FqQ0c0TjV1YmhneENZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8xNTI1ZTgtNDkyYi00ZWE0LTkyMTItNzU1NTRkZDQ0YjZk LzEvOGxWUnh3UjdPX2tER0FqQ0c0TjV1YmhneENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCr2q0Fq S3wil/IZwGrFLlne/W2Hmil4G00st+tL3s7sQDioyc8BN4fLFlMA7mYpL0bHc6BM 7S+3VgDT/SgEKG3t3CIXgbTCOBtU6HsPJsF5Wd29m34ZnFaPMLo7LMuUpaTe+LAT PVso2bn35O+5y79dEgvM83YRakQg8jyLG72LTA3l1rr/I9hV/zTWl/R1cOhPhlj7 NhXFcybm1BMI86Z6lAq/f4BtB1JY5NN/erblk/l0rR/s0X1bwJRzz1INWmfz5HAS zDG+obfHdZzJrdq00m8yZX8fanzrAh7C4525bbo6ZBShsWqTiTfdYYLBLB67rEag jGiiBjlEp36oiw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:58 2025 by rpki-client