This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft File: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft (raw, json) Hash identifier: E5/u0KPn5Y20cfQgpX2hbzCFdixeYFWsWQnsbo4gHGQ= Subject key identifier: 3B:D7:86:71:DA:6C:73:D5:BA:00:3B:03:AE:3E:21:24:50:DF:2A:BB Authority key identifier: F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78 Certificate issuer: /CN=f0ac0ce700b17d499e898ec7a14730405157c478 Certificate serial: 019AF46517A25D9AF45C5C49BBEEB0806A7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 16:00:57 +0000 Manifest this update: Sat 06 Dec 2025 16:00:57 +0000 Manifest next update: Sun 07 Dec 2025 16:00:57 +0000 Files and hashes: 1: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl (hash: UsTJc0NLjodw/v0J7sLrHIRRzfSQvH++B8IXEs3esnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:17:a2:5d:9a:f4:5c:5c:49:bb:ee:b0:80:6a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ac0ce700b17d499e898ec7a14730405157c478 Validity Not Before: Dec 6 16:00:57 2025 GMT Not After : Dec 7 16:00:57 2025 GMT Subject: CN=3bd78671da6c73d5ba003b03ae3e212450df2abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bf:6f:9f:c4:74:ae:a5:e9:b5:33:50:9f:65: 9c:8c:51:f8:d9:b5:10:3b:91:7b:f8:f6:a2:49:69: d7:af:eb:c3:0b:ff:01:e5:01:b3:9d:d4:6a:14:21: 96:3f:77:0a:ca:4d:b5:5b:0b:29:b7:9d:f2:93:21: f4:82:b1:78:8c:7f:d2:05:9b:41:43:ea:77:39:6f: 3f:d7:57:69:ce:65:75:9d:2b:85:98:83:3c:3d:f3: 0a:d1:c0:e6:ac:80:44:35:98:ca:29:d2:80:b2:5f: 90:57:96:2a:0e:2f:82:bc:2f:ff:e9:0b:4e:ae:49: 67:b9:7f:e7:f9:5e:2d:ab:e9:dc:6d:6c:c2:2a:df: 2f:39:f5:b7:31:a3:ec:fb:25:85:86:fb:4c:25:06: 81:1c:71:df:4a:f9:bf:e4:55:85:ff:db:76:d0:98: 4a:47:86:66:97:90:b6:33:fc:80:b4:68:a9:64:fe: b5:1e:ff:ef:f5:96:7a:e8:96:b5:4a:de:f5:1d:b5: 65:ed:67:07:97:fe:2f:1f:53:30:ce:78:7e:c0:2b: 68:dc:df:c0:3d:2d:63:6a:61:4d:17:aa:7a:27:44: 8d:c9:23:c4:7f:04:7c:02:9f:31:2a:33:d1:f1:90: fa:05:e0:14:13:95:b8:60:92:63:7e:00:86:79:47: 56:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D7:86:71:DA:6C:73:D5:BA:00:3B:03:AE:3E:21:24:50:DF:2A:BB X509v3 Authority Key Identifier: keyid:F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:97:68:98:fa:af:f4:c7:89:3e:d0:a7:f0:b9:28:ee:6b:fa: bb:24:e2:77:36:ff:e0:da:3d:96:aa:82:96:df:bd:c6:22:b7: 30:99:a7:66:66:76:8a:e7:da:29:69:1a:11:4a:b4:dd:6e:c7: 00:14:be:12:45:76:ac:2d:35:8d:e8:58:95:7c:85:ec:b6:9b: ce:6b:49:7c:e6:94:42:24:88:8b:bf:ec:f7:4d:e1:bf:c2:64: c2:cc:e4:d3:af:96:b0:eb:5c:e3:f5:85:fb:bf:64:67:07:02: 82:de:f0:ad:bb:e9:8e:af:5c:a5:1c:99:66:8c:4d:36:66:de: 40:dd:dc:1f:f6:f6:a9:36:5f:3c:66:5f:11:4d:91:b9:9c:28: a9:6c:6e:4d:8c:55:80:5f:0a:00:a3:1a:cc:d6:6f:d9:fb:83: 9d:e8:7c:1e:7e:29:b9:c0:5e:57:f7:a3:a3:e8:19:25:0b:f3: 3e:8d:96:92:89:be:16:8c:73:b6:8f:21:5b:8e:0e:9d:a4:36: 63:e5:b9:68:22:76:51:f7:a1:73:f6:df:21:61:7a:b9:83:83: f6:d0:81:75:0a:24:54:87:9a:c2:ee:65:78:2b:51:17:47:87: 7f:59:78:72:9e:98:7f:e0:61:04:82:c0:1a:6b:91:91:4e:d8: 19:fe:76:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZReiXZr0XFxJu+6wgGp8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYWMwY2U3MDBiMTdkNDk5ZTg5OGVjN2ExNDczMDQwNTE1 N2M0NzgwHhcNMjUxMjA2MTYwMDU3WhcNMjUxMjA3MTYwMDU3WjAzMTEwLwYDVQQD EygzYmQ3ODY3MWRhNmM3M2Q1YmEwMDNiMDNhZTNlMjEyNDUwZGYyYWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb9vn8R0rqXptTNQn2WcjFH42bUQ O5F7+PaiSWnXr+vDC/8B5QGzndRqFCGWP3cKyk21Wwspt53ykyH0grF4jH/SBZtB Q+p3OW8/11dpzmV1nSuFmIM8PfMK0cDmrIBENZjKKdKAsl+QV5YqDi+CvC//6QtO rklnuX/n+V4tq+ncbWzCKt8vOfW3MaPs+yWFhvtMJQaBHHHfSvm/5FWF/9t20JhK R4Zml5C2M/yAtGipZP61Hv/v9ZZ66Ja1St71HbVl7WcHl/4vH1Mwznh+wCto3N/A PS1jamFNF6p6J0SNySPEfwR8Ap8xKjPR8ZD6BeAUE5W4YJJjfgCGeUdWEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvXhnHabHPVugA7A64+ISRQ3yq7MB8GA1UdIwQY MBaAFPCsDOcAsX1JnomOx6FHMEBRV8R4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEt3TTV3Q3hmVW1laVk3SG9VY3dRRkZYeEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84ZmIyYTYtY2FlNS00ZjM5LWE4NTgt N2U0NmNjMzcwMWI5LzEvOEt3TTV3Q3hmVW1laVk3SG9VY3dRRkZYeEhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC84ZmIyYTYtY2FlNS00ZjM5LWE4NTgtN2U0NmNjMzcwMWI5 LzEvOEt3TTV3Q3hmVW1laVk3SG9VY3dRRkZYeEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpdomPqv 9MeJPtCn8Lko7mv6uyTidzb/4No9lqqClt+9xiK3MJmnZmZ2iufaKWkaEUq03W7H ABS+EkV2rC01jehYlXyF7LabzmtJfOaUQiSIi7/s903hv8Jkwszk06+WsOtc4/WF +79kZwcCgt7wrbvpjq9cpRyZZoxNNmbeQN3cH/b2qTZfPGZfEU2RuZwoqWxuTYxV gF8KAKMazNZv2fuDneh8Hn4pucBeV/ejo+gZJQvzPo2Wkom+Foxzto8hW44OnaQ2 Y+W5aCJ2Ufehc/bfIWF6uYOD9tCBdQokVIeawu5leCtRF0eHf1l4cp6Yf+BhBILA GmuRkU7YGf520A== -----END CERTIFICATE-----Generated at Sat Dec 6 19:05:28 2025 by rpki-client