This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json) Hash identifier: i2V/F3beNsNa/miHuoYetPbvRRY4fAK/emzK+M6CFIY= Subject key identifier: 21:8C:53:AB:C0:F0:5A:07:62:A9:10:AD:B7:D2:7A:6B:3D:90:CD:71 Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b Certificate serial: 019AF0BF340716903256A9A4C5AB802C51BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft Manifest number: 0BE0 Signing time: Fri 05 Dec 2025 23:00:53 +0000 Manifest this update: Fri 05 Dec 2025 23:00:53 +0000 Manifest next update: Sat 06 Dec 2025 23:00:53 +0000 Files and hashes: 1: 2Utz6EvNmTYHORm-GQMKm69p8WI.roa (hash: j7FVQ06WFgxEJj//G5Co8Dizh+fdctkzSaSmR5/2mVM=) 2: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: i87WyW35fe8pY3dg4MST+PmbFoI9OK8DUkkyKeKbm6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:34:07:16:90:32:56:a9:a4:c5:ab:80:2c:51:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b Validity Not Before: Dec 5 23:00:53 2025 GMT Not After : Dec 6 23:00:53 2025 GMT Subject: CN=218c53abc0f05a0762a910adb7d27a6b3d90cd71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:69:1e:c8:90:c9:85:42:93:18:f5:7c:ee:39: 1b:6f:17:08:b1:7f:16:86:01:8a:fb:b2:42:df:8f: 32:ab:de:e3:0e:57:fa:46:90:dd:d2:67:00:2d:69: 7e:ce:9d:7b:51:93:23:8f:a7:b3:ef:5e:a2:39:ab: 34:6d:29:96:ab:16:ae:5e:3e:7c:dc:01:fd:ab:23: 6f:be:d9:1e:bb:8d:6e:da:84:33:47:94:b6:8e:4b: 1e:b9:5f:53:6b:2e:16:c5:e4:9b:fd:ae:cd:93:95: 3e:8c:71:ef:15:26:66:b8:7c:5d:21:20:bb:71:c9: db:b1:cf:73:a5:d5:45:27:22:f2:81:f2:80:f0:51: 65:ff:44:3d:8a:5a:31:48:59:4c:8a:ce:64:2c:69: 91:d6:b7:9a:da:61:2c:f3:2f:bd:c0:7c:d2:c2:00: ce:01:36:2c:8c:f7:c5:b9:2b:5a:d7:47:04:bf:b2: 36:65:cc:48:e3:ae:e1:1f:47:2c:c5:71:9a:5c:3f: b8:ba:4c:72:5d:9a:20:f0:1b:b7:03:84:ff:0b:86: 7c:9e:46:ee:81:19:fd:6c:4c:17:c3:21:2c:c8:cb: cd:5b:a7:08:e9:62:8d:5b:c6:b4:f0:96:68:cb:6a: 05:43:76:35:66:9c:90:1e:a3:be:14:00:94:c1:1f: c3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8C:53:AB:C0:F0:5A:07:62:A9:10:AD:B7:D2:7A:6B:3D:90:CD:71 X509v3 Authority Key Identifier: keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:09:f9:cf:92:52:18:96:06:f7:ad:ed:77:2f:18:2e:31:db: 26:22:eb:65:ea:35:e0:b6:b9:a4:c0:cf:c3:0d:97:48:9a:ec: b1:b4:f4:6b:50:d5:11:82:cf:6d:ac:7a:60:f6:a9:de:bc:72: 5a:e1:91:93:44:57:b5:cd:51:e6:61:e5:e4:75:fd:72:68:89: ba:02:eb:9b:e8:ce:8d:11:d2:64:0d:fa:f5:ff:cb:23:f5:34: a0:27:de:5b:1f:f2:94:15:f4:46:2e:1a:0e:e8:74:e3:9d:53: 14:15:01:bb:f6:6e:b1:d1:bb:4c:a7:b7:b3:c0:40:93:f5:3e: 0d:71:b8:aa:3b:e5:1e:7b:7a:9d:be:08:72:89:7a:66:a5:20: 25:1c:00:7b:36:e8:c8:cd:cc:39:6d:ad:e2:21:eb:b2:1d:91: 31:65:d3:51:1e:f4:9f:9f:db:22:9f:6d:a4:3e:c0:76:d6:1c: f6:85:13:98:2a:5e:7b:84:42:e4:11:2c:46:07:05:28:f7:19: a2:f1:86:0b:03:25:53:59:7c:db:b3:57:93:e5:f5:09:01:31: 64:c6:12:fd:7e:19:4d:bb:b4:d1:95:77:9d:24:ba:69:b9:c4: b6:48:f3:cd:9f:93:34:17:42:de:95:03:e3:39:3d:cb:70:f0: aa:e5:0a:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzQHFpAyVqmkxauALFG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZGE2NzEzNWI3MzdjYTlkMmRmZDdiOTdmZTU5NzhiOGYz MDBkNmIwHhcNMjUxMjA1MjMwMDUzWhcNMjUxMjA2MjMwMDUzWjAzMTEwLwYDVQQD EygyMThjNTNhYmMwZjA1YTA3NjJhOTEwYWRiN2QyN2E2YjNkOTBjZDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2keyJDJhUKTGPV87jkbbxcIsX8W hgGK+7JC348yq97jDlf6RpDd0mcALWl+zp17UZMjj6ez716iOas0bSmWqxauXj58 3AH9qyNvvtkeu41u2oQzR5S2jkseuV9Tay4WxeSb/a7Nk5U+jHHvFSZmuHxdISC7 ccnbsc9zpdVFJyLygfKA8FFl/0Q9iloxSFlMis5kLGmR1rea2mEs8y+9wHzSwgDO ATYsjPfFuSta10cEv7I2ZcxI467hH0csxXGaXD+4ukxyXZog8Bu3A4T/C4Z8nkbu gRn9bEwXwyEsyMvNW6cI6WKNW8a08JZoy2oFQ3Y1ZpyQHqO+FACUwR/DBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGMU6vA8FoHYqkQrbfSems9kM1xMB8GA1UdIwQY MBaAFPHaZxNbc3yp0t/XuX/ll4uPMA1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hMmNjYjEtYTcyOC00ZjA0LTk2NDEt ZmMxMTJhZTYzZWE0LzEvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9hMmNjYjEtYTcyOC00ZjA0LTk2NDEtZmMxMTJhZTYzZWE0 LzEvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAn5z5JS GJYG963tdy8YLjHbJiLrZeo14La5pMDPww2XSJrssbT0a1DVEYLPbax6YPap3rxy WuGRk0RXtc1R5mHl5HX9cmiJugLrm+jOjRHSZA369f/LI/U0oCfeWx/ylBX0Ri4a Duh0451TFBUBu/ZusdG7TKe3s8BAk/U+DXG4qjvlHnt6nb4Icol6ZqUgJRwAezbo yM3MOW2t4iHrsh2RMWXTUR70n5/bIp9tpD7AdtYc9oUTmCpee4RC5BEsRgcFKPcZ ovGGCwMlU1l827NXk+X1CQExZMYS/X4ZTbu00ZV3nSS6abnEtkjzzZ+TNBdC3pUD 4zk9y3DwquUKCA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:54 2025 by rpki-client