This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft File: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft (raw, json) Hash identifier: eVMTL4EEbLyrkYSrFneYlRUOMS1ippnKcS8RvRlrznE= Subject key identifier: F7:DA:99:9B:6A:82:3A:07:B4:FE:54:7D:D9:5D:8B:B9:35:E8:45:37 Authority key identifier: F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27 Certificate issuer: /CN=f1307479f991b5043b7d37f7f8fd90466a2abf27 Certificate serial: 019AF23F92F914F2259A489F80AC03830584 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft Manifest number: 0906 Signing time: Sat 06 Dec 2025 06:00:43 +0000 Manifest this update: Sat 06 Dec 2025 06:00:43 +0000 Manifest next update: Sun 07 Dec 2025 06:00:43 +0000 Files and hashes: 1: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl (hash: AQ1vi1CoEDMzbxoJBGRQXg4hE1vUh19Di7ECi/U06Bg=) 2: DReP9bc0zwfbsr8Nie7Lz--WV3I.roa (hash: bjq88usQ48nTatb5B4QsLmgQZv99AHE50C/OVUr97Og=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:92:f9:14:f2:25:9a:48:9f:80:ac:03:83:05:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1307479f991b5043b7d37f7f8fd90466a2abf27 Validity Not Before: Dec 6 06:00:43 2025 GMT Not After : Dec 7 06:00:43 2025 GMT Subject: CN=f7da999b6a823a07b4fe547dd95d8bb935e84537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0b:61:da:0c:2e:c4:8e:d1:eb:c7:e5:8a:28: 15:40:71:b2:fe:8b:0d:26:f4:93:19:7e:61:09:fd: 54:35:4c:90:ba:46:af:a0:29:ec:41:8a:55:0b:d7: f3:b2:a4:7f:17:e3:85:15:5d:3d:71:d3:49:76:9b: 77:be:68:72:d5:c9:50:bb:d4:2c:31:7e:10:93:4e: 95:9f:65:26:f2:a0:1f:6a:8c:fe:9c:93:d6:72:ad: 10:a1:28:29:e1:bb:5d:48:59:fc:ab:f6:96:1a:e0: 69:1e:e0:8c:a2:2f:48:d8:e5:05:43:3d:40:83:e9: 3e:da:d1:52:44:48:d3:7a:c3:dd:93:01:9e:17:17: 5b:27:bb:07:c4:16:85:30:61:f6:b4:f6:f2:39:10: 54:b2:7d:10:23:21:6a:06:31:7b:3d:b8:65:3d:95: 92:94:36:8a:04:29:fd:58:b3:b4:63:67:36:5c:0e: eb:48:51:64:c9:ea:b3:78:20:f5:1c:96:f4:24:59: b5:4a:16:26:0a:73:6d:e7:1e:d9:93:9d:c0:7a:ec: cf:58:b7:92:ed:67:09:82:11:d7:6b:01:a1:c6:96: 06:c3:c6:78:b3:d1:e6:52:eb:11:26:30:1e:59:49: 09:cc:9f:92:2c:0d:a3:58:c7:c5:dd:bf:95:b5:fe: 11:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DA:99:9B:6A:82:3A:07:B4:FE:54:7D:D9:5D:8B:B9:35:E8:45:37 X509v3 Authority Key Identifier: keyid:F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:74:cf:71:57:99:e5:b7:0e:de:e4:8a:39:5a:17:fe:7f:7e: 14:42:7a:34:51:89:d1:12:44:ed:54:77:a0:8e:25:41:2c:6b: ca:eb:53:28:e2:57:18:e5:47:d5:9b:c0:96:6a:c6:83:60:19: 25:de:4f:72:67:a5:04:b1:85:81:0f:27:0d:9c:63:b9:b8:01: fd:99:bd:77:38:24:4e:5b:e1:3a:7a:f5:5b:1e:08:25:1c:49: 5f:47:3a:c1:43:9c:08:40:75:d6:d3:b3:04:a1:49:bb:fb:97: b1:44:67:13:94:14:ea:cf:93:51:6d:68:08:ed:a7:a3:8a:23: 0d:23:aa:7d:6d:93:b5:dd:e3:6c:86:7f:76:89:a7:1f:70:45: 00:d9:25:17:fa:d3:b2:25:38:d2:be:53:58:94:3d:40:29:86: ee:bc:76:7f:dc:5c:82:d0:29:4a:5e:96:be:2f:d7:ec:b3:cd: f9:3f:38:28:a2:b2:40:f3:49:b0:27:02:43:4e:25:a0:2e:09: e2:d1:dc:d2:3b:c4:2f:19:3d:10:1b:de:7d:ea:b2:ac:a0:6c: 9e:80:a8:b6:e4:70:22:7f:62:03:42:ae:fd:1a:9d:f4:ba:b3: dc:2c:d7:c2:da:39:2d:a6:de:c7:37:e6:b3:50:07:bc:88:91: 7d:cb:be:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5L5FPIlmkifgKwDgwWEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzA3NDc5Zjk5MWI1MDQzYjdkMzdmN2Y4ZmQ5MDQ2NmEy YWJmMjcwHhcNMjUxMjA2MDYwMDQzWhcNMjUxMjA3MDYwMDQzWjAzMTEwLwYDVQQD EyhmN2RhOTk5YjZhODIzYTA3YjRmZTU0N2RkOTVkOGJiOTM1ZTg0NTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Ath2gwuxI7R68fliigVQHGy/osN JvSTGX5hCf1UNUyQukavoCnsQYpVC9fzsqR/F+OFFV09cdNJdpt3vmhy1clQu9Qs MX4Qk06Vn2Um8qAfaoz+nJPWcq0QoSgp4btdSFn8q/aWGuBpHuCMoi9I2OUFQz1A g+k+2tFSREjTesPdkwGeFxdbJ7sHxBaFMGH2tPbyORBUsn0QIyFqBjF7PbhlPZWS lDaKBCn9WLO0Y2c2XA7rSFFkyeqzeCD1HJb0JFm1ShYmCnNt5x7Zk53AeuzPWLeS 7WcJghHXawGhxpYGw8Z4s9HmUusRJjAeWUkJzJ+SLA2jWMfF3b+Vtf4RZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfamZtqgjoHtP5Ufdldi7k16EU3MB8GA1UdIwQY MBaAFPEwdHn5kbUEO3039/j9kEZqKr8nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRCMGVmbVJ0UVE3ZlRmMy1QMlFSbW9xdnljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy81NGQ0NDUtYTMwNy00OTg3LThiNjgt YjZhYTBiODkyMGU1LzEvOFRCMGVmbVJ0UVE3ZlRmMy1QMlFSbW9xdnljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy81NGQ0NDUtYTMwNy00OTg3LThiNjgtYjZhYTBiODkyMGU1 LzEvOFRCMGVmbVJ0UVE3ZlRmMy1QMlFSbW9xdnljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHTPcVeZ 5bcO3uSKOVoX/n9+FEJ6NFGJ0RJE7VR3oI4lQSxryutTKOJXGOVH1ZvAlmrGg2AZ Jd5PcmelBLGFgQ8nDZxjubgB/Zm9dzgkTlvhOnr1Wx4IJRxJX0c6wUOcCEB11tOz BKFJu/uXsURnE5QU6s+TUW1oCO2no4ojDSOqfW2Ttd3jbIZ/domnH3BFANklF/rT siU40r5TWJQ9QCmG7rx2f9xcgtApSl6Wvi/X7LPN+T84KKKyQPNJsCcCQ04loC4J 4tHc0jvELxk9EBvefeqyrKBsnoCotuRwIn9iA0Ku/Rqd9Lqz3CzXwto5Labexzfm s1AHvIiRfcu+Ug== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:49 2025 by rpki-client