This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft File: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft (raw, json) Hash identifier: I0RWb/4XJRacMJ348nB1Os2HmJU2SY87oMnVGa90JlM= Subject key identifier: C7:EB:8B:59:B9:B1:98:DE:FD:1F:55:36:94:3A:F0:4A:34:AF:55:76 Authority key identifier: F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC Certificate issuer: /CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc Certificate serial: 019AF50A785BF4BFCB42F4FB7A35A4D1B54B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft Manifest number: 03D3 Signing time: Sat 06 Dec 2025 19:01:35 +0000 Manifest this update: Sat 06 Dec 2025 19:01:35 +0000 Manifest next update: Sun 07 Dec 2025 19:01:35 +0000 Files and hashes: 1: 5706RB7xeG9S4d5Ob5hAT-sWDQM.roa (hash: 3YUiY2PHwBycE1YPX5AAcbWdNPxFb9hnL/xR1TAUp9s=) 2: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl (hash: bTRap3AMxjE9PDIODCaPoi2IM40m2tOStJGBDjnK30U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:78:5b:f4:bf:cb:42:f4:fb:7a:35:a4:d1:b5:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc Validity Not Before: Dec 6 19:01:35 2025 GMT Not After : Dec 7 19:01:35 2025 GMT Subject: CN=c7eb8b59b9b198defd1f5536943af04a34af5576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:05:8b:64:d9:34:43:dc:58:90:43:98:85:3f: 65:67:80:52:a3:cf:9f:ed:c5:b4:2b:19:6d:f8:63: 71:f9:4d:9a:aa:71:f9:0b:4f:94:3f:a9:89:70:74: f9:66:11:99:31:b8:2d:d8:89:49:ad:e3:8d:f2:b4: 9b:5d:32:21:21:e1:7f:35:07:93:64:65:bd:7b:df: 1f:4a:17:f0:9e:11:d5:8e:83:e7:99:91:0b:9a:4e: 2f:14:85:b0:29:0f:f2:3d:9f:9e:08:49:ca:c8:ea: a4:a7:94:5f:71:dc:68:de:dd:56:6c:32:e9:08:46: b9:b1:6c:4a:19:f9:ed:65:c1:b7:9c:17:6f:02:f3: 4f:90:36:b4:21:32:46:3d:a7:64:d6:6c:bd:39:d4: f8:b3:bd:3f:4c:f1:49:fb:07:e9:70:27:9a:3d:3f: 1b:9e:a1:42:7e:39:df:99:c2:ae:b4:94:c4:8b:af: 68:a4:d8:4a:49:79:0a:b4:af:69:59:eb:61:3f:c3: fa:64:2b:c3:eb:8b:09:42:c7:26:99:61:b1:13:9e: d8:86:3d:0f:cc:71:c3:28:2c:8c:7f:52:51:cc:59: 1f:92:58:1b:2d:ff:ae:6a:f1:68:6b:10:c4:d9:90: 18:ca:8e:2c:52:78:11:65:55:2e:53:71:84:5f:71: cb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EB:8B:59:B9:B1:98:DE:FD:1F:55:36:94:3A:F0:4A:34:AF:55:76 X509v3 Authority Key Identifier: keyid:F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e2:4a:7a:e2:f4:9d:07:33:a6:01:7a:70:2f:44:a0:80:d8: 2a:61:b9:db:c6:3e:65:e5:14:26:46:e0:8f:1d:ec:05:57:21: fa:1c:c7:b1:65:ac:03:ee:f8:5c:6e:b4:e0:61:fb:0e:6f:4e: ac:ec:a9:c4:bf:8d:75:c8:f6:9c:ea:44:59:db:62:a2:4f:fb: 40:52:a3:b4:18:2b:a6:5b:ab:c5:e9:73:57:d8:c7:42:36:b3: 60:9c:62:e6:da:1a:db:d3:da:52:96:f7:d0:30:19:26:d2:53: ac:a3:6c:0f:2f:f7:54:d3:1e:6e:55:98:81:78:22:de:5e:bb: fe:98:0e:88:5f:4f:57:35:c3:be:d8:7f:95:80:d0:98:1b:3b: 5e:7e:e9:13:51:87:8a:98:3a:cf:5e:f9:cb:2a:55:78:d3:62: 1d:85:aa:42:0c:0d:46:df:52:d0:7c:49:8a:98:66:e7:83:dd: 18:78:5f:2b:9a:5f:d6:82:1b:5f:40:12:7e:eb:94:c8:20:95: a0:bc:d2:04:c0:98:9f:2c:59:94:79:bc:4f:bc:1b:40:a5:33: d9:b3:06:44:71:d5:80:d3:4d:97:e3:4a:71:70:61:ec:dd:bb: de:87:f5:e8:4a:fb:0b:f4:54:cf:fc:63:30:fc:49:8d:ac:ee: e4:84:08:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cnhb9L/LQvT7ejWk0bVLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMWZmYjU0Y2FjN2Y1YjU3Njg1NjllNDE5N2Q0MWQ3NDQ2 YmYxZmMwHhcNMjUxMjA2MTkwMTM1WhcNMjUxMjA3MTkwMTM1WjAzMTEwLwYDVQQD EyhjN2ViOGI1OWI5YjE5OGRlZmQxZjU1MzY5NDNhZjA0YTM0YWY1NTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQWLZNk0Q9xYkEOYhT9lZ4BSo8+f 7cW0Kxlt+GNx+U2aqnH5C0+UP6mJcHT5ZhGZMbgt2IlJreON8rSbXTIhIeF/NQeT ZGW9e98fShfwnhHVjoPnmZELmk4vFIWwKQ/yPZ+eCEnKyOqkp5Rfcdxo3t1WbDLp CEa5sWxKGfntZcG3nBdvAvNPkDa0ITJGPadk1my9OdT4s70/TPFJ+wfpcCeaPT8b nqFCfjnfmcKutJTEi69opNhKSXkKtK9pWethP8P6ZCvD64sJQscmmWGxE57Yhj0P zHHDKCyMf1JRzFkfklgbLf+uavFoaxDE2ZAYyo4sUngRZVUuU3GEX3HLOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfri1m5sZje/R9VNpQ68Eo0r1V2MB8GA1UdIwQY MBaAFPMf+1TKx/W1doVp5Bl9QddEa/H8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHhfN1ZNckg5YlYyaFdua0dYMUIxMFJyOGZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS82YzM3MDItMTE3OC00Y2JkLThlYmEt YzAzODRmZTFiMDA3LzEvOHhfN1ZNckg5YlYyaFdua0dYMUIxMFJyOGZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS82YzM3MDItMTE3OC00Y2JkLThlYmEtYzAzODRmZTFiMDA3 LzEvOHhfN1ZNckg5YlYyaFdua0dYMUIxMFJyOGZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHuJKeuL0 nQczpgF6cC9EoIDYKmG528Y+ZeUUJkbgjx3sBVch+hzHsWWsA+74XG604GH7Dm9O rOypxL+Ndcj2nOpEWdtiok/7QFKjtBgrplurxelzV9jHQjazYJxi5toa29PaUpb3 0DAZJtJTrKNsDy/3VNMeblWYgXgi3l67/pgOiF9PVzXDvth/lYDQmBs7Xn7pE1GH ipg6z175yypVeNNiHYWqQgwNRt9S0HxJiphm54PdGHhfK5pf1oIbX0ASfuuUyCCV oLzSBMCYnyxZlHm8T7wbQKUz2bMGRHHVgNNNl+NKcXBh7N273of16Er7C/RUz/xj MPxJjazu5IQIgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:04:31 2025 by rpki-client