This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft File: rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft (raw, json) Hash identifier: xkfPuVFFRaMV5zji2K2BCL35mI8uYxlPAPzgWAZDIc4= Subject key identifier: 78:89:0A:B4:7F:AC:82:E7:9D:B6:1F:AF:FE:27:C7:DD:FF:F2:46:81 Authority key identifier: AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D Certificate issuer: /CN=ae7f187c12782fc4d844762235993329c4563a0d Certificate serial: 019AF1644946CEB8A9CE09DF2AF6FE81D21D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft Manifest number: 0D7E Signing time: Sat 06 Dec 2025 02:01:12 +0000 Manifest this update: Sat 06 Dec 2025 02:01:12 +0000 Manifest next update: Sun 07 Dec 2025 02:01:12 +0000 Files and hashes: 1: 9SHpbhL3XuwxiKnoCroL_5tpXVo.roa (hash: xPrIpxk+JNMXsVLk++89joWnIkf6ad6w3ouFrsF8d/w=) 2: rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl (hash: KnX733GTPsNyB0XZIDyDTNPgDW8OMKF+o7odtw5Gkk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:49:46:ce:b8:a9:ce:09:df:2a:f6:fe:81:d2:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae7f187c12782fc4d844762235993329c4563a0d Validity Not Before: Dec 6 02:01:12 2025 GMT Not After : Dec 7 02:01:12 2025 GMT Subject: CN=78890ab47fac82e79db61faffe27c7ddfff24681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c9:7a:2e:f8:b5:c2:a0:92:f8:23:88:56:01: 9b:eb:91:e3:ad:e3:71:4f:cf:14:66:1e:2f:90:2c: 43:af:94:42:01:af:bc:90:af:58:48:06:10:e7:ef: 48:23:3e:e2:c3:05:c7:3b:a8:27:91:34:02:6d:3b: 7f:01:0c:31:b9:39:db:75:3d:dc:e9:12:7a:75:11: b9:21:76:db:5c:f6:1e:eb:63:07:74:8d:1d:b4:9f: f0:42:00:ee:7a:68:de:c5:b0:c5:5a:8a:a8:55:25: 32:65:87:2d:d4:5e:f1:60:e2:c9:b9:dc:01:17:53: 39:24:0f:e5:e9:a0:c6:b4:71:a8:78:1c:6d:60:ce: ca:28:60:8e:fb:1b:84:30:05:38:02:2c:dc:2f:2e: 90:9f:a4:00:d1:19:34:91:bf:90:87:82:c6:42:77: 09:e2:60:96:a8:73:13:96:cc:c9:ed:13:aa:1a:03: 4b:13:98:fb:b2:64:f0:9f:c5:e7:50:b7:6f:54:15: f9:09:85:44:1e:d9:59:58:02:2b:75:6e:de:d7:a6: 39:35:80:9b:dd:b4:3a:ac:77:99:65:f4:53:37:d3: 92:f3:5b:09:5e:dd:ce:31:0c:3d:05:16:c8:0d:7a: 4b:bc:69:f1:14:36:e9:17:fe:dc:b7:36:ca:c3:d0: b3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:89:0A:B4:7F:AC:82:E7:9D:B6:1F:AF:FE:27:C7:DD:FF:F2:46:81 X509v3 Authority Key Identifier: keyid:AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:fd:57:f5:cf:ba:b0:1a:0c:df:f0:f1:b1:e1:51:62:5b:f8: e9:4a:c9:bf:65:9d:fb:27:7d:a9:07:34:4c:61:5b:73:22:03: 4f:2e:84:a7:a9:60:1f:5c:07:df:da:77:7f:e2:8b:6c:36:bd: 8f:92:f3:c3:95:35:dc:8b:84:e5:7f:5f:20:17:a7:c2:da:85: a2:90:89:fc:55:9f:1e:81:a7:ba:5a:67:af:d8:b1:a1:fe:f5: e8:32:a1:51:57:0e:ac:24:9a:fe:d0:97:71:f7:0c:16:12:ac: 43:e6:4a:38:18:dc:1b:e8:b9:45:df:80:01:20:13:fa:d9:91: a1:f9:7c:c4:8d:4e:50:87:4e:62:58:1f:6c:66:b5:d1:2f:81: 93:dd:36:6c:71:c5:8e:8f:bd:a8:1e:d6:e0:57:e1:3d:45:48: 9f:be:28:ee:e7:c0:33:74:fa:72:3f:9b:93:5e:e2:3c:86:41: 6d:9b:f4:bb:14:34:f5:e9:35:f8:7e:1a:8c:de:c9:9b:11:5a: 08:2d:44:88:69:78:2d:0c:d6:9a:47:42:87:a6:27:a4:21:90: 27:76:e4:2d:ff:43:52:df:14:bd:8c:21:b1:bd:b8:ae:88:c0: 23:02:c7:e5:45:d6:59:bd:64:1e:de:ad:4a:9f:04:9c:99:bb: 2a:e3:0c:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZElGzripzgnfKvb+gdIdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlN2YxODdjMTI3ODJmYzRkODQ0NzYyMjM1OTkzMzI5YzQ1 NjNhMGQwHhcNMjUxMjA2MDIwMTEyWhcNMjUxMjA3MDIwMTEyWjAzMTEwLwYDVQQD Eyg3ODg5MGFiNDdmYWM4MmU3OWRiNjFmYWZmZTI3YzdkZGZmZjI0NjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ml6Lvi1wqCS+COIVgGb65HjreNx T88UZh4vkCxDr5RCAa+8kK9YSAYQ5+9IIz7iwwXHO6gnkTQCbTt/AQwxuTnbdT3c 6RJ6dRG5IXbbXPYe62MHdI0dtJ/wQgDuemjexbDFWoqoVSUyZYct1F7xYOLJudwB F1M5JA/l6aDGtHGoeBxtYM7KKGCO+xuEMAU4AizcLy6Qn6QA0Rk0kb+Qh4LGQncJ 4mCWqHMTlszJ7ROqGgNLE5j7smTwn8XnULdvVBX5CYVEHtlZWAIrdW7e16Y5NYCb 3bQ6rHeZZfRTN9OS81sJXt3OMQw9BRbIDXpLvGnxFDbpF/7ctzbKw9CzqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiJCrR/rILnnbYfr/4nx93/8kaBMB8GA1UdIwQY MBaAFK5/GHwSeC/E2ER2IjWZMynEVjoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm44WWZCSjRMOFRZUkhZaU5aa3pLY1JXT2cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jOGY2NDctZWQ3OS00MmQ5LThkZjYt MDU4Nzc2MDRhMDFkLzEvcm44WWZCSjRMOFRZUkhZaU5aa3pLY1JXT2cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jOGY2NDctZWQ3OS00MmQ5LThkZjYtMDU4Nzc2MDRhMDFk LzEvcm44WWZCSjRMOFRZUkhZaU5aa3pLY1JXT2cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/1X9c+6 sBoM3/DxseFRYlv46UrJv2Wd+yd9qQc0TGFbcyIDTy6Ep6lgH1wH39p3f+KLbDa9 j5Lzw5U13IuE5X9fIBenwtqFopCJ/FWfHoGnulpnr9ixof716DKhUVcOrCSa/tCX cfcMFhKsQ+ZKOBjcG+i5Rd+AASAT+tmRofl8xI1OUIdOYlgfbGa10S+Bk902bHHF jo+9qB7W4FfhPUVIn74o7ufAM3T6cj+bk17iPIZBbZv0uxQ09ek1+H4ajN7JmxFa CC1EiGl4LQzWmkdCh6YnpCGQJ3bkLf9DUt8UvYwhsb24rojAIwLH5UXWWb1kHt6t Sp8EnJm7KuMMLA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:32 2025 by rpki-client