This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft File: g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft (raw, json) Hash identifier: sJhtlqvyEHFzr4uKPiK+KBng+dfhKHekf+rEw6uulps= Subject key identifier: 5F:F7:2C:F2:19:3D:DB:A2:9C:C0:CD:0C:0F:EF:41:38:19:DD:90:3E Authority key identifier: 83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6 Certificate issuer: /CN=83c8d01caf2b0751d035c537566f45627925e4f6 Certificate serial: 019AF50A378F4D3A2941F19A33333BE05C2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft Manifest number: 12A8 Signing time: Sat 06 Dec 2025 19:01:18 +0000 Manifest this update: Sat 06 Dec 2025 19:01:18 +0000 Manifest next update: Sun 07 Dec 2025 19:01:18 +0000 Files and hashes: 1: J4HW2mYS6aU6LfQRgOlYRDbLp5k.roa (hash: Bt4aDKGWyvEeRSoxrjAjHWSOknnKJY9L9kMvMSuInRo=) 2: g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl (hash: Os3xqesI9h3usfayoR5h0M57t3/1YQ7pSpMzsLfRBKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:37:8f:4d:3a:29:41:f1:9a:33:33:3b:e0:5c:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83c8d01caf2b0751d035c537566f45627925e4f6 Validity Not Before: Dec 6 19:01:18 2025 GMT Not After : Dec 7 19:01:18 2025 GMT Subject: CN=5ff72cf2193ddba29cc0cd0c0fef413819dd903e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ea:e6:df:2b:e9:23:2e:d8:ca:0c:b7:2a:fe: 80:69:9c:0f:da:3a:4e:87:aa:95:3b:ac:2b:9a:21: 73:ad:7f:f1:7c:2d:71:03:c3:b2:fb:d3:a8:8d:84: c9:cc:a5:02:79:a4:09:25:3b:2c:72:e6:5c:2b:f6: 8f:20:e2:3a:34:19:69:68:30:25:f7:e2:e5:c5:3b: aa:fd:95:72:59:61:57:53:bc:df:51:cb:c2:35:4a: a5:03:8b:c5:6e:2c:c8:c2:a2:c5:bc:9b:7b:49:56: f1:eb:78:e8:64:6c:40:06:30:f5:c5:96:76:c7:6c: 3a:5e:d9:03:6d:39:a1:34:73:6b:1e:87:6c:3a:d1: d5:19:8a:8e:bb:92:8d:2a:fe:4f:ad:8a:08:09:77: 12:33:f2:6e:1e:3c:c1:52:d4:b9:f0:37:57:6c:c1: 04:61:02:39:b8:fe:49:10:00:e5:98:ab:b3:61:ec: ef:ff:c6:a2:ea:ce:7c:02:88:f1:ca:2c:63:8e:5c: 41:48:3c:03:47:a2:25:27:cd:ec:23:00:95:00:d2: 7a:e4:24:0a:b9:1d:a8:98:7c:31:ee:2b:61:f6:80: 8b:1d:e6:4a:df:7c:4b:1a:36:a8:73:4b:72:b7:18: 5d:eb:dc:4e:2f:46:f3:55:ca:b8:74:51:c6:fd:58: 43:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F7:2C:F2:19:3D:DB:A2:9C:C0:CD:0C:0F:EF:41:38:19:DD:90:3E X509v3 Authority Key Identifier: keyid:83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:8e:cf:12:2e:9e:2d:ba:23:4d:4c:f6:5c:11:e4:56:74:c9: bf:33:71:64:9b:94:27:f0:e3:0d:1a:ee:0a:9c:4a:0b:6f:48: 30:eb:54:57:6e:84:86:d0:7b:84:fc:d0:45:46:b8:1f:fb:69: e5:ce:8f:44:6d:f4:d5:ec:24:0f:39:63:66:4f:fa:ca:bb:f8: dd:38:c1:8c:27:a5:24:eb:ff:fc:8f:ec:d6:d4:11:03:b2:1c: ba:91:fa:b7:a8:fb:16:36:87:e8:fe:3f:79:be:6d:df:36:7d: 19:f2:a0:98:ff:b4:3c:66:fc:87:95:4a:76:68:a2:14:30:7e: 72:c2:38:9f:b5:16:e7:15:d9:d6:db:9b:a3:c5:ac:11:80:17: c5:d2:84:bd:d5:11:ec:ca:ad:4c:d3:9c:22:0f:10:0a:c8:e2: ee:d8:8a:47:d1:c8:09:b7:38:ce:a0:ee:59:fb:44:97:0b:74: 55:e4:25:89:ae:3b:96:da:65:63:4f:4a:47:43:5b:52:dd:3a: 68:d5:5d:97:db:73:c1:67:ad:86:2c:fc:33:d4:44:c1:dc:86: 5e:6f:06:98:5d:49:90:14:67:7e:66:33:d0:1a:f7:a1:a4:88: 8e:63:7c:02:ec:9f:0c:ed:95:e4:26:3e:74:65:75:3e:8b:84: 3e:72:e8:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CjePTTopQfGaMzM74FwtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYzhkMDFjYWYyYjA3NTFkMDM1YzUzNzU2NmY0NTYyNzky NWU0ZjYwHhcNMjUxMjA2MTkwMTE4WhcNMjUxMjA3MTkwMTE4WjAzMTEwLwYDVQQD Eyg1ZmY3MmNmMjE5M2RkYmEyOWNjMGNkMGMwZmVmNDEzODE5ZGQ5MDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzurm3yvpIy7Yygy3Kv6AaZwP2jpO h6qVO6wrmiFzrX/xfC1xA8Oy+9OojYTJzKUCeaQJJTsscuZcK/aPIOI6NBlpaDAl 9+LlxTuq/ZVyWWFXU7zfUcvCNUqlA4vFbizIwqLFvJt7SVbx63joZGxABjD1xZZ2 x2w6XtkDbTmhNHNrHodsOtHVGYqOu5KNKv5PrYoICXcSM/JuHjzBUtS58DdXbMEE YQI5uP5JEADlmKuzYezv/8ai6s58AojxyixjjlxBSDwDR6IlJ83sIwCVANJ65CQK uR2omHwx7ith9oCLHeZK33xLGjaoc0tytxhd69xOL0bzVcq4dFHG/VhDnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/3LPIZPduinMDNDA/vQTgZ3ZA+MB8GA1UdIwQY MBaAFIPI0ByvKwdR0DXFN1ZvRWJ5JeT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzhqUUhLOHJCMUhRTmNVM1ZtOUZZbmtsNVBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jZmE3YzMtZjBjOC00NjIyLThhNDct OWFiMjZiMjY2YWE3LzEvZzhqUUhLOHJCMUhRTmNVM1ZtOUZZbmtsNVBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jZmE3YzMtZjBjOC00NjIyLThhNDctOWFiMjZiMjY2YWE3 LzEvZzhqUUhLOHJCMUhRTmNVM1ZtOUZZbmtsNVBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn47PEi6e LbojTUz2XBHkVnTJvzNxZJuUJ/DjDRruCpxKC29IMOtUV26EhtB7hPzQRUa4H/tp 5c6PRG301ewkDzljZk/6yrv43TjBjCelJOv//I/s1tQRA7IcupH6t6j7FjaH6P4/ eb5t3zZ9GfKgmP+0PGb8h5VKdmiiFDB+csI4n7UW5xXZ1tubo8WsEYAXxdKEvdUR 7MqtTNOcIg8QCsji7tiKR9HICbc4zqDuWftElwt0VeQlia47ltplY09KR0NbUt06 aNVdl9tzwWethiz8M9REwdyGXm8GmF1JkBRnfmYz0Br3oaSIjmN8AuyfDO2V5CY+ dGV1PouEPnLoEw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:02:19 2025 by rpki-client