This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft File: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft (raw, json) Hash identifier: 4TVt1epWpy8WIEca8/kGn5vj7PmFqE15ZgHMTwUEt9I= Subject key identifier: BA:8D:A9:A2:47:B8:9C:7F:BA:B6:6D:DE:02:20:C7:FC:B0:E1:9C:35 Authority key identifier: F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0 Certificate issuer: /CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0 Certificate serial: 019AF276506D52F715955076145A8F41DAFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 07:00:31 +0000 Manifest this update: Sat 06 Dec 2025 07:00:31 +0000 Manifest next update: Sun 07 Dec 2025 07:00:31 +0000 Files and hashes: 1: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl (hash: Y80GBF0t9as75Pg0gUnuJeiDRY3fsOknKiJNbI5YwBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:50:6d:52:f7:15:95:50:76:14:5a:8f:41:da:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0 Validity Not Before: Dec 6 07:00:31 2025 GMT Not After : Dec 7 07:00:31 2025 GMT Subject: CN=ba8da9a247b89c7fbab66dde0220c7fcb0e19c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:78:33:5a:7f:e0:ea:57:06:5b:e9:c2:90:e1: 93:2f:0b:33:41:e1:b7:1a:6b:76:49:e2:34:9d:d4: 97:de:e5:09:19:f1:1e:1d:88:6e:fe:95:ac:8b:d6: 8d:06:57:b0:61:29:8b:20:7d:53:3a:fa:85:7a:8f: b1:e6:5f:18:c2:76:03:22:cc:6d:ca:c2:9f:66:ad: e1:e0:a1:c7:eb:36:2e:78:f9:b3:f5:0f:97:ef:86: 83:4d:11:1f:2d:09:05:38:2f:b1:94:d8:63:84:bb: f7:1e:2c:0f:cf:71:e0:3c:26:51:9f:3e:b4:a6:29: c9:a2:62:5d:81:6e:f7:8a:f7:19:11:69:ed:11:cf: 01:aa:f0:03:8f:85:04:40:f7:2c:38:da:bc:70:30: 3a:82:df:20:e6:87:9a:9c:8e:f1:cb:57:b9:af:00: 74:a4:ff:8e:74:82:eb:6d:3a:19:b9:1c:7e:e0:d7: a1:09:28:ee:3d:3b:41:81:3e:97:17:57:ae:e1:21: 07:d3:f5:53:f8:1c:0e:9b:f2:49:60:2d:64:85:5e: db:04:76:4f:08:39:98:e8:65:bc:5b:2d:d5:b3:db: ae:b9:35:a6:0e:83:99:7c:66:95:7d:61:ed:89:6a: 44:30:bd:dc:39:b8:09:22:37:0c:25:68:b1:64:69: cb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8D:A9:A2:47:B8:9C:7F:BA:B6:6D:DE:02:20:C7:FC:B0:E1:9C:35 X509v3 Authority Key Identifier: keyid:F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:67:4d:0f:c3:c0:e7:cc:d7:21:40:ab:55:90:5a:85:47:11: b4:80:bb:a6:1d:23:47:ba:38:8c:b7:1a:24:7d:34:fc:d2:7e: 68:36:c5:10:fb:65:41:0b:cc:11:57:5f:ca:88:7d:9f:f1:40: dc:e3:55:63:03:3c:46:ca:e8:f0:08:d0:be:79:ef:90:4b:50: cc:ee:34:60:aa:3f:47:ec:14:c3:a8:ef:cc:32:ae:e8:7d:a6: 1c:b8:c5:98:cc:24:5d:db:b3:7a:6c:5e:62:2d:17:52:dd:16: d1:e2:e8:c9:8a:7e:e1:59:13:19:c9:7b:62:68:ac:9c:d3:10: 78:3a:f4:ca:d2:14:b4:75:ac:5f:0e:02:5a:82:97:6c:cc:2b: dd:ca:1c:f6:a2:40:a5:9f:ad:91:10:fe:ba:f8:a2:f0:15:ff: 24:88:ae:0f:16:3f:89:ed:50:44:ab:c1:fd:f5:57:1c:25:06: 71:3c:18:9e:10:bd:bd:28:0a:8c:65:16:19:f6:8e:d3:85:62: b3:36:0d:6f:39:e0:3b:14:6b:ca:01:22:57:47:c4:cf:bb:12: bb:4b:89:18:f1:a6:ae:b9:25:7b:1c:b1:e5:2a:df:33:bc:58: ff:01:74:62:5b:a7:a6:94:90:e4:c9:70:d4:3c:bb:56:fc:8d: ec:43:96:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlBtUvcVlVB2FFqPQdr/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNDU0YWIzYzNlMDliNjU1Y2I0NzI1NTM5ZmY2ZTY5OTMx YzQ2YjAwHhcNMjUxMjA2MDcwMDMxWhcNMjUxMjA3MDcwMDMxWjAzMTEwLwYDVQQD EyhiYThkYTlhMjQ3Yjg5YzdmYmFiNjZkZGUwMjIwYzdmY2IwZTE5YzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03gzWn/g6lcGW+nCkOGTLwszQeG3 Gmt2SeI0ndSX3uUJGfEeHYhu/pWsi9aNBlewYSmLIH1TOvqFeo+x5l8YwnYDIsxt ysKfZq3h4KHH6zYuePmz9Q+X74aDTREfLQkFOC+xlNhjhLv3HiwPz3HgPCZRnz60 pinJomJdgW73ivcZEWntEc8BqvADj4UEQPcsONq8cDA6gt8g5oeanI7xy1e5rwB0 pP+OdILrbToZuRx+4NehCSjuPTtBgT6XF1eu4SEH0/VT+BwOm/JJYC1khV7bBHZP CDmY6GW8Wy3Vs9uuuTWmDoOZfGaVfWHtiWpEML3cObgJIjcMJWixZGnL5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqNqaJHuJx/urZt3gIgx/yw4Zw1MB8GA1UdIwQY MBaAFPFFSrPD4JtlXLRyVTn/bmmTHEawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFVWS3M4UGdtMlZjdEhKVk9mOXVhWk1jUnJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kMzFlYWItMzFlMS00OTY0LTk2MmUt ZTE1YmM5NjUwYWFiLzEvOFVWS3M4UGdtMlZjdEhKVk9mOXVhWk1jUnJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9kMzFlYWItMzFlMS00OTY0LTk2MmUtZTE1YmM5NjUwYWFi LzEvOFVWS3M4UGdtMlZjdEhKVk9mOXVhWk1jUnJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGdND8PA 58zXIUCrVZBahUcRtIC7ph0jR7o4jLcaJH00/NJ+aDbFEPtlQQvMEVdfyoh9n/FA 3ONVYwM8Rsro8AjQvnnvkEtQzO40YKo/R+wUw6jvzDKu6H2mHLjFmMwkXduzemxe Yi0XUt0W0eLoyYp+4VkTGcl7YmisnNMQeDr0ytIUtHWsXw4CWoKXbMwr3coc9qJA pZ+tkRD+uvii8BX/JIiuDxY/ie1QRKvB/fVXHCUGcTwYnhC9vSgKjGUWGfaO04Vi szYNbzngOxRrygEiV0fEz7sSu0uJGPGmrrklexyx5SrfM7xY/wF0YlunppSQ5Mlw 1Dy7VvyN7EOWWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:20 2025 by rpki-client