This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft File: 8gLwqonAZ9ZjOLTVnSBSujmplEs.mft (raw, json) Hash identifier: pAGDEK+S5Ap90445pPCGmFzRHftmdEfwYCOgVo0FevI= Subject key identifier: BE:3C:F5:03:22:0B:6F:6F:B3:61:3D:C0:0A:1A:85:34:55:52:F5:6E Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B Certificate issuer: /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b Certificate serial: 019AF4656E24353738B891898CE8B9036462 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft Manifest number: 06C5 Signing time: Sat 06 Dec 2025 16:01:19 +0000 Manifest this update: Sat 06 Dec 2025 16:01:19 +0000 Manifest next update: Sun 07 Dec 2025 16:01:19 +0000 Files and hashes: 1: 8gLwqonAZ9ZjOLTVnSBSujmplEs.crl (hash: W+GwzQd8z5Dwy8cN2NgW7A7aydZCkOkoTqw9Op4sqI4=) 2: gxY3cqQ9AtbDjrB_-otpHb6Irb0.roa (hash: LD3l5OVkY9IZSD+ZJZMYqJis4oBCr+KMHwZEJzzuk0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:6e:24:35:37:38:b8:91:89:8c:e8:b9:03:64:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b Validity Not Before: Dec 6 16:01:19 2025 GMT Not After : Dec 7 16:01:19 2025 GMT Subject: CN=be3cf503220b6f6fb3613dc00a1a85345552f56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0a:ef:70:37:df:ad:42:18:e6:54:52:65:93: 37:b2:ae:87:a1:39:56:5c:38:8b:42:17:4e:d1:18: 10:bc:aa:82:eb:0f:ac:f0:a2:c8:b3:76:60:62:cc: 9c:91:c1:05:33:67:6b:18:10:2c:ac:59:99:1e:5f: c4:1e:dc:eb:f8:a3:98:ed:b0:7f:1c:f1:ee:14:62: 54:25:b1:51:71:f3:33:1b:12:e5:16:05:d0:4d:9b: 5a:5a:87:5a:f0:5d:6a:6b:58:77:dd:2c:37:f6:b3: 0d:c1:50:db:f7:41:91:99:38:04:4d:05:8d:9b:5e: ed:9a:08:83:f0:d2:5d:bf:07:3d:d7:55:a9:a3:cf: cc:10:0f:4d:44:25:63:d3:9c:82:f4:9b:91:04:be: 70:67:54:c2:4e:41:40:cc:6e:b6:bd:58:85:c0:18: be:93:69:7e:f7:3c:42:04:ea:76:19:4c:ae:15:39: 03:98:a9:c4:bb:08:cc:c8:91:c3:86:3c:51:f7:fa: 19:19:4b:9e:d1:ed:59:94:ae:f4:03:1e:d6:ef:6d: fb:1e:e6:4f:11:99:d5:a6:6f:88:41:08:21:a0:89: 05:ae:76:98:ca:cc:c6:3e:ff:57:0f:ab:a1:28:27: c4:cb:9a:73:4f:d4:11:37:08:3d:47:56:62:9a:85: ea:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3C:F5:03:22:0B:6F:6F:B3:61:3D:C0:0A:1A:85:34:55:52:F5:6E X509v3 Authority Key Identifier: keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:07:4b:f2:14:60:05:ea:5b:5a:d2:d9:2e:5e:a2:ea:95:08: d7:63:45:49:73:65:ea:0b:17:45:c4:c3:25:15:bb:30:cb:21: 29:15:f5:1b:45:78:9a:f0:f6:13:be:3b:df:59:3f:29:c9:5d: 98:89:e6:36:42:ab:dd:43:51:4e:89:da:50:2a:b3:32:63:65: 85:05:8b:71:8c:6d:25:84:2a:73:46:62:ba:c6:0c:9e:a6:60: 36:f0:bb:1f:20:a7:8e:ae:f8:2e:25:2e:4e:bf:db:ac:7c:e5: 8e:0d:9d:7a:2d:79:09:c1:8a:32:1b:f2:43:67:9f:70:67:32: c3:2e:85:38:46:4e:93:29:83:fc:df:1d:4f:f5:f7:92:aa:3e: 9b:bc:57:21:3f:c3:a0:21:7a:fe:d7:77:54:5f:9f:0a:d5:98: 0d:ca:31:38:8d:aa:d6:e0:a5:07:ab:79:18:02:73:f8:b4:65: 93:31:4f:03:52:89:0a:b8:8e:75:a1:a6:35:90:1f:75:3d:ab: ae:12:5f:b1:ea:1c:38:0c:30:8d:0d:c4:61:9b:fa:3c:77:a5: c8:f1:d9:6b:59:f9:45:f8:b5:ed:4d:c0:f6:7a:e0:b6:ae:e9: 3e:41:b4:de:8f:dc:92:d6:11:56:ec:2d:77:48:8c:aa:e3:dd: c4:2b:0c:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZW4kNTc4uJGJjOi5A2RiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMDJmMGFhODljMDY3ZDY2MzM4YjRkNTlkMjA1MmJhMzlh OTk0NGIwHhcNMjUxMjA2MTYwMTE5WhcNMjUxMjA3MTYwMTE5WjAzMTEwLwYDVQQD EyhiZTNjZjUwMzIyMGI2ZjZmYjM2MTNkYzAwYTFhODUzNDU1NTJmNTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApArvcDffrUIY5lRSZZM3sq6HoTlW XDiLQhdO0RgQvKqC6w+s8KLIs3ZgYsyckcEFM2drGBAsrFmZHl/EHtzr+KOY7bB/ HPHuFGJUJbFRcfMzGxLlFgXQTZtaWoda8F1qa1h33Sw39rMNwVDb90GRmTgETQWN m17tmgiD8NJdvwc911Wpo8/MEA9NRCVj05yC9JuRBL5wZ1TCTkFAzG62vViFwBi+ k2l+9zxCBOp2GUyuFTkDmKnEuwjMyJHDhjxR9/oZGUue0e1ZlK70Ax7W7237HuZP EZnVpm+IQQghoIkFrnaYyszGPv9XD6uhKCfEy5pzT9QRNwg9R1ZimoXq/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL489QMiC29vs2E9wAoahTRVUvVuMB8GA1UdIwQY MBaAFPIC8KqJwGfWYzi01Z0gUro5qZRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGIt ZjYyNTcwMGU4YTkwLzEvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGItZjYyNTcwMGU4YTkw LzEvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAdL8hRg BepbWtLZLl6i6pUI12NFSXNl6gsXRcTDJRW7MMshKRX1G0V4mvD2E74731k/Kcld mInmNkKr3UNRTonaUCqzMmNlhQWLcYxtJYQqc0ZiusYMnqZgNvC7HyCnjq74LiUu Tr/brHzljg2dei15CcGKMhvyQ2efcGcywy6FOEZOkymD/N8dT/X3kqo+m7xXIT/D oCF6/td3VF+fCtWYDcoxOI2q1uClB6t5GAJz+LRlkzFPA1KJCriOdaGmNZAfdT2r rhJfseocOAwwjQ3EYZv6PHelyPHZa1n5Rfi17U3A9nrgtq7pPkG03o/cktYRVuwt d0iMquPdxCsMNA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:43:32 2025 by rpki-client