This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft File: 8spAIO_uYcMQasn-znnHpo9xqcs.mft (raw, json) Hash identifier: ChMlYzo5PYp53Wy+umX3yz50DsGR3AZG6DkEimGSiyw= Subject key identifier: 63:DB:2B:85:0B:AB:38:F0:CC:4F:3C:0A:49:90:0D:6B:F2:2D:37:4F Authority key identifier: F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB Certificate issuer: /CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb Certificate serial: 019AF4D28DBDB12DC0036CED137EDE528D82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft Manifest number: 0B3F Signing time: Sat 06 Dec 2025 18:00:30 +0000 Manifest this update: Sat 06 Dec 2025 18:00:30 +0000 Manifest next update: Sun 07 Dec 2025 18:00:30 +0000 Files and hashes: 1: 8spAIO_uYcMQasn-znnHpo9xqcs.crl (hash: yK9YfTa6SpVegjFSf7slZKDEkcvTPOCUVb27MAxEeYI=) 2: qQhJwJzvyO7AKVxT0Cih5AUrQns.roa (hash: BItfqfpG3F7hqQ1NJHEpQWVKKNNg5IgOl83auOyNXFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:8d:bd:b1:2d:c0:03:6c:ed:13:7e:de:52:8d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb Validity Not Before: Dec 6 18:00:30 2025 GMT Not After : Dec 7 18:00:30 2025 GMT Subject: CN=63db2b850bab38f0cc4f3c0a49900d6bf22d374f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ef:1d:42:3d:77:1f:f5:38:12:7a:b1:3a:de: 6c:83:2e:aa:00:5b:3d:8a:10:61:6a:50:36:82:22: 52:46:cf:cb:88:9b:dc:ad:64:6d:19:ac:c8:bf:aa: 47:04:6d:8c:60:00:82:00:45:35:df:b9:75:de:eb: ce:ed:d4:e4:8f:ac:13:fe:77:03:e0:93:09:98:9d: 93:ad:e3:b1:fb:ab:28:1d:82:ef:d7:99:37:e2:e2: 4d:20:24:18:23:d6:f4:8c:c9:66:68:86:2a:e8:15: ca:8d:b7:de:38:51:89:c0:69:5e:ad:82:9b:e3:e9: d1:30:2d:6f:c5:95:fa:6a:39:7f:25:b6:83:d4:eb: 16:dc:6c:33:30:4c:5c:b6:d3:fa:e7:e4:4a:07:8b: 6c:b9:3b:80:f9:10:52:22:2f:ce:40:2f:a7:6a:ce: ff:c7:9e:cd:1b:e6:73:37:a2:e9:8e:4f:80:42:7f: 9f:26:9e:9f:06:b5:1b:4b:e4:56:21:c9:cf:82:6e: 9a:41:02:28:14:ce:ff:cf:8b:a5:0a:3f:77:e3:31: f8:3c:f1:3d:08:e7:ae:e0:e6:df:6a:5c:97:9f:c9: dc:df:e0:cd:75:5f:92:c8:ab:02:f0:3d:c0:b7:39: 71:e5:37:e3:24:6a:cf:7f:b8:d9:e4:fb:50:d9:e2: a3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DB:2B:85:0B:AB:38:F0:CC:4F:3C:0A:49:90:0D:6B:F2:2D:37:4F X509v3 Authority Key Identifier: keyid:F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:34:c1:fb:9d:19:d6:62:6e:89:b7:c3:8a:a5:35:f3:d2:aa: c3:0d:7a:1a:0e:08:1d:db:e9:dc:61:dc:e7:40:3b:3d:5a:27: 1c:92:cf:f6:1e:c2:48:76:40:60:6e:be:37:30:7d:31:81:09: ed:d4:d8:dd:b0:a2:11:2d:95:ac:9e:cc:33:d6:52:7e:99:f4: 01:69:f5:2f:67:bf:90:64:02:7a:c2:f0:b2:b6:91:12:04:64: 16:95:3a:00:ee:78:3a:f4:0b:a0:88:46:a1:10:de:c7:c7:00: 4f:eb:0e:36:1a:83:e3:c2:43:51:1f:97:55:e7:11:85:e9:46: 59:ed:89:bc:ca:2a:8a:42:23:7a:10:c0:a0:cc:01:02:c0:c8: 8f:a8:26:18:7a:26:0f:a9:0c:a7:82:8c:d7:c3:a4:89:98:5a: 3b:b5:72:6e:22:0c:0b:e6:09:ec:a9:6c:63:10:e7:52:60:98: 4d:1e:09:f5:e9:24:44:e6:9f:4d:de:f0:f7:b4:b9:56:e2:d0: 12:31:8a:a9:b2:d2:ab:64:61:f2:92:81:d2:70:af:a1:83:88: b3:3e:c4:f8:09:61:33:a3:45:69:ee:ec:24:65:52:3a:c0:6a: ca:8a:f4:72:49:59:b6:7c:de:3d:8d:0b:df:c3:26:74:07:c2: eb:21:09:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00o29sS3AA2ztE37eUo2CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyY2E0MDIwZWZlZTYxYzMxMDZhYzlmZWNlNzljN2E2OGY3 MWE5Y2IwHhcNMjUxMjA2MTgwMDMwWhcNMjUxMjA3MTgwMDMwWjAzMTEwLwYDVQQD Eyg2M2RiMmI4NTBiYWIzOGYwY2M0ZjNjMGE0OTkwMGQ2YmYyMmQzNzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3e8dQj13H/U4EnqxOt5sgy6qAFs9 ihBhalA2giJSRs/LiJvcrWRtGazIv6pHBG2MYACCAEU137l13uvO7dTkj6wT/ncD 4JMJmJ2TreOx+6soHYLv15k34uJNICQYI9b0jMlmaIYq6BXKjbfeOFGJwGlerYKb 4+nRMC1vxZX6ajl/JbaD1OsW3GwzMExcttP65+RKB4tsuTuA+RBSIi/OQC+nas7/ x57NG+ZzN6Lpjk+AQn+fJp6fBrUbS+RWIcnPgm6aQQIoFM7/z4ulCj934zH4PPE9 COeu4ObfalyXn8nc3+DNdV+SyKsC8D3Atzlx5TfjJGrPf7jZ5PtQ2eKjgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPbK4ULqzjwzE88CkmQDWvyLTdPMB8GA1UdIwQY MBaAFPLKQCDv7mHDEGrJ/s55x6aPcanLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHNwQUlPX3VZY01RYXNuLXpubkhwbzl4cWNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS82OGQzNDgtYWI2NS00MTVmLTk3NTEt Y2ExZmJmN2JiOGM4LzEvOHNwQUlPX3VZY01RYXNuLXpubkhwbzl4cWNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS82OGQzNDgtYWI2NS00MTVmLTk3NTEtY2ExZmJmN2JiOGM4 LzEvOHNwQUlPX3VZY01RYXNuLXpubkhwbzl4cWNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjTB+50Z 1mJuibfDiqU189Kqww16Gg4IHdvp3GHc50A7PVonHJLP9h7CSHZAYG6+NzB9MYEJ 7dTY3bCiES2VrJ7MM9ZSfpn0AWn1L2e/kGQCesLwsraREgRkFpU6AO54OvQLoIhG oRDex8cAT+sONhqD48JDUR+XVecRhelGWe2JvMoqikIjehDAoMwBAsDIj6gmGHom D6kMp4KM18OkiZhaO7VybiIMC+YJ7KlsYxDnUmCYTR4J9ekkROafTd7w97S5VuLQ EjGKqbLSq2Rh8pKB0nCvoYOIsz7E+AlhM6NFae7sJGVSOsBqyor0cklZtnzePY0L 38MmdAfC6yEJ/A== -----END CERTIFICATE-----Generated at Sat Dec 6 23:16:13 2025 by rpki-client