This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft File: 8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft (raw, json) Hash identifier: SG2WwdQAZC5KVQzHWt44e+xoljXxVKiZ/5/5Kg6VWT4= Subject key identifier: C1:09:A0:35:EA:69:6A:EA:9B:18:BF:66:C6:69:3F:8A:8F:F8:B2:69 Authority key identifier: F0:59:4E:7A:31:DB:79:37:FA:B5:2F:CC:38:90:59:D3:45:1F:23:66 Certificate issuer: /CN=f0594e7a31db7937fab52fcc389059d3451f2366 Certificate serial: 019B08908B8EFB7D0FB4F99A208DA596D3CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft Manifest number: A5 Signing time: Wed 10 Dec 2025 14:00:49 +0000 Manifest this update: Wed 10 Dec 2025 14:00:49 +0000 Manifest next update: Thu 11 Dec 2025 14:00:49 +0000 Files and hashes: 1: 1725gUGQIpKhUhC6TOahnEdES40.roa (hash: gz+cyjfpqWkO2//cF11n4nopLq+bPFaAXZONiWW+enE=) 2: 8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl (hash: Q1XDg6GzQ9zMKqsS+GenX/pTTajxv66CW/lgTkmsLrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:90:8b:8e:fb:7d:0f:b4:f9:9a:20:8d:a5:96:d3:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0594e7a31db7937fab52fcc389059d3451f2366 Validity Not Before: Dec 10 14:00:49 2025 GMT Not After : Dec 11 14:00:49 2025 GMT Subject: CN=c109a035ea696aea9b18bf66c6693f8a8ff8b269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:60:81:4b:5e:67:8c:ba:e9:dd:49:03:91:dc: 64:89:9e:78:64:5a:5d:07:c4:0d:6e:02:d9:bd:8f: 22:6b:7c:75:92:6a:ab:cf:b6:af:ff:ff:18:8c:98: c9:37:8f:ce:c8:4b:c3:b2:4f:da:6d:15:71:ee:8f: ea:06:b8:5b:ee:ab:0a:10:67:98:1f:ae:96:33:98: c9:5a:5c:d5:9a:cd:a5:bd:a9:b4:3c:45:9e:39:d7: 07:a5:b1:a5:31:f5:eb:f9:50:f7:90:32:c4:e7:b3: 2b:ee:89:19:d5:72:f5:15:ec:ed:2d:56:a0:cd:ef: ee:52:b1:72:2e:bd:69:33:b1:30:33:6e:8d:22:61: dd:d5:f8:f8:cb:a5:68:79:b5:ee:6a:ca:92:65:d4: 9e:1c:a1:dd:6b:a3:36:1c:b6:aa:31:fe:72:db:46: ea:c0:60:92:d6:12:62:c1:34:47:de:0f:63:19:04: 8e:92:2c:09:8d:01:0e:f3:f0:9a:f5:df:0d:cc:84: 32:b1:4d:04:19:13:d1:6d:e6:8f:ca:e8:e3:77:ca: 9a:f3:35:0c:ef:2c:70:96:f3:07:a0:83:a6:85:13: b6:01:7f:94:20:8d:60:a8:3c:51:3f:96:b9:e6:d4: 7d:d2:b7:fb:78:13:a0:b6:a3:45:34:35:82:cd:54: 0d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:09:A0:35:EA:69:6A:EA:9B:18:BF:66:C6:69:3F:8A:8F:F8:B2:69 X509v3 Authority Key Identifier: keyid:F0:59:4E:7A:31:DB:79:37:FA:B5:2F:CC:38:90:59:D3:45:1F:23:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:1e:f6:d1:27:fe:3f:3f:88:fb:18:4a:93:73:73:ed:f3:81: 4e:2f:c7:26:84:b5:77:10:85:62:b2:04:f0:f2:20:56:21:91: 73:3a:f3:82:5b:12:6f:b0:17:0d:d1:58:cc:db:33:58:15:f3: ae:e3:e6:ba:8f:5e:3c:67:a6:53:55:ff:35:43:b2:6f:6d:1d: 7c:b6:07:2a:ea:ff:7a:45:a7:e1:3d:75:07:c0:d5:47:80:c6: dc:a8:b6:98:8a:ae:0e:0b:36:5e:90:ab:64:d6:a6:cc:27:55: 89:a4:1b:d5:be:ef:77:97:8b:e5:c5:c4:57:be:2c:ce:dd:53: 1e:7d:1e:87:45:bc:a5:c1:7d:31:53:af:74:60:1e:b7:34:43: bf:26:12:b6:c9:8e:72:55:ce:c2:1d:3b:1c:7e:c0:60:47:72: 3e:59:a9:bf:a3:31:54:ad:33:d2:07:97:90:ba:64:92:dd:34: fb:42:12:f1:f4:3a:e5:08:bd:e3:66:6e:9b:14:ac:09:da:69: a8:7d:ee:94:50:53:5d:e0:d8:ad:01:ad:0b:88:da:8b:7c:64: 03:5f:9e:a8:38:f6:34:a0:be:51:1a:5b:11:55:bc:1b:2e:3a: 32:06:13:7b:7c:70:be:cb:25:39:eb:d4:95:b5:4e:ec:35:6d: c3:c9:07:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIkIuO+30PtPmaII2lltPPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTk0ZTdhMzFkYjc5MzdmYWI1MmZjYzM4OTA1OWQzNDUx ZjIzNjYwHhcNMjUxMjEwMTQwMDQ5WhcNMjUxMjExMTQwMDQ5WjAzMTEwLwYDVQQD EyhjMTA5YTAzNWVhNjk2YWVhOWIxOGJmNjZjNjY5M2Y4YThmZjhiMjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWCBS15njLrp3UkDkdxkiZ54ZFpd B8QNbgLZvY8ia3x1kmqrz7av//8YjJjJN4/OyEvDsk/abRVx7o/qBrhb7qsKEGeY H66WM5jJWlzVms2lvam0PEWeOdcHpbGlMfXr+VD3kDLE57Mr7okZ1XL1FeztLVag ze/uUrFyLr1pM7EwM26NImHd1fj4y6VoebXuasqSZdSeHKHda6M2HLaqMf5y20bq wGCS1hJiwTRH3g9jGQSOkiwJjQEO8/Ca9d8NzIQysU0EGRPRbeaPyujjd8qa8zUM 7yxwlvMHoIOmhRO2AX+UII1gqDxRP5a55tR90rf7eBOgtqNFNDWCzVQNCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEJoDXqaWrqmxi/ZsZpP4qP+LJpMB8GA1UdIwQY MBaAFPBZTnox23k3+rUvzDiQWdNFHyNmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZsT2VqSGJlVGY2dFNfTU9KQlowMFVmSTJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xZDUxMzUtYjcxMi00MzFhLWEyOGIt YjU3ZjUwZjAwODA0LzEvOEZsT2VqSGJlVGY2dFNfTU9KQlowMFVmSTJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xZDUxMzUtYjcxMi00MzFhLWEyOGItYjU3ZjUwZjAwODA0 LzEvOEZsT2VqSGJlVGY2dFNfTU9KQlowMFVmSTJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARx720Sf+ Pz+I+xhKk3Nz7fOBTi/HJoS1dxCFYrIE8PIgViGRczrzglsSb7AXDdFYzNszWBXz ruPmuo9ePGemU1X/NUOyb20dfLYHKur/ekWn4T11B8DVR4DG3Ki2mIquDgs2XpCr ZNamzCdViaQb1b7vd5eL5cXEV74szt1THn0eh0W8pcF9MVOvdGAetzRDvyYStsmO clXOwh07HH7AYEdyPlmpv6MxVK0z0geXkLpkkt00+0IS8fQ65Qi942ZumxSsCdpp qH3ulFBTXeDYrQGtC4jai3xkA1+eqDj2NKC+URpbEVW8Gy46MgYTe3xwvsslOevU lbVO7DVtw8kHDQ== -----END CERTIFICATE-----Generated at Wed Dec 10 17:06:23 2025 by rpki-client