This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft File: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft (raw, json) Hash identifier: RmLeS0bIqAhA5OYBzIRlYVjuGJ6kC0OjHAJ0aMnP/zs= Subject key identifier: 0A:5F:25:B8:BC:99:0F:79:84:83:70:26:41:79:2B:09:3D:A5:99:87 Authority key identifier: F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78 Certificate issuer: /CN=f1f5e0181c4bbae5c090ab159d06562f1322e278 Certificate serial: 019B3F7EF667CB388F6317F50356DE711E6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft Manifest number: 0A42 Signing time: Sun 21 Dec 2025 06:00:43 +0000 Manifest this update: Sun 21 Dec 2025 06:00:43 +0000 Manifest next update: Mon 22 Dec 2025 06:00:43 +0000 Files and hashes: 1: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl (hash: GW8idoITQUngmyUZTaxYIsL9ESxaWZqMxYgGdY1EP0o=) 2: UroSMBJ-dWGGRFh5Y1mFEYghmuA.roa (hash: m8pCii9ZrFUBgw1JUoFjV1fAPuVi2H0sk6feFoafD2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:f6:67:cb:38:8f:63:17:f5:03:56:de:71:1e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f5e0181c4bbae5c090ab159d06562f1322e278 Validity Not Before: Dec 21 06:00:43 2025 GMT Not After : Dec 22 06:00:43 2025 GMT Subject: CN=0a5f25b8bc990f798483702641792b093da59987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b2:ec:d2:d8:7d:d9:3e:6d:6e:02:0b:d9:86: 9e:30:03:03:c1:fd:29:ab:2b:1c:18:f2:74:56:15: c0:9c:6e:37:9e:15:4c:80:98:ef:76:52:e3:60:85: 21:72:f9:d2:69:a0:d9:a8:a8:86:a6:16:4a:30:9e: 23:71:89:cc:25:16:8c:5e:73:ab:2f:f6:53:a0:4a: 3f:b0:2b:ce:9f:84:07:8f:0e:37:54:6d:44:e1:77: f7:6b:5e:0f:3d:ec:6b:62:4c:1a:1d:6c:d6:72:c8: 98:20:10:c6:d0:73:b4:61:19:0b:f9:e5:cf:08:40: 73:e4:2e:fa:6c:1c:e3:61:d5:a6:20:a5:e0:6f:8a: 99:6d:59:fe:4f:eb:28:d1:8e:d5:f0:68:5c:48:44: 45:48:1a:76:cf:f1:7f:b0:94:44:85:0a:f0:1c:a2: b3:af:6c:47:d3:d7:5a:0c:0e:8c:e5:2d:88:2d:04: 10:ae:0b:36:3a:ae:46:15:ad:b6:62:91:ff:45:7d: 82:8b:61:ac:bc:0c:c6:ae:0b:b6:80:b1:e2:50:ab: 64:39:eb:2d:77:dd:93:b4:07:11:29:cd:11:b0:4a: 2c:48:52:8b:0a:e9:e9:26:17:5b:be:57:a2:fe:57: c1:83:d0:cc:dc:ac:3e:16:1f:5d:02:2b:d7:c8:b4: 9d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5F:25:B8:BC:99:0F:79:84:83:70:26:41:79:2B:09:3D:A5:99:87 X509v3 Authority Key Identifier: keyid:F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:77:17:28:56:e2:d5:4a:03:29:03:c9:04:b7:36:b1:af:13: 88:f2:ee:1c:2c:fa:c7:38:28:8c:55:fa:d1:4f:36:62:82:7c: c5:12:64:a2:12:e3:18:8d:cf:e4:f6:2a:13:77:62:66:61:f2: 9b:a4:d2:71:23:69:be:13:27:74:9a:9f:4f:11:b9:87:b8:d8: 9c:10:20:52:18:7c:51:c4:1b:d2:9e:a6:60:87:d1:47:fa:08: c5:dc:67:0d:df:d9:d7:a0:8e:f0:bf:d6:85:b8:cd:48:c9:18: a3:5a:f5:15:da:b6:33:8d:e4:c9:ee:e8:fe:44:da:47:f2:1e: e2:c1:a1:aa:0f:63:8e:7a:10:3e:2d:eb:ff:29:4c:1c:ca:4e: 65:c7:b7:17:ad:fb:12:b2:5b:01:e6:cd:75:82:36:de:41:1e: 80:bf:38:9a:62:9e:17:05:30:57:ac:64:64:93:85:5e:1f:b0: df:05:b6:63:31:8b:5a:fc:a0:da:12:c8:c9:6f:57:ea:45:02: 98:66:97:5c:05:53:5d:29:32:b7:43:75:83:fe:d2:07:af:b4: f5:aa:c4:a8:54:b4:2c:ac:2e:c0:a4:e9:f0:ab:83:9b:fa:47: 83:e6:02:c5:50:59:1c:59:77:f1:91:ca:b8:39:bc:43:b7:6b: 5d:75:71:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fvZnyziPYxf1A1becR5sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjVlMDE4MWM0YmJhZTVjMDkwYWIxNTlkMDY1NjJmMTMy MmUyNzgwHhcNMjUxMjIxMDYwMDQzWhcNMjUxMjIyMDYwMDQzWjAzMTEwLwYDVQQD EygwYTVmMjViOGJjOTkwZjc5ODQ4MzcwMjY0MTc5MmIwOTNkYTU5OTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLLs0th92T5tbgIL2YaeMAMDwf0p qyscGPJ0VhXAnG43nhVMgJjvdlLjYIUhcvnSaaDZqKiGphZKMJ4jcYnMJRaMXnOr L/ZToEo/sCvOn4QHjw43VG1E4Xf3a14PPexrYkwaHWzWcsiYIBDG0HO0YRkL+eXP CEBz5C76bBzjYdWmIKXgb4qZbVn+T+so0Y7V8GhcSERFSBp2z/F/sJREhQrwHKKz r2xH09daDA6M5S2ILQQQrgs2Oq5GFa22YpH/RX2Ci2GsvAzGrgu2gLHiUKtkOest d92TtAcRKc0RsEosSFKLCunpJhdbvlei/lfBg9DM3Kw+Fh9dAivXyLSdWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApfJbi8mQ95hINwJkF5Kwk9pZmHMB8GA1UdIwQY MBaAFPH14BgcS7rlwJCrFZ0GVi8TIuJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yOTQ2ODMtNTc0Ny00ZWExLWI3N2Mt OWJlYmY3ZGNjMWE2LzEvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yOTQ2ODMtNTc0Ny00ZWExLWI3N2MtOWJlYmY3ZGNjMWE2 LzEvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXcXKFbi 1UoDKQPJBLc2sa8TiPLuHCz6xzgojFX60U82YoJ8xRJkohLjGI3P5PYqE3diZmHy m6TScSNpvhMndJqfTxG5h7jYnBAgUhh8UcQb0p6mYIfRR/oIxdxnDd/Z16CO8L/W hbjNSMkYo1r1Fdq2M43kye7o/kTaR/Ie4sGhqg9jjnoQPi3r/ylMHMpOZce3F637 ErJbAebNdYI23kEegL84mmKeFwUwV6xkZJOFXh+w3wW2YzGLWvyg2hLIyW9X6kUC mGaXXAVTXSkyt0N1g/7SB6+09arEqFS0LKwuwKTp8KuDm/pHg+YCxVBZHFl38ZHK uDm8Q7drXXVxpg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:08:33 2025 by rpki-client