This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft File: _s8oKCHaV19okXZHzz4YmPnQpio.mft (raw, json) Hash identifier: dWFMI8Jl25G5yVYTGcTrgeNfMFe2kBtLOCvFGlwbndw= Subject key identifier: 77:F5:4C:CB:1B:EB:D4:BF:E2:C3:9E:26:1D:80:20:7E:56:24:1C:B6 Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A Certificate issuer: /CN=fecf282821da575f68917647cf3e1898f9d0a62a Certificate serial: 019AF164851CD6E5C84C7714CDDBDD6C21EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:01:27 +0000 Manifest this update: Sat 06 Dec 2025 02:01:27 +0000 Manifest next update: Sun 07 Dec 2025 02:01:27 +0000 Files and hashes: 1: 2OXGBjO85npyAkFnRouh_UBk1Hs.roa (hash: HbPy+YRVvuPyiRQMlka5FfjRj4FCj/zQuaXQr9znzdU=) 2: _s8oKCHaV19okXZHzz4YmPnQpio.crl (hash: aydB0HIdeO7mG7WuKEIzzRkWYyYn20hTMObmjfs4fdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:85:1c:d6:e5:c8:4c:77:14:cd:db:dd:6c:21:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a Validity Not Before: Dec 6 02:01:27 2025 GMT Not After : Dec 7 02:01:27 2025 GMT Subject: CN=77f54ccb1bebd4bfe2c39e261d80207e56241cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b8:b9:9e:c0:da:6b:30:ea:2f:f8:d9:3f:79: 01:43:f1:76:72:6b:7f:57:58:4e:09:da:29:ca:82: 03:b4:49:f6:cd:04:0e:77:7d:0f:38:09:e1:e8:c9: a2:48:54:b3:48:4b:e4:e4:a1:70:61:b5:a2:98:dc: ad:b8:89:44:3e:6f:7c:e4:4a:4a:23:cf:50:61:30: ce:ce:e7:12:94:f9:81:58:0a:b3:8f:35:66:ff:2d: ce:c3:03:86:4d:6c:22:29:43:49:f0:e6:68:6a:02: 38:2c:6c:81:ff:d1:18:ad:78:33:bf:0f:48:1c:d9: f2:86:0a:32:ea:0d:1a:d4:83:d0:59:39:33:6b:ad: 14:dd:fa:94:ec:ac:0d:ce:9e:9e:13:83:be:bd:b8: d3:fc:f5:6c:d1:c5:c2:ee:e7:cb:56:9e:32:d1:5f: eb:63:67:46:8c:94:f5:26:82:c7:2d:40:e4:eb:cc: d3:5c:6c:97:97:79:dd:c6:37:7b:b9:89:02:d3:fc: 9e:40:ca:1a:6f:62:a2:a1:96:da:35:e3:94:1b:4a: 6c:60:eb:00:5f:79:c8:93:0a:2d:82:78:fc:55:66: fd:e9:50:63:ff:95:6d:17:b0:95:20:04:1c:66:0c: 4a:2f:3c:e6:a1:c3:fc:c4:ae:f5:c1:29:96:f5:de: 41:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F5:4C:CB:1B:EB:D4:BF:E2:C3:9E:26:1D:80:20:7E:56:24:1C:B6 X509v3 Authority Key Identifier: keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:bf:cf:72:f9:55:73:54:69:15:ae:6a:6f:3a:e6:b3:00:76: 3e:d4:c1:45:95:94:00:95:68:d2:48:b2:c3:1f:74:81:e8:c5: 0f:c8:79:34:d7:64:64:82:e4:9c:71:e6:05:20:14:6d:3c:05: 97:50:74:82:b1:9f:66:94:a0:b1:32:fe:af:b5:39:50:4a:55: 70:0e:2b:65:38:08:cc:72:3a:b6:ff:09:28:bd:25:a4:69:67: 0e:73:c2:09:bb:7e:fa:47:d6:d7:7c:bd:bb:92:6e:e2:eb:4e: c9:49:d8:4c:29:28:11:25:68:50:a8:1f:f8:42:67:6a:13:53: fa:1a:1f:3c:88:0e:50:1d:10:36:7f:a0:db:c3:42:01:74:3c: 8a:0c:b6:03:27:62:9f:b8:fd:91:13:af:df:fd:1e:a7:3f:f3: 72:15:5e:cf:67:e4:97:9f:44:59:aa:6e:fe:18:07:60:8d:ba: 32:f2:dc:3f:30:f8:24:6d:a8:e0:01:9b:68:52:be:55:6a:ae: 60:d4:c5:86:fb:44:82:46:ed:e3:48:84:d9:24:9c:2d:51:cc: de:14:2e:b2:80:36:61:df:c2:88:38:90:9f:f2:39:c1:13:0a: 91:3a:33:f3:7c:c1:d5:78:50:99:a5:80:8d:d3:72:59:ef:8e: 56:21:13:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIUc1uXITHcUzdvdbCHqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlY2YyODI4MjFkYTU3NWY2ODkxNzY0N2NmM2UxODk4Zjlk MGE2MmEwHhcNMjUxMjA2MDIwMTI3WhcNMjUxMjA3MDIwMTI3WjAzMTEwLwYDVQQD Eyg3N2Y1NGNjYjFiZWJkNGJmZTJjMzllMjYxZDgwMjA3ZTU2MjQxY2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLi5nsDaazDqL/jZP3kBQ/F2cmt/ V1hOCdopyoIDtEn2zQQOd30POAnh6MmiSFSzSEvk5KFwYbWimNytuIlEPm985EpK I89QYTDOzucSlPmBWAqzjzVm/y3OwwOGTWwiKUNJ8OZoagI4LGyB/9EYrXgzvw9I HNnyhgoy6g0a1IPQWTkza60U3fqU7KwNzp6eE4O+vbjT/PVs0cXC7ufLVp4y0V/r Y2dGjJT1JoLHLUDk68zTXGyXl3ndxjd7uYkC0/yeQMoab2KioZbaNeOUG0psYOsA X3nIkwotgnj8VWb96VBj/5VtF7CVIAQcZgxKLzzmocP8xK71wSmW9d5BjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHf1TMsb69S/4sOeJh2AIH5WJBy2MB8GA1UdIwQY MBaAFP7PKCgh2ldfaJF2R88+GJj50KYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3M4b0tDSGFWMTlva1haSHp6NFltUG5RcGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yODg2MjgtMjAzOS00MDg1LWEwMDYt MDYwY2Q5YzkyZjI2LzEvX3M4b0tDSGFWMTlva1haSHp6NFltUG5RcGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8yODg2MjgtMjAzOS00MDg1LWEwMDYtMDYwY2Q5YzkyZjI2 LzEvX3M4b0tDSGFWMTlva1haSHp6NFltUG5RcGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALr/PcvlV c1RpFa5qbzrmswB2PtTBRZWUAJVo0kiywx90gejFD8h5NNdkZILknHHmBSAUbTwF l1B0grGfZpSgsTL+r7U5UEpVcA4rZTgIzHI6tv8JKL0lpGlnDnPCCbt++kfW13y9 u5Ju4utOyUnYTCkoESVoUKgf+EJnahNT+hofPIgOUB0QNn+g28NCAXQ8igy2Aydi n7j9kROv3/0epz/zchVez2fkl59EWapu/hgHYI26MvLcPzD4JG2o4AGbaFK+VWqu YNTFhvtEgkbt40iE2SScLVHM3hQusoA2Yd/CiDiQn/I5wRMKkToz83zB1XhQmaWA jdNyWe+OViET+A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:13 2025 by rpki-client