This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft File: 8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json) Hash identifier: OFp+nOkEcXOihMXe28hWSjnBZUGcy1ClcpDuGPLQrYU= Subject key identifier: 90:C4:7B:50:7C:9D:34:2B:D5:CA:68:3D:E6:47:1A:35:60:5E:4A:65 Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7 Certificate issuer: /CN=f1359ff10c1564421e974573ace1ba62333b82a7 Certificate serial: 019AF31BE38996BC2E71DE23777CE9808D21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft Manifest number: 13F7 Signing time: Sat 06 Dec 2025 10:01:22 +0000 Manifest this update: Sat 06 Dec 2025 10:01:22 +0000 Manifest next update: Sun 07 Dec 2025 10:01:22 +0000 Files and hashes: 1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: 9my5+oTW2UZt3pBZpjhAPxGzWrLv4qEfu13uTFiW+e4=) 2: xcycZms0_ZHCVQVtErEWcPT6uzM.roa (hash: LGvEW3RDqUd1ArWiz/8ADiBje4yqqRUes0HgBtn3AOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:e3:89:96:bc:2e:71:de:23:77:7c:e9:80:8d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7 Validity Not Before: Dec 6 10:01:22 2025 GMT Not After : Dec 7 10:01:22 2025 GMT Subject: CN=90c47b507c9d342bd5ca683de6471a35605e4a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6b:86:51:66:1f:ef:e3:3c:da:85:41:f4:8b: 7b:73:8b:0b:93:c9:5e:51:51:81:57:19:14:45:2f: bc:42:42:d9:37:a5:66:9b:d2:f7:12:ab:e3:bd:c8: 3f:c7:e7:67:8f:70:f9:64:ea:7b:c7:7e:53:04:cc: 74:f5:04:c2:88:e6:c5:dc:38:d6:e0:14:0b:b8:07: f1:d9:e7:97:b5:fa:6e:52:2a:5b:cd:0b:fc:ef:e5: c5:59:c2:e0:0d:71:3c:88:c3:34:9d:7e:e6:4a:f0: af:f1:61:70:40:71:ec:54:70:b4:8d:4e:1b:16:29: ee:e2:bb:3e:9a:aa:26:d8:7a:04:13:bc:08:4c:45: f5:d7:df:83:08:2a:ae:64:d0:e3:10:23:5c:28:32: 21:42:3c:fe:8a:c1:7d:56:31:92:62:48:d9:57:6a: fb:6a:0d:9e:7c:8f:28:57:ba:f2:cb:c6:97:1e:ed: d3:71:8f:44:0a:df:e1:f6:8b:ab:41:c4:a6:34:d8: ba:30:e7:1b:64:58:65:47:13:84:b9:f4:67:a7:f3: 82:72:a5:7c:ec:d1:6a:8c:05:30:b6:21:66:2c:f1: 28:87:96:96:2a:f6:b4:6d:42:95:5c:69:d2:ee:b1: 3b:02:74:41:02:72:96:7c:0b:70:2c:7c:95:06:67: 63:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C4:7B:50:7C:9D:34:2B:D5:CA:68:3D:E6:47:1A:35:60:5E:4A:65 X509v3 Authority Key Identifier: keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:08:2a:d5:c8:32:5f:83:c8:ee:1e:c8:d9:7c:8c:2b:d2:29: c3:14:97:e6:d6:f7:15:f7:ea:50:a1:fd:6b:6e:6b:72:a9:f3: a2:ec:ae:c1:13:2e:67:af:8f:a9:58:f7:0b:8e:75:38:bd:41: 52:58:8c:80:00:32:21:b3:88:97:af:e6:e1:67:13:00:da:ce: c9:ca:1a:d7:8f:dd:57:e3:47:e3:b1:79:c6:e5:eb:76:49:50: 72:af:4a:f0:9f:d9:d8:25:3f:0b:e1:0a:57:b3:7d:17:0b:f4: 83:18:a5:4f:41:17:26:a3:85:36:e1:82:55:02:1f:7d:48:69: 30:93:56:fd:1f:c6:88:6e:7c:b1:93:be:bf:f2:1a:2d:49:4a: 4a:39:87:25:10:fd:3e:28:2d:92:5e:a6:6c:e3:1b:dd:b3:40: e3:ef:fd:3e:3d:0c:8a:5c:95:3d:ec:72:15:b1:e1:ac:64:b0: 5d:b8:75:6f:8f:41:34:ee:e6:90:b5:af:67:4f:5d:9e:16:24: e7:e3:a1:d0:22:bb:9a:2d:69:2a:7f:16:97:2c:3d:0d:59:c8: 64:98:0a:aa:9e:94:4e:10:ce:c6:80:f9:34:82:36:13:34:18: cb:5d:37:56:3c:23:44:97:ab:41:4f:fd:14:eb:55:b6:83:d3: 25:93:c0:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+OJlrwucd4jd3zpgI0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzU5ZmYxMGMxNTY0NDIxZTk3NDU3M2FjZTFiYTYyMzMz YjgyYTcwHhcNMjUxMjA2MTAwMTIyWhcNMjUxMjA3MTAwMTIyWjAzMTEwLwYDVQQD Eyg5MGM0N2I1MDdjOWQzNDJiZDVjYTY4M2RlNjQ3MWEzNTYwNWU0YTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGuGUWYf7+M82oVB9It7c4sLk8le UVGBVxkURS+8QkLZN6Vmm9L3Eqvjvcg/x+dnj3D5ZOp7x35TBMx09QTCiObF3DjW 4BQLuAfx2eeXtfpuUipbzQv87+XFWcLgDXE8iMM0nX7mSvCv8WFwQHHsVHC0jU4b Finu4rs+mqom2HoEE7wITEX119+DCCquZNDjECNcKDIhQjz+isF9VjGSYkjZV2r7 ag2efI8oV7ryy8aXHu3TcY9ECt/h9ourQcSmNNi6MOcbZFhlRxOEufRnp/OCcqV8 7NFqjAUwtiFmLPEoh5aWKva0bUKVXGnS7rE7AnRBAnKWfAtwLHyVBmdjOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDEe1B8nTQr1cpoPeZHGjVgXkplMB8GA1UdIwQY MBaAFPE1n/EMFWRCHpdFc6zhumIzO4KnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mOGRmZjktNmRhYy00MzEzLTk5ODAt YWI0YmEzMzJmZTE1LzEvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9mOGRmZjktNmRhYy00MzEzLTk5ODAtYWI0YmEzMzJmZTE1 LzEvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQgq1cgy X4PI7h7I2XyMK9IpwxSX5tb3FffqUKH9a25rcqnzouyuwRMuZ6+PqVj3C451OL1B UliMgAAyIbOIl6/m4WcTANrOycoa14/dV+NH47F5xuXrdklQcq9K8J/Z2CU/C+EK V7N9Fwv0gxilT0EXJqOFNuGCVQIffUhpMJNW/R/GiG58sZO+v/IaLUlKSjmHJRD9 Pigtkl6mbOMb3bNA4+/9Pj0MilyVPexyFbHhrGSwXbh1b49BNO7mkLWvZ09dnhYk 5+Oh0CK7mi1pKn8Wlyw9DVnIZJgKqp6UThDOxoD5NII2EzQYy103VjwjRJerQU/9 FOtVtoPTJZPAIg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:34:20 2025 by rpki-client