This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft File: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json) Hash identifier: TVjml6jlSy1AQQQL40VUBzh0INtOTfuXD28LaITv7/8= Subject key identifier: C6:B1:55:F0:20:05:59:0B:5C:14:1A:B8:97:3B:7C:76:03:C3:DE:AE Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4 Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4 Certificate serial: 019AF31D472DBC82B5CF46872C2A2D20D86A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft Manifest number: 0E59 Signing time: Sat 06 Dec 2025 10:02:53 +0000 Manifest this update: Sat 06 Dec 2025 10:02:53 +0000 Manifest next update: Sun 07 Dec 2025 10:02:53 +0000 Files and hashes: 1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: 0jgKMkypuoznvdN13bBs2BRzN936KayD5AW+4Bi2r8E=) 2: oQ6iu5R4Fpm0Yjxuw1qLXncI4SY.roa (hash: H/akZoh4Ps4IHkjkrhcdXyi2oc0+hPspNWAd57bgzLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:47:2d:bc:82:b5:cf:46:87:2c:2a:2d:20:d8:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4 Validity Not Before: Dec 6 10:02:53 2025 GMT Not After : Dec 7 10:02:53 2025 GMT Subject: CN=c6b155f02005590b5c141ab8973b7c7603c3deae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:8d:8e:ef:bd:22:ba:a8:76:d4:38:47:9f: 7b:11:fe:54:ef:f7:ee:29:d2:8d:cc:c2:27:e9:d4: ee:31:5a:14:9f:1e:24:7e:1f:3a:39:8b:e7:d8:89: 87:27:fd:d3:7c:55:8d:57:2e:c9:65:de:18:a2:02: e5:a0:b7:6c:15:44:7e:16:cd:b4:e3:2a:c0:cf:47: 4c:7a:57:a8:13:0f:88:b5:f5:26:86:e7:80:d2:fa: c4:8a:00:63:eb:5a:9e:f7:a3:e9:f6:94:0b:2d:ba: 62:a6:9e:bb:76:79:4f:49:4c:34:e7:a9:cd:6c:91: 69:b8:b7:85:c4:9a:6d:24:04:0e:8c:e7:5c:78:2b: 65:3d:d5:f5:a3:17:cf:fb:22:84:9d:8c:04:4f:dd: 69:ab:c1:5f:01:f7:75:8d:c7:74:ec:b8:9c:8d:3d: e5:75:ab:49:59:32:36:cb:79:99:ea:a6:75:f4:00: 88:90:aa:c1:18:e8:72:e5:e3:36:53:51:48:a2:35: 64:fa:24:8b:50:5c:44:f6:8e:17:f4:06:45:a4:d6: 74:d1:f0:91:9e:fd:6c:b3:04:2b:fd:5a:94:3d:88: e6:a4:b6:1a:6c:2a:16:b3:5a:f9:e5:1a:66:c6:2c: e2:74:fe:43:fb:a6:ed:f8:7a:86:72:e4:7e:5c:82: 8e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B1:55:F0:20:05:59:0B:5C:14:1A:B8:97:3B:7C:76:03:C3:DE:AE X509v3 Authority Key Identifier: keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:c9:33:53:35:cf:f6:a1:6b:ac:b9:52:c1:b1:89:c7:bb:4d: 95:eb:f1:7b:08:62:9b:e0:82:d2:7d:4b:70:27:35:c1:95:79: b9:8b:1f:3f:76:4b:b0:84:2f:c8:b4:de:51:d5:0d:bd:9a:7a: b7:82:76:cf:67:6b:8c:cc:0b:9a:53:26:c7:ea:15:c8:6f:3f: 14:c6:5c:be:5d:eb:19:50:ab:6e:8c:1e:e0:a4:99:07:ca:c1: 46:c3:c4:dc:5b:e0:0d:84:da:28:80:df:5a:40:44:df:c7:78: 92:b3:36:7b:0f:57:7f:d6:c7:d5:ac:50:da:e4:22:94:2c:48: a4:0a:8f:24:49:3a:f2:0b:79:39:a9:87:ae:d2:1c:00:4e:53: 83:85:0c:9e:bf:ea:69:74:d4:16:04:3d:a8:1d:99:09:c1:7f: fc:76:c1:65:51:a2:ac:70:16:e8:87:d8:ba:74:2b:a5:85:cd: 54:ad:e4:22:de:8a:5e:f9:f3:26:47:92:eb:99:ce:a4:92:aa: 36:70:1e:ec:e9:3c:57:5b:08:22:56:07:b4:59:22:cc:fc:45: 93:db:0a:c6:36:05:52:30:f2:c4:75:83:86:bb:57:d6:66:61: 8a:79:9f:25:a1:98:a2:f2:07:06:b7:6d:ef:ec:8c:de:d8:a8: 62:4c:78:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHUctvIK1z0aHLCotINhqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNDVkNDRhMWVlMDU4NTNjZDU4OTI2NTQzMzRiMWYyMWNl ODI2ZDQwHhcNMjUxMjA2MTAwMjUzWhcNMjUxMjA3MTAwMjUzWjAzMTEwLwYDVQQD EyhjNmIxNTVmMDIwMDU1OTBiNWMxNDFhYjg5NzNiN2M3NjAzYzNkZWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPeNju+9IrqodtQ4R597Ef5U7/fu KdKNzMIn6dTuMVoUnx4kfh86OYvn2ImHJ/3TfFWNVy7JZd4YogLloLdsFUR+Fs20 4yrAz0dMeleoEw+ItfUmhueA0vrEigBj61qe96Pp9pQLLbpipp67dnlPSUw056nN bJFpuLeFxJptJAQOjOdceCtlPdX1oxfP+yKEnYwET91pq8FfAfd1jcd07LicjT3l datJWTI2y3mZ6qZ19ACIkKrBGOhy5eM2U1FIojVk+iSLUFxE9o4X9AZFpNZ00fCR nv1sswQr/VqUPYjmpLYabCoWs1r55RpmxizidP5D+6bt+HqGcuR+XIKOFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaxVfAgBVkLXBQauJc7fHYDw96uMB8GA1UdIwQY MBaAFPFF1Eoe4FhTzViSZUM0sfIc6CbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80ZjgxMzUtYWEyNC00NGE0LWE1NDYt M2RiY2RmNzc5ZjI0LzEvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80ZjgxMzUtYWEyNC00NGE0LWE1NDYtM2RiY2RmNzc5ZjI0 LzEvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8kzUzXP 9qFrrLlSwbGJx7tNlevxewhim+CC0n1LcCc1wZV5uYsfP3ZLsIQvyLTeUdUNvZp6 t4J2z2drjMwLmlMmx+oVyG8/FMZcvl3rGVCrbowe4KSZB8rBRsPE3FvgDYTaKIDf WkBE38d4krM2ew9Xf9bH1axQ2uQilCxIpAqPJEk68gt5OamHrtIcAE5Tg4UMnr/q aXTUFgQ9qB2ZCcF//HbBZVGirHAW6IfYunQrpYXNVK3kIt6KXvnzJkeS65nOpJKq NnAe7Ok8V1sIIlYHtFkizPxFk9sKxjYFUjDyxHWDhrtX1mZhinmfJaGYovIHBrdt 7+yM3tioYkx4MQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:16 2025 by rpki-client