This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft File: 8DqRN3TbyeYF3BerI6BaFoA5jeU.mft (raw, json) Hash identifier: T4qTjm0mVVB+X30qqScNf460TU5ZE3qiGfz22mv+IJA= Subject key identifier: 6B:33:9C:98:5A:6F:31:50:D8:EC:37:03:8A:39:B9:80:6A:B3:94:39 Authority key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5 Certificate issuer: /CN=f03a913774dbc9e605dc17ab23a05a1680398de5 Certificate serial: 019AF509A6AEDDF8ED7BEAD5EB2749019CA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft Manifest number: 0B26 Signing time: Sat 06 Dec 2025 19:00:41 +0000 Manifest this update: Sat 06 Dec 2025 19:00:41 +0000 Manifest next update: Sun 07 Dec 2025 19:00:41 +0000 Files and hashes: 1: 8DqRN3TbyeYF3BerI6BaFoA5jeU.crl (hash: j4K1qWdD8do6S+2sVgxxw0+NhM2fVK6PKlfVxpFXcDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:a6:ae:dd:f8:ed:7b:ea:d5:eb:27:49:01:9c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f03a913774dbc9e605dc17ab23a05a1680398de5 Validity Not Before: Dec 6 19:00:41 2025 GMT Not After : Dec 7 19:00:41 2025 GMT Subject: CN=6b339c985a6f3150d8ec37038a39b9806ab39439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:11:73:98:79:90:71:46:3f:56:26:7e:b2:60: d9:d9:79:b8:55:49:40:b7:c4:da:f1:58:9c:f5:10: 09:cb:7c:2e:58:0e:1b:ee:1f:6e:5a:cb:26:21:53: 47:40:c9:7c:b5:18:f9:e5:86:2a:01:44:cc:00:52: 24:89:2f:b8:86:1f:93:c0:df:d9:88:4c:f0:b5:46: cd:a6:d3:e9:7c:d7:f0:e3:94:de:b4:bc:80:01:99: 2a:b4:b4:01:b1:13:44:20:e3:62:c6:a6:4a:8a:63: ca:4e:4b:ec:5b:83:88:95:8f:a7:78:fe:79:80:8d: 7d:7b:27:ac:91:92:17:57:f8:db:18:0d:9c:4e:07: d9:f6:ba:c4:75:a8:c8:94:d2:41:63:cd:95:41:70: 9d:7c:36:07:14:5b:c1:0b:82:4e:a9:7e:87:4a:64: 99:c4:a6:d4:72:a2:a8:33:b0:d0:7b:83:54:ef:8c: c6:d0:29:80:4c:61:cd:2d:fc:80:8d:87:46:c9:7b: 88:39:d0:0e:5e:02:98:4c:7d:90:43:dd:9a:de:a5: 19:55:94:ba:b6:70:56:32:69:7f:09:26:ca:d6:62: 94:de:5b:64:59:0a:b5:d0:d3:29:7b:16:23:d6:0f: b1:3e:e7:0e:5e:f8:d5:19:11:0a:93:f9:35:2f:49: 5b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:33:9C:98:5A:6F:31:50:D8:EC:37:03:8A:39:B9:80:6A:B3:94:39 X509v3 Authority Key Identifier: keyid:F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:37:dd:65:34:06:76:ad:20:10:e7:b3:fd:22:ad:75:1e:31: 60:61:99:87:36:c8:49:ce:5e:ba:0f:ad:fd:f7:d3:3c:c0:57: a4:24:fe:21:82:62:0c:2e:8d:a9:22:e6:ff:56:47:87:16:1a: 20:44:77:b4:1d:9a:54:a3:8a:45:f1:81:89:8a:b1:f1:40:f0: 18:df:a5:ab:77:85:0f:96:4a:6a:db:1e:54:26:79:da:b0:73: eb:07:23:fb:5f:c6:53:03:43:dc:e1:d2:d4:8a:8c:5a:9e:91: 44:38:33:3d:18:a6:04:f5:77:fd:df:86:e9:37:a6:1a:06:a0: 40:4d:b8:c3:32:a8:9d:89:29:4d:53:d2:0a:a7:42:f9:a9:67: 15:b3:bd:58:1d:e1:20:18:7b:37:50:df:e6:f7:01:c6:9e:46: 93:2a:9a:7c:b5:53:99:f4:b8:7f:f0:bd:37:a9:84:ba:b3:c6: 56:36:fe:47:c1:b1:00:ac:63:af:66:4a:a1:7f:7e:6e:23:e7: d0:0d:f0:91:19:6c:fe:4a:9d:39:e0:e1:11:3e:22:86:f7:18: dc:15:0e:7a:4d:82:d3:48:06:a8:b6:b5:7a:2a:f1:21:86:6d: 96:1d:a2:12:34:00:c4:63:f2:4f:dd:a6:a9:97:58:db:32:8f: f0:6b:43:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Caau3fjte+rV6ydJAZynMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwM2E5MTM3NzRkYmM5ZTYwNWRjMTdhYjIzYTA1YTE2ODAz OThkZTUwHhcNMjUxMjA2MTkwMDQxWhcNMjUxMjA3MTkwMDQxWjAzMTEwLwYDVQQD Eyg2YjMzOWM5ODVhNmYzMTUwZDhlYzM3MDM4YTM5Yjk4MDZhYjM5NDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xFzmHmQcUY/ViZ+smDZ2Xm4VUlA t8Ta8Vic9RAJy3wuWA4b7h9uWssmIVNHQMl8tRj55YYqAUTMAFIkiS+4hh+TwN/Z iEzwtUbNptPpfNfw45TetLyAAZkqtLQBsRNEIONixqZKimPKTkvsW4OIlY+neP55 gI19eyeskZIXV/jbGA2cTgfZ9rrEdajIlNJBY82VQXCdfDYHFFvBC4JOqX6HSmSZ xKbUcqKoM7DQe4NU74zG0CmATGHNLfyAjYdGyXuIOdAOXgKYTH2QQ92a3qUZVZS6 tnBWMml/CSbK1mKU3ltkWQq10NMpexYj1g+xPucOXvjVGREKk/k1L0lbNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsznJhabzFQ2Ow3A4o5uYBqs5Q5MB8GA1UdIwQY MBaAFPA6kTd028nmBdwXqyOgWhaAOY3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOERxUk4zVGJ5ZVlGM0Jlckk2QmFGb0E1amVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mODI0MjYtN2ViMC00NzY1LThkZTkt ZTAwNjMyNjllNDY5LzEvOERxUk4zVGJ5ZVlGM0Jlckk2QmFGb0E1amVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9mODI0MjYtN2ViMC00NzY1LThkZTktZTAwNjMyNjllNDY5 LzEvOERxUk4zVGJ5ZVlGM0Jlckk2QmFGb0E1amVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjfdZTQG dq0gEOez/SKtdR4xYGGZhzbISc5eug+t/ffTPMBXpCT+IYJiDC6NqSLm/1ZHhxYa IER3tB2aVKOKRfGBiYqx8UDwGN+lq3eFD5ZKatseVCZ52rBz6wcj+1/GUwND3OHS 1IqMWp6RRDgzPRimBPV3/d+G6TemGgagQE24wzKonYkpTVPSCqdC+alnFbO9WB3h IBh7N1Df5vcBxp5GkyqafLVTmfS4f/C9N6mEurPGVjb+R8GxAKxjr2ZKoX9+biPn 0A3wkRls/kqdOeDhET4ihvcY3BUOek2C00gGqLa1eirxIYZtlh2iEjQAxGPyT92m qZdY2zKP8GtDgQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:02:58 2025 by rpki-client