This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft File: 8lxlPGBUhmBCpwb3F7JLIf35gag.mft (raw, json) Hash identifier: oAkGULHqDZ/73DnsaWomGVpvB795qAVNV2ujF85ea/w= Subject key identifier: 8B:0D:58:83:6D:5A:9E:E4:C7:1D:A5:C6:74:94:E3:4D:4F:73:8B:7D Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8 Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8 Certificate serial: 019AF208CB0760D95DBC0E54519C9621946C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft Manifest number: 0762 Signing time: Sat 06 Dec 2025 05:00:53 +0000 Manifest this update: Sat 06 Dec 2025 05:00:53 +0000 Manifest next update: Sun 07 Dec 2025 05:00:53 +0000 Files and hashes: 1: 8lxlPGBUhmBCpwb3F7JLIf35gag.crl (hash: mlelfCA81VtazhPTa2juQBVZQh6EA4Jznk15FQoB3o8=) 2: SAkp88S54aJN6C-GCtNeqgpkjzs.roa (hash: xdHHAbJE3WiWjdXV3cBquprUR130i7lr4362iYiFT8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:cb:07:60:d9:5d:bc:0e:54:51:9c:96:21:94:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8 Validity Not Before: Dec 6 05:00:53 2025 GMT Not After : Dec 7 05:00:53 2025 GMT Subject: CN=8b0d58836d5a9ee4c71da5c67494e34d4f738b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:47:40:4e:53:86:31:50:cc:07:61:6c:a0:63: 94:86:39:87:da:d2:a7:aa:8b:1c:72:b9:c8:8d:d5: 98:f8:13:39:96:ad:af:53:1d:65:87:a5:4d:5a:79: a4:a6:22:53:d6:46:fe:fd:9c:a8:93:0d:06:55:eb: d5:13:83:2b:aa:32:37:99:02:1d:f7:20:81:84:d1: 83:e7:3a:b2:1f:ce:b3:ae:15:da:78:cf:bf:14:bf: a4:07:88:fe:70:b3:6a:c7:53:26:78:f4:cc:7f:eb: c4:52:d3:8a:6b:c6:dc:27:72:75:ef:2e:81:b6:e5: 5a:5c:f5:4b:03:f0:dc:7b:97:c2:df:4b:d0:cb:cb: 73:63:26:59:94:3a:13:58:71:3d:f0:5b:c3:1c:cf: a0:47:23:53:5d:35:db:9a:3b:1e:c9:2d:f4:36:60: 2c:b8:6e:c3:51:57:65:e2:61:f2:d5:16:f0:49:3b: 4f:a4:89:8b:f9:62:f2:48:86:3e:dd:d2:05:f5:3b: c6:a0:7a:97:03:75:91:cf:30:f9:a6:e9:6d:71:e1: 53:81:fe:d2:44:ee:c9:dc:6c:d9:06:cb:ad:40:97: ab:82:06:a4:33:73:a2:1b:ae:72:98:15:2b:ac:b8: 7f:54:b4:5b:e4:a3:44:c0:a4:dc:26:25:78:c9:f5: ed:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0D:58:83:6D:5A:9E:E4:C7:1D:A5:C6:74:94:E3:4D:4F:73:8B:7D X509v3 Authority Key Identifier: keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ed:93:48:fe:fd:0b:e2:e4:e4:a6:56:2a:d8:3d:86:b9:95: fd:83:71:f7:ff:f7:18:6f:41:86:fa:b7:13:7d:18:22:9a:f0: ca:58:29:9b:b4:2b:45:51:80:5e:60:72:b8:d9:04:e5:f2:5e: 85:4f:a8:e1:2e:b3:b9:86:af:b7:95:41:8f:f5:06:53:1f:51: 73:4a:6d:c2:30:9b:c5:0a:00:54:3a:b9:37:e6:17:66:9b:7f: 9e:00:a2:45:69:02:54:c0:95:4f:ad:29:5b:b0:e1:ab:0c:0b: 51:66:c9:ce:63:27:7f:22:05:70:35:c8:89:d1:84:d5:fa:53: a0:de:c3:0c:e9:26:7b:0d:10:41:9a:d1:97:f9:a3:64:da:66: ec:f4:d6:97:5d:3d:ba:ba:82:b0:39:62:c4:76:ae:a6:4f:85: 58:bf:a1:ad:6e:c3:15:87:ac:ee:ea:06:84:5d:f8:35:9f:3d: fa:07:b9:ac:f1:77:40:0e:4a:78:b0:6f:53:40:7d:25:17:59: fe:a4:57:1c:6a:d0:f5:7d:07:c4:ca:67:e9:fb:da:2b:e9:cc: 0a:55:e9:ae:58:b0:5a:95:cc:eb:f0:73:4e:c3:5f:34:09:7b: d8:4e:14:ee:c2:f2:c6:40:23:69:68:44:ca:ee:fd:d9:66:c3: 3b:70:25:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMsHYNldvA5UUZyWIZRsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNWM2NTNjNjA1NDg2NjA0MmE3MDZmNzE3YjI0YjIxZmRm OTgxYTgwHhcNMjUxMjA2MDUwMDUzWhcNMjUxMjA3MDUwMDUzWjAzMTEwLwYDVQQD Eyg4YjBkNTg4MzZkNWE5ZWU0YzcxZGE1YzY3NDk0ZTM0ZDRmNzM4YjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60dATlOGMVDMB2FsoGOUhjmH2tKn qosccrnIjdWY+BM5lq2vUx1lh6VNWnmkpiJT1kb+/Zyokw0GVevVE4MrqjI3mQId 9yCBhNGD5zqyH86zrhXaeM+/FL+kB4j+cLNqx1MmePTMf+vEUtOKa8bcJ3J17y6B tuVaXPVLA/Dce5fC30vQy8tzYyZZlDoTWHE98FvDHM+gRyNTXTXbmjseyS30NmAs uG7DUVdl4mHy1RbwSTtPpImL+WLySIY+3dIF9TvGoHqXA3WRzzD5pultceFTgf7S RO7J3GzZBsutQJerggakM3OiG65ymBUrrLh/VLRb5KNEwKTcJiV4yfXtnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsNWINtWp7kxx2lxnSU401Pc4t9MB8GA1UdIwQY MBaAFPJcZTxgVIZgQqcG9xeySyH9+YGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGx4bFBHQlVobUJDcHdiM0Y3SkxJZjM1Z2FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mYjI5OTgtNTFmOS00YWRiLWEzMjMt ZjA3YTIxOGUxY2M3LzEvOGx4bFBHQlVobUJDcHdiM0Y3SkxJZjM1Z2FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9mYjI5OTgtNTFmOS00YWRiLWEzMjMtZjA3YTIxOGUxY2M3 LzEvOGx4bFBHQlVobUJDcHdiM0Y3SkxJZjM1Z2FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKe2TSP79 C+Lk5KZWKtg9hrmV/YNx9//3GG9Bhvq3E30YIprwylgpm7QrRVGAXmByuNkE5fJe hU+o4S6zuYavt5VBj/UGUx9Rc0ptwjCbxQoAVDq5N+YXZpt/ngCiRWkCVMCVT60p W7DhqwwLUWbJzmMnfyIFcDXIidGE1fpToN7DDOkmew0QQZrRl/mjZNpm7PTWl109 urqCsDlixHaupk+FWL+hrW7DFYes7uoGhF34NZ89+ge5rPF3QA5KeLBvU0B9JRdZ /qRXHGrQ9X0HxMpn6fvaK+nMClXprliwWpXM6/BzTsNfNAl72E4U7sLyxkAjaWhE yu792WbDO3Alxw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:08 2025 by rpki-client