This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft File: 8QtzTfT6au4S6pkGV7A1oWK0qeY.mft (raw, json) Hash identifier: 70Hi4mu7aEYOfJpZPd4S5NWviTZYkMV8gS7LkRk72+8= Subject key identifier: 8E:C4:06:F2:9E:56:A9:9E:16:15:1D:A2:EF:63:B0:C8:9D:F4:49:22 Authority key identifier: F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6 Certificate issuer: /CN=f10b734df4fa6aee12ea990657b035a162b4a9e6 Certificate serial: 019AF1D24676BC44592DE3A8383450698EFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft Manifest number: 025D Signing time: Sat 06 Dec 2025 04:01:20 +0000 Manifest this update: Sat 06 Dec 2025 04:01:20 +0000 Manifest next update: Sun 07 Dec 2025 04:01:20 +0000 Files and hashes: 1: 8QtzTfT6au4S6pkGV7A1oWK0qeY.crl (hash: J7kVQL9y7YI+s5fxLlgiK/73j5sx2Vz3WjOSf4uv/6I=) 2: g827ucs3EThsAfzbTT2FMhBdWaY.roa (hash: PzIDENEz83QkajYAOtSf7pvZj1/xEbuYaZgcwQILtJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:46:76:bc:44:59:2d:e3:a8:38:34:50:69:8e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f10b734df4fa6aee12ea990657b035a162b4a9e6 Validity Not Before: Dec 6 04:01:20 2025 GMT Not After : Dec 7 04:01:20 2025 GMT Subject: CN=8ec406f29e56a99e16151da2ef63b0c89df44922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:68:69:3d:d0:85:41:4c:50:23:74:a0:78:b6: b0:79:f2:5d:67:e3:f8:19:d6:6a:9b:c0:39:92:d6: df:25:36:5e:d4:d6:57:cd:4c:89:75:a8:84:f8:a1: 63:e0:ec:91:a6:a8:6c:84:c5:3c:13:70:35:77:84: 35:b5:16:46:6e:0d:b8:b8:0d:e5:5e:a4:2c:92:fc: 25:21:bb:89:07:7d:9b:05:85:1f:b1:7e:f6:71:6f: db:e8:cc:18:b1:1e:67:cd:60:80:d1:9c:1a:04:3d: dd:7a:32:0c:e8:dc:a8:d9:30:f9:bb:d5:cc:af:40: 65:a5:8a:d1:ee:dd:a2:12:87:0f:54:fe:9e:1c:83: 55:ba:01:5c:b3:24:49:23:a0:8b:54:b6:95:55:c2: dd:ee:20:d4:12:dd:4d:62:24:7e:be:14:70:8f:aa: dd:d2:06:bf:ee:b0:c7:29:4b:65:69:b0:06:42:65: b3:70:f8:56:e3:ce:3e:6c:3e:4f:ae:f6:5b:fe:ba: ae:4c:a8:b0:72:78:ca:2d:07:8e:a1:75:bf:96:36: 0f:20:a2:f5:ca:f1:46:f2:25:de:70:ce:ae:5f:a5: 6a:35:ea:27:d9:29:1c:52:9e:8c:26:fc:fb:28:7f: 21:79:d7:73:11:9c:f3:23:bf:b0:b8:45:c4:b1:9b: e8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C4:06:F2:9E:56:A9:9E:16:15:1D:A2:EF:63:B0:C8:9D:F4:49:22 X509v3 Authority Key Identifier: keyid:F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:10:a8:3f:95:a5:4b:e3:b2:f5:87:d9:c3:1a:19:8f:35:26: 92:ee:bf:d8:3a:9c:ac:02:d4:58:4b:b2:c0:19:b0:f4:81:2e: a6:6c:45:ea:62:b0:a7:42:6f:4e:b9:d6:5f:e9:38:57:ca:2b: 56:a4:65:9c:2f:61:17:0d:90:b2:92:24:2d:7e:f3:e6:1c:13: 6d:1a:14:26:20:73:fa:9e:be:b7:c5:16:d9:ae:a4:43:52:62: 1d:41:8a:aa:d3:f4:10:82:34:93:2b:61:06:35:3c:f5:01:4c: 7c:6c:5a:e0:10:3d:a1:02:7e:0c:4c:56:e2:8e:fe:d9:9f:f0: 7a:8e:0a:7e:fb:8e:96:27:07:71:ed:d1:37:8f:7f:b3:5d:64: 2b:cb:7b:5d:7a:d5:aa:3c:29:8a:45:6d:1e:7f:5e:07:76:48: 1d:c2:d5:39:9c:b9:19:6d:0c:c4:02:c9:08:ba:37:b0:5e:e4: 0f:55:8a:4b:ad:f8:9a:b8:16:64:b0:c3:dd:92:69:2c:61:bb: 2d:1a:7b:e0:f3:69:7c:1b:f1:4b:23:89:29:bf:78:a1:a5:2a: b6:a8:53:0a:e6:a1:3f:c2:c6:28:8a:e8:3d:ba:0a:13:fb:b3: 0a:62:e9:3a:a4:9a:89:e0:2e:8d:cc:0a:f3:c5:30:5f:46:43: 78:69:a1:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kZ2vERZLeOoODRQaY7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMGI3MzRkZjRmYTZhZWUxMmVhOTkwNjU3YjAzNWExNjJi NGE5ZTYwHhcNMjUxMjA2MDQwMTIwWhcNMjUxMjA3MDQwMTIwWjAzMTEwLwYDVQQD Eyg4ZWM0MDZmMjllNTZhOTllMTYxNTFkYTJlZjYzYjBjODlkZjQ0OTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2hpPdCFQUxQI3SgeLawefJdZ+P4 GdZqm8A5ktbfJTZe1NZXzUyJdaiE+KFj4OyRpqhshMU8E3A1d4Q1tRZGbg24uA3l XqQskvwlIbuJB32bBYUfsX72cW/b6MwYsR5nzWCA0ZwaBD3dejIM6Nyo2TD5u9XM r0BlpYrR7t2iEocPVP6eHINVugFcsyRJI6CLVLaVVcLd7iDUEt1NYiR+vhRwj6rd 0ga/7rDHKUtlabAGQmWzcPhW484+bD5PrvZb/rquTKiwcnjKLQeOoXW/ljYPIKL1 yvFG8iXecM6uX6VqNeon2SkcUp6MJvz7KH8heddzEZzzI7+wuEXEsZvoWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7EBvKeVqmeFhUdou9jsMid9EkiMB8GA1UdIwQY MBaAFPELc030+mruEuqZBlewNaFitKnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMmJkOGUtMmViOC00NTE1LTk1NmIt ZTE1MjUwMzkyODg3LzEvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMmJkOGUtMmViOC00NTE1LTk1NmItZTE1MjUwMzkyODg3 LzEvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhCoP5Wl S+Oy9YfZwxoZjzUmku6/2DqcrALUWEuywBmw9IEupmxF6mKwp0JvTrnWX+k4V8or VqRlnC9hFw2QspIkLX7z5hwTbRoUJiBz+p6+t8UW2a6kQ1JiHUGKqtP0EII0kyth BjU89QFMfGxa4BA9oQJ+DExW4o7+2Z/weo4KfvuOlicHce3RN49/s11kK8t7XXrV qjwpikVtHn9eB3ZIHcLVOZy5GW0MxALJCLo3sF7kD1WKS634mrgWZLDD3ZJpLGG7 LRp74PNpfBvxSyOJKb94oaUqtqhTCuahP8LGKIroPboKE/uzCmLpOqSaieAujcwK 88UwX0ZDeGmhgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:51 2025 by rpki-client