This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft File: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft (raw, json) Hash identifier: k/wNkOR7uLA8r4O/J+5mqFxl/AGE8WQ2uqCo7QZT5fA= Subject key identifier: 35:A3:99:A1:70:28:02:0B:0D:CD:C2:3C:95:90:2F:00:73:62:6A:EB Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82 Certificate issuer: /CN=f324d0f47297680535eb2799189db888b4066782 Certificate serial: 019AF12D2A72B8A9CEB8270483C3002B3E3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft Manifest number: 0D66 Signing time: Sat 06 Dec 2025 01:01:00 +0000 Manifest this update: Sat 06 Dec 2025 01:01:00 +0000 Manifest next update: Sun 07 Dec 2025 01:01:00 +0000 Files and hashes: 1: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl (hash: rX3x6zI+mgaYdFtpXFxcX1ctTpkS+nIuX4Z7Aj+zlDs=) 2: ViytvvvqRpbhZ8khzk-URy1_cok.roa (hash: GO9E5IMUAfx38THMM6EhNHK1/Vpo8T9/VGp4F+NJQF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:2a:72:b8:a9:ce:b8:27:04:83:c3:00:2b:3e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f324d0f47297680535eb2799189db888b4066782 Validity Not Before: Dec 6 01:01:00 2025 GMT Not After : Dec 7 01:01:00 2025 GMT Subject: CN=35a399a17028020b0dcdc23c95902f0073626aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e4:4f:98:12:c0:9b:e3:d2:af:f9:0a:4a:ac: 98:c6:76:d9:76:ee:53:e2:65:90:3b:d1:f0:77:1f: 0c:11:ce:81:61:07:27:fd:c5:32:1c:5e:aa:e9:3f: d0:a9:ac:68:53:85:ad:ac:a5:44:b3:39:c7:85:49: ab:09:ed:0f:c5:63:8e:fd:84:77:c8:27:17:e9:79: f1:29:07:c8:9a:f2:22:67:2a:3f:9b:b6:8b:a6:e9: 29:ed:62:01:6c:b1:7c:b6:4f:cd:51:b7:4d:c1:9b: c1:d1:d1:c2:f7:fb:11:ee:3a:b7:fb:b5:e3:dd:85: ed:a3:de:a9:8a:f1:46:bd:51:f4:d2:52:5c:c5:9e: bf:a9:5e:2f:27:b5:ae:37:79:12:49:e4:0b:09:77: a7:15:35:d5:52:6c:dc:f9:9f:52:87:dc:12:df:38: 51:7d:dd:50:cf:19:7f:ea:4d:99:3d:65:9a:e7:81: 29:43:df:c1:91:ba:04:55:f6:9e:01:fd:a1:b8:4d: d8:13:ac:9f:e6:9f:86:72:95:4e:26:50:5b:e9:47: 27:d5:11:88:0b:52:be:7b:95:bb:23:7e:63:aa:12: ed:1b:3b:34:a0:56:1f:fe:a7:e6:22:a3:c0:c4:a3: c6:02:56:7f:46:cc:cb:93:1f:7a:72:08:43:d1:a0: 3f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A3:99:A1:70:28:02:0B:0D:CD:C2:3C:95:90:2F:00:73:62:6A:EB X509v3 Authority Key Identifier: keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:32:e8:5c:c7:51:5c:a2:30:1b:76:99:61:7b:27:2a:e3:a8: 7f:a9:d6:af:ec:86:15:a4:fa:b2:5f:ab:79:b7:41:b7:d7:1b: 6e:0a:c7:1d:d9:da:ae:9e:c5:91:35:de:4b:15:f9:76:88:30: 1f:cf:91:7a:56:28:da:95:a7:a7:86:99:76:cf:90:2c:25:e2: 2a:db:1f:65:d6:55:d8:50:23:ab:cf:df:ec:45:18:c1:a8:14: 65:84:a0:2e:da:6d:d4:4a:26:0d:96:ce:df:99:bf:b3:16:5f: e1:ff:18:0c:f0:c9:fb:d9:0c:68:64:0e:26:30:bb:8d:b4:f7: e9:d8:39:74:d9:f0:9d:e3:84:8d:09:89:f3:b2:04:f0:96:dd: a4:e2:74:e5:85:c1:a0:e3:ce:7e:0f:66:67:7b:8c:6c:1e:c5: 2c:34:2b:ff:2c:31:92:a8:13:79:71:d7:9f:56:cc:43:49:e8: 80:9d:db:e5:85:f3:36:0a:d7:c2:14:e4:ae:7e:7d:42:77:f5: d4:52:d3:41:43:3f:83:42:a0:6f:a3:16:a0:24:10:ed:fc:9b: a2:4d:01:be:ac:77:68:50:6d:d2:fa:70:74:9e:50:20:95:60: ad:67:cd:a8:b1:bd:7d:09:8b:5d:07:cc:bf:6f:4c:39:0b:ed: 0c:91:dd:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSpyuKnOuCcEg8MAKz47MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjRkMGY0NzI5NzY4MDUzNWViMjc5OTE4OWRiODg4YjQw NjY3ODIwHhcNMjUxMjA2MDEwMTAwWhcNMjUxMjA3MDEwMTAwWjAzMTEwLwYDVQQD EygzNWEzOTlhMTcwMjgwMjBiMGRjZGMyM2M5NTkwMmYwMDczNjI2YWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+RPmBLAm+PSr/kKSqyYxnbZdu5T 4mWQO9Hwdx8MEc6BYQcn/cUyHF6q6T/QqaxoU4WtrKVEsznHhUmrCe0PxWOO/YR3 yCcX6XnxKQfImvIiZyo/m7aLpukp7WIBbLF8tk/NUbdNwZvB0dHC9/sR7jq3+7Xj 3YXto96pivFGvVH00lJcxZ6/qV4vJ7WuN3kSSeQLCXenFTXVUmzc+Z9Sh9wS3zhR fd1Qzxl/6k2ZPWWa54EpQ9/BkboEVfaeAf2huE3YE6yf5p+GcpVOJlBb6Ucn1RGI C1K+e5W7I35jqhLtGzs0oFYf/qfmIqPAxKPGAlZ/RszLkx96cghD0aA/yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWjmaFwKAILDc3CPJWQLwBzYmrrMB8GA1UdIwQY MBaAFPMk0PRyl2gFNesnmRiduIi0BmeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlUUTlIS1hhQVUxNnllWkdKMjRpTFFHWjRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC85MGQzNjYtMmZhYi00N2U1LTkwYjkt MDI2NWU1Y2Q2OTY2LzEvOHlUUTlIS1hhQVUxNnllWkdKMjRpTFFHWjRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC85MGQzNjYtMmZhYi00N2U1LTkwYjktMDI2NWU1Y2Q2OTY2 LzEvOHlUUTlIS1hhQVUxNnllWkdKMjRpTFFHWjRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDLoXMdR XKIwG3aZYXsnKuOof6nWr+yGFaT6sl+rebdBt9cbbgrHHdnarp7FkTXeSxX5dogw H8+RelYo2pWnp4aZds+QLCXiKtsfZdZV2FAjq8/f7EUYwagUZYSgLtpt1EomDZbO 35m/sxZf4f8YDPDJ+9kMaGQOJjC7jbT36dg5dNnwneOEjQmJ87IE8JbdpOJ05YXB oOPOfg9mZ3uMbB7FLDQr/ywxkqgTeXHXn1bMQ0nogJ3b5YXzNgrXwhTkrn59Qnf1 1FLTQUM/g0Kgb6MWoCQQ7fybok0Bvqx3aFBt0vpwdJ5QIJVgrWfNqLG9fQmLXQfM v29MOQvtDJHddQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:29 2025 by rpki-client