This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft File: 8_alfqKpAutJEt6SffgDBMNVqxI.mft (raw, json) Hash identifier: +IVXa8+o/owzIZ+Br5W23BX5XzWuS3WAXoeC/NWLaGU= Subject key identifier: 35:F9:E5:60:B8:43:17:83:60:28:70:65:A8:90:A1:A0:42:EA:74:09 Authority key identifier: F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12 Certificate issuer: /CN=f3f6a57ea2a902eb4912de927df80304c355ab12 Certificate serial: 019AF31C1E71D46BA11CFCCFA49379BF3D96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft Manifest number: 16B4 Signing time: Sat 06 Dec 2025 10:01:37 +0000 Manifest this update: Sat 06 Dec 2025 10:01:37 +0000 Manifest next update: Sun 07 Dec 2025 10:01:37 +0000 Files and hashes: 1: 8_alfqKpAutJEt6SffgDBMNVqxI.crl (hash: srttNIjrQGySvVMwUGqUaE5pTU2Ez4+apRHP/HEOY2o=) 2: u8DCnmiwdvKh2XgFpOMuHJjylj4.roa (hash: pyYbMY7OWkqDVRgEujgw5F9QcQGgPWWbAPnLnwKmM2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.crl rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:1e:71:d4:6b:a1:1c:fc:cf:a4:93:79:bf:3d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3f6a57ea2a902eb4912de927df80304c355ab12 Validity Not Before: Dec 6 10:01:37 2025 GMT Not After : Dec 7 10:01:37 2025 GMT Subject: CN=35f9e560b843178360287065a890a1a042ea7409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c8:5e:bb:22:3c:e2:13:67:30:c0:32:f8:86: 94:17:03:73:98:46:d7:ad:cc:dd:e9:33:7e:51:56: c7:69:2d:75:5b:af:a4:40:82:5d:46:55:7e:36:12: 5d:cf:b1:75:07:38:db:92:c3:c4:8b:09:f0:2d:1e: fd:19:5c:f3:dc:df:5b:00:ee:c5:e6:eb:c2:c5:e1: 41:b5:de:3e:0c:3f:76:13:37:38:af:c3:3c:9d:2f: 81:a7:56:17:62:c3:a8:27:7d:e2:d3:31:82:e5:18: 06:a1:44:42:b7:38:14:57:54:fd:2f:13:88:9f:39: 12:19:88:d1:4e:bb:d8:cf:81:00:c2:2a:2a:38:97: 71:09:28:6c:49:42:77:7c:f5:46:1f:a5:fb:94:7b: 2d:10:df:d0:a3:b5:1b:d5:8b:fc:04:64:76:9f:14: 0c:bb:3e:47:8b:eb:f8:e8:56:42:42:7a:54:09:39: 69:f7:97:85:8c:b6:94:d8:39:b0:bb:1d:de:c3:4e: f8:06:99:89:d4:45:0b:fd:8b:90:1b:d0:27:2e:5c: 95:c5:5c:c0:b6:a0:63:0c:74:1f:35:b8:43:1c:99: 5a:c6:7f:c9:a3:c8:c5:e0:ba:b0:63:63:c2:f4:60: c9:64:fa:7a:ba:b3:f4:cb:8f:db:39:b9:af:91:c0: ad:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F9:E5:60:B8:43:17:83:60:28:70:65:A8:90:A1:A0:42:EA:74:09 X509v3 Authority Key Identifier: keyid:F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:37:fd:da:da:a0:66:b0:a0:3c:21:8d:f0:f1:f3:e8:ad:e5: 17:9e:fc:8f:ee:10:81:11:b5:1b:d7:02:ef:4a:61:9f:d6:8b: cf:85:49:c2:dc:19:fa:39:a5:64:ed:34:b8:25:ce:97:f4:4e: 92:c2:23:04:cb:84:8e:1b:3e:a0:64:e5:cb:1d:ec:83:c7:02: a4:da:49:17:42:a8:38:fc:06:c1:a6:4a:b1:9b:9f:e3:d2:7c: 4b:37:6d:2c:2f:5d:cc:9a:3f:39:d9:47:b0:25:e8:ef:28:f2: 94:b2:c2:c8:82:62:6e:e2:11:87:f7:cc:89:b2:b1:8c:87:a8: dc:d0:1a:6c:4b:4b:53:e4:0c:e3:32:4e:5e:c9:f9:7d:73:00: 14:0e:8d:84:3e:81:0e:47:5b:b1:4b:a3:22:9f:fc:9f:28:40: cd:a5:bc:7b:16:c8:12:ec:89:d6:65:f0:06:49:d2:00:00:a8: 5c:96:3c:f4:ae:58:ce:60:be:32:5b:2b:af:ea:2a:5f:79:df: a2:59:b1:39:2f:98:e2:2d:6a:16:e3:da:e5:68:96:a5:25:5a: 20:89:21:02:5a:9f:df:95:55:26:23:93:a2:a7:8d:68:bf:79: 5e:c5:6d:68:26:4e:99:84:2b:6a:0b:25:09:81:e3:8e:6f:59: 2c:2f:01:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHB5x1GuhHPzPpJN5vz2WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZjZhNTdlYTJhOTAyZWI0OTEyZGU5MjdkZjgwMzA0YzM1 NWFiMTIwHhcNMjUxMjA2MTAwMTM3WhcNMjUxMjA3MTAwMTM3WjAzMTEwLwYDVQQD EygzNWY5ZTU2MGI4NDMxNzgzNjAyODcwNjVhODkwYTFhMDQyZWE3NDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcheuyI84hNnMMAy+IaUFwNzmEbX rczd6TN+UVbHaS11W6+kQIJdRlV+NhJdz7F1BzjbksPEiwnwLR79GVzz3N9bAO7F 5uvCxeFBtd4+DD92Ezc4r8M8nS+Bp1YXYsOoJ33i0zGC5RgGoURCtzgUV1T9LxOI nzkSGYjRTrvYz4EAwioqOJdxCShsSUJ3fPVGH6X7lHstEN/Qo7Ub1Yv8BGR2nxQM uz5Hi+v46FZCQnpUCTlp95eFjLaU2Dmwux3ew074BpmJ1EUL/YuQG9AnLlyVxVzA tqBjDHQfNbhDHJlaxn/Jo8jF4LqwY2PC9GDJZPp6urP0y4/bObmvkcCtjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDX55WC4QxeDYChwZaiQoaBC6nQJMB8GA1UdIwQY MBaAFPP2pX6iqQLrSRLekn34AwTDVasSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOF9hbGZxS3BBdXRKRXQ2U2ZmZ0RCTU5WcXhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84YmYzODktODEzYy00OWJhLTg1MGMt OTQwYzZiOGI1MDJhLzEvOF9hbGZxS3BBdXRKRXQ2U2ZmZ0RCTU5WcXhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS84YmYzODktODEzYy00OWJhLTg1MGMtOTQwYzZiOGI1MDJh LzEvOF9hbGZxS3BBdXRKRXQ2U2ZmZ0RCTU5WcXhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjf92tqg ZrCgPCGN8PHz6K3lF578j+4QgRG1G9cC70phn9aLz4VJwtwZ+jmlZO00uCXOl/RO ksIjBMuEjhs+oGTlyx3sg8cCpNpJF0KoOPwGwaZKsZuf49J8SzdtLC9dzJo/OdlH sCXo7yjylLLCyIJibuIRh/fMibKxjIeo3NAabEtLU+QM4zJOXsn5fXMAFA6NhD6B DkdbsUujIp/8nyhAzaW8exbIEuyJ1mXwBknSAACoXJY89K5YzmC+Mlsrr+oqX3nf olmxOS+Y4i1qFuPa5WiWpSVaIIkhAlqf35VVJiOToqeNaL95XsVtaCZOmYQragsl CYHjjm9ZLC8BpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:28:47 2025 by rpki-client