This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft File: 8TM6Z1TACO27rF8y69AZ6mRzrqg.mft (raw, json) Hash identifier: r+vE0Gg50BwKc/70V0CNEmwOj58t40Y+qykLcu0YpQM= Subject key identifier: 05:9C:CE:71:C5:30:32:D4:C6:46:BF:3C:D4:B3:68:3E:31:28:DA:E2 Authority key identifier: F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8 Certificate issuer: /CN=f1333a6754c008edbbac5f32ebd019ea6473aea8 Certificate serial: 019AF2771DF256F47142F40C366A19ABDF42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft Manifest number: 0FD7 Signing time: Sat 06 Dec 2025 07:01:23 +0000 Manifest this update: Sat 06 Dec 2025 07:01:23 +0000 Manifest next update: Sun 07 Dec 2025 07:01:23 +0000 Files and hashes: 1: 8TM6Z1TACO27rF8y69AZ6mRzrqg.crl (hash: xaPpUEQYXaSIIDbWYEvJzDAiuij5taZD4qptKr+VTl4=) 2: G1CMU250DLNf-oup7Q0hOPQNrZw.roa (hash: 0pwKFn2zlhCRBk1YacOr41wGcqVSw2Yno4Qxh/muNvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.crl rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:1d:f2:56:f4:71:42:f4:0c:36:6a:19:ab:df:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1333a6754c008edbbac5f32ebd019ea6473aea8 Validity Not Before: Dec 6 07:01:23 2025 GMT Not After : Dec 7 07:01:23 2025 GMT Subject: CN=059cce71c53032d4c646bf3cd4b3683e3128dae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:96:89:f4:8d:1a:9d:50:ee:29:a7:69:08:1a: 54:03:b9:45:a3:a6:03:d0:7d:78:c1:26:8d:80:60: 35:4f:e5:ea:06:74:c3:a9:8b:a8:ce:d9:a2:37:de: 7c:8f:00:eb:48:ba:a8:05:b4:19:af:a1:31:52:68: 09:41:ad:23:0c:31:e3:f7:3a:b3:22:c9:06:0f:e2: 66:e6:f1:6f:98:ee:59:b2:2e:24:a9:0d:2f:af:0c: c4:ba:f8:f2:48:6c:0d:78:9f:a4:ac:94:5d:e9:90: c4:d8:59:ab:cf:7c:c3:e5:39:ca:f5:31:d7:95:e1: f4:35:e3:86:71:4b:dd:f7:19:ae:9e:fb:d4:a3:bd: 8d:9c:4d:65:95:1e:9d:e3:84:c5:57:0f:5f:12:6d: 53:49:58:b8:f7:2a:a4:2d:28:e4:8b:e0:67:5a:7a: e4:77:ec:17:3b:ca:75:7b:bb:64:3c:9e:02:80:4e: 02:93:df:e6:6c:5e:aa:a7:66:3e:7f:b8:a6:af:01: 1a:85:50:fa:b8:db:d7:88:8e:ae:ca:bf:17:6c:34: b1:dd:ce:16:30:a3:dc:33:72:32:88:c5:fb:f1:09: 95:37:2f:d1:ae:3a:01:94:81:26:c5:62:27:e9:04: 91:c3:16:19:ab:ee:47:01:70:82:8d:4b:b9:e2:d5: e0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9C:CE:71:C5:30:32:D4:C6:46:BF:3C:D4:B3:68:3E:31:28:DA:E2 X509v3 Authority Key Identifier: keyid:F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:d7:d1:b0:14:61:f3:e3:55:96:52:c5:7c:16:c4:76:41:ea: e9:db:03:c8:ac:05:86:d9:2c:74:71:9e:4d:0b:a2:42:5d:b2: 0a:f1:7c:df:a6:2f:5c:00:62:f4:eb:df:75:6e:70:5c:7c:e6: b6:94:6a:35:56:4a:02:93:10:c3:68:61:aa:be:d1:38:3d:69: d3:ea:d2:36:61:4d:e2:9e:2b:f7:11:40:7d:bb:bc:82:cd:25: ba:b5:1e:85:a9:b4:f0:9f:74:65:0b:d0:a4:17:8d:bf:5a:74: 26:be:b9:27:70:86:fe:47:36:ee:22:53:36:8e:75:1a:d8:31: 1a:61:71:85:18:e8:78:fd:6a:70:77:80:29:cf:8e:8c:cb:97: 0b:cc:64:7a:ba:ed:39:bd:78:6f:ab:8f:19:8b:8b:92:c0:01: 4a:03:7e:5c:70:d3:01:cc:60:cf:a4:cc:55:b9:04:36:02:0b: 21:fa:5b:7c:c9:d7:14:76:8e:2b:6f:eb:68:6a:4f:b6:7e:98: 95:ee:90:ee:95:df:f7:b1:58:ec:bd:0a:2b:cb:bf:32:81:c4: 98:ff:bc:e1:be:3a:19:bc:fc:04:ce:04:4c:dd:e0:2d:05:78: f3:1a:59:39:23:38:4b:d9:89:70:7c:b6:54:4e:eb:8c:83:74: fc:40:9c:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydx3yVvRxQvQMNmoZq99CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzMzYTY3NTRjMDA4ZWRiYmFjNWYzMmViZDAxOWVhNjQ3 M2FlYTgwHhcNMjUxMjA2MDcwMTIzWhcNMjUxMjA3MDcwMTIzWjAzMTEwLwYDVQQD EygwNTljY2U3MWM1MzAzMmQ0YzY0NmJmM2NkNGIzNjgzZTMxMjhkYWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZaJ9I0anVDuKadpCBpUA7lFo6YD 0H14wSaNgGA1T+XqBnTDqYuoztmiN958jwDrSLqoBbQZr6ExUmgJQa0jDDHj9zqz IskGD+Jm5vFvmO5Zsi4kqQ0vrwzEuvjySGwNeJ+krJRd6ZDE2Fmrz3zD5TnK9THX leH0NeOGcUvd9xmunvvUo72NnE1llR6d44TFVw9fEm1TSVi49yqkLSjki+BnWnrk d+wXO8p1e7tkPJ4CgE4Ck9/mbF6qp2Y+f7imrwEahVD6uNvXiI6uyr8XbDSx3c4W MKPcM3IyiMX78QmVNy/RrjoBlIEmxWIn6QSRwxYZq+5HAXCCjUu54tXgCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWcznHFMDLUxka/PNSzaD4xKNriMB8GA1UdIwQY MBaAFPEzOmdUwAjtu6xfMuvQGepkc66oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRNNloxVEFDTzI3ckY4eTY5QVo2bVJ6cnFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS84NDlkZmQtOTM5ZC00YzVkLThlYjYt ZjA1OTY3MGRhZjNkLzEvOFRNNloxVEFDTzI3ckY4eTY5QVo2bVJ6cnFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS84NDlkZmQtOTM5ZC00YzVkLThlYjYtZjA1OTY3MGRhZjNk LzEvOFRNNloxVEFDTzI3ckY4eTY5QVo2bVJ6cnFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr9fRsBRh 8+NVllLFfBbEdkHq6dsDyKwFhtksdHGeTQuiQl2yCvF836YvXABi9OvfdW5wXHzm tpRqNVZKApMQw2hhqr7ROD1p0+rSNmFN4p4r9xFAfbu8gs0lurUeham08J90ZQvQ pBeNv1p0Jr65J3CG/kc27iJTNo51GtgxGmFxhRjoeP1qcHeAKc+OjMuXC8xkerrt Ob14b6uPGYuLksABSgN+XHDTAcxgz6TMVbkENgILIfpbfMnXFHaOK2/raGpPtn6Y le6Q7pXf97FY7L0KK8u/MoHEmP+84b46Gbz8BM4ETN3gLQV48xpZOSM4S9mJcHy2 VE7rjIN0/ECcQw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:49 2025 by rpki-client