This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft File: 8mAhR5HPhJn8k68B96Q_XL6QKpg.mft (raw, json) Hash identifier: AHM2m/ctE3InSB53hSEwMt9ACz9Ba54s6qoqmAOaJ0Q= Subject key identifier: D8:A8:25:36:6A:E6:86:9B:26:C9:64:DF:6A:CE:F5:63:DB:A8:87:D2 Authority key identifier: F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98 Certificate issuer: /CN=f260214791cf8499fc93af01f7a43f5cbe902a98 Certificate serial: 019AF12DA976A0E9F9365DF2B34507AB32E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft Manifest number: 1046 Signing time: Sat 06 Dec 2025 01:01:32 +0000 Manifest this update: Sat 06 Dec 2025 01:01:32 +0000 Manifest next update: Sun 07 Dec 2025 01:01:32 +0000 Files and hashes: 1: 8mAhR5HPhJn8k68B96Q_XL6QKpg.crl (hash: UvGVR/fyIygx3utQCJUwHpFKcx3fSfC/48b9Msoqt68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.crl rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a9:76:a0:e9:f9:36:5d:f2:b3:45:07:ab:32:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f260214791cf8499fc93af01f7a43f5cbe902a98 Validity Not Before: Dec 6 01:01:32 2025 GMT Not After : Dec 7 01:01:32 2025 GMT Subject: CN=d8a825366ae6869b26c964df6acef563dba887d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:a9:d2:65:2e:6c:17:19:18:57:57:0f:c0:6c: de:7e:f2:b4:94:e8:ff:cf:09:fe:55:44:a8:97:c1: 4e:f9:af:02:74:e8:f7:5d:9c:c9:4f:a0:e2:da:fb: ee:b4:16:65:c4:64:c9:0b:c3:8a:49:b2:17:2a:b6: aa:ea:b9:0a:6c:d3:a3:50:07:da:d4:84:52:e2:98: 4f:2d:62:3a:71:12:9d:a7:bf:57:ae:ba:0f:f9:83: 73:63:f4:84:ff:04:6c:ad:87:23:d5:1d:8f:f5:cd: 43:52:46:02:5d:39:99:51:a6:dc:dd:0f:43:e6:ff: 11:60:75:f3:8f:ce:17:da:e1:7f:cd:86:eb:7a:9e: e2:a0:f8:5a:23:17:d2:8a:03:ef:12:59:40:59:47: f7:74:d6:42:6b:91:be:44:b9:16:ab:fc:a5:d9:bd: 2f:91:84:a2:cd:ba:8f:6f:13:8d:0a:8d:42:31:54: fc:ac:ed:28:28:bc:8c:8d:53:1e:5c:fc:00:fa:8e: be:87:d2:f5:7a:9d:e6:8c:7e:fb:3a:d7:d5:d5:a2: 5d:02:06:a4:ab:f3:5a:28:5b:ca:d7:d6:4e:e8:94: 63:69:77:18:fe:f9:de:33:f6:62:66:25:f1:0d:b5: 49:11:9d:09:33:05:12:b7:72:d3:98:53:89:49:75: 5e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A8:25:36:6A:E6:86:9B:26:C9:64:DF:6A:CE:F5:63:DB:A8:87:D2 X509v3 Authority Key Identifier: keyid:F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e1:a0:dc:06:ba:84:3b:d1:9b:b6:4e:f0:46:b5:3e:d9:37: da:dc:af:4e:b1:d7:c0:e0:cc:48:b1:d7:27:ba:d7:e3:0e:98: d4:a7:95:89:ec:63:c1:69:e5:ea:44:c4:1a:75:33:af:89:a1: c4:5b:a4:45:9e:88:85:64:bc:48:bd:79:43:09:e4:2c:a4:8a: 28:ce:e7:9a:19:20:fc:4a:b5:99:e2:1f:c8:fa:5b:f5:e3:c6: ab:e5:cd:a6:ea:6a:31:00:7b:ec:30:6f:fe:20:4b:69:44:7c: 61:b4:cc:7b:68:5f:6c:9e:37:01:da:c9:55:a1:30:b1:76:9b: 70:6f:c0:fd:d0:80:a7:3f:b2:d6:2f:c5:73:54:75:df:a6:35: a3:60:fe:71:28:0c:b2:f3:bb:07:4b:80:c4:8e:7f:f6:a9:17: 5d:9d:63:c1:f5:d3:70:0e:26:b6:43:8b:ef:a6:6c:89:17:81: f2:03:12:a1:7a:4f:a4:cf:fc:a3:e3:19:ef:f5:e0:2c:14:51: a8:38:80:72:c6:7f:78:88:66:c5:49:46:7c:21:3b:0a:29:7a: b9:b9:9f:a3:e0:bf:5b:23:d0:6b:81:d3:79:4e:df:76:9a:7f: ed:f4:12:11:55:d6:db:bf:4c:0f:41:4f:1c:f7:29:c5:32:86: 24:83:35:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLal2oOn5Nl3ys0UHqzLhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjAyMTQ3OTFjZjg0OTlmYzkzYWYwMWY3YTQzZjVjYmU5 MDJhOTgwHhcNMjUxMjA2MDEwMTMyWhcNMjUxMjA3MDEwMTMyWjAzMTEwLwYDVQQD EyhkOGE4MjUzNjZhZTY4NjliMjZjOTY0ZGY2YWNlZjU2M2RiYTg4N2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+6nSZS5sFxkYV1cPwGzefvK0lOj/ zwn+VUSol8FO+a8CdOj3XZzJT6Di2vvutBZlxGTJC8OKSbIXKraq6rkKbNOjUAfa 1IRS4phPLWI6cRKdp79XrroP+YNzY/SE/wRsrYcj1R2P9c1DUkYCXTmZUabc3Q9D 5v8RYHXzj84X2uF/zYbrep7ioPhaIxfSigPvEllAWUf3dNZCa5G+RLkWq/yl2b0v kYSizbqPbxONCo1CMVT8rO0oKLyMjVMeXPwA+o6+h9L1ep3mjH77OtfV1aJdAgak q/NaKFvK19ZO6JRjaXcY/vneM/ZiZiXxDbVJEZ0JMwUSt3LTmFOJSXVeLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNioJTZq5oabJslk32rO9WPbqIfSMB8GA1UdIwQY MBaAFPJgIUeRz4SZ/JOvAfekP1y+kCqYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1BaFI1SFBoSm44azY4Qjk2UV9YTDZRS3BnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny81NzU5MTUtZmY3Zi00MzY0LWEzZTYt NzMxZThiMTFkNTVkLzEvOG1BaFI1SFBoSm44azY4Qjk2UV9YTDZRS3BnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny81NzU5MTUtZmY3Zi00MzY0LWEzZTYtNzMxZThiMTFkNTVk LzEvOG1BaFI1SFBoSm44azY4Qjk2UV9YTDZRS3BnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnuGg3Aa6 hDvRm7ZO8Ea1Ptk32tyvTrHXwODMSLHXJ7rX4w6Y1KeViexjwWnl6kTEGnUzr4mh xFukRZ6IhWS8SL15QwnkLKSKKM7nmhkg/Eq1meIfyPpb9ePGq+XNpupqMQB77DBv /iBLaUR8YbTMe2hfbJ43AdrJVaEwsXabcG/A/dCApz+y1i/Fc1R136Y1o2D+cSgM svO7B0uAxI5/9qkXXZ1jwfXTcA4mtkOL76ZsiReB8gMSoXpPpM/8o+MZ7/XgLBRR qDiAcsZ/eIhmxUlGfCE7Cil6ubmfo+C/WyPQa4HTeU7fdpp/7fQSEVXW279MD0FP HPcpxTKGJIM1Vw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:07 2025 by rpki-client