This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft File: 8vZyvbewdlkUflh9RDGqYE92o4Q.mft (raw, json) Hash identifier: 3WVq36tzYtllP3DSUJaGGtL2T/Fx0JnKMcV85fp5Aao= Subject key identifier: 64:BF:32:A3:06:96:E6:B7:2C:26:FC:A9:CC:33:6A:CD:0F:1C:98:09 Authority key identifier: F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84 Certificate issuer: /CN=f2f672bdb7b07659147e587d4431aa604f76a384 Certificate serial: 019AF2ADA2BFC804F6C5496B3405848ACE28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 08:00:56 +0000 Manifest this update: Sat 06 Dec 2025 08:00:56 +0000 Manifest next update: Sun 07 Dec 2025 08:00:56 +0000 Files and hashes: 1: 8vZyvbewdlkUflh9RDGqYE92o4Q.crl (hash: HX0p+oN0+dkI6m9W2FwjyeEvB+OD9fPdW5XYFHvi1kg=) 2: MZX1sQ-Npgh0Pud-IcGKNSLyo0k.roa (hash: U9/To+oLXeceO29CXxgG6V0U8rAZo8+5KCoNTba0dLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a2:bf:c8:04:f6:c5:49:6b:34:05:84:8a:ce:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f672bdb7b07659147e587d4431aa604f76a384 Validity Not Before: Dec 6 08:00:56 2025 GMT Not After : Dec 7 08:00:56 2025 GMT Subject: CN=64bf32a30696e6b72c26fca9cc336acd0f1c9809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:03:62:63:ab:bb:0d:22:ef:ff:96:b7:0b:e9: 75:81:64:c7:ff:05:f6:03:68:73:8a:60:91:cf:4f: d9:17:a8:22:18:c4:b9:da:7a:37:1d:9a:04:f1:bf: 9b:4b:31:b2:ff:db:5f:a7:12:88:59:57:b3:63:6a: 62:01:ef:86:99:a6:ce:7b:ee:7c:7e:8a:cb:61:fb: 8c:34:4a:3c:ed:ad:ad:b1:56:15:40:6f:a7:fc:ff: cd:6c:b2:11:54:b9:42:08:52:c8:1f:49:00:e9:5e: 5e:79:32:3c:df:b6:05:b7:b5:8f:61:b1:42:f7:7b: 39:47:a5:87:d3:30:3f:b4:9d:b5:7a:73:4c:5b:c7: b0:c0:28:0b:ea:e6:93:51:98:21:36:15:d5:4f:44: 42:40:b5:52:7f:83:01:ee:67:72:2e:c8:83:0b:ed: 7e:ea:63:a0:8f:37:27:85:41:3a:9f:55:66:37:2e: 85:a9:ea:8f:73:fd:e3:4b:f5:73:5d:2f:5f:2c:8e: 22:c0:59:de:d0:87:85:cc:b6:a3:c2:a6:f1:8e:02: 8e:9f:82:28:21:15:c3:30:3f:83:79:35:6d:dd:e6: 4c:5d:b4:b8:1b:8d:3e:a5:15:cf:2f:f1:ef:e8:83: e9:b3:9c:b3:46:7f:36:ca:ee:b1:ea:d8:73:26:9f: 67:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BF:32:A3:06:96:E6:B7:2C:26:FC:A9:CC:33:6A:CD:0F:1C:98:09 X509v3 Authority Key Identifier: keyid:F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:cb:b0:30:01:eb:85:9d:5c:32:87:34:ab:b5:ef:12:d3:44: bc:39:48:28:45:c7:34:10:2b:6a:94:0e:2d:ac:05:ee:b4:0e: 7b:72:4e:56:e1:f5:d8:0e:e2:73:76:c9:d5:7f:51:d3:3a:34: 18:40:fc:74:02:2a:a1:67:ce:2c:0a:7e:6c:c1:27:c8:d0:dc: 40:16:c6:38:1a:45:55:b8:ea:9d:2c:14:8d:d2:72:df:a1:ab: 3d:66:f9:ba:62:dc:ef:37:b3:c8:76:98:ef:1e:91:b6:da:e9: 0a:ee:25:66:5c:c4:2f:b2:cb:74:ea:ef:7f:a3:65:ea:a5:78: 30:ca:75:16:6b:a8:e3:97:ce:22:ca:a8:dd:3b:b4:4d:0f:71: 84:eb:ac:8f:5a:b4:de:68:ad:51:13:1f:09:ea:6a:fb:9b:16: d1:ce:d6:22:33:57:db:6c:ab:88:2d:6d:16:65:6a:98:87:c2: b7:f6:61:6b:eb:16:7d:1e:12:47:fc:25:58:59:c7:bf:f8:61: de:66:80:c4:be:5f:0d:c3:ac:68:82:92:ea:45:2f:e3:1a:0e: fb:0f:77:fc:7d:b0:be:cc:e6:38:c4:2c:24:b4:39:16:cc:41: 6e:ec:98:54:22:e1:00:81:95:94:45:6a:c5:1f:44:1e:cd:51: 4a:0d:2c:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryraK/yAT2xUlrNAWEis4oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZjY3MmJkYjdiMDc2NTkxNDdlNTg3ZDQ0MzFhYTYwNGY3 NmEzODQwHhcNMjUxMjA2MDgwMDU2WhcNMjUxMjA3MDgwMDU2WjAzMTEwLwYDVQQD Eyg2NGJmMzJhMzA2OTZlNmI3MmMyNmZjYTljYzMzNmFjZDBmMWM5ODA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wNiY6u7DSLv/5a3C+l1gWTH/wX2 A2hzimCRz0/ZF6giGMS52no3HZoE8b+bSzGy/9tfpxKIWVezY2piAe+GmabOe+58 forLYfuMNEo87a2tsVYVQG+n/P/NbLIRVLlCCFLIH0kA6V5eeTI837YFt7WPYbFC 93s5R6WH0zA/tJ21enNMW8ewwCgL6uaTUZghNhXVT0RCQLVSf4MB7mdyLsiDC+1+ 6mOgjzcnhUE6n1VmNy6FqeqPc/3jS/VzXS9fLI4iwFne0IeFzLajwqbxjgKOn4Io IRXDMD+DeTVt3eZMXbS4G40+pRXPL/Hv6IPps5yzRn82yu6x6thzJp9nKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGS/MqMGlua3LCb8qcwzas0PHJgJMB8GA1UdIwQY MBaAFPL2cr23sHZZFH5YfUQxqmBPdqOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8zYjFmNTYtODcwNy00NzJjLTg5NzEt NjI2ZWY4OGYyMWE5LzEvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8zYjFmNTYtODcwNy00NzJjLTg5NzEtNjI2ZWY4OGYyMWE5 LzEvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8uwMAHr hZ1cMoc0q7XvEtNEvDlIKEXHNBArapQOLawF7rQOe3JOVuH12A7ic3bJ1X9R0zo0 GED8dAIqoWfOLAp+bMEnyNDcQBbGOBpFVbjqnSwUjdJy36GrPWb5umLc7zezyHaY 7x6RttrpCu4lZlzEL7LLdOrvf6Nl6qV4MMp1Fmuo45fOIsqo3Tu0TQ9xhOusj1q0 3mitURMfCepq+5sW0c7WIjNX22yriC1tFmVqmIfCt/Zha+sWfR4SR/wlWFnHv/hh 3maAxL5fDcOsaIKS6kUv4xoO+w93/H2wvszmOMQsJLQ5FsxBbuyYVCLhAIGVlEVq xR9EHs1RSg0sjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:06 2025 by rpki-client