This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft File: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft (raw, json) Hash identifier: A8S99Upb9KueDOF7qcS7mkcuuLeaSgTla+d3+VznjM4= Subject key identifier: 3E:2B:66:A9:3D:37:B2:92:88:EE:39:27:92:14:13:0C:84:F4:59:4A Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4 Certificate issuer: /CN=f22bed3f37cd72826511c574560deb55542550e4 Certificate serial: 019AF31BC36FC823A1D2B22A177A6E979F06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:01:14 +0000 Manifest this update: Sat 06 Dec 2025 10:01:14 +0000 Manifest next update: Sun 07 Dec 2025 10:01:14 +0000 Files and hashes: 1: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl (hash: Y9eqAsns/UBVcTLtnvn/JhKJ91q6ZFxcW0g5D+Svvt0=) 2: d-g1g1WIQH2eW5zQOoLECyf2CbU.roa (hash: 4hlHKC2roVEpNMRQA5ne6l615543DSp4qxsP/od40+A=) 3: kHVwAjV50K04XcEC52VZ9Z8xRlA.roa (hash: 2Boh063HYNHe4qTfS7TAeZC6aTKdY96/vHBa+9B6mso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:c3:6f:c8:23:a1:d2:b2:2a:17:7a:6e:97:9f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4 Validity Not Before: Dec 6 10:01:14 2025 GMT Not After : Dec 7 10:01:14 2025 GMT Subject: CN=3e2b66a93d37b29288ee39279214130c84f4594a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:27:ce:2f:46:c8:df:59:e9:12:e3:4f:55:27: cf:65:2b:a9:d1:c9:c2:1d:55:49:45:7f:a9:04:81: 9d:75:0a:0c:21:00:5f:08:8d:35:fd:c8:68:27:f8: 94:e3:97:1b:4c:c6:5c:10:3c:90:e4:86:89:29:98: de:d2:95:75:57:06:3e:4e:18:ea:ed:d5:ef:0e:21: c1:01:45:13:49:c9:d1:c1:67:54:43:4d:e6:63:cc: 32:86:32:2d:e0:30:57:d0:28:f6:3a:62:95:ec:7d: d8:de:2c:4b:80:94:7e:d0:ea:83:a3:77:89:67:60: dd:5b:fe:13:81:58:9d:bf:a8:91:05:65:12:27:e4: 32:92:c6:67:a0:dd:91:7e:cf:ce:62:8c:b6:5a:af: 1f:04:4f:75:54:ec:ad:de:7a:0a:07:0b:78:66:6e: d3:24:4b:73:07:6a:10:05:81:a3:73:44:dd:42:a2: f9:c4:fb:32:00:ed:ec:8e:56:63:c9:22:ec:59:59: 2b:ae:6e:f0:6a:5a:24:93:be:f4:bb:b2:15:0f:eb: 94:f1:24:b9:1e:e6:d7:52:e7:da:50:40:73:d1:fe: ce:88:28:85:1d:28:47:70:8b:93:b5:0d:b1:fb:6d: 53:7b:9f:4a:1a:1d:d0:dd:ef:06:9f:50:ab:6d:f4: 84:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2B:66:A9:3D:37:B2:92:88:EE:39:27:92:14:13:0C:84:F4:59:4A X509v3 Authority Key Identifier: keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e0:fe:93:1d:76:9a:d9:0a:9a:71:76:12:54:7a:29:96:31: c2:76:73:3c:c9:dd:a0:0c:4b:14:05:fa:2b:8f:42:1c:e0:7f: 2f:25:38:d0:e8:ff:b9:ea:e8:93:07:56:d9:ab:24:6e:91:45: 9c:3a:20:a3:5c:29:20:d1:c5:91:3e:62:fe:be:58:e7:cd:60: b9:6d:74:ac:83:42:d2:70:0c:a2:cc:30:4c:08:3c:9c:5f:dc: e2:e0:b7:a1:3f:ac:e4:be:7f:92:0e:e2:e3:a6:57:f6:9a:2d: 5e:30:0c:4f:50:4f:70:ea:30:27:e1:b6:19:94:52:41:6d:e8: ba:da:2b:a4:51:41:dc:da:14:0a:a7:44:bc:70:c7:e9:be:6c: 67:d6:5d:30:d6:3c:78:6a:f8:dd:6a:b9:fe:4f:1a:a4:7d:01: 4f:e3:08:35:ba:38:64:bd:70:02:ff:b2:1d:12:df:0f:03:01: 5d:97:7f:70:fd:33:15:79:17:08:4d:86:a9:fb:98:43:1a:19: f8:36:e1:11:0a:89:df:9e:ae:f3:d2:a3:8c:65:3d:30:5a:3d: 39:4e:83:74:bf:dc:69:34:85:89:5b:bc:23:74:b6:99:ac:04: 14:af:97:3e:ab:79:8b:e3:39:99:2e:d3:fd:c0:5e:ff:ec:a7: 8c:cc:d8:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8NvyCOh0rIqF3pul58GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMmJlZDNmMzdjZDcyODI2NTExYzU3NDU2MGRlYjU1NTQy NTUwZTQwHhcNMjUxMjA2MTAwMTE0WhcNMjUxMjA3MTAwMTE0WjAzMTEwLwYDVQQD EygzZTJiNjZhOTNkMzdiMjkyODhlZTM5Mjc5MjE0MTMwYzg0ZjQ1OTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSfOL0bI31npEuNPVSfPZSup0cnC HVVJRX+pBIGddQoMIQBfCI01/choJ/iU45cbTMZcEDyQ5IaJKZje0pV1VwY+Thjq 7dXvDiHBAUUTScnRwWdUQ03mY8wyhjIt4DBX0Cj2OmKV7H3Y3ixLgJR+0OqDo3eJ Z2DdW/4TgVidv6iRBWUSJ+QyksZnoN2Rfs/OYoy2Wq8fBE91VOyt3noKBwt4Zm7T JEtzB2oQBYGjc0TdQqL5xPsyAO3sjlZjySLsWVkrrm7walokk770u7IVD+uU8SS5 HubXUufaUEBz0f7OiCiFHShHcIuTtQ2x+21Te59KGh3Q3e8Gn1CrbfSE5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4rZqk9N7KSiO45J5IUEwyE9FlKMB8GA1UdIwQY MBaAFPIr7T83zXKCZRHFdFYN61VUJVDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGl2dFB6Zk5jb0psRWNWMFZnM3JWVlFsVU9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8yOTRmYTEtZTkzOC00Y2QyLTlhODkt MjkwNjJlODcwYjY0LzEvOGl2dFB6Zk5jb0psRWNWMFZnM3JWVlFsVU9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8yOTRmYTEtZTkzOC00Y2QyLTlhODktMjkwNjJlODcwYjY0 LzEvOGl2dFB6Zk5jb0psRWNWMFZnM3JWVlFsVU9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOD+kx12 mtkKmnF2ElR6KZYxwnZzPMndoAxLFAX6K49CHOB/LyU40Oj/uerokwdW2askbpFF nDogo1wpINHFkT5i/r5Y581guW10rINC0nAMoswwTAg8nF/c4uC3oT+s5L5/kg7i 46ZX9potXjAMT1BPcOowJ+G2GZRSQW3outorpFFB3NoUCqdEvHDH6b5sZ9ZdMNY8 eGr43Wq5/k8apH0BT+MINbo4ZL1wAv+yHRLfDwMBXZd/cP0zFXkXCE2GqfuYQxoZ +DbhEQqJ356u89KjjGU9MFo9OU6DdL/caTSFiVu8I3S2mawEFK+XPqt5i+M5mS7T /cBe/+ynjMzYWA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:31:03 2025 by rpki-client