This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft File: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft (raw, json) Hash identifier: YKbN9yt3e+1AVIjyFae+o9AZpYvmPng1JXgyydGnKKg= Subject key identifier: 0D:07:B9:E5:37:AB:8E:5B:4F:F3:1C:22:23:D9:DE:F5:53:CA:7D:5E Authority key identifier: F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F Certificate issuer: /CN=f2d4116975d3e87bd8a28e643c69a3081de0019f Certificate serial: 019AF12E2F385BD339C07DFDF411E9EFD277 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft Manifest number: 0B6E Signing time: Sat 06 Dec 2025 01:02:07 +0000 Manifest this update: Sat 06 Dec 2025 01:02:07 +0000 Manifest next update: Sun 07 Dec 2025 01:02:07 +0000 Files and hashes: 1: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl (hash: wEy5u8JDA+38jr4079BaYYYDIgLcLuAXbHPkFsGrMFo=) 2: SeOuDtHpMnNedoWWR3YCwAFSo6Q.roa (hash: KKrsIQvSnuAAjrYFyC+00nKT3QiU4KGPAaz0PYrqnb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:2f:38:5b:d3:39:c0:7d:fd:f4:11:e9:ef:d2:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2d4116975d3e87bd8a28e643c69a3081de0019f Validity Not Before: Dec 6 01:02:07 2025 GMT Not After : Dec 7 01:02:07 2025 GMT Subject: CN=0d07b9e537ab8e5b4ff31c2223d9def553ca7d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:26:61:10:38:a4:52:ca:c8:9d:e9:81:41: 10:c5:60:c9:c2:3d:4e:d5:f3:74:06:67:76:0f:7a: 4a:8c:e6:d7:a6:fd:6f:8c:cd:b3:bd:55:09:b8:dc: 1c:2a:71:df:ca:95:2d:19:c9:bd:c8:99:74:0d:b0: 3d:59:5a:ec:44:88:5b:9d:a1:a0:58:5e:60:08:36: 30:3d:ac:c6:3f:23:7f:f1:bf:c6:bd:0e:df:d2:39: d6:71:f2:86:d3:10:0b:f7:25:ea:b2:54:60:5b:93: 4e:1a:f5:37:2c:49:89:2d:80:e6:50:89:0f:c0:bb: 5d:a8:6b:d2:5a:eb:86:c3:0b:8d:1c:fa:5b:d9:77: 32:df:14:55:98:28:b2:69:22:0f:2f:13:70:ac:04: 97:9d:28:41:56:76:d9:96:30:37:a4:b5:40:9d:5e: 7b:7a:19:39:30:1f:8c:24:5b:85:42:54:20:99:92: b3:5e:d1:ef:bf:10:76:30:a9:43:8f:b6:10:5b:90: 77:90:32:33:36:8a:2e:cc:46:a1:b5:6a:1e:6d:1a: b8:97:af:77:98:f9:ee:fc:ac:ae:4f:34:96:01:b7: 8f:a6:a4:57:8e:35:9f:52:09:50:67:23:45:88:d9: aa:b5:d2:c1:b6:b9:61:f5:11:6a:3b:4f:66:2b:1c: 74:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:07:B9:E5:37:AB:8E:5B:4F:F3:1C:22:23:D9:DE:F5:53:CA:7D:5E X509v3 Authority Key Identifier: keyid:F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:72:33:38:06:98:a5:3d:37:da:18:01:13:ca:4f:0d:b2:a3: 65:a7:80:9b:05:07:f6:24:ca:d1:7c:39:01:39:1c:10:f0:be: f0:59:9e:36:e1:4f:36:80:bd:fa:38:6b:cb:98:9a:fd:bb:56: 31:a8:9c:33:ce:2c:d9:b0:44:77:c8:39:36:3e:13:40:2b:ec: e4:03:69:68:b6:35:cf:9a:4d:a2:f9:e4:dd:b1:2d:f4:c7:74: 48:16:97:ad:87:fc:88:5e:54:96:60:7a:5c:1a:70:20:41:66: ab:c7:56:6a:4a:9e:f5:58:96:e9:e9:30:c8:f5:9d:26:db:29: e7:01:de:0a:a8:11:54:52:7c:89:34:4d:4a:66:ee:6a:36:cc: eb:98:c7:37:d0:4f:bd:9f:0b:59:c4:5f:94:47:1b:22:ba:ac: 5a:1b:f6:44:15:d5:70:c4:47:52:b1:18:64:4b:26:f7:05:cc: 89:73:85:8a:7c:a5:ef:62:d7:4a:cc:93:3a:bc:2c:a8:20:45: 51:a0:e3:16:65:d0:63:13:c5:80:69:17:57:ef:ca:fa:79:62: 76:d0:2f:58:98:66:70:9c:df:5e:18:3a:3f:0f:e0:4e:11:91: 67:27:7e:44:22:ba:f6:14:f9:a1:7f:80:d4:cc:52:26:db:38: b1:a6:0e:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLi84W9M5wH399BHp79J3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZDQxMTY5NzVkM2U4N2JkOGEyOGU2NDNjNjlhMzA4MWRl MDAxOWYwHhcNMjUxMjA2MDEwMjA3WhcNMjUxMjA3MDEwMjA3WjAzMTEwLwYDVQQD EygwZDA3YjllNTM3YWI4ZTViNGZmMzFjMjIyM2Q5ZGVmNTUzY2E3ZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtikmYRA4pFLKyJ3pgUEQxWDJwj1O 1fN0Bmd2D3pKjObXpv1vjM2zvVUJuNwcKnHfypUtGcm9yJl0DbA9WVrsRIhbnaGg WF5gCDYwPazGPyN/8b/GvQ7f0jnWcfKG0xAL9yXqslRgW5NOGvU3LEmJLYDmUIkP wLtdqGvSWuuGwwuNHPpb2Xcy3xRVmCiyaSIPLxNwrASXnShBVnbZljA3pLVAnV57 ehk5MB+MJFuFQlQgmZKzXtHvvxB2MKlDj7YQW5B3kDIzNoouzEahtWoebRq4l693 mPnu/KyuTzSWAbePpqRXjjWfUglQZyNFiNmqtdLBtrlh9RFqO09mKxx0cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0HueU3q45bT/McIiPZ3vVTyn1eMB8GA1UdIwQY MBaAFPLUEWl10+h72KKOZDxpowgd4AGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHRRUmFYWFQ2SHZZb281a1BHbWpDQjNnQVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi81OTk2ZTEtMmZmMC00YmI3LWE4ODAt ZmFhYjljYWUxZTgxLzEvOHRRUmFYWFQ2SHZZb281a1BHbWpDQjNnQVo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi81OTk2ZTEtMmZmMC00YmI3LWE4ODAtZmFhYjljYWUxZTgx LzEvOHRRUmFYWFQ2SHZZb281a1BHbWpDQjNnQVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHIzOAaY pT032hgBE8pPDbKjZaeAmwUH9iTK0Xw5ATkcEPC+8FmeNuFPNoC9+jhry5ia/btW MaicM84s2bBEd8g5Nj4TQCvs5ANpaLY1z5pNovnk3bEt9Md0SBaXrYf8iF5UlmB6 XBpwIEFmq8dWakqe9ViW6ekwyPWdJtsp5wHeCqgRVFJ8iTRNSmbuajbM65jHN9BP vZ8LWcRflEcbIrqsWhv2RBXVcMRHUrEYZEsm9wXMiXOFinyl72LXSsyTOrwsqCBF UaDjFmXQYxPFgGkXV+/K+nlidtAvWJhmcJzfXhg6Pw/gThGRZyd+RCK69hT5oX+A 1MxSJts4saYO8w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:35:19 2025 by rpki-client