This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft File: 8BGVyAze5CsGiNuOk6aLRZuFjm4.mft (raw, json) Hash identifier: /YacuL//ZXSn6wr7/8WaY08oMYn7BpS0D/DzBKxha3A= Subject key identifier: BD:A2:85:4C:D4:1C:74:1F:6D:97:08:B5:89:EF:F0:83:C3:95:8E:94 Authority key identifier: F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E Certificate issuer: /CN=f01195c80cdee42b0688db8e93a68b459b858e6e Certificate serial: 019B3343A5875E69418593719C8EA9D589D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft Manifest number: 056A Signing time: Thu 18 Dec 2025 21:00:29 +0000 Manifest this update: Thu 18 Dec 2025 21:00:29 +0000 Manifest next update: Fri 19 Dec 2025 21:00:29 +0000 Files and hashes: 1: 8BGVyAze5CsGiNuOk6aLRZuFjm4.crl (hash: cuTZHtElJOx8cbKIfXop72k+a2lXST0BtGPq615GOLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:a5:87:5e:69:41:85:93:71:9c:8e:a9:d5:89:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f01195c80cdee42b0688db8e93a68b459b858e6e Validity Not Before: Dec 18 21:00:29 2025 GMT Not After : Dec 19 21:00:29 2025 GMT Subject: CN=bda2854cd41c741f6d9708b589eff083c3958e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4c:91:fa:9e:22:65:63:81:0c:ff:bb:e2:f1: c1:11:a7:52:b1:dd:2b:86:ed:d0:62:a9:ed:fc:2f: d2:9b:31:dd:83:07:47:88:63:79:90:ed:a9:50:c6: 64:be:4f:a9:d4:24:7f:27:26:54:11:05:9b:05:c8: 65:1b:7a:b9:c0:ba:df:a0:5f:9b:b0:bf:0f:c4:f5: 6a:0f:ab:2a:7b:14:f2:46:f1:85:a4:46:6d:cb:07: 29:4c:a1:db:2b:bf:f9:a0:ab:80:e6:f0:20:0c:ac: d6:b7:a8:36:24:2f:87:6b:fd:db:8e:fa:30:d8:7c: 6c:5c:be:44:70:19:be:d4:d1:85:cf:b7:74:66:02: bd:5a:eb:43:02:27:aa:cc:45:c8:ec:9b:73:4c:40: a9:50:fa:66:53:4d:11:6a:ac:11:d6:5d:12:0b:aa: a0:5b:05:61:d6:16:22:ec:c8:8c:a1:66:6e:bf:6a: a3:f9:14:a5:47:ee:6b:c7:2b:cf:4f:22:6d:42:2f: 4f:c5:38:04:f3:13:4d:7a:16:8b:b3:01:1a:04:59: 91:d2:4b:22:9b:dc:9c:d3:09:aa:02:68:14:8e:4a: 26:3f:57:c4:b4:9b:68:15:1a:6d:25:0d:a2:f9:1c: f6:1f:c5:58:8a:cd:2e:4b:04:dc:3d:a3:b1:7a:b0: 70:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A2:85:4C:D4:1C:74:1F:6D:97:08:B5:89:EF:F0:83:C3:95:8E:94 X509v3 Authority Key Identifier: keyid:F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:5d:cb:14:9c:bb:a3:f0:ad:02:0a:17:f4:d9:2f:12:49:6d: cd:1e:cb:a6:22:da:f3:db:d2:29:19:fb:2e:a0:a6:62:71:fa: 15:16:9e:64:1a:a0:10:8f:55:70:25:c0:84:7d:69:12:94:06: f0:0b:2d:ab:48:75:e4:d3:16:5c:4a:20:1f:66:ae:61:83:ed: 65:f9:ef:66:ed:da:27:59:98:71:63:f1:24:90:d2:40:2d:2d: 4a:15:57:37:3c:f0:1b:0a:52:c2:b3:07:e5:8f:ca:aa:97:ff: d2:fe:39:00:3d:4a:43:59:6d:bb:f9:50:d5:d5:0b:20:a9:29: 87:bd:0f:c7:bc:8a:70:aa:92:16:2c:09:a2:bc:ce:cf:20:bb: dc:a6:4e:63:fc:4d:6a:a4:c0:55:67:ed:45:52:48:bd:0d:c8: 15:6b:21:35:4c:f8:c3:e6:6d:5a:1f:ae:ad:8c:9f:ad:ee:8c: ce:c5:c0:62:f5:af:12:57:99:0e:c1:e1:98:b0:1e:73:98:88: 2b:10:16:e0:de:b7:9f:35:b6:c4:15:93:31:9c:86:19:56:c5: 6a:75:58:ce:27:7d:29:ee:54:38:5e:8d:99:a8:32:bd:e6:df: 6a:0c:b8:a5:79:53:0a:67:a6:ec:1a:2d:98:2c:b8:d5:7e:cb: 8c:16:c0:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ6WHXmlBhZNxnI6p1YnZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMTE5NWM4MGNkZWU0MmIwNjg4ZGI4ZTkzYTY4YjQ1OWI4 NThlNmUwHhcNMjUxMjE4MjEwMDI5WhcNMjUxMjE5MjEwMDI5WjAzMTEwLwYDVQQD EyhiZGEyODU0Y2Q0MWM3NDFmNmQ5NzA4YjU4OWVmZjA4M2MzOTU4ZTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEyR+p4iZWOBDP+74vHBEadSsd0r hu3QYqnt/C/SmzHdgwdHiGN5kO2pUMZkvk+p1CR/JyZUEQWbBchlG3q5wLrfoF+b sL8PxPVqD6sqexTyRvGFpEZtywcpTKHbK7/5oKuA5vAgDKzWt6g2JC+Ha/3bjvow 2HxsXL5EcBm+1NGFz7d0ZgK9WutDAieqzEXI7JtzTECpUPpmU00RaqwR1l0SC6qg WwVh1hYi7MiMoWZuv2qj+RSlR+5rxyvPTyJtQi9PxTgE8xNNehaLswEaBFmR0ksi m9yc0wmqAmgUjkomP1fEtJtoFRptJQ2i+Rz2H8VYis0uSwTcPaOxerBwhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2ihUzUHHQfbZcItYnv8IPDlY6UMB8GA1UdIwQY MBaAFPARlcgM3uQrBojbjpOmi0WbhY5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEJHVnlBemU1Q3NHaU51T2s2YUxSWnVGam00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kNzJlNjctMTI2Mi00MThiLTg1NjAt ZGY3YWM2YThhZTJkLzEvOEJHVnlBemU1Q3NHaU51T2s2YUxSWnVGam00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9kNzJlNjctMTI2Mi00MThiLTg1NjAtZGY3YWM2YThhZTJk LzEvOEJHVnlBemU1Q3NHaU51T2s2YUxSWnVGam00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnV3LFJy7 o/CtAgoX9NkvEkltzR7LpiLa89vSKRn7LqCmYnH6FRaeZBqgEI9VcCXAhH1pEpQG 8Astq0h15NMWXEogH2auYYPtZfnvZu3aJ1mYcWPxJJDSQC0tShVXNzzwGwpSwrMH 5Y/Kqpf/0v45AD1KQ1ltu/lQ1dULIKkph70Px7yKcKqSFiwJorzOzyC73KZOY/xN aqTAVWftRVJIvQ3IFWshNUz4w+ZtWh+urYyfre6MzsXAYvWvEleZDsHhmLAec5iI KxAW4N63nzW2xBWTMZyGGVbFanVYzid9Ke5UOF6Nmagyvebfagy4pXlTCmem7Bot mCy41X7LjBbA8g== -----END CERTIFICATE-----Generated at Thu Dec 18 23:10:21 2025 by rpki-client