This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft File: 8G37T34-N0VYDoyPxHAj_7H6kW0.mft (raw, json) Hash identifier: kqrlbe3M9QxNkEi+JuxRoon7MUGcLpHzWL7t7jsVvSs= Subject key identifier: 12:F4:1E:8A:6D:E0:A4:65:20:40:F9:9D:08:F2:C3:32:44:3D:3D:B7 Authority key identifier: F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D Certificate issuer: /CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d Certificate serial: 019AF31C968151DB2FFDF32C5A04702298F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft Manifest number: 0699 Signing time: Sat 06 Dec 2025 10:02:08 +0000 Manifest this update: Sat 06 Dec 2025 10:02:08 +0000 Manifest next update: Sun 07 Dec 2025 10:02:08 +0000 Files and hashes: 1: 8G37T34-N0VYDoyPxHAj_7H6kW0.crl (hash: Y9kkJg8VO8Ws72cqBMDJ5C13pqFNTMLJgpnJH9B4dLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:96:81:51:db:2f:fd:f3:2c:5a:04:70:22:98:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d Validity Not Before: Dec 6 10:02:08 2025 GMT Not After : Dec 7 10:02:08 2025 GMT Subject: CN=12f41e8a6de0a4652040f99d08f2c332443d3db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d8:f2:ff:6c:50:1a:02:a9:52:ee:fb:9d:6b: 71:ae:06:9c:00:04:93:04:9c:3d:71:e6:17:4c:ee: 6e:b3:43:dc:60:1a:53:30:39:5f:bc:ec:75:87:bf: e9:6b:11:33:ba:22:e2:f9:88:fa:d0:2f:ed:a1:20: a9:7e:54:e0:0e:ef:33:1c:f1:51:00:87:94:c2:7a: f9:48:11:21:f0:76:4e:01:98:b0:c2:f2:99:78:bb: 16:bb:3a:f5:51:81:80:c3:f1:b8:8d:21:a2:66:29: c2:4c:9b:b0:b9:78:4c:3c:7e:f4:8b:9c:d4:95:46: b7:ae:16:8b:68:cd:fe:d3:75:bd:e7:13:17:cf:73: fc:40:e5:d6:b6:8a:6d:b9:52:eb:09:5e:0d:1d:95: b0:5a:f1:a9:31:c2:ff:11:93:3a:e3:5b:7a:93:4f: e7:ad:dd:bc:f0:e6:f3:63:ac:a7:ca:db:fb:f2:af: cd:32:66:f1:38:a3:ba:82:a8:84:53:24:f8:c2:92: 9d:5b:f3:c5:4c:52:4e:eb:e1:19:23:a2:a9:42:c8: 4b:79:c2:7b:3c:97:90:a3:61:e3:9f:bc:22:a7:39: 98:e3:6e:5c:aa:3e:a1:ca:13:1b:bb:9d:60:ee:12: dc:4a:5b:53:25:23:a4:99:5b:f3:55:e4:e8:65:66: f9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F4:1E:8A:6D:E0:A4:65:20:40:F9:9D:08:F2:C3:32:44:3D:3D:B7 X509v3 Authority Key Identifier: keyid:F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0d:5e:81:e5:00:f9:84:5f:0a:ef:12:e3:73:64:f8:d5:6a: 72:7f:b8:5b:18:0e:20:6f:d0:5c:87:9e:d4:29:f6:6a:33:a2: 80:61:a3:6c:fc:1d:71:3d:9b:1c:d6:3f:b8:52:18:02:a3:d0: c7:3a:b5:54:f5:9f:7e:63:1f:a0:3d:c5:5f:c5:9a:56:76:8a: 8a:e6:1c:d4:84:a9:8b:46:82:85:ed:b6:55:57:59:be:a1:f7: 9f:f1:32:99:5f:2c:e1:e6:e8:20:db:fd:04:20:30:a0:c8:5c: 36:ee:c0:26:9b:92:e4:07:52:88:f4:33:80:f7:f6:e6:f2:c8: fd:3c:dd:e6:54:73:13:4a:ba:f5:f5:bc:7f:8c:0d:ec:35:3f: d3:77:6c:25:02:9a:e4:24:15:b9:b6:43:e1:71:16:5c:0b:f9: 0b:85:13:47:61:0f:7f:90:e9:00:f7:9f:cf:5d:83:ec:df:65: aa:a8:7c:41:45:a6:93:08:52:1d:e9:cf:d1:f3:4c:73:cb:7f: 84:4b:60:31:e5:8d:53:0f:08:7f:36:a4:70:fa:cc:09:fb:91: af:c4:f3:06:d6:d1:fa:1f:37:bb:fa:8e:40:34:52:75:c0:4d: 9f:28:0a:75:57:61:0b:f5:12:46:f9:0c:fb:2e:23:b5:1c:0d: f4:8f:b4:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJaBUdsv/fMsWgRwIpj4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNmRmYjRmN2UzZTM3NDU1ODBlOGM4ZmM0NzAyM2ZmYjFm YTkxNmQwHhcNMjUxMjA2MTAwMjA4WhcNMjUxMjA3MTAwMjA4WjAzMTEwLwYDVQQD EygxMmY0MWU4YTZkZTBhNDY1MjA0MGY5OWQwOGYyYzMzMjQ0M2QzZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79jy/2xQGgKpUu77nWtxrgacAAST BJw9ceYXTO5us0PcYBpTMDlfvOx1h7/paxEzuiLi+Yj60C/toSCpflTgDu8zHPFR AIeUwnr5SBEh8HZOAZiwwvKZeLsWuzr1UYGAw/G4jSGiZinCTJuwuXhMPH70i5zU lUa3rhaLaM3+03W95xMXz3P8QOXWtoptuVLrCV4NHZWwWvGpMcL/EZM641t6k0/n rd288ObzY6ynytv78q/NMmbxOKO6gqiEUyT4wpKdW/PFTFJO6+EZI6KpQshLecJ7 PJeQo2Hjn7wipzmY425cqj6hyhMbu51g7hLcSltTJSOkmVvzVeToZWb5xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBL0Hopt4KRlIED5nQjywzJEPT23MB8GA1UdIwQY MBaAFPBt+09+PjdFWA6Mj8RwI/+x+pFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEczN1QzNC1OMFZZRG95UHhIQWpfN0g2a1cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82ZTFkZjgtNmViYy00YjJlLTkxYjQt YjAzZjk0ODgwNGJlLzEvOEczN1QzNC1OMFZZRG95UHhIQWpfN0g2a1cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82ZTFkZjgtNmViYy00YjJlLTkxYjQtYjAzZjk0ODgwNGJl LzEvOEczN1QzNC1OMFZZRG95UHhIQWpfN0g2a1cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiw1egeUA +YRfCu8S43Nk+NVqcn+4WxgOIG/QXIee1Cn2ajOigGGjbPwdcT2bHNY/uFIYAqPQ xzq1VPWffmMfoD3FX8WaVnaKiuYc1ISpi0aChe22VVdZvqH3n/EymV8s4eboINv9 BCAwoMhcNu7AJpuS5AdSiPQzgPf25vLI/Tzd5lRzE0q69fW8f4wN7DU/03dsJQKa 5CQVubZD4XEWXAv5C4UTR2EPf5DpAPefz12D7N9lqqh8QUWmkwhSHenP0fNMc8t/ hEtgMeWNUw8IfzakcPrMCfuRr8TzBtbR+h83u/qOQDRSdcBNnygKdVdhC/USRvkM +y4jtRwN9I+05w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:47:35 2025 by rpki-client