This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft File: P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft (raw, json) Hash identifier: QrbzSdymxLfqpb2PfHdQ/V5pNmIusNLhkGjUuNtBjPY= Subject key identifier: 48:E4:55:26:3B:C0:D5:A2:20:F8:C6:D3:EF:F8:5E:5A:8F:AE:CB:E5 Authority key identifier: 3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A Certificate issuer: /CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a Certificate serial: 019AF50B8DB3FC55ABF988219BAC708B9EBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft Manifest number: 047B Signing time: Sat 06 Dec 2025 19:02:46 +0000 Manifest this update: Sat 06 Dec 2025 19:02:46 +0000 Manifest next update: Sun 07 Dec 2025 19:02:46 +0000 Files and hashes: 1: P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl (hash: YiupotyRVFxA6SNZfHBcP4LbC+MriU7OCsanK861qbA=) 2: PQ28rfbk5yXRYjcz-QOCkZ4ENM0.roa (hash: YSotQz0qiTv7LM37y7e6zhLaYImvG6ufZU+Z40/a72I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:8d:b3:fc:55:ab:f9:88:21:9b:ac:70:8b:9e:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a Validity Not Before: Dec 6 19:02:46 2025 GMT Not After : Dec 7 19:02:46 2025 GMT Subject: CN=48e455263bc0d5a220f8c6d3eff85e5a8faecbe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a6:44:ed:2d:4a:89:74:a3:0e:7e:c6:9a:2d: ae:d6:ec:4c:27:f0:40:83:d0:1a:e6:69:d8:15:46: 7d:98:ac:6f:e7:d6:43:c1:09:fa:b1:1b:b8:0a:4c: 46:98:f6:88:be:e4:66:1a:a3:3a:1c:9f:af:3e:d5: d0:25:59:52:6f:50:2f:63:01:bc:ad:77:a9:c0:84: 7c:fe:78:be:25:b4:5c:8a:51:e6:e1:ab:a1:51:68: e0:40:58:b9:4a:75:10:d0:0c:f6:5f:bf:33:54:08: 3c:53:9f:0c:a4:d9:2c:36:aa:99:16:d0:b2:47:c5: b7:e7:2c:7c:c4:40:67:04:e8:4a:68:81:67:9d:bc: 13:34:a3:6f:26:82:dd:08:43:7f:b2:ef:51:12:a7: ba:27:ac:1b:0d:3a:3f:a6:2d:7f:f7:fb:c4:08:1c: cc:f1:8f:86:18:e8:ad:f8:06:16:b7:d3:4e:5e:d4: e6:90:a4:44:0c:9f:55:a1:d1:37:0c:d3:74:f7:fc: ed:c1:14:79:89:35:59:b5:76:ba:37:6a:d3:ec:d6: d6:70:b9:da:c7:64:e0:c5:79:ed:ea:52:d0:af:bd: d1:0b:c4:a5:f2:76:69:52:92:e7:d9:20:c3:c6:13: a2:b4:77:87:41:9b:e6:63:e2:8a:0c:57:e0:56:5a: ee:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E4:55:26:3B:C0:D5:A2:20:F8:C6:D3:EF:F8:5E:5A:8F:AE:CB:E5 X509v3 Authority Key Identifier: keyid:3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:fd:ef:1b:e9:76:cc:ed:f4:28:cf:60:44:6b:1b:86:dc:26: 71:97:9f:cb:48:f6:7f:e0:ad:f8:55:12:e3:e6:e9:9c:6b:5b: 73:18:76:c7:fe:82:2e:d7:f5:b4:2e:70:69:f9:af:3a:ae:e6: 08:c1:b5:7c:1c:c3:e3:19:d8:87:e8:c6:4e:67:c8:d2:a0:b7: 60:2b:f1:ba:8f:5f:98:1e:0a:61:5b:5d:ba:92:1f:16:91:39: c0:b5:39:68:dc:d5:f2:52:c1:4d:f9:de:32:f6:d1:f5:42:8d: e6:fb:d3:08:ad:e9:9b:f3:d3:8d:a5:31:99:9e:21:f4:75:12: 2d:fa:65:fa:07:dd:8d:df:f4:be:22:93:51:b6:77:15:f2:43: e0:ff:12:a9:46:87:a4:ca:2c:a0:0f:ff:f2:fd:55:43:c4:2a: ec:be:44:a1:b8:b6:26:5d:98:59:64:e5:31:04:42:2e:86:af: ab:d1:4f:5a:3c:07:0e:91:18:ac:8c:15:ed:c2:b3:a5:af:d2: 0e:61:78:06:3b:d6:71:90:91:a1:11:3a:cf:7b:37:5b:36:3c: 98:33:a9:c8:03:4f:a8:cf:89:0d:a1:52:08:5b:1b:e7:4d:e1: e0:e5:6c:58:49:b7:d7:d5:97:3f:25:d3:45:3f:43:4a:12:00: 06:36:50:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C42z/FWr+Yghm6xwi56+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmY2ZmOThhYWE1YjQ4ZGM2MTU4ZDJmYzY1ZjI1YzUwOTdi NWUyNmEwHhcNMjUxMjA2MTkwMjQ2WhcNMjUxMjA3MTkwMjQ2WjAzMTEwLwYDVQQD Eyg0OGU0NTUyNjNiYzBkNWEyMjBmOGM2ZDNlZmY4NWU1YThmYWVjYmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6ZE7S1KiXSjDn7Gmi2u1uxMJ/BA g9Aa5mnYFUZ9mKxv59ZDwQn6sRu4CkxGmPaIvuRmGqM6HJ+vPtXQJVlSb1AvYwG8 rXepwIR8/ni+JbRcilHm4auhUWjgQFi5SnUQ0Az2X78zVAg8U58MpNksNqqZFtCy R8W35yx8xEBnBOhKaIFnnbwTNKNvJoLdCEN/su9REqe6J6wbDTo/pi1/9/vECBzM 8Y+GGOit+AYWt9NOXtTmkKREDJ9VodE3DNN09/ztwRR5iTVZtXa6N2rT7NbWcLna x2TgxXnt6lLQr73RC8Sl8nZpUpLn2SDDxhOitHeHQZvmY+KKDFfgVlruFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjkVSY7wNWiIPjG0+/4XlqPrsvlMB8GA1UdIwQY MBaAFD/P+YqqW0jcYVjS/GXyXFCXteJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDhfNWlxcGJTTnhoV05MOFpmSmNVSmUxNG1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zYzUwMjYtNTAxMS00Njg5LTgzNjct N2I0ZTVlMTg0NzM1LzEvUDhfNWlxcGJTTnhoV05MOFpmSmNVSmUxNG1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zYzUwMjYtNTAxMS00Njg5LTgzNjctN2I0ZTVlMTg0NzM1 LzEvUDhfNWlxcGJTTnhoV05MOFpmSmNVSmUxNG1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArP3vG+l2 zO30KM9gRGsbhtwmcZefy0j2f+Ct+FUS4+bpnGtbcxh2x/6CLtf1tC5wafmvOq7m CMG1fBzD4xnYh+jGTmfI0qC3YCvxuo9fmB4KYVtdupIfFpE5wLU5aNzV8lLBTfne MvbR9UKN5vvTCK3pm/PTjaUxmZ4h9HUSLfpl+gfdjd/0viKTUbZ3FfJD4P8SqUaH pMosoA//8v1VQ8Qq7L5Eobi2Jl2YWWTlMQRCLoavq9FPWjwHDpEYrIwV7cKzpa/S DmF4BjvWcZCRoRE6z3s3WzY8mDOpyANPqM+JDaFSCFsb503h4OVsWEm319WXPyXT RT9DShIABjZQjQ== -----END CERTIFICATE-----Generated at Sun Dec 7 05:20:08 2025 by rpki-client