This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft File: 8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft (raw, json) Hash identifier: if736ZqlHfuwJIqJQ/GjSE/KXpAYnvLWrpTOhuQxvPM= Subject key identifier: 94:43:27:11:9F:3D:8A:7B:0C:07:8C:00:4C:F8:F9:D6:AB:C6:E2:76 Authority key identifier: F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4 Certificate issuer: /CN=f1f4609d0d053aec0307da44b0e678c388f641a4 Certificate serial: 019AF509897BD1BA0CB2B8F18CDF8A89535F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft Manifest number: 0C5D Signing time: Sat 06 Dec 2025 19:00:34 +0000 Manifest this update: Sat 06 Dec 2025 19:00:34 +0000 Manifest next update: Sun 07 Dec 2025 19:00:34 +0000 Files and hashes: 1: 8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl (hash: QoeS6LtDKMb+7Rk+/uMto9f5ebnItnDComLPeqmlkwY=) 2: UEbyIO2QVlOQRHoJpjetZw63ZWc.roa (hash: B817opIktL38b1nWyMw+3o8iSD6n1l22i7ARYEndhTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:89:7b:d1:ba:0c:b2:b8:f1:8c:df:8a:89:53:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f4609d0d053aec0307da44b0e678c388f641a4 Validity Not Before: Dec 6 19:00:34 2025 GMT Not After : Dec 7 19:00:34 2025 GMT Subject: CN=944327119f3d8a7b0c078c004cf8f9d6abc6e276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d8:ae:2c:cc:33:ca:5a:3a:cd:0f:f4:d0:62: 34:3c:f2:50:b7:36:ca:7f:29:6a:0b:20:ba:ab:2d: 74:34:48:7f:c0:c1:59:93:51:73:a9:02:f7:d8:e8: 00:59:a2:c7:1b:6b:25:b1:d2:db:f7:a1:23:41:cd: 0a:9f:f4:a7:11:73:38:71:8b:62:18:5a:1f:1b:9b: 43:1d:83:a4:ce:cb:96:ff:84:e9:a5:fd:1c:5b:a2: ea:72:9c:18:48:10:20:f5:52:a6:dc:95:f8:76:eb: 4d:2e:c8:a3:35:ac:b7:bf:e0:a0:67:2a:37:c5:0f: f4:04:0e:26:8c:6c:69:c4:ac:be:1d:ed:5a:6f:9d: 43:3f:cd:27:33:1e:1e:b4:86:fd:a3:d6:43:b2:58: a5:80:0f:f4:68:4e:fe:7b:5e:4c:17:a4:83:2f:16: 67:e4:c5:9c:e3:56:ea:b8:80:97:04:ca:ed:76:4f: fb:0e:92:7c:da:bc:24:da:dd:9b:55:38:0e:91:ae: 58:8f:a9:81:44:5d:19:e4:6a:7e:eb:44:5c:f4:43: 96:e7:30:2a:ce:6a:c3:c0:d6:5f:76:db:2d:b4:d6: 04:36:24:b5:5e:0f:20:a1:e6:b7:cb:5f:35:0a:d2: 56:ea:a5:74:8f:27:53:3b:d4:a4:31:b1:5c:f3:8b: 83:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:43:27:11:9F:3D:8A:7B:0C:07:8C:00:4C:F8:F9:D6:AB:C6:E2:76 X509v3 Authority Key Identifier: keyid:F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:98:96:a8:46:cd:60:1e:25:52:20:a9:72:b3:e8:74:b8:98: ce:d8:01:db:24:18:b8:27:3f:9f:97:06:d8:87:ba:0d:19:a3: 6b:23:43:88:94:3e:7f:33:23:60:7a:41:ab:0e:cb:6b:3a:65: 98:75:16:d6:fb:3d:4c:ef:ee:26:c5:2d:e2:0b:4d:68:9d:7d: d4:dd:ea:6d:0b:2f:b0:05:6e:9e:81:aa:f5:13:1c:39:ab:60: 9d:04:12:4e:5f:19:7c:e3:a9:ff:34:70:1c:7f:0f:34:f5:2f: fd:09:23:b8:17:f1:86:5f:be:8e:16:74:52:dd:9d:6f:89:4b: 9f:f8:47:11:b7:5b:19:53:f3:d3:dd:7b:c9:37:7a:87:58:a0: 4c:a2:06:79:3a:8d:03:c9:8e:0e:b2:a1:de:8f:48:6a:ec:0d: c0:1b:ab:79:b8:fc:43:7f:0b:a4:71:96:e3:d6:e6:ec:90:fc: 5a:c9:94:02:12:72:ad:19:2c:ff:3d:1a:8d:be:58:65:c9:1e: ff:f4:e5:fb:14:77:18:04:c8:49:b3:c3:11:df:d9:1b:c2:db: 97:8f:2d:d7:09:35:f2:e7:64:9c:c2:57:88:1a:62:c7:ca:7a: e1:32:9d:b1:9f:93:36:04:68:0d:68:08:8b:04:29:63:d0:5b: a1:a5:ca:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CYl70boMsrjxjN+KiVNfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjQ2MDlkMGQwNTNhZWMwMzA3ZGE0NGIwZTY3OGMzODhm NjQxYTQwHhcNMjUxMjA2MTkwMDM0WhcNMjUxMjA3MTkwMDM0WjAzMTEwLwYDVQQD Eyg5NDQzMjcxMTlmM2Q4YTdiMGMwNzhjMDA0Y2Y4ZjlkNmFiYzZlMjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNiuLMwzylo6zQ/00GI0PPJQtzbK fylqCyC6qy10NEh/wMFZk1FzqQL32OgAWaLHG2slsdLb96EjQc0Kn/SnEXM4cYti GFofG5tDHYOkzsuW/4Tppf0cW6LqcpwYSBAg9VKm3JX4dutNLsijNay3v+CgZyo3 xQ/0BA4mjGxpxKy+He1ab51DP80nMx4etIb9o9ZDslilgA/0aE7+e15MF6SDLxZn 5MWc41bquICXBMrtdk/7DpJ82rwk2t2bVTgOka5Yj6mBRF0Z5Gp+60Rc9EOW5zAq zmrDwNZfdtsttNYENiS1Xg8goea3y181CtJW6qV0jydTO9SkMbFc84uDewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRDJxGfPYp7DAeMAEz4+darxuJ2MB8GA1UdIwQY MBaAFPH0YJ0NBTrsAwfaRLDmeMOI9kGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZSZ25RMEZPdXdEQjlwRXNPWjR3NGoyUWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85YTE4YWQtMDg3Yi00ZDEyLTlmNjkt OGNiZjkwM2U5MWNkLzEvOGZSZ25RMEZPdXdEQjlwRXNPWjR3NGoyUWFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85YTE4YWQtMDg3Yi00ZDEyLTlmNjktOGNiZjkwM2U5MWNk LzEvOGZSZ25RMEZPdXdEQjlwRXNPWjR3NGoyUWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJiWqEbN YB4lUiCpcrPodLiYztgB2yQYuCc/n5cG2Ie6DRmjayNDiJQ+fzMjYHpBqw7Lazpl mHUW1vs9TO/uJsUt4gtNaJ191N3qbQsvsAVunoGq9RMcOatgnQQSTl8ZfOOp/zRw HH8PNPUv/QkjuBfxhl++jhZ0Ut2db4lLn/hHEbdbGVPz0917yTd6h1igTKIGeTqN A8mODrKh3o9IauwNwBurebj8Q38LpHGW49bm7JD8WsmUAhJyrRks/z0ajb5YZcke //Tl+xR3GATISbPDEd/ZG8Lbl48t1wk18udknMJXiBpix8p64TKdsZ+TNgRoDWgI iwQpY9BboaXKIw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:42:20 2025 by rpki-client