This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft File: 8jgjdZZpSOIWiOi6E4OkowngVi8.mft (raw, json) Hash identifier: IqV44tWRmmq7siV0BfNBqx8EAtcNtjax9FeMSQnfG0A= Subject key identifier: A0:8E:78:A9:20:89:94:AD:2B:BC:92:DC:B8:1D:DF:5F:9E:BC:78:9C Authority key identifier: F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F Certificate issuer: /CN=f2382375966948e21688e8ba1383a4a309e0562f Certificate serial: 019AF12DE0DA144CCB601718858EB35BDC50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:46 +0000 Manifest this update: Sat 06 Dec 2025 01:01:46 +0000 Manifest next update: Sun 07 Dec 2025 01:01:46 +0000 Files and hashes: 1: 8jgjdZZpSOIWiOi6E4OkowngVi8.crl (hash: ViJl1al1f023ebvQCPzFXRcl+fqK9gfOQN+N2Vsz0qw=) 2: K1nEMmqR-bv_HJOMVOAQTlZLbDU.roa (hash: W5Jwdvi7etvP6GxGLNbBoK0ap2sodrYQoCXcswND0as=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e0:da:14:4c:cb:60:17:18:85:8e:b3:5b:dc:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2382375966948e21688e8ba1383a4a309e0562f Validity Not Before: Dec 6 01:01:46 2025 GMT Not After : Dec 7 01:01:46 2025 GMT Subject: CN=a08e78a9208994ad2bbc92dcb81ddf5f9ebc789c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a9:d2:07:e8:e6:85:ee:f1:b8:e9:95:e5:96: 26:94:b8:05:32:ed:b9:be:7e:60:ba:1e:86:d7:15: d7:4a:c1:b1:0e:48:ee:4e:ae:f3:41:8c:6b:80:44: 10:30:39:e0:f5:59:94:78:33:b1:9d:4f:a6:cb:95: 1b:95:ba:b9:e2:de:3f:cd:77:65:e8:d0:78:fd:37: a1:e6:6a:6b:fc:eb:b0:3d:13:6d:14:cd:81:6a:5c: cb:fb:cf:f0:90:6e:ba:18:b1:a6:03:5f:e4:7a:63: 06:92:70:44:17:fc:13:7c:8a:8b:b7:d6:f3:4c:41: e6:13:a6:ef:dc:aa:7d:60:e3:b6:40:7d:88:e4:7e: f7:d7:ae:92:74:f6:09:cd:ae:f8:47:8e:01:cd:49: 6f:0e:97:ed:bc:94:7d:52:e0:6f:74:ad:50:f6:cb: fd:80:59:bc:36:1f:16:38:12:d6:d6:c3:49:5e:6f: 71:c2:e4:17:1a:62:ed:62:d8:40:dc:81:62:d5:bc: 1d:30:dd:ba:84:f5:4f:f0:26:f6:ed:30:02:d0:2f: b6:94:51:7d:82:95:38:30:5e:99:e5:e4:6e:46:fa: f4:2b:3c:04:ab:08:2b:11:cc:37:b8:ed:b8:6e:4f: f4:03:98:e0:00:47:76:b5:64:f9:3d:7c:07:85:92: d7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8E:78:A9:20:89:94:AD:2B:BC:92:DC:B8:1D:DF:5F:9E:BC:78:9C X509v3 Authority Key Identifier: keyid:F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:72:cb:52:53:13:21:63:e9:8f:00:8b:38:25:b8:6f:b3:a6: c9:ab:7d:1b:7b:3d:b1:8b:5d:23:49:d0:3c:54:8c:3a:c9:ca: 97:40:35:88:ad:c7:a1:7a:0e:46:ca:23:c5:8a:f3:e2:ba:9a: 70:a9:4c:35:c4:5a:79:34:98:9f:ea:fd:21:13:ea:8b:1e:82: 7e:d7:7c:e6:0a:3b:4a:cb:d9:d7:e5:4d:d2:97:7f:a1:d0:bf: 1f:b5:a6:d9:7e:d6:ff:b1:9c:23:cb:4a:2b:e0:ac:80:d5:e1: 6f:dd:9a:1f:36:37:1c:bb:f3:e5:fd:8a:75:8a:a6:87:0a:2d: 74:d2:43:4c:12:0f:f2:a7:cd:1e:2b:f8:1a:79:37:9d:e2:b1: b4:81:9c:75:7e:45:8f:75:06:38:66:e8:5c:51:a5:b6:2e:c4: bb:05:27:f1:68:06:c4:d8:35:79:21:c5:9b:df:60:5b:1b:38: 9e:b4:b3:68:61:2e:88:13:c1:ed:b4:97:92:65:77:bd:07:59: bf:9a:3f:eb:74:7e:42:04:6f:d4:8f:f8:59:c9:ba:66:1b:8e: 0c:96:9f:3e:ba:45:c5:61:cb:e4:a9:e3:d5:b8:98:0c:36:5d: 7f:cd:bf:0b:95:d5:49:3a:8b:42:1d:40:d4:c9:83:79:d2:9a: 10:eb:23:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeDaFEzLYBcYhY6zW9xQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMzgyMzc1OTY2OTQ4ZTIxNjg4ZThiYTEzODNhNGEzMDll MDU2MmYwHhcNMjUxMjA2MDEwMTQ2WhcNMjUxMjA3MDEwMTQ2WjAzMTEwLwYDVQQD EyhhMDhlNzhhOTIwODk5NGFkMmJiYzkyZGNiODFkZGY1ZjllYmM3ODljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmanSB+jmhe7xuOmV5ZYmlLgFMu25 vn5guh6G1xXXSsGxDkjuTq7zQYxrgEQQMDng9VmUeDOxnU+my5Ublbq54t4/zXdl 6NB4/Teh5mpr/OuwPRNtFM2BalzL+8/wkG66GLGmA1/kemMGknBEF/wTfIqLt9bz TEHmE6bv3Kp9YOO2QH2I5H73166SdPYJza74R44BzUlvDpftvJR9UuBvdK1Q9sv9 gFm8Nh8WOBLW1sNJXm9xwuQXGmLtYthA3IFi1bwdMN26hPVP8Cb27TAC0C+2lFF9 gpU4MF6Z5eRuRvr0KzwEqwgrEcw3uO24bk/0A5jgAEd2tWT5PXwHhZLX4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCOeKkgiZStK7yS3Lgd31+evHicMB8GA1UdIwQY MBaAFPI4I3WWaUjiFojouhODpKMJ4FYvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGpnamRaWnBTT0lXaU9pNkU0T2tvd25nVmk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hZDBmMWEtNmI5NC00ZTBkLThhNGEt ZDJmZDlmZmMzMWJmLzEvOGpnamRaWnBTT0lXaU9pNkU0T2tvd25nVmk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9hZDBmMWEtNmI5NC00ZTBkLThhNGEtZDJmZDlmZmMzMWJm LzEvOGpnamRaWnBTT0lXaU9pNkU0T2tvd25nVmk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3LLUlMT IWPpjwCLOCW4b7Omyat9G3s9sYtdI0nQPFSMOsnKl0A1iK3HoXoORsojxYrz4rqa cKlMNcRaeTSYn+r9IRPqix6Cftd85go7SsvZ1+VN0pd/odC/H7Wm2X7W/7GcI8tK K+CsgNXhb92aHzY3HLvz5f2KdYqmhwotdNJDTBIP8qfNHiv4Gnk3neKxtIGcdX5F j3UGOGboXFGlti7EuwUn8WgGxNg1eSHFm99gWxs4nrSzaGEuiBPB7bSXkmV3vQdZ v5o/63R+QgRv1I/4Wcm6ZhuODJafPrpFxWHL5Knj1biYDDZdf82/C5XVSTqLQh1A 1MmDedKaEOsjPw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:55 2025 by rpki-client