This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft File: 8yf6fhlHLlg7cgk2w50P0kJmGf0.mft (raw, json) Hash identifier: 4Tqj5n7+p4se3lwjuGfW1BIKWqg2npiD3wTmGDutEbg= Subject key identifier: AD:BD:AD:FE:66:DA:B1:E5:3F:32:0F:37:51:94:B5:4D:E3:CA:6E:D7 Authority key identifier: F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD Certificate issuer: /CN=f327fa7e19472e583b720936c39d0fd2426619fd Certificate serial: 019AF31B2D1858C69B3A30AD08834A72A727 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft Manifest number: 0B0C Signing time: Sat 06 Dec 2025 10:00:35 +0000 Manifest this update: Sat 06 Dec 2025 10:00:35 +0000 Manifest next update: Sun 07 Dec 2025 10:00:35 +0000 Files and hashes: 1: 8yf6fhlHLlg7cgk2w50P0kJmGf0.crl (hash: DuvQEOIN5RPy36AuogW+kpeHFnEX3jU57zBRQUEuXq4=) 2: jteACDbaYC2GMTFvAHtj6JRaDvo.roa (hash: FyyB216euYUAYG4P0lTXHk9/k4BDveAtrAV0IpAsB3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:2d:18:58:c6:9b:3a:30:ad:08:83:4a:72:a7:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f327fa7e19472e583b720936c39d0fd2426619fd Validity Not Before: Dec 6 10:00:35 2025 GMT Not After : Dec 7 10:00:35 2025 GMT Subject: CN=adbdadfe66dab1e53f320f375194b54de3ca6ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b8:fa:9d:62:54:75:20:c3:fa:f2:b4:07:78: fb:6f:22:b3:75:92:e7:65:7a:98:c8:e4:1c:aa:15: f1:10:70:d5:40:ac:a3:ef:6e:cc:59:a1:26:b3:1a: 6c:60:a4:37:f8:26:a2:16:2e:a0:1e:8b:fe:15:0f: 92:63:fc:75:2b:27:df:11:4d:41:b1:37:9b:7d:2e: 27:bc:43:be:2e:ae:dc:49:18:93:c2:b2:d5:45:46: de:58:f1:d0:b1:a8:a7:0e:db:69:19:c1:bc:7e:82: 00:9d:60:4c:88:cc:a5:9c:e9:26:ea:af:80:a9:dc: e2:55:0d:d5:81:ea:f0:15:9e:aa:7d:b0:ef:1e:8c: ee:47:21:26:9e:72:b3:ae:6e:bc:d8:ac:fc:1c:1b: 60:1e:42:b4:fc:92:0c:4b:b7:b4:9a:32:b0:db:e3: 66:be:ba:40:5d:48:5d:28:50:7d:32:e5:a9:4a:20: bf:08:27:9e:7a:c3:8a:9f:c6:7e:b4:b6:ea:22:00: 07:36:9b:db:d8:36:ca:47:df:71:b5:9c:4c:79:08: ab:04:0a:11:95:98:4f:12:3a:49:fc:cd:da:68:ca: 6d:11:43:d2:60:57:c7:d6:ff:11:9f:42:30:e8:f8: c5:f3:df:47:60:a6:b5:a2:a6:28:41:e6:cc:dc:aa: 12:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BD:AD:FE:66:DA:B1:E5:3F:32:0F:37:51:94:B5:4D:E3:CA:6E:D7 X509v3 Authority Key Identifier: keyid:F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:67:50:51:06:d1:c3:78:42:e3:bc:4d:df:43:7c:1c:3d:3b: c6:a0:e4:11:31:d4:47:2a:be:a9:3b:0f:b7:0e:bb:04:9f:c3: 7b:c4:79:c2:e1:3c:9d:e1:10:3a:e8:d0:c2:76:b1:10:b3:1b: 96:8f:74:2e:3d:c1:b2:cb:80:7a:dc:54:e7:59:7b:67:f1:6e: 13:cf:9f:a2:76:64:78:ac:1c:f7:4f:79:5d:77:ef:8b:09:4d: 28:f6:1f:52:12:e0:4e:d3:09:f4:3b:a8:88:c0:18:da:b6:e3: 82:10:36:72:df:6c:30:0f:5e:70:f2:b2:92:aa:d0:7c:ae:32: 39:84:b0:20:96:39:bb:ac:e3:01:b1:2e:e8:c8:6c:16:cb:36: cb:02:ee:64:bd:e3:51:cb:67:d0:9a:cf:0a:b8:e1:3e:a3:51: 6e:f9:c7:70:4a:a8:5a:a8:42:84:61:19:f0:0c:21:27:84:28: fd:e3:99:df:4b:c3:79:7c:d7:dc:8d:df:e6:51:8d:b3:6c:e6: 9a:45:5a:12:24:ee:33:6b:95:a1:72:85:4e:b4:54:26:22:08: 6f:67:b5:68:e6:41:09:60:82:a3:88:6b:50:cf:65:91:f7:eb: bb:40:06:b5:b0:81:47:9d:e1:33:93:fa:44:fe:32:50:0e:49: 9e:e3:a6:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGy0YWMabOjCtCINKcqcnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjdmYTdlMTk0NzJlNTgzYjcyMDkzNmMzOWQwZmQyNDI2 NjE5ZmQwHhcNMjUxMjA2MTAwMDM1WhcNMjUxMjA3MTAwMDM1WjAzMTEwLwYDVQQD EyhhZGJkYWRmZTY2ZGFiMWU1M2YzMjBmMzc1MTk0YjU0ZGUzY2E2ZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrj6nWJUdSDD+vK0B3j7byKzdZLn ZXqYyOQcqhXxEHDVQKyj727MWaEmsxpsYKQ3+CaiFi6gHov+FQ+SY/x1KyffEU1B sTebfS4nvEO+Lq7cSRiTwrLVRUbeWPHQsainDttpGcG8foIAnWBMiMylnOkm6q+A qdziVQ3VgerwFZ6qfbDvHozuRyEmnnKzrm682Kz8HBtgHkK0/JIMS7e0mjKw2+Nm vrpAXUhdKFB9MuWpSiC/CCeeesOKn8Z+tLbqIgAHNpvb2DbKR99xtZxMeQirBAoR lZhPEjpJ/M3aaMptEUPSYFfH1v8Rn0Iw6PjF899HYKa1oqYoQebM3KoSNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK29rf5m2rHlPzIPN1GUtU3jym7XMB8GA1UdIwQY MBaAFPMn+n4ZRy5YO3IJNsOdD9JCZhn9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlmNmZobEhMbGc3Y2drMnc1MFAwa0ptR2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mODFhZWItMTgxYy00NWUxLTk5Y2Yt MjNjMTYyNjNjZjNiLzEvOHlmNmZobEhMbGc3Y2drMnc1MFAwa0ptR2YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mODFhZWItMTgxYy00NWUxLTk5Y2YtMjNjMTYyNjNjZjNi LzEvOHlmNmZobEhMbGc3Y2drMnc1MFAwa0ptR2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWdQUQbR w3hC47xN30N8HD07xqDkETHURyq+qTsPtw67BJ/De8R5wuE8neEQOujQwnaxELMb lo90Lj3BssuAetxU51l7Z/FuE8+fonZkeKwc9095XXfviwlNKPYfUhLgTtMJ9Duo iMAY2rbjghA2ct9sMA9ecPKykqrQfK4yOYSwIJY5u6zjAbEu6MhsFss2ywLuZL3j Uctn0JrPCrjhPqNRbvnHcEqoWqhChGEZ8AwhJ4Qo/eOZ30vDeXzX3I3f5lGNs2zm mkVaEiTuM2uVoXKFTrRUJiIIb2e1aOZBCWCCo4hrUM9lkffru0AGtbCBR53hM5P6 RP4yUA5JnuOmOw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:07:40 2025 by rpki-client