This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft File: 8NWfEh_H76DBC33WFNlah1bVNgY.mft (raw, json) Hash identifier: VL9XDZr2Gu5ylHOwy1oKHuDDDGTXet18XRE0GATsBdY= Subject key identifier: BB:53:C1:7B:43:36:10:9F:71:71:9B:08:A9:8C:83:6B:39:64:01:6C Authority key identifier: F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06 Certificate issuer: /CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606 Certificate serial: 019AF276996C47414990029E95383E0AC6FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:00:50 +0000 Manifest this update: Sat 06 Dec 2025 07:00:50 +0000 Manifest next update: Sun 07 Dec 2025 07:00:50 +0000 Files and hashes: 1: 8NWfEh_H76DBC33WFNlah1bVNgY.crl (hash: o8jiHD8KFvJQVEm7YYMcmSZqZvLbnFbD5M3SoAxkuSM=) 2: bExl4A_tLBAbX-OeFCCRrL9Dsyk.roa (hash: MMmRyVv8bOvPQ4JoDHNxbF0lksG8UDkMZAPsWlNfgRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:99:6c:47:41:49:90:02:9e:95:38:3e:0a:c6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606 Validity Not Before: Dec 6 07:00:50 2025 GMT Not After : Dec 7 07:00:50 2025 GMT Subject: CN=bb53c17b4336109f71719b08a98c836b3964016c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c7:88:76:05:cb:00:3d:82:67:f7:c4:8f:e6: bb:1e:09:ae:65:7e:af:fe:f7:73:b1:b0:70:db:cf: a0:f6:98:e8:6b:c8:e6:d8:55:47:c0:0e:d1:f0:49: 8a:32:a2:b2:86:96:ac:1f:16:54:44:4b:3d:e3:72: 42:95:bf:d9:9e:d5:88:6c:51:f8:51:d0:49:20:57: 91:f0:a7:a3:2f:b0:88:0b:84:62:3c:23:21:cd:68: 11:8d:30:90:63:a3:65:0a:2e:f2:22:37:4a:7a:04: be:02:57:03:72:8f:32:4a:41:12:59:1d:85:c8:54: bf:d6:1a:d3:d7:e8:d5:30:ab:2b:3b:5e:01:73:2d: 79:26:c3:c2:b0:2d:f4:d4:f6:12:85:1a:57:ff:fc: 0a:4a:ad:0c:da:7e:de:ad:8a:8c:df:7f:64:8c:76: 08:65:f4:b2:36:54:2f:0e:68:77:9d:a8:52:4b:2a: d5:97:87:09:e5:68:75:bc:3c:33:74:95:0f:a5:82: b5:40:3a:7b:a1:0d:0b:2c:c9:39:e9:36:1b:7a:0d: 79:a0:66:04:33:f7:a0:4e:f8:32:d9:42:64:6b:8a: d9:12:fe:d0:cd:a3:ee:29:43:9e:a4:30:db:a9:67: f4:3f:67:51:a5:0f:a5:b7:8c:1a:a6:01:3d:64:2e: 0b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:53:C1:7B:43:36:10:9F:71:71:9B:08:A9:8C:83:6B:39:64:01:6C X509v3 Authority Key Identifier: keyid:F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:71:ca:82:e5:f7:64:55:97:7b:3b:7e:4e:09:73:c0:35:8e: 08:13:c5:09:0c:09:a0:c8:41:c8:9b:88:eb:53:7c:5b:bc:13: 53:ad:66:e1:c8:59:ce:e5:3d:dd:99:26:fd:88:fb:ce:e4:02: 3c:68:17:0e:eb:14:c3:8a:13:2e:71:6b:6a:4d:41:4b:5c:2d: 6a:6a:1d:75:6d:f1:b8:62:2a:6f:16:24:04:36:a4:65:de:b8: 1f:50:78:e7:42:2c:2c:9c:55:28:4e:62:2e:41:58:2e:e6:76: 40:00:a4:fb:c8:ad:af:1e:73:2a:f4:19:ea:58:7b:be:6c:fb: 60:7f:c1:4e:9f:7f:ef:82:b9:ff:b5:d7:5f:0a:1a:82:d2:e8: 5d:68:bf:38:48:6e:b7:91:6c:a2:aa:d1:36:fb:28:ec:61:b7: eb:42:4f:49:99:32:b3:97:37:ea:c6:03:f2:64:87:a9:b4:54: 3b:af:58:ed:7d:13:6e:0e:1a:41:c5:eb:37:b0:bf:bc:61:13: 1d:11:4b:ba:34:7f:5d:83:d3:2d:1c:5c:50:fa:54:97:ed:e0: f4:6b:81:3a:33:41:9e:15:0c:52:ee:37:2f:3e:8c:b4:24:34: 43:77:b6:e1:cb:44:50:4f:b4:1a:ad:51:27:90:22:59:a5:97: b1:ec:a5:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydplsR0FJkAKelTg+Csb+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZDU5ZjEyMWZjN2VmYTBjMTBiN2RkNjE0ZDk1YTg3NTZk NTM2MDYwHhcNMjUxMjA2MDcwMDUwWhcNMjUxMjA3MDcwMDUwWjAzMTEwLwYDVQQD EyhiYjUzYzE3YjQzMzYxMDlmNzE3MTliMDhhOThjODM2YjM5NjQwMTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68eIdgXLAD2CZ/fEj+a7HgmuZX6v /vdzsbBw28+g9pjoa8jm2FVHwA7R8EmKMqKyhpasHxZUREs943JClb/ZntWIbFH4 UdBJIFeR8KejL7CIC4RiPCMhzWgRjTCQY6NlCi7yIjdKegS+AlcDco8ySkESWR2F yFS/1hrT1+jVMKsrO14Bcy15JsPCsC301PYShRpX//wKSq0M2n7erYqM339kjHYI ZfSyNlQvDmh3nahSSyrVl4cJ5Wh1vDwzdJUPpYK1QDp7oQ0LLMk56TYbeg15oGYE M/egTvgy2UJka4rZEv7QzaPuKUOepDDbqWf0P2dRpQ+lt4wapgE9ZC4LVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtTwXtDNhCfcXGbCKmMg2s5ZAFsMB8GA1UdIwQY MBaAFPDVnxIfx++gwQt91hTZWodW1TYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lNjk4YzctMGIxZi00MTA2LWJhNjct NmVlZmU1YjMzNWFhLzEvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lNjk4YzctMGIxZi00MTA2LWJhNjctNmVlZmU1YjMzNWFh LzEvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3HKguX3 ZFWXezt+TglzwDWOCBPFCQwJoMhByJuI61N8W7wTU61m4chZzuU93Zkm/Yj7zuQC PGgXDusUw4oTLnFrak1BS1wtamoddW3xuGIqbxYkBDakZd64H1B450IsLJxVKE5i LkFYLuZ2QACk+8itrx5zKvQZ6lh7vmz7YH/BTp9/74K5/7XXXwoagtLoXWi/OEhu t5FsoqrRNvso7GG360JPSZkys5c36sYD8mSHqbRUO69Y7X0Tbg4aQcXrN7C/vGET HRFLujR/XYPTLRxcUPpUl+3g9GuBOjNBnhUMUu43Lz6MtCQ0Q3e24ctEUE+0Gq1R J5AiWaWXseylpw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:24:54 2025 by rpki-client