This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft File: k8XxCvi8tfxuNKRztKbK560C2QI.mft (raw, json) Hash identifier: a0BTwjfbJNWDIrGRqOa+qBS7InwM93EPlE9h7l3H6jg= Subject key identifier: 5E:17:D4:B2:21:50:76:A4:50:14:6C:F7:8B:28:9A:4E:92:D6:C0:51 Authority key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02 Certificate issuer: /CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902 Certificate serial: 019AF3F796DDB9425A2EC144550550F33312 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft Manifest number: 0B85 Signing time: Sat 06 Dec 2025 14:01:20 +0000 Manifest this update: Sat 06 Dec 2025 14:01:20 +0000 Manifest next update: Sun 07 Dec 2025 14:01:20 +0000 Files and hashes: 1: k8XxCvi8tfxuNKRztKbK560C2QI.crl (hash: pMy357v78uGDI/JpErgDLCaQ7GUDIwwotkwP0fJbpFo=) 2: qSlCWIoaBSlT8FJxAqdM3S_JMeY.roa (hash: Zvj6zybG7gbhDX6oesOJPa1rvAoqiKQGPqATyljkt6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:96:dd:b9:42:5a:2e:c1:44:55:05:50:f3:33:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902 Validity Not Before: Dec 6 14:01:20 2025 GMT Not After : Dec 7 14:01:20 2025 GMT Subject: CN=5e17d4b2215076a450146cf78b289a4e92d6c051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:87:fe:e0:62:1a:69:17:f3:23:01:a6:39:64: 75:0b:fb:cc:27:50:6d:a2:d0:f5:17:20:ae:24:84: 19:13:be:6e:a5:f2:39:b0:f9:85:24:0c:41:4a:b1: 73:bc:35:4d:bb:bd:24:49:26:da:9d:45:ba:da:11: 88:f5:cc:4f:f9:c4:66:44:e0:82:01:6e:e3:bd:e5: d4:b8:6d:53:d5:01:6c:3b:df:67:7e:1b:ce:c5:81: 04:ee:55:f4:12:a0:ba:05:65:57:83:bb:f0:3f:5f: 4e:e2:8d:73:df:e1:aa:5c:19:a9:f0:0f:43:eb:7d: 59:05:a2:d4:d0:6a:13:ed:16:a6:2a:76:cc:16:6d: 1f:8d:06:55:30:89:61:21:bb:04:95:62:77:ca:63: 5a:c6:b2:68:03:d8:f8:b7:e1:06:fe:6d:bf:e6:08: 41:fe:b3:12:c0:0f:9c:77:48:b8:9e:c5:43:96:b3: 1b:29:6f:97:3a:16:b5:fd:bd:f4:c2:23:69:bd:83: 44:3e:ce:ed:02:14:81:a1:77:5c:02:dc:2e:17:a8: d8:fb:26:ee:fb:35:88:0c:31:e1:69:e4:31:b6:8d: 56:63:2e:60:d3:7e:93:d6:bc:0c:ba:32:5e:e2:4c: 09:33:3b:0c:a1:4b:96:fb:9b:b8:b6:c0:e2:d9:e2: 60:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:17:D4:B2:21:50:76:A4:50:14:6C:F7:8B:28:9A:4E:92:D6:C0:51 X509v3 Authority Key Identifier: keyid:93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:c9:b4:53:d9:3e:40:1f:ce:74:93:83:a5:aa:c7:0a:ff:12: b1:c5:ec:51:b8:fa:6c:af:44:66:01:a1:3c:3b:be:ed:5b:54: 00:d2:aa:06:7b:a7:22:1a:a7:18:76:9a:2b:88:3d:f2:96:58: 83:1f:1d:b1:c2:13:6f:b6:53:0a:03:4a:f1:b2:21:cf:5c:f2: b9:e8:38:24:b6:10:98:dc:7e:87:28:2d:af:62:bd:34:61:3c: e2:3f:df:eb:6f:35:75:29:0c:5a:3f:e7:b4:74:98:72:b6:4c: 5c:e9:1e:3a:b7:0c:6c:93:46:a3:ae:89:2d:8d:1b:d2:da:78: 5e:77:09:8b:a7:83:86:84:27:35:e9:06:d3:55:6d:99:19:c3: 01:cb:d7:65:e6:bf:12:cd:65:e2:b9:40:3c:32:08:9d:97:97: 7e:74:c9:23:95:26:ef:70:ab:5a:f6:07:aa:96:8a:aa:1d:2c: 01:53:d7:1d:12:ba:eb:a5:a8:2b:10:18:b5:0a:23:e7:be:66: c4:8e:f7:e5:99:14:ff:bd:e7:b3:22:6c:c3:3f:3a:97:bc:a8: 97:e2:1a:fb:14:e6:c2:f6:3a:c0:ab:cb:dd:1e:15:1a:f2:63: 1d:21:ec:3a:62:9c:e4:c5:97:36:d3:0c:11:6c:78:7a:2e:c5: db:4a:fb:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz95bduUJaLsFEVQVQ8zMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYzVmMTBhZjhiY2I1ZmM2ZTM0YTQ3M2I0YTZjYWU3YWQw MmQ5MDIwHhcNMjUxMjA2MTQwMTIwWhcNMjUxMjA3MTQwMTIwWjAzMTEwLwYDVQQD Eyg1ZTE3ZDRiMjIxNTA3NmE0NTAxNDZjZjc4YjI4OWE0ZTkyZDZjMDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Yf+4GIaaRfzIwGmOWR1C/vMJ1Bt otD1FyCuJIQZE75upfI5sPmFJAxBSrFzvDVNu70kSSbanUW62hGI9cxP+cRmROCC AW7jveXUuG1T1QFsO99nfhvOxYEE7lX0EqC6BWVXg7vwP19O4o1z3+GqXBmp8A9D 631ZBaLU0GoT7RamKnbMFm0fjQZVMIlhIbsElWJ3ymNaxrJoA9j4t+EG/m2/5ghB /rMSwA+cd0i4nsVDlrMbKW+XOha1/b30wiNpvYNEPs7tAhSBoXdcAtwuF6jY+ybu +zWIDDHhaeQxto1WYy5g036T1rwMujJe4kwJMzsMoUuW+5u4tsDi2eJgUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4X1LIhUHakUBRs94somk6S1sBRMB8GA1UdIwQY MBaAFJPF8Qr4vLX8bjSkc7SmyuetAtkCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazhYeEN2aTh0Znh1TktSenRLYks1NjBDMlFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYTAyY2ItYjM3OC00ZmE3LTg4MDMt OGVhYWQwYjA0OWE3LzEvazhYeEN2aTh0Znh1TktSenRLYks1NjBDMlFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mYTAyY2ItYjM3OC00ZmE3LTg4MDMtOGVhYWQwYjA0OWE3 LzEvazhYeEN2aTh0Znh1TktSenRLYks1NjBDMlFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsm0U9k+ QB/OdJODparHCv8SscXsUbj6bK9EZgGhPDu+7VtUANKqBnunIhqnGHaaK4g98pZY gx8dscITb7ZTCgNK8bIhz1zyueg4JLYQmNx+hygtr2K9NGE84j/f6281dSkMWj/n tHSYcrZMXOkeOrcMbJNGo66JLY0b0tp4XncJi6eDhoQnNekG01VtmRnDAcvXZea/ Es1l4rlAPDIInZeXfnTJI5Um73CrWvYHqpaKqh0sAVPXHRK666WoKxAYtQoj575m xI735ZkU/73nsyJswz86l7yol+Ia+xTmwvY6wKvL3R4VGvJjHSHsOmKc5MWXNtMM EWx4ei7F20r77w== -----END CERTIFICATE-----Generated at Sat Dec 6 23:00:07 2025 by rpki-client