This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft File: 8fQjYKOXCoCAFv342NujlsWh0DQ.mft (raw, json) Hash identifier: sqlIJcYC0rbco7O5X5Y3nrMn2csnCOF/4cGDT5dMurs= Subject key identifier: 92:DE:65:28:76:10:A2:3C:5E:28:B8:7A:44:F9:3E:FC:46:2F:25:2D Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34 Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034 Certificate serial: 019AF19ACBF1B3EF6CF17A763C9C09B7BC48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 03:00:44 +0000 Manifest this update: Sat 06 Dec 2025 03:00:44 +0000 Manifest next update: Sun 07 Dec 2025 03:00:44 +0000 Files and hashes: 1: 8fQjYKOXCoCAFv342NujlsWh0DQ.crl (hash: MJRGLhnRSVEEfDJqvW0IXqkBsCEtu/r30jh947PhnNA=) 2: cDE3EzAZuRkA2qUdMfThi8H1qTc.roa (hash: zcH+YrXnLIMTdiSZDY4vYih+mBv8OXiFFCnkDP60SoA=) 3: w31LkDj-LMN5WUk5kbozH3jiIBA.roa (hash: y5CKPYN2xY1V73cNd1uJ1GGyUm72KbaIXZc2V61uNZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:cb:f1:b3:ef:6c:f1:7a:76:3c:9c:09:b7:bc:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034 Validity Not Before: Dec 6 03:00:44 2025 GMT Not After : Dec 7 03:00:44 2025 GMT Subject: CN=92de65287610a23c5e28b87a44f93efc462f252d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e7:21:1f:db:5f:8a:a2:b9:25:7a:13:7f:23: 82:4c:16:18:91:6d:bf:1d:da:a6:0f:e7:e0:14:43: e5:a7:64:1d:6d:5a:71:55:19:3b:cd:5f:39:de:0d: 44:0d:96:9b:e0:85:ff:18:26:ae:4e:08:dd:e4:22: 5e:42:ed:45:90:31:54:6d:e4:06:71:55:0e:46:4b: 34:ed:ac:03:43:70:5e:98:64:5a:f0:9d:b1:28:d8: e8:f9:56:01:4b:89:b2:99:82:dd:a2:23:03:a3:44: b1:70:83:40:3e:2d:a7:53:ff:6c:4d:6d:c5:2e:86: a2:d8:ac:ae:5b:66:ae:f7:46:f1:5d:e0:ae:b7:d4: 6b:da:e6:02:1a:9e:b5:0c:40:46:fc:6f:ab:e4:02: 13:7f:68:33:57:80:51:31:89:f9:e7:cd:96:81:c6: 12:7c:61:f3:2c:da:ed:9a:58:a7:3e:a9:1b:3c:30: d8:4c:d8:19:f4:26:30:86:e8:e1:58:0b:91:82:69: 58:87:3f:18:50:5e:01:82:20:0f:2b:c0:f3:88:46: 73:aa:b5:a4:3d:b8:36:b4:09:f4:d2:06:77:6a:10: 66:7e:28:b0:71:4f:20:9e:64:bd:53:45:dc:0d:f1: 27:2d:dd:a4:b9:41:73:f9:d6:da:d2:2e:5b:ac:d4: 7b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DE:65:28:76:10:A2:3C:5E:28:B8:7A:44:F9:3E:FC:46:2F:25:2D X509v3 Authority Key Identifier: keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:3e:1d:74:fa:f4:26:2e:94:1d:17:3f:f6:de:c2:aa:3a:81: 71:90:55:7b:07:1c:39:ab:11:0f:ca:c9:ae:21:54:74:f8:c6: 6a:b3:71:57:94:e3:09:a8:d9:00:9f:a4:3a:7e:62:48:80:d7: 82:b8:ef:60:8c:77:db:67:26:62:68:47:4d:40:5e:48:89:13: 1f:7d:e9:d9:ca:df:c1:93:29:59:1e:09:33:e4:45:e2:8a:f2: ae:cf:f4:f5:61:78:ea:56:80:39:5a:f6:55:1b:f1:6d:28:e2: 84:67:f8:3d:98:f2:00:c0:03:ca:76:be:38:a8:e7:b4:9d:51: a6:1f:8d:d6:cb:07:57:67:c0:73:7a:04:5e:a9:ba:d7:17:55: 7f:a3:1a:01:bf:b3:7f:83:59:9e:72:99:04:d7:82:62:d1:05: e3:52:27:d3:3a:aa:ca:60:6d:bf:36:76:6b:bc:0d:dd:47:e0: dc:15:1c:8a:d4:5c:7c:41:36:3f:88:62:4e:66:ce:97:96:a4: c2:b6:1b:d7:46:ec:a3:73:4d:d7:c3:c6:53:88:c8:34:1d:6e: 51:fb:37:eb:77:37:e0:cf:50:27:4b:c0:00:11:b0:47:0c:fb: 8c:09:52:5f:76:82:5c:13:04:49:11:0c:d3:75:3e:80:68:5c: 0f:cc:28:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsvxs+9s8Xp2PJwJt7xIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjQyMzYwYTM5NzBhODA4MDE2ZmRmOGQ4ZGJhMzk2YzVh MWQwMzQwHhcNMjUxMjA2MDMwMDQ0WhcNMjUxMjA3MDMwMDQ0WjAzMTEwLwYDVQQD Eyg5MmRlNjUyODc2MTBhMjNjNWUyOGI4N2E0NGY5M2VmYzQ2MmYyNTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+chH9tfiqK5JXoTfyOCTBYYkW2/ HdqmD+fgFEPlp2QdbVpxVRk7zV853g1EDZab4IX/GCauTgjd5CJeQu1FkDFUbeQG cVUORks07awDQ3BemGRa8J2xKNjo+VYBS4mymYLdoiMDo0SxcINAPi2nU/9sTW3F Loai2KyuW2au90bxXeCut9Rr2uYCGp61DEBG/G+r5AITf2gzV4BRMYn5582WgcYS fGHzLNrtmlinPqkbPDDYTNgZ9CYwhujhWAuRgmlYhz8YUF4BgiAPK8DziEZzqrWk Pbg2tAn00gZ3ahBmfiiwcU8gnmS9U0XcDfEnLd2kuUFz+dba0i5brNR7EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLeZSh2EKI8Xii4ekT5PvxGLyUtMB8GA1UdIwQY MBaAFPH0I2CjlwqAgBb9+Njbo5bFodA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMt ZDRmMDhiZTA1MGQ1LzEvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMtZDRmMDhiZTA1MGQ1 LzEvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKT4ddPr0 Ji6UHRc/9t7CqjqBcZBVewccOasRD8rJriFUdPjGarNxV5TjCajZAJ+kOn5iSIDX grjvYIx322cmYmhHTUBeSIkTH33p2crfwZMpWR4JM+RF4oryrs/09WF46laAOVr2 VRvxbSjihGf4PZjyAMADyna+OKjntJ1Rph+N1ssHV2fAc3oEXqm61xdVf6MaAb+z f4NZnnKZBNeCYtEF41In0zqqymBtvzZ2a7wN3Ufg3BUcitRcfEE2P4hiTmbOl5ak wrYb10bso3NN18PGU4jINB1uUfs363c34M9QJ0vAABGwRwz7jAlSX3aCXBMESREM 03U+gGhcD8wo+g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:43 2025 by rpki-client