This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft File: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft (raw, json) Hash identifier: Bx/zHkydOwcjMwtw/414eanDavbfdducEglbnM1jYA4= Subject key identifier: 51:93:E4:C3:8F:47:0E:7B:81:95:76:1B:A5:CB:5F:BF:5D:65:1E:75 Authority key identifier: F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86 Certificate issuer: /CN=f0a95b78b0576501278efd7e020269ba1f06d386 Certificate serial: 019AF31BD3852F58B7FC7BBC3F2B2961807B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft Manifest number: 0D38 Signing time: Sat 06 Dec 2025 10:01:18 +0000 Manifest this update: Sat 06 Dec 2025 10:01:18 +0000 Manifest next update: Sun 07 Dec 2025 10:01:18 +0000 Files and hashes: 1: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl (hash: lieXM2GZvCSXqTHIphQROEgzRzROjPajZaLm8aHqVVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:d3:85:2f:58:b7:fc:7b:bc:3f:2b:29:61:80:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0a95b78b0576501278efd7e020269ba1f06d386 Validity Not Before: Dec 6 10:01:18 2025 GMT Not After : Dec 7 10:01:18 2025 GMT Subject: CN=5193e4c38f470e7b8195761ba5cb5fbf5d651e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8d:68:15:cc:2f:32:7a:b3:06:b7:2e:7c:e2: f4:e6:8c:0e:9a:08:b2:28:1e:68:fd:59:2b:5c:a1: 83:9f:b9:30:95:dc:26:61:3a:ca:a4:8b:32:56:59: 79:d3:4e:24:1a:54:2e:04:bc:91:85:51:f7:da:4f: bb:f3:5d:c6:55:67:27:b5:4f:35:e0:96:d4:e1:29: bd:23:5b:30:00:40:23:bd:5c:81:0f:8d:33:94:0e: 7d:28:a6:d7:dd:9c:cc:33:82:6b:b3:67:8e:e2:6b: c2:dc:61:05:ae:29:36:18:8f:4e:f1:97:f9:fe:6f: 04:c7:fa:85:15:1c:80:5c:3b:0f:6d:36:fc:09:41: e1:37:58:02:68:5e:a9:ea:8b:22:7d:48:18:1b:4b: 54:6b:d6:0d:89:ff:d7:02:63:d7:75:7d:0d:ef:e9: bc:19:bb:b4:ec:3f:99:7c:c8:01:5a:c8:6f:9d:59: 6e:ea:c1:62:9e:0e:8d:88:3f:6c:8c:75:4e:4e:b7: 5e:f5:91:16:84:57:00:bd:f8:d2:4c:fd:7b:c7:59: 42:f3:57:2a:5c:d5:8c:8b:d0:3d:db:26:52:ec:55: 90:cb:17:38:a2:2e:13:d4:93:25:47:d5:3b:91:cd: 57:d9:4d:c4:77:af:73:79:c1:38:05:56:64:8d:5f: 44:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:93:E4:C3:8F:47:0E:7B:81:95:76:1B:A5:CB:5F:BF:5D:65:1E:75 X509v3 Authority Key Identifier: keyid:F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:85:bd:1c:1b:3d:52:e3:49:9b:54:82:51:52:a4:61:52:f2: 4d:e8:c5:a2:74:e4:3c:8e:50:12:12:57:14:8c:e7:2c:2d:65: 9c:3a:bb:f4:8f:cd:36:40:2f:76:1c:4d:d8:ed:5a:78:e1:c6: 26:17:bf:01:be:56:7a:3f:e9:46:8f:5b:98:3d:d5:5a:32:1e: 5b:1c:2b:4c:78:53:08:40:45:b6:55:67:4a:18:fc:f1:69:6a: 0b:95:ac:d7:03:28:07:b0:49:be:41:4f:3f:59:f9:fc:22:bf: 9c:95:0c:48:ab:17:ec:bf:d1:7f:96:43:45:bb:02:01:3a:d5: e7:00:85:44:db:ec:da:9d:aa:26:16:6e:3d:7f:c6:dd:77:cf: f0:18:da:65:d1:36:15:6d:70:7b:62:c1:75:9d:6c:96:26:18: 06:81:48:77:a0:e0:05:02:b2:c1:d6:9d:69:7e:cd:48:ff:c6: 76:7d:88:47:b5:0e:bc:59:9c:a3:d6:f6:34:4f:e1:13:88:36: 0c:2d:b3:5b:a3:40:ba:55:01:95:22:17:1e:9f:a5:ab:f0:22: 29:6d:93:75:04:0c:66:f6:91:18:9d:eb:de:14:cc:2e:99:7a: dc:34:99:7e:6b:72:97:53:71:79:68:85:81:93:d9:82:cf:ef: d4:66:88:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9OFL1i3/Hu8PyspYYB7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYTk1Yjc4YjA1NzY1MDEyNzhlZmQ3ZTAyMDI2OWJhMWYw NmQzODYwHhcNMjUxMjA2MTAwMTE4WhcNMjUxMjA3MTAwMTE4WjAzMTEwLwYDVQQD Eyg1MTkzZTRjMzhmNDcwZTdiODE5NTc2MWJhNWNiNWZiZjVkNjUxZTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI1oFcwvMnqzBrcufOL05owOmgiy KB5o/VkrXKGDn7kwldwmYTrKpIsyVll5004kGlQuBLyRhVH32k+7813GVWcntU81 4JbU4Sm9I1swAEAjvVyBD40zlA59KKbX3ZzMM4Jrs2eO4mvC3GEFrik2GI9O8Zf5 /m8Ex/qFFRyAXDsPbTb8CUHhN1gCaF6p6osifUgYG0tUa9YNif/XAmPXdX0N7+m8 Gbu07D+ZfMgBWshvnVlu6sFing6NiD9sjHVOTrde9ZEWhFcAvfjSTP17x1lC81cq XNWMi9A92yZS7FWQyxc4oi4T1JMlR9U7kc1X2U3Ed69zecE4BVZkjV9EbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGT5MOPRw57gZV2G6XLX79dZR51MB8GA1UdIwQY MBaAFPCpW3iwV2UBJ479fgICabofBtOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEtsYmVMQlhaUUVuanYxLUFnSnB1aDhHMDRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85MmM4OWMtNDQ5My00NGRjLTgyNjEt YmRkZWY2MGNmOWQ4LzEvOEtsYmVMQlhaUUVuanYxLUFnSnB1aDhHMDRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS85MmM4OWMtNDQ5My00NGRjLTgyNjEtYmRkZWY2MGNmOWQ4 LzEvOEtsYmVMQlhaUUVuanYxLUFnSnB1aDhHMDRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoW9HBs9 UuNJm1SCUVKkYVLyTejFonTkPI5QEhJXFIznLC1lnDq79I/NNkAvdhxN2O1aeOHG Jhe/Ab5Wej/pRo9bmD3VWjIeWxwrTHhTCEBFtlVnShj88WlqC5Ws1wMoB7BJvkFP P1n5/CK/nJUMSKsX7L/Rf5ZDRbsCATrV5wCFRNvs2p2qJhZuPX/G3XfP8BjaZdE2 FW1we2LBdZ1sliYYBoFId6DgBQKywdadaX7NSP/Gdn2IR7UOvFmco9b2NE/hE4g2 DC2zW6NAulUBlSIXHp+lq/AiKW2TdQQMZvaRGJ3r3hTMLpl63DSZfmtyl1NxeWiF gZPZgs/v1GaIAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:00:54 2025 by rpki-client