This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft File: rev8Tln35kZGDZAxFWbfH0ftqRc.mft (raw, json) Hash identifier: 1OC8tm423s6s3tmDpqCJB4PdsTIHBqlf/fiUOIELjO4= Subject key identifier: 8A:92:02:5C:51:2C:A0:CA:71:EF:4C:61:AA:91:6C:7A:3E:38:9A:F6 Authority key identifier: AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17 Certificate issuer: /CN=adebfc4e59f7e646460d90311566df1f47eda917 Certificate serial: 019AF3522EA22581DDCE22960960D9362B30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft Manifest number: 129F Signing time: Sat 06 Dec 2025 11:00:40 +0000 Manifest this update: Sat 06 Dec 2025 11:00:40 +0000 Manifest next update: Sun 07 Dec 2025 11:00:40 +0000 Files and hashes: 1: cQyc6nVgHzK4QNpSkp4cDVRMkiE.roa (hash: N1QdoGGRESzbdDo8ibNStMhsdyaZ5jyu5P6HBd0ZTZU=) 2: rev8Tln35kZGDZAxFWbfH0ftqRc.crl (hash: DUL+MtS2H6HcHEZ7BGaSGdIat5XjtgZD5d20XARBsVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:2e:a2:25:81:dd:ce:22:96:09:60:d9:36:2b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adebfc4e59f7e646460d90311566df1f47eda917 Validity Not Before: Dec 6 11:00:40 2025 GMT Not After : Dec 7 11:00:40 2025 GMT Subject: CN=8a92025c512ca0ca71ef4c61aa916c7a3e389af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:de:19:1a:b6:54:74:8b:f1:0e:a1:a5:a1:ae: 5b:f5:c2:fb:88:e5:b6:74:02:f0:87:90:32:55:20: 7a:2d:af:b8:37:43:80:d0:ed:a3:d3:ed:3e:dd:39: 37:9a:8d:16:ab:d0:41:8b:ba:a2:bb:1b:8f:65:6b: fe:fe:94:d9:8e:90:b2:b3:2a:54:27:a4:63:ec:67: 5e:ff:44:1f:51:fa:b0:88:29:fd:d6:d4:60:6c:05: 9a:bc:70:d8:25:b5:66:e7:d7:97:d9:b7:d1:7d:3c: b5:15:41:74:fa:cc:40:d1:56:1a:f5:20:52:f8:97: cc:ce:88:40:91:22:d7:f8:9b:80:07:ba:d5:f0:51: 98:56:9a:3c:3f:3a:21:bf:d5:8b:4f:ca:4e:ee:e5: da:c7:13:d3:27:9a:b4:61:be:fe:40:66:c1:ab:82: fa:f2:5f:b4:78:d0:22:a9:ae:a4:17:af:3e:b3:c7: 22:28:f1:76:ee:a1:0d:5d:9b:7d:3a:43:bf:42:af: 7d:87:42:14:62:35:e6:00:32:9c:8e:4d:d6:11:da: a9:f7:d3:57:d3:cb:ca:9d:cc:3e:fa:7b:11:01:36: ac:70:24:31:6b:1b:0f:07:0f:84:88:59:eb:ec:bd: 38:81:8d:a2:d1:ea:07:92:2f:34:45:a9:df:0b:d4: 8d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:92:02:5C:51:2C:A0:CA:71:EF:4C:61:AA:91:6C:7A:3E:38:9A:F6 X509v3 Authority Key Identifier: keyid:AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:50:01:c5:3c:4e:f8:d5:36:c6:0f:a7:51:7d:a1:db:c5:09: 60:41:ba:be:a7:e8:95:e5:f1:5f:2e:91:80:9b:33:9d:8c:15: e2:a3:5c:4e:1f:6c:ce:35:7d:3b:84:41:07:5d:ec:38:fe:0a: 5e:6b:4f:02:da:ce:24:38:91:1b:ba:a6:36:30:a7:28:0a:19: ad:0b:dd:19:8b:a1:f1:41:bd:f8:03:48:73:4f:7c:e8:ed:59: 53:6e:37:f1:a5:bd:69:db:65:40:5d:0b:85:84:af:07:4d:b1: c9:ce:88:86:36:dd:c3:de:79:c6:d6:1c:57:3a:68:86:1c:32: fd:8a:86:c8:c8:f3:20:f9:b9:25:16:ff:2c:4f:35:e9:ed:21: 5f:dd:82:ad:48:7e:35:05:38:80:f9:77:0e:14:b9:bf:af:04: db:8c:84:4b:be:f8:6a:d5:12:87:26:c0:bc:25:8d:0a:2b:87: 7b:ef:90:24:c3:60:07:41:d1:1a:78:16:fd:5f:8d:d1:db:d4: 70:04:5e:28:93:cd:e4:c9:f8:ac:d2:87:f1:4a:6c:85:44:41: bb:40:58:2d:fa:2f:09:88:53:34:ef:8a:2a:ef:31:7c:08:af: 80:09:8b:9d:c7:d0:fc:ce:b8:9d:3c:6c:c3:7a:9b:df:6b:49: ac:6e:3a:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUi6iJYHdziKWCWDZNiswMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZWJmYzRlNTlmN2U2NDY0NjBkOTAzMTE1NjZkZjFmNDdl ZGE5MTcwHhcNMjUxMjA2MTEwMDQwWhcNMjUxMjA3MTEwMDQwWjAzMTEwLwYDVQQD Eyg4YTkyMDI1YzUxMmNhMGNhNzFlZjRjNjFhYTkxNmM3YTNlMzg5YWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl94ZGrZUdIvxDqGloa5b9cL7iOW2 dALwh5AyVSB6La+4N0OA0O2j0+0+3Tk3mo0Wq9BBi7qiuxuPZWv+/pTZjpCysypU J6Rj7Gde/0QfUfqwiCn91tRgbAWavHDYJbVm59eX2bfRfTy1FUF0+sxA0VYa9SBS +JfMzohAkSLX+JuAB7rV8FGYVpo8Pzohv9WLT8pO7uXaxxPTJ5q0Yb7+QGbBq4L6 8l+0eNAiqa6kF68+s8ciKPF27qENXZt9OkO/Qq99h0IUYjXmADKcjk3WEdqp99NX 08vKncw++nsRATascCQxaxsPBw+EiFnr7L04gY2i0eoHki80RanfC9SN2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqSAlxRLKDKce9MYaqRbHo+OJr2MB8GA1UdIwQY MBaAFK3r/E5Z9+ZGRg2QMRVm3x9H7akXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmV2OFRsbjM1a1pHRFpBeEZXYmZIMGZ0cVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8zODQ5OTUtM2FkZS00YjUyLWJmZmIt ODY2MjY2NDcwODZjLzEvcmV2OFRsbjM1a1pHRFpBeEZXYmZIMGZ0cVJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8zODQ5OTUtM2FkZS00YjUyLWJmZmItODY2MjY2NDcwODZj LzEvcmV2OFRsbjM1a1pHRFpBeEZXYmZIMGZ0cVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVABxTxO +NU2xg+nUX2h28UJYEG6vqfoleXxXy6RgJsznYwV4qNcTh9szjV9O4RBB13sOP4K XmtPAtrOJDiRG7qmNjCnKAoZrQvdGYuh8UG9+ANIc0986O1ZU2438aW9adtlQF0L hYSvB02xyc6Ihjbdw955xtYcVzpohhwy/YqGyMjzIPm5JRb/LE816e0hX92CrUh+ NQU4gPl3DhS5v68E24yES774atUShybAvCWNCiuHe++QJMNgB0HRGngW/V+N0dvU cAReKJPN5Mn4rNKH8UpshURBu0BYLfovCYhTNO+KKu8xfAivgAmLncfQ/M64nTxs w3qb32tJrG46JQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:38:46 2025 by rpki-client