This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft File: 8t6Ovd0IQWOpC5rlA5ey20nLF60.mft (raw, json) Hash identifier: JuCrdadb3vJZ0bi1Lmls/a0++Jpl31dV8wcYBjAwee8= Subject key identifier: 91:06:A3:90:B8:F6:04:7A:E0:A5:D5:8D:B2:64:4B:E3:E6:05:21:07 Authority key identifier: F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD Certificate issuer: /CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad Certificate serial: 019AF3F791BA7F016283A5ED07227241C5E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 14:01:19 +0000 Manifest this update: Sat 06 Dec 2025 14:01:19 +0000 Manifest next update: Sun 07 Dec 2025 14:01:19 +0000 Files and hashes: 1: 8t6Ovd0IQWOpC5rlA5ey20nLF60.crl (hash: 9kYo6iSxS4tmo92SNoRAAzVwUef85qQfEPAV7fx5nOU=) 2: pul6fCeEfRfqHUtKh0hXtHyFW6M.roa (hash: SMvKtJGuPxG36wkNr1bAgb49/+mZbdqtVopoxHFUHtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:91:ba:7f:01:62:83:a5:ed:07:22:72:41:c5:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad Validity Not Before: Dec 6 14:01:19 2025 GMT Not After : Dec 7 14:01:19 2025 GMT Subject: CN=9106a390b8f6047ae0a5d58db2644be3e6052107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b0:24:1a:5b:a4:bb:ad:33:0e:ca:e0:85:ab: 45:12:e3:f0:b6:24:40:53:9e:d7:ec:40:b6:6e:7d: 92:50:e8:c1:67:53:8d:92:1b:9f:31:d3:90:f8:90: 48:46:0c:b8:6a:47:6b:1e:47:8b:9d:4b:a0:f2:c4: cd:a5:20:b0:59:a8:53:d5:ce:11:68:3c:9c:5f:a0: f8:e0:f7:a8:57:fc:0e:06:8a:97:5c:4a:9b:9e:3f: 88:86:29:de:0f:75:e9:cc:39:82:15:f0:ef:70:9a: ee:9f:aa:58:53:7a:8c:21:52:c8:dc:dc:70:8d:1c: f7:4f:9b:11:c8:3a:4f:65:8a:78:01:ac:9f:26:d3: 82:9c:be:52:57:20:4d:bc:3a:78:fc:10:67:26:d1: ff:b3:01:9e:e9:5f:5f:f9:16:1e:7a:d9:18:3e:60: 7f:31:a7:50:a0:2b:bd:59:8f:b6:21:bc:83:33:47: 70:12:f4:a2:7d:e8:96:33:c9:f7:3a:7b:ad:c2:a3: 9e:a8:93:33:30:3b:16:de:42:8d:c7:75:c0:e2:a4: 56:33:37:63:03:35:b1:42:07:0a:73:8f:0e:39:69: 36:fe:a3:8f:89:e5:f9:7d:6e:44:9a:ac:27:c1:52: 07:02:14:8e:e3:41:c2:dc:be:ed:71:b2:6f:b0:c4: 7f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:06:A3:90:B8:F6:04:7A:E0:A5:D5:8D:B2:64:4B:E3:E6:05:21:07 X509v3 Authority Key Identifier: keyid:F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:1e:b0:cb:1c:1e:73:ca:91:75:3f:e6:e6:51:31:66:93:34: 2b:0c:b2:6e:18:92:39:85:97:3b:14:55:ef:5e:62:a5:b6:52: b7:c1:17:88:2e:19:e4:c1:46:02:24:2a:fd:4a:c8:fb:2e:7b: 91:47:0e:5e:e7:c5:13:0b:19:c5:43:30:d0:9c:a3:3f:56:13: 34:85:f6:e3:9d:a2:d2:e7:70:b4:bb:5c:21:05:9f:2d:23:06: e9:a2:84:a6:0d:b2:a7:a4:33:a3:21:79:64:3b:93:67:e5:00: 18:03:6a:ad:20:79:b1:fa:b5:b1:82:18:cd:db:84:85:07:3b: f1:4a:09:fe:51:7f:42:2b:f7:83:70:1c:19:43:6b:c9:2f:16: 6a:7a:14:b0:0f:1f:70:8e:d8:87:4f:6d:26:c2:6a:07:3a:56: 58:b9:bb:8c:ee:a1:22:93:9e:8c:56:8f:e6:89:be:3a:10:f3: 55:b5:cd:76:65:f5:f2:0b:8b:21:96:1d:af:7a:7c:98:2c:0e: f3:c5:ee:c8:05:80:0a:a5:28:bb:d6:7e:71:e6:ff:73:d6:0f: 93:63:d9:02:5f:7f:53:c9:4c:f4:01:36:aa:8d:c0:f2:6e:5a: a5:19:77:63:f7:3b:90:a9:70:16:e9:b9:5c:8e:cc:9c:c6:5e: da:10:0c:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz95G6fwFig6XtByJyQcXpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZGU4ZWJkZGQwODQxNjNhOTBiOWFlNTAzOTdiMmRiNDlj YjE3YWQwHhcNMjUxMjA2MTQwMTE5WhcNMjUxMjA3MTQwMTE5WjAzMTEwLwYDVQQD Eyg5MTA2YTM5MGI4ZjYwNDdhZTBhNWQ1OGRiMjY0NGJlM2U2MDUyMTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7AkGluku60zDsrghatFEuPwtiRA U57X7EC2bn2SUOjBZ1ONkhufMdOQ+JBIRgy4akdrHkeLnUug8sTNpSCwWahT1c4R aDycX6D44PeoV/wOBoqXXEqbnj+IhineD3XpzDmCFfDvcJrun6pYU3qMIVLI3Nxw jRz3T5sRyDpPZYp4AayfJtOCnL5SVyBNvDp4/BBnJtH/swGe6V9f+RYeetkYPmB/ MadQoCu9WY+2IbyDM0dwEvSifeiWM8n3OnutwqOeqJMzMDsW3kKNx3XA4qRWMzdj AzWxQgcKc48OOWk2/qOPieX5fW5EmqwnwVIHAhSO40HC3L7tcbJvsMR/eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEGo5C49gR64KXVjbJkS+PmBSEHMB8GA1UdIwQY MBaAFPLejr3dCEFjqQua5QOXsttJyxetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHQ2T3ZkMElRV09wQzVybEE1ZXkyMG5MRjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9jNTI2ODItN2VhMS00MmY3LTg0ZGIt YWYxYWMwZjAwNDE3LzEvOHQ2T3ZkMElRV09wQzVybEE1ZXkyMG5MRjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9jNTI2ODItN2VhMS00MmY3LTg0ZGItYWYxYWMwZjAwNDE3 LzEvOHQ2T3ZkMElRV09wQzVybEE1ZXkyMG5MRjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWR6wyxwe c8qRdT/m5lExZpM0KwyybhiSOYWXOxRV715ipbZSt8EXiC4Z5MFGAiQq/UrI+y57 kUcOXufFEwsZxUMw0JyjP1YTNIX2452i0udwtLtcIQWfLSMG6aKEpg2yp6QzoyF5 ZDuTZ+UAGANqrSB5sfq1sYIYzduEhQc78UoJ/lF/Qiv3g3AcGUNryS8WanoUsA8f cI7Yh09tJsJqBzpWWLm7jO6hIpOejFaP5om+OhDzVbXNdmX18guLIZYdr3p8mCwO 88XuyAWACqUou9Z+ceb/c9YPk2PZAl9/U8lM9AE2qo3A8m5apRl3Y/c7kKlwFum5 XI7MnMZe2hAMkg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:49:08 2025 by rpki-client