This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft File: 8uOrazEY4L3g5kiOa-1slpQeDoQ.mft (raw, json) Hash identifier: yJiUxOxf68uY0jqGNeirkR//Ha4cov+Dd6juzHjblmo= Subject key identifier: B1:35:E5:B4:06:7B:40:4F:CF:D0:27:62:70:3E:FC:3F:DC:3B:9C:16 Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84 Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84 Certificate serial: 019AF20976152767CCF31439E5147132B8FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft Manifest number: 0BF7 Signing time: Sat 06 Dec 2025 05:01:37 +0000 Manifest this update: Sat 06 Dec 2025 05:01:37 +0000 Manifest next update: Sun 07 Dec 2025 05:01:37 +0000 Files and hashes: 1: 8uOrazEY4L3g5kiOa-1slpQeDoQ.crl (hash: XcsxeAxpMwGRD4DU40qyq1eVu2SUsRk6Mx+Y36MWXbo=) 2: TwUAmEwQxO2jeeE0IG7nOUuBRU8.roa (hash: 5uZF7JHC6Cu/tuWa9kusO7lA0+dh5OGQEqs1E5VZ/5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:76:15:27:67:cc:f3:14:39:e5:14:71:32:b8:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84 Validity Not Before: Dec 6 05:01:37 2025 GMT Not After : Dec 7 05:01:37 2025 GMT Subject: CN=b135e5b4067b404fcfd02762703efc3fdc3b9c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:25:0b:cb:8c:09:1e:4d:26:e1:50:46:4c:e3: 14:9c:21:d6:b3:1a:a9:1b:1e:81:f4:d2:7b:9d:fe: fd:db:24:f9:56:fe:56:2c:8b:71:5f:92:41:22:55: e1:19:29:3d:1e:f1:4e:49:3a:92:e3:c9:3f:d3:c0: a4:b0:40:25:05:69:6b:98:82:19:11:d8:ef:4f:84: 61:1f:95:67:a7:8d:5d:90:91:2e:e0:0a:05:8e:99: 5b:93:d9:f6:81:76:e4:78:9d:6c:8f:82:09:3c:9a: c8:46:5d:b6:55:3b:f6:12:18:22:64:4d:9b:64:c9: c9:74:70:6e:c9:8f:6b:9b:a0:b7:e0:7c:f4:0e:b4: 40:97:b8:b5:61:77:0c:a4:6e:b3:2c:46:1a:74:f3: 61:d4:68:31:b5:57:52:ad:a3:1a:61:fd:80:6a:4c: 3f:2b:cc:db:2d:ac:4d:77:b2:fc:f0:46:3f:2f:5a: 95:1f:df:67:b2:b4:cd:cd:01:ef:68:a6:70:e3:44: f2:28:cd:69:1b:fb:7e:7f:00:6d:01:ad:d6:f2:64: 29:0a:c8:88:1c:e6:1a:54:cc:43:6a:89:14:4c:65: 38:03:f4:c3:b2:c3:31:73:c1:cd:a7:65:40:a6:5e: 6d:b6:da:be:b6:20:a5:15:0e:4f:56:0e:30:41:61: fd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:35:E5:B4:06:7B:40:4F:CF:D0:27:62:70:3E:FC:3F:DC:3B:9C:16 X509v3 Authority Key Identifier: keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:12:01:fb:aa:20:bf:61:96:2d:70:f2:77:6b:8a:87:9d:f2: 83:18:0b:f9:94:b5:47:a7:9d:49:da:ed:af:26:a9:9e:70:a1: 46:c4:e1:6c:b0:09:7d:0e:3a:1c:1c:5a:d9:7c:fb:19:1c:91: 98:1f:a6:59:02:71:8c:00:1f:a1:3d:b9:b4:07:37:3b:f2:b8: b3:b8:c6:d9:36:4f:6d:98:d3:c9:e2:d3:b7:ad:73:5c:c0:6e: 99:1f:db:86:dc:a0:d3:33:7b:44:ad:64:07:d0:d7:51:4a:f7: ae:da:f6:c2:c4:07:d6:17:6d:7b:b9:67:65:0f:ae:3f:17:8e: b8:52:3b:41:ca:86:8d:6e:46:ab:59:6f:d0:3a:2b:e1:c9:9c: 82:40:1e:4a:a3:17:3d:59:ad:32:09:41:69:e3:07:f9:d2:da: ed:53:31:8d:08:f7:08:bf:85:6f:ba:b1:19:94:ec:c8:78:dd: c3:e5:c6:b7:7a:eb:7c:ce:d6:1e:14:58:ac:1c:4e:43:a9:f9: e9:d9:e2:58:2a:9d:16:62:50:be:30:e1:eb:f7:26:19:4e:e1: 29:98:a0:d0:30:53:7d:1f:f6:2d:5d:3f:a5:f1:00:c8:b1:f1: 09:a5:c7:7c:b5:d8:0b:1e:5b:e4:0e:62:e6:ac:18:d8:f1:42: 09:a5:e8:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXYVJ2fM8xQ55RRxMrj7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTNhYjZiMzExOGUwYmRlMGU2NDg4ZTZiZWQ2Yzk2OTQx ZTBlODQwHhcNMjUxMjA2MDUwMTM3WhcNMjUxMjA3MDUwMTM3WjAzMTEwLwYDVQQD EyhiMTM1ZTViNDA2N2I0MDRmY2ZkMDI3NjI3MDNlZmMzZmRjM2I5YzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+yULy4wJHk0m4VBGTOMUnCHWsxqp Gx6B9NJ7nf792yT5Vv5WLItxX5JBIlXhGSk9HvFOSTqS48k/08CksEAlBWlrmIIZ EdjvT4RhH5Vnp41dkJEu4AoFjplbk9n2gXbkeJ1sj4IJPJrIRl22VTv2EhgiZE2b ZMnJdHBuyY9rm6C34Hz0DrRAl7i1YXcMpG6zLEYadPNh1GgxtVdSraMaYf2Aakw/ K8zbLaxNd7L88EY/L1qVH99nsrTNzQHvaKZw40TyKM1pG/t+fwBtAa3W8mQpCsiI HOYaVMxDaokUTGU4A/TDssMxc8HNp2VApl5tttq+tiClFQ5PVg4wQWH9nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLE15bQGe0BPz9AnYnA+/D/cO5wWMB8GA1UdIwQY MBaAFPLjq2sxGOC94OZIjmvtbJaUHg6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zNmM0YTMtNmUxZC00NjE0LThmOTAt ODNiMDM4NzAwOTRkLzEvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zNmM0YTMtNmUxZC00NjE0LThmOTAtODNiMDM4NzAwOTRk LzEvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRIB+6og v2GWLXDyd2uKh53ygxgL+ZS1R6edSdrtryapnnChRsThbLAJfQ46HBxa2Xz7GRyR mB+mWQJxjAAfoT25tAc3O/K4s7jG2TZPbZjTyeLTt61zXMBumR/bhtyg0zN7RK1k B9DXUUr3rtr2wsQH1hdte7lnZQ+uPxeOuFI7QcqGjW5Gq1lv0Dor4cmcgkAeSqMX PVmtMglBaeMH+dLa7VMxjQj3CL+Fb7qxGZTsyHjdw+XGt3rrfM7WHhRYrBxOQ6n5 6dniWCqdFmJQvjDh6/cmGU7hKZig0DBTfR/2LV0/pfEAyLHxCaXHfLXYCx5b5A5i 5qwY2PFCCaXosA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:52 2025 by rpki-client