This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft File: 8x6drOnnIGMJy2yeW4YX6YWd3IU.mft (raw, json) Hash identifier: CftwoUvGbfmHLXINJsUU84sg3oeEnl4r7OKtFQDVQiw= Subject key identifier: A0:DF:8B:C2:E8:C3:27:C7:3A:5D:B3:84:13:CC:44:0B:59:04:F7:08 Authority key identifier: F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85 Certificate issuer: /CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85 Certificate serial: 019AF19B810CF3291E3D9FC9CBCC24038386 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft Manifest number: 0221 Signing time: Sat 06 Dec 2025 03:01:31 +0000 Manifest this update: Sat 06 Dec 2025 03:01:31 +0000 Manifest next update: Sun 07 Dec 2025 03:01:31 +0000 Files and hashes: 1: 8x6drOnnIGMJy2yeW4YX6YWd3IU.crl (hash: JxgwDkJA5fr89Usois+ICSZM7GXJ2Dm8flOC4oAKPI0=) 2: Y_V2AX-hKmiZJha1bvfVKTCTgXI.roa (hash: D45qS/LlK8mwdIW6eNsRENlHm2CkkbRz9HSr40lXt7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:81:0c:f3:29:1e:3d:9f:c9:cb:cc:24:03:83:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85 Validity Not Before: Dec 6 03:01:31 2025 GMT Not After : Dec 7 03:01:31 2025 GMT Subject: CN=a0df8bc2e8c327c73a5db38413cc440b5904f708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4c:6c:be:6b:67:8c:d4:a7:0d:68:97:e3:05: d3:63:42:6b:15:b4:70:89:f8:60:6c:19:d3:bd:91: 8f:ef:77:12:b6:bb:75:d4:e5:03:15:0b:ad:62:19: 7a:c2:3e:35:82:36:19:14:87:1f:24:d0:13:f8:64: e1:86:8b:dc:f2:eb:f0:ae:4e:6c:70:7c:9b:e5:f9: a4:d2:fd:7c:f9:1c:8f:4b:6a:ce:7f:14:12:b2:51: 28:6d:47:54:f3:ea:af:07:fe:9a:f8:99:aa:ad:94: aa:ef:b0:27:0f:d6:bb:f5:9c:e3:83:0c:de:5b:a7: 80:7d:fe:20:24:a4:eb:31:0b:3a:2f:29:0c:97:1f: 70:a3:f3:8a:a2:8a:90:17:f7:87:ee:04:2f:e1:1d: 7c:3c:34:a1:71:c4:ac:60:b1:e0:04:ba:44:e5:25: b8:ac:4e:af:e0:2c:4e:3e:3f:79:bd:34:b9:99:ef: 36:fc:20:30:ab:e7:00:c9:17:c9:ac:74:a5:a9:b1: 5b:4e:0a:79:6c:91:07:dd:02:0e:e2:f5:f1:63:d2: 3b:83:b4:be:bc:87:57:4a:94:d1:67:55:76:e7:1b: 4b:78:9d:4e:1b:2c:1c:f4:72:8c:e6:b8:a9:69:e6: 42:d7:e6:9b:07:7e:f4:f1:1d:13:e8:3f:26:bf:3a: e9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DF:8B:C2:E8:C3:27:C7:3A:5D:B3:84:13:CC:44:0B:59:04:F7:08 X509v3 Authority Key Identifier: keyid:F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:da:18:51:ad:32:c9:1a:52:fe:7e:d0:31:62:ba:7f:60:c8: 7a:f0:34:69:0a:98:6e:2e:d2:e1:b0:09:b0:2c:a0:41:68:87: 52:92:e6:92:d7:4f:c4:2c:66:8b:ec:7d:dd:8d:70:7d:0c:cd: 03:88:79:f1:ee:cb:25:59:67:60:d7:9e:ff:a7:73:9f:50:08: ed:f8:04:86:b6:eb:69:05:80:d3:32:5a:63:7c:db:98:8c:02: 16:4c:59:f7:eb:2e:4a:a4:a4:f8:fb:3e:e7:c7:d5:69:9c:67: ac:15:05:81:8b:b5:8a:ca:64:a5:75:87:04:30:c8:34:e7:05: e5:8b:be:f9:e3:80:96:42:01:4d:f2:63:03:6c:be:bf:a0:57: c3:43:fe:11:45:6e:36:a8:89:68:4f:86:1e:19:f4:d2:95:b7: 7c:34:e8:d8:e7:33:05:34:e6:c5:71:3e:f0:62:e9:67:53:72: c1:0d:39:92:db:fd:b3:1d:5a:64:b7:d8:5d:a4:5f:52:66:96: 5b:33:dc:c8:b4:dd:7e:a3:cb:d8:fc:74:e2:e1:fe:ca:8c:7c: cd:e3:05:c9:41:ae:11:f9:48:1b:45:f9:7a:9a:c5:5f:28:17: 24:17:94:ac:25:2c:ee:86:07:56:5b:d9:6d:2d:17:32:6a:25: 1c:d0:03:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4EM8ykePZ/Jy8wkA4OGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMWU5ZGFjZTllNzIwNjMwOWNiNmM5ZTViODYxN2U5ODU5 ZGRjODUwHhcNMjUxMjA2MDMwMTMxWhcNMjUxMjA3MDMwMTMxWjAzMTEwLwYDVQQD EyhhMGRmOGJjMmU4YzMyN2M3M2E1ZGIzODQxM2NjNDQwYjU5MDRmNzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UxsvmtnjNSnDWiX4wXTY0JrFbRw ifhgbBnTvZGP73cStrt11OUDFQutYhl6wj41gjYZFIcfJNAT+GThhovc8uvwrk5s cHyb5fmk0v18+RyPS2rOfxQSslEobUdU8+qvB/6a+JmqrZSq77AnD9a79Zzjgwze W6eAff4gJKTrMQs6LykMlx9wo/OKooqQF/eH7gQv4R18PDShccSsYLHgBLpE5SW4 rE6v4CxOPj95vTS5me82/CAwq+cAyRfJrHSlqbFbTgp5bJEH3QIO4vXxY9I7g7S+ vIdXSpTRZ1V25xtLeJ1OGywc9HKM5ripaeZC1+abB3708R0T6D8mvzrpEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDfi8LowyfHOl2zhBPMRAtZBPcIMB8GA1UdIwQY MBaAFPMenazp5yBjCctsnluGF+mFndyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHg2ZHJPbm5JR01KeTJ5ZVc0WVg2WVdkM0lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yZGUyNWEtYzk0ZS00YTQ5LWE2MWYt NDNhMTk0ZTlkOThhLzEvOHg2ZHJPbm5JR01KeTJ5ZVc0WVg2WVdkM0lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yZGUyNWEtYzk0ZS00YTQ5LWE2MWYtNDNhMTk0ZTlkOThh LzEvOHg2ZHJPbm5JR01KeTJ5ZVc0WVg2WVdkM0lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNoYUa0y yRpS/n7QMWK6f2DIevA0aQqYbi7S4bAJsCygQWiHUpLmktdPxCxmi+x93Y1wfQzN A4h58e7LJVlnYNee/6dzn1AI7fgEhrbraQWA0zJaY3zbmIwCFkxZ9+suSqSk+Ps+ 58fVaZxnrBUFgYu1ispkpXWHBDDINOcF5Yu++eOAlkIBTfJjA2y+v6BXw0P+EUVu NqiJaE+GHhn00pW3fDTo2OczBTTmxXE+8GLpZ1NywQ05ktv9sx1aZLfYXaRfUmaW WzPcyLTdfqPL2Px04uH+yox8zeMFyUGuEflIG0X5eprFXygXJBeUrCUs7oYHVlvZ bS0XMmolHNAD9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:00 2025 by rpki-client