This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft File: 8u5baEnIyB9adjWVWIprpoIedns.mft (raw, json) Hash identifier: QyPWxN33BClB4F+VhnmD2BKeAqYGbGv3pCIioGRFaa8= Subject key identifier: 33:24:3A:FD:1C:CE:15:FE:6F:FB:E6:C5:E5:2B:35:B3:BD:85:2B:A5 Authority key identifier: F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B Certificate issuer: /CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b Certificate serial: 019AF5AEF14DF27BD5797AD67364986838AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft Manifest number: 0768 Signing time: Sat 06 Dec 2025 22:01:14 +0000 Manifest this update: Sat 06 Dec 2025 22:01:14 +0000 Manifest next update: Sun 07 Dec 2025 22:01:14 +0000 Files and hashes: 1: 8u5baEnIyB9adjWVWIprpoIedns.crl (hash: YDMZRjfVZIlc+IkLezYNLXmQJ2azPUVzx7vK4nHUzYI=) 2: Di0vSgAmdtxn2ZM7Al8L8Zr3oIU.roa (hash: 0Bf0l0DWLnoKx593QVoGlu2x+BD1lYWYH448tSVbn0U=) 3: Tb-8GP8qcCsPrA2Xrleo-iet2HM.roa (hash: yyhoDt89y5+7nL9lVvf4sdS/dAeJY+OT1BrhoMFwMME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:f1:4d:f2:7b:d5:79:7a:d6:73:64:98:68:38:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b Validity Not Before: Dec 6 22:01:14 2025 GMT Not After : Dec 7 22:01:14 2025 GMT Subject: CN=33243afd1cce15fe6ffbe6c5e52b35b3bd852ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0d:03:3e:a6:67:7e:39:da:99:a0:aa:1c:a2: d5:5b:56:c0:d7:a0:ee:11:15:88:4c:9d:9c:29:64: c5:a1:64:bb:bd:dd:7a:70:44:43:82:68:02:f6:17: b1:fc:5a:c5:ec:22:7d:f0:db:7b:3c:d6:a2:92:9d: 72:e1:64:e4:c4:d3:07:57:83:f5:f6:a2:83:26:bd: a6:e7:d6:23:28:da:62:1d:b9:8e:d9:e8:c9:2d:dc: 4e:7d:14:28:7a:6a:ba:23:43:21:67:bc:cb:cb:e6: 58:8e:c6:c5:7b:c2:b5:05:ad:04:71:a3:05:19:e4: e3:6d:84:8c:eb:62:c5:64:82:d4:60:37:d6:f5:4c: f0:6e:d8:e3:b7:3e:15:14:be:71:c2:7b:fe:42:3b: 84:ec:83:01:1b:b4:7c:52:de:6b:9b:78:45:29:12: e6:b4:d6:4b:13:ab:0d:68:da:43:88:c2:13:b3:8c: b6:2b:74:59:45:e3:0a:a0:b7:aa:fe:59:e8:db:02: 09:8c:53:b2:1e:ed:60:6f:1b:67:df:50:cb:92:17: f9:58:ca:6a:04:63:48:d4:5f:9e:c7:83:82:bf:35: f0:2f:21:5e:35:3d:f4:d6:08:7b:df:fa:46:9f:7b: 58:09:72:2c:60:46:dc:73:75:69:65:32:5b:06:d2: 94:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:24:3A:FD:1C:CE:15:FE:6F:FB:E6:C5:E5:2B:35:B3:BD:85:2B:A5 X509v3 Authority Key Identifier: keyid:F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:fb:b5:36:9e:02:4a:43:79:fb:bb:54:cb:04:6f:7f:d5:41: e1:4a:db:2a:4e:82:8d:48:e8:44:e2:61:45:82:e4:04:c9:e1: ba:88:fa:5d:7d:a9:04:b1:01:d0:18:46:8f:4d:30:aa:f1:65: f3:68:83:2b:11:cc:5a:2d:53:5d:ea:4a:1a:c9:1e:02:32:cc: 3e:3e:6b:ed:a6:a2:07:54:04:f1:e5:cf:eb:34:cf:27:40:91: f9:ef:fb:30:c6:78:e1:46:bf:69:d0:46:f9:c4:f7:84:70:78: f7:b8:6d:d9:51:a9:14:49:c2:f7:4e:df:9e:d7:fc:00:cc:13: 74:10:f3:cb:c9:3c:c6:b8:fd:2b:8c:7d:d8:fd:53:5b:57:26: 65:46:86:9b:5a:bd:d5:f9:a8:e1:c5:ba:78:3a:40:41:23:2d: 58:34:54:7b:b8:6a:d9:03:1d:c8:83:49:31:78:36:89:93:f6: dc:b8:fd:aa:8f:be:2a:9a:60:a1:cc:26:00:19:c0:ba:6a:a5: 12:12:96:4a:6c:f0:c5:73:29:c5:9f:a5:b9:3c:4e:9e:03:13: 8a:63:b5:2e:cf:19:49:82:7c:38:42:c4:42:d1:cb:3a:c4:49: fe:3d:72:a2:16:7f:04:49:79:9e:ad:0c:a7:7c:8a:40:44:a2: 2f:c9:48:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rvFN8nvVeXrWc2SYaDirMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZWU1YjY4NDljOGM4MWY1YTc2MzU5NTU4OGE2YmE2ODIx ZTc2N2IwHhcNMjUxMjA2MjIwMTE0WhcNMjUxMjA3MjIwMTE0WjAzMTEwLwYDVQQD EygzMzI0M2FmZDFjY2UxNWZlNmZmYmU2YzVlNTJiMzViM2JkODUyYmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA0DPqZnfjnamaCqHKLVW1bA16Du ERWITJ2cKWTFoWS7vd16cERDgmgC9hex/FrF7CJ98Nt7PNaikp1y4WTkxNMHV4P1 9qKDJr2m59YjKNpiHbmO2ejJLdxOfRQoemq6I0MhZ7zLy+ZYjsbFe8K1Ba0EcaMF GeTjbYSM62LFZILUYDfW9Uzwbtjjtz4VFL5xwnv+QjuE7IMBG7R8Ut5rm3hFKRLm tNZLE6sNaNpDiMITs4y2K3RZReMKoLeq/lno2wIJjFOyHu1gbxtn31DLkhf5WMpq BGNI1F+ex4OCvzXwLyFeNT301gh73/pGn3tYCXIsYEbcc3VpZTJbBtKUwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMkOv0czhX+b/vmxeUrNbO9hSulMB8GA1UdIwQY MBaAFPLuW2hJyMgfWnY1lViKa6aCHnZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wMDJhODgtM2E4NS00NzZmLWI0NTIt NjBhMDM5ZGQxYmNhLzEvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8wMDJhODgtM2E4NS00NzZmLWI0NTItNjBhMDM5ZGQxYmNh LzEvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcvu1Np4C SkN5+7tUywRvf9VB4UrbKk6CjUjoROJhRYLkBMnhuoj6XX2pBLEB0BhGj00wqvFl 82iDKxHMWi1TXepKGskeAjLMPj5r7aaiB1QE8eXP6zTPJ0CR+e/7MMZ44Ua/adBG +cT3hHB497ht2VGpFEnC907fntf8AMwTdBDzy8k8xrj9K4x92P1TW1cmZUaGm1q9 1fmo4cW6eDpAQSMtWDRUe7hq2QMdyINJMXg2iZP23Lj9qo++KppgocwmABnAumql EhKWSmzwxXMpxZ+luTxOngMTimO1Ls8ZSYJ8OELEQtHLOsRJ/j1yohZ/BEl5nq0M p3yKQESiL8lI1w== -----END CERTIFICATE-----Generated at Sun Dec 7 01:28:41 2025 by rpki-client