This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft File: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft (raw, json) Hash identifier: E8GpNkijSkqqA7ScLS5q1J/ogN76j4wMCi232k9P2bU= Subject key identifier: 6E:C3:7E:32:F3:8D:88:79:3E:1D:E7:91:95:74:AB:99:BC:DB:59:30 Authority key identifier: F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24 Certificate issuer: /CN=f1af8bb98e405539ea983384fafa82b2b4b71724 Certificate serial: 019AF276A705BFDC913C8C39E6B2C90EDD37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 07:00:53 +0000 Manifest this update: Sat 06 Dec 2025 07:00:53 +0000 Manifest next update: Sun 07 Dec 2025 07:00:53 +0000 Files and hashes: 1: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl (hash: KYD85fUbO2IqgehysoFz13pD3qFdH2eYC22SltUdNrM=) 2: eGF4PY_wgfKdtXUANezmT92NTGM.roa (hash: 05Pk1BDJWHJV0SJRPVmkmFIh7w5FFlCRro3lX7bPWNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a7:05:bf:dc:91:3c:8c:39:e6:b2:c9:0e:dd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1af8bb98e405539ea983384fafa82b2b4b71724 Validity Not Before: Dec 6 07:00:53 2025 GMT Not After : Dec 7 07:00:53 2025 GMT Subject: CN=6ec37e32f38d88793e1de7919574ab99bcdb5930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:47:be:85:7f:0d:a7:23:b6:45:7a:2b:6e:e0: a0:45:db:c5:51:f5:e4:23:00:dc:db:1d:1d:7e:8d: 81:56:bf:be:23:38:a7:1b:01:18:fc:04:74:50:50: f8:01:8a:17:9b:51:8f:39:0e:08:d0:9b:21:f0:a7: 8c:54:62:a3:7d:18:ef:83:dc:ad:8e:4d:59:fa:7b: 15:de:f8:23:7c:1a:23:d2:15:64:6a:e0:97:7c:aa: 94:88:f9:d4:c2:d2:8d:91:78:39:71:de:a5:b7:2b: a2:f8:b9:1e:ef:51:64:40:3c:17:c1:e7:02:be:02: c9:5c:4a:a8:bb:51:3c:a9:c5:a8:db:8b:a3:ef:e7: 3e:2d:b5:07:5a:53:cc:a6:0c:56:12:93:6e:27:e5: 31:b7:cb:84:69:d2:f1:e5:31:36:39:0f:4a:4a:59: b4:81:52:0d:bf:44:a8:b7:06:ac:a2:af:db:a0:6f: 3a:67:cc:50:2a:1e:00:fb:29:78:e2:26:c9:73:88: 8a:66:99:01:b6:e1:64:e2:c3:46:b1:f1:01:5d:97: 52:c7:e2:00:5b:5c:4a:ac:5a:73:49:9b:11:da:7f: c4:bd:2f:7a:35:49:cf:05:1c:d9:45:11:e2:8c:6c: f9:91:d2:e7:de:00:44:29:bd:74:e3:c5:d4:fd:c5: 29:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C3:7E:32:F3:8D:88:79:3E:1D:E7:91:95:74:AB:99:BC:DB:59:30 X509v3 Authority Key Identifier: keyid:F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:10:4e:11:e0:52:78:80:d2:10:b0:41:94:65:15:c6:94:d2: 93:e0:da:ee:15:7f:c7:11:0d:a2:2f:db:70:0c:e0:05:04:cc: ca:f6:6f:15:0b:5b:c3:09:ad:dd:c4:fd:72:fa:ff:c6:a4:21: dd:24:e1:42:80:49:c5:e1:30:13:fa:54:07:d2:6e:31:ef:8f: 31:e2:1a:59:de:5d:31:dd:9a:d5:b4:e0:58:d4:54:f3:9c:4c: d6:dd:c8:b3:70:b8:b0:2a:21:ac:01:92:31:f6:ed:5e:38:bb: 4b:a3:7c:02:50:0c:29:39:02:fb:f8:b9:04:56:7b:42:a7:ba: 10:d6:f0:e0:92:34:eb:b6:85:62:1a:55:1d:ac:ab:db:4b:70: 03:54:6d:04:76:47:7a:be:58:0b:e1:93:9a:af:b5:6b:dc:a8: f0:aa:ba:db:84:3a:9f:8a:9b:3f:63:1e:13:2e:2e:a4:55:0e: ab:f3:0f:8a:e0:38:ee:d9:38:e9:25:07:0e:84:ac:f6:59:a8: 2b:b4:fb:59:b4:77:b7:2d:73:f6:23:0b:5f:0c:d1:f1:51:69: 15:f8:c4:c1:b0:67:2e:1c:ed:6e:c9:01:cf:90:1c:37:96:d2: e2:25:68:6f:27:43:07:c3:2c:57:c5:32:0e:a9:cf:b7:27:18: c9:a3:9d:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqcFv9yRPIw55rLJDt03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYWY4YmI5OGU0MDU1MzllYTk4MzM4NGZhZmE4MmIyYjRi NzE3MjQwHhcNMjUxMjA2MDcwMDUzWhcNMjUxMjA3MDcwMDUzWjAzMTEwLwYDVQQD Eyg2ZWMzN2UzMmYzOGQ4ODc5M2UxZGU3OTE5NTc0YWI5OWJjZGI1OTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0e+hX8NpyO2RXorbuCgRdvFUfXk IwDc2x0dfo2BVr++IzinGwEY/AR0UFD4AYoXm1GPOQ4I0Jsh8KeMVGKjfRjvg9yt jk1Z+nsV3vgjfBoj0hVkauCXfKqUiPnUwtKNkXg5cd6ltyui+Lke71FkQDwXwecC vgLJXEqou1E8qcWo24uj7+c+LbUHWlPMpgxWEpNuJ+Uxt8uEadLx5TE2OQ9KSlm0 gVINv0Sotwasoq/boG86Z8xQKh4A+yl44ibJc4iKZpkBtuFk4sNGsfEBXZdSx+IA W1xKrFpzSZsR2n/EvS96NUnPBRzZRRHijGz5kdLn3gBEKb1048XU/cUpkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7DfjLzjYh5Ph3nkZV0q5m821kwMB8GA1UdIwQY MBaAFPGvi7mOQFU56pgzhPr6grK0txckMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGEtTHVZNUFWVG5xbURPRS12cUNzclMzRnlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yZWM0YjMtZTY1ZC00NjEyLTkzMDQt YTM5MzAzZDg1MDY2LzEvOGEtTHVZNUFWVG5xbURPRS12cUNzclMzRnlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8yZWM0YjMtZTY1ZC00NjEyLTkzMDQtYTM5MzAzZDg1MDY2 LzEvOGEtTHVZNUFWVG5xbURPRS12cUNzclMzRnlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0RBOEeBS eIDSELBBlGUVxpTSk+Da7hV/xxENoi/bcAzgBQTMyvZvFQtbwwmt3cT9cvr/xqQh 3SThQoBJxeEwE/pUB9JuMe+PMeIaWd5dMd2a1bTgWNRU85xM1t3Is3C4sCohrAGS MfbtXji7S6N8AlAMKTkC+/i5BFZ7Qqe6ENbw4JI067aFYhpVHayr20twA1RtBHZH er5YC+GTmq+1a9yo8Kq624Q6n4qbP2MeEy4upFUOq/MPiuA47tk46SUHDoSs9lmo K7T7WbR3ty1z9iMLXwzR8VFpFfjEwbBnLhztbskBz5AcN5bS4iVobydDB8MsV8Uy DqnPtycYyaOdWw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:36:58 2025 by rpki-client