This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft File: 8QEB-_qGP-Reriv2uX4O_n7IMSU.mft (raw, json) Hash identifier: jm2OMR6vMMqpZCYCRuwZMQVqkIrJB2excUtDvd9f7F4= Subject key identifier: 2D:2D:46:6A:6D:9D:34:DF:83:62:4D:E8:7A:AF:9D:D8:88:F2:F9:0A Authority key identifier: F1:01:01:FB:FA:86:3F:E4:5E:AE:2B:F6:B9:7E:0E:FE:7E:C8:31:25 Certificate issuer: /CN=f10101fbfa863fe45eae2bf6b97e0efe7ec83125 Certificate serial: 019AF540EF6EE60FC9E207148EBDB7ACBBFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft Manifest number: 070E Signing time: Sat 06 Dec 2025 20:01:04 +0000 Manifest this update: Sat 06 Dec 2025 20:01:04 +0000 Manifest next update: Sun 07 Dec 2025 20:01:04 +0000 Files and hashes: 1: 1-_UwL6gJgWy3pN6NrkEbXBFBiRw.roa (hash: g97v9R+PoC4iu0w5rkLd1FzagNbwQyMIzICsh2OGkRc=) 2: 8QEB-_qGP-Reriv2uX4O_n7IMSU.crl (hash: iWbHCbqZV5BMQKkDVebVhrspFQx4HwQKS2EM7gY/6z8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:ef:6e:e6:0f:c9:e2:07:14:8e:bd:b7:ac:bb:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f10101fbfa863fe45eae2bf6b97e0efe7ec83125 Validity Not Before: Dec 6 20:01:04 2025 GMT Not After : Dec 7 20:01:04 2025 GMT Subject: CN=2d2d466a6d9d34df83624de87aaf9dd888f2f90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:50:ab:b5:24:09:e1:0c:c1:29:a0:5e:ab:25: 9a:b4:b0:e1:30:f9:fc:40:41:2b:75:99:89:49:c5: 86:82:f7:23:db:34:bb:ce:52:db:0f:56:43:65:d7: 94:d7:56:09:7c:8b:3d:d6:b9:80:2b:75:ab:d8:76: ac:21:33:9c:e9:7c:98:95:ab:08:20:97:73:da:25: 11:fa:00:06:af:52:a8:63:f5:91:44:11:ee:83:40: 9e:e9:47:93:37:ee:5a:90:18:34:5e:0b:ca:d2:5a: b2:4a:1f:9d:01:d7:3b:7a:20:46:a2:ed:03:0f:42: 2f:70:bd:a9:6e:f0:b6:de:e5:5f:36:17:66:bb:fe: a4:f0:96:8b:ce:ce:45:e1:22:ad:a7:45:e6:81:ea: 54:fb:92:a0:36:17:af:0a:99:3e:d0:82:a5:7f:ca: 86:36:1d:e8:63:34:cd:9e:44:03:dd:0c:12:29:9f: 3d:db:98:10:a8:62:3c:44:b7:23:e7:72:02:63:b5: 76:25:ef:af:4f:ae:46:42:8b:74:6f:30:b1:0f:0c: 12:f2:2d:41:fb:de:d7:92:6b:45:21:ab:4d:28:9b: 30:f8:85:61:6a:6c:17:64:84:e6:11:5f:9e:dc:78: 89:9e:45:c2:52:41:51:c0:57:42:52:d5:15:4f:bd: c2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2D:46:6A:6D:9D:34:DF:83:62:4D:E8:7A:AF:9D:D8:88:F2:F9:0A X509v3 Authority Key Identifier: keyid:F1:01:01:FB:FA:86:3F:E4:5E:AE:2B:F6:B9:7E:0E:FE:7E:C8:31:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3b:22:01:a2:e3:9b:9c:b3:18:06:d0:83:fa:38:d5:72:55: 6d:c7:f0:2f:e6:ae:ba:78:6f:e6:5d:42:ac:c4:b0:6b:ec:ac: 98:5c:8d:2f:09:8f:ec:1f:53:5b:c8:cc:b0:72:b3:f0:c0:9d: 31:b7:aa:c2:c3:17:b2:6d:6b:5a:3c:ce:b2:55:5c:5a:8e:41: fb:9f:bd:ac:cd:4d:aa:91:1b:c7:42:00:4d:18:5d:9c:6d:1b: d2:c5:d6:4b:42:67:09:52:d1:3a:d4:d1:cf:e5:c7:22:fe:f6: 6b:0d:a4:1e:a5:ab:81:62:ae:0d:39:09:83:e7:2b:f1:dd:da: 40:2c:25:51:85:8d:8f:e3:13:01:21:89:00:eb:2a:55:70:35: 6e:ae:a2:86:ad:42:87:de:77:b1:ed:70:78:3d:f6:2f:aa:e1: 5b:d6:63:c8:b5:49:f6:82:e7:41:34:05:11:fc:90:fe:ab:a8: 4f:42:a3:0a:06:5d:8e:98:e5:5d:99:06:d7:c2:bb:bf:97:86: 75:bd:1d:ef:af:35:40:1a:f9:df:f0:49:f3:c7:de:dd:22:22: b8:33:58:0b:6f:37:46:55:31:f9:de:7d:4f:4d:ab:8b:d6:91: 02:1a:fe:8b:8a:b4:44:56:5b:5b:cc:d3:5e:55:98:54:ac:e8: f8:5f:60:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QO9u5g/J4gcUjr23rLv6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMDEwMWZiZmE4NjNmZTQ1ZWFlMmJmNmI5N2UwZWZlN2Vj ODMxMjUwHhcNMjUxMjA2MjAwMTA0WhcNMjUxMjA3MjAwMTA0WjAzMTEwLwYDVQQD EygyZDJkNDY2YTZkOWQzNGRmODM2MjRkZTg3YWFmOWRkODg4ZjJmOTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVCrtSQJ4QzBKaBeqyWatLDhMPn8 QEErdZmJScWGgvcj2zS7zlLbD1ZDZdeU11YJfIs91rmAK3Wr2HasITOc6XyYlasI IJdz2iUR+gAGr1KoY/WRRBHug0Ce6UeTN+5akBg0XgvK0lqySh+dAdc7eiBGou0D D0IvcL2pbvC23uVfNhdmu/6k8JaLzs5F4SKtp0XmgepU+5KgNhevCpk+0IKlf8qG Nh3oYzTNnkQD3QwSKZ8925gQqGI8RLcj53ICY7V2Je+vT65GQot0bzCxDwwS8i1B +97XkmtFIatNKJsw+IVhamwXZITmEV+e3HiJnkXCUkFRwFdCUtUVT73CHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0tRmptnTTfg2JN6HqvndiI8vkKMB8GA1UdIwQY MBaAFPEBAfv6hj/kXq4r9rl+Dv5+yDElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFFFQi1fcUdQLVJlcml2MnVYNE9fbjdJTVNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lMWY4MGMtZDkyMC00MmQ0LTg5MWYt ZGUyNjQxZDQ0ZmEwLzEvOFFFQi1fcUdQLVJlcml2MnVYNE9fbjdJTVNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9lMWY4MGMtZDkyMC00MmQ0LTg5MWYtZGUyNjQxZDQ0ZmEw LzEvOFFFQi1fcUdQLVJlcml2MnVYNE9fbjdJTVNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejsiAaLj m5yzGAbQg/o41XJVbcfwL+auunhv5l1CrMSwa+ysmFyNLwmP7B9TW8jMsHKz8MCd MbeqwsMXsm1rWjzOslVcWo5B+5+9rM1NqpEbx0IATRhdnG0b0sXWS0JnCVLROtTR z+XHIv72aw2kHqWrgWKuDTkJg+cr8d3aQCwlUYWNj+MTASGJAOsqVXA1bq6ihq1C h953se1weD32L6rhW9ZjyLVJ9oLnQTQFEfyQ/quoT0KjCgZdjpjlXZkG18K7v5eG db0d7681QBr53/BJ88fe3SIiuDNYC283RlUx+d59T02ri9aRAhr+i4q0RFZbW8zT XlWYVKzo+F9g4g== -----END CERTIFICATE-----Generated at Sat Dec 6 23:07:38 2025 by rpki-client