This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft File: 8PPwSfPyhFHj4b9ouXT_28jEFMc.mft (raw, json) Hash identifier: rKC0vByM6tf72wdKMH5Qsfs7aDQ4I2mP8ZStaGobyNo= Subject key identifier: 37:74:33:D7:18:24:AE:43:90:96:1D:B0:09:83:C8:CE:2D:98:3D:75 Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7 Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7 Certificate serial: 019AF2401258EFC1CF07F9703F9FB032DC74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft Manifest number: 12E3 Signing time: Sat 06 Dec 2025 06:01:16 +0000 Manifest this update: Sat 06 Dec 2025 06:01:16 +0000 Manifest next update: Sun 07 Dec 2025 06:01:16 +0000 Files and hashes: 1: 8PPwSfPyhFHj4b9ouXT_28jEFMc.crl (hash: R0Pj0vK+Hxm5N4GPpEPFSII0JpUa1vbxV50KE4RuGGY=) 2: q-Co2Fge0yCMSGAUZ61yCAp-agg.roa (hash: Kkd9tz/x2Ysb/9fgNXffDi1aqzj4oQgrCbFcbQdhMNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:12:58:ef:c1:cf:07:f9:70:3f:9f:b0:32:dc:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7 Validity Not Before: Dec 6 06:01:16 2025 GMT Not After : Dec 7 06:01:16 2025 GMT Subject: CN=377433d71824ae4390961db00983c8ce2d983d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1e:94:e4:b7:a1:97:9e:35:8c:6d:6b:7c:50: 74:7f:65:64:7d:5a:11:c0:b6:fe:3c:c1:c9:eb:89: de:a1:43:c9:36:d2:f1:b8:ea:77:54:eb:51:a0:9e: a9:ea:d1:a2:91:b1:dd:00:1a:01:a6:ac:12:bd:73: a7:1e:e3:fa:a5:cf:c7:91:60:bd:13:58:cb:bb:dd: 24:c0:51:70:d1:e6:59:fb:fb:7f:40:ac:f3:c5:ca: 3b:81:5a:fd:23:e8:50:6e:6a:51:31:ba:d2:ee:8e: cc:9b:7b:10:73:ff:71:a5:be:e2:c9:d7:58:7b:75: 09:25:4a:94:58:97:31:ca:2a:7b:1e:d2:69:c0:25: 0e:68:9b:af:57:4e:f9:d8:89:23:d7:0f:96:32:17: 7e:f8:22:41:b8:e5:52:ac:2c:10:72:93:1f:58:f5: 13:f8:52:b5:4c:90:8d:9e:ee:c2:02:0b:62:c8:18: ad:49:85:24:a7:8b:69:2f:51:0b:6d:52:49:3c:15: 9d:f2:fc:2f:df:4c:e5:8e:c5:36:b7:35:6c:68:4f: e2:ab:84:f9:ad:59:28:f1:65:62:11:81:87:5f:e4: 49:6b:82:e2:19:1f:f5:bd:e4:4d:78:22:3b:3b:6d: 52:fb:62:82:d0:b7:f0:da:f9:e4:f6:0d:59:d3:ed: 7e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:74:33:D7:18:24:AE:43:90:96:1D:B0:09:83:C8:CE:2D:98:3D:75 X509v3 Authority Key Identifier: keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:b1:a8:e1:a2:b6:f7:d1:aa:20:04:36:48:45:a7:2c:25:92: f1:99:45:6a:98:0d:f3:19:78:1f:06:f0:f0:f5:3e:95:b3:d2: 27:73:13:e9:2f:ac:b4:5b:61:75:ae:5f:55:d7:8a:97:65:3d: 0f:84:20:43:8f:17:bc:ca:78:4e:ad:45:d3:b2:25:2f:8f:cb: 34:44:4a:86:49:1c:4e:d4:6c:3d:37:f1:6b:ca:a9:25:c6:84: b8:71:6c:ec:f9:eb:0a:28:74:1d:5c:f1:1b:0c:69:9e:a4:45: 91:4b:58:5d:65:40:ed:94:d0:4d:5d:c1:42:40:cc:e4:07:bf: 1d:a9:53:d1:fc:83:4a:67:03:e8:75:58:16:9c:46:49:17:e2: f5:af:2e:ce:df:19:75:6e:8c:62:84:b3:f2:fd:56:8a:f5:aa: ba:e1:f7:13:f1:15:99:15:29:10:5c:dd:e5:fa:e7:03:0f:ea: 39:0b:a9:2d:96:19:7d:d5:19:8a:b9:7e:28:a8:dc:79:ce:54: 5c:95:95:55:3d:e6:1e:09:78:1b:fa:44:1e:31:46:81:3b:69: b8:ba:ec:d6:5b:b0:22:18:8d:7b:1e:0f:ec:7e:0a:6e:a8:c1: aa:fc:95:e2:7c:4a:82:be:4f:8f:f4:86:05:cf:bb:d2:d6:00: 58:6b:4c:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBJY78HPB/lwP5+wMtx0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZjNmMDQ5ZjNmMjg0NTFlM2UxYmY2OGI5NzRmZmRiYzhj NDE0YzcwHhcNMjUxMjA2MDYwMTE2WhcNMjUxMjA3MDYwMTE2WjAzMTEwLwYDVQQD EygzNzc0MzNkNzE4MjRhZTQzOTA5NjFkYjAwOTgzYzhjZTJkOTgzZDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR6U5Lehl541jG1rfFB0f2VkfVoR wLb+PMHJ64neoUPJNtLxuOp3VOtRoJ6p6tGikbHdABoBpqwSvXOnHuP6pc/HkWC9 E1jLu90kwFFw0eZZ+/t/QKzzxco7gVr9I+hQbmpRMbrS7o7Mm3sQc/9xpb7iyddY e3UJJUqUWJcxyip7HtJpwCUOaJuvV0752Ikj1w+WMhd++CJBuOVSrCwQcpMfWPUT +FK1TJCNnu7CAgtiyBitSYUkp4tpL1ELbVJJPBWd8vwv30zljsU2tzVsaE/iq4T5 rVko8WViEYGHX+RJa4LiGR/1veRNeCI7O21S+2KC0Lfw2vnk9g1Z0+1+FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDd0M9cYJK5DkJYdsAmDyM4tmD11MB8GA1UdIwQY MBaAFPDz8Enz8oRR4+G/aLl0/9vIxBTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgt NWU1MjNiYThjOWQ3LzEvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgtNWU1MjNiYThjOWQ3 LzEvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrGo4aK2 99GqIAQ2SEWnLCWS8ZlFapgN8xl4Hwbw8PU+lbPSJ3MT6S+stFthda5fVdeKl2U9 D4QgQ48XvMp4Tq1F07IlL4/LNERKhkkcTtRsPTfxa8qpJcaEuHFs7PnrCih0HVzx GwxpnqRFkUtYXWVA7ZTQTV3BQkDM5Ae/HalT0fyDSmcD6HVYFpxGSRfi9a8uzt8Z dW6MYoSz8v1WivWquuH3E/EVmRUpEFzd5frnAw/qOQupLZYZfdUZirl+KKjcec5U XJWVVT3mHgl4G/pEHjFGgTtpuLrs1luwIhiNex4P7H4KbqjBqvyV4nxKgr5Pj/SG Bc+70tYAWGtMoA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:05 2025 by rpki-client