This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft File: 8PPwSfPyhFHj4b9ouXT_28jEFMc.mft (raw, json) Hash identifier: s4LVKhOI08xeGmUJCfl6UZ+A3qqnn2kxZCKSihnDSUo= Subject key identifier: 00:38:3E:BA:21:7F:3A:CC:B4:26:60:1F:DF:70:2A:4A:AA:C9:8E:9E Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7 Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7 Certificate serial: 019B300C6341ACD7AA48EE126A86781A515F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft Manifest number: 1303 Signing time: Thu 18 Dec 2025 06:01:16 +0000 Manifest this update: Thu 18 Dec 2025 06:01:16 +0000 Manifest next update: Fri 19 Dec 2025 06:01:16 +0000 Files and hashes: 1: 8PPwSfPyhFHj4b9ouXT_28jEFMc.crl (hash: FT8WLUQ4rHmw6xD1k69beL+NpfyTCnuSblbSNxcchdo=) 2: q-Co2Fge0yCMSGAUZ61yCAp-agg.roa (hash: Kkd9tz/x2Ysb/9fgNXffDi1aqzj4oQgrCbFcbQdhMNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:63:41:ac:d7:aa:48:ee:12:6a:86:78:1a:51:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7 Validity Not Before: Dec 18 06:01:16 2025 GMT Not After : Dec 19 06:01:16 2025 GMT Subject: CN=00383eba217f3accb426601fdf702a4aaac98e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:53:c6:b4:8b:08:5d:93:c5:1d:36:d3:8f:54: 7b:ce:d3:aa:52:77:ee:96:60:d2:c8:d9:d2:e6:a6: a9:df:e4:10:c2:d4:c6:d0:e2:be:e5:59:9f:93:91: 59:39:51:63:39:68:6b:08:a6:40:e7:8e:9d:9b:d9: 96:9c:6a:64:10:26:59:f5:b0:55:aa:c0:d5:61:ef: f1:51:08:c1:07:c5:bf:aa:96:7d:f8:f0:31:3c:3b: 75:c5:67:ec:f7:60:39:d7:33:ea:2f:57:da:79:90: ce:dd:ff:f2:28:03:19:f9:f8:31:da:64:b1:43:e1: 7a:7e:d9:53:ea:ec:f2:9c:23:45:32:c5:c8:a9:03: 14:e6:cd:0f:33:7a:8d:94:5f:12:3d:88:c9:ec:31: b1:d2:24:99:e3:6f:33:66:73:5a:25:f4:92:5a:7f: 27:d7:6d:a2:ab:f7:ef:7f:90:36:bb:09:e5:84:da: 14:26:a4:78:0e:b2:a0:58:b7:2c:c4:2b:c4:02:44: e3:46:1a:8b:26:a3:8b:cb:1d:a4:07:22:90:6d:0e: 1a:ce:15:fb:f2:08:62:3d:a5:22:6b:3c:45:79:97: fa:eb:d6:b7:89:81:fb:f1:70:02:46:3a:02:2b:84: 87:65:93:c0:70:8f:19:86:e5:f7:97:e7:1a:cb:71: 3a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:38:3E:BA:21:7F:3A:CC:B4:26:60:1F:DF:70:2A:4A:AA:C9:8E:9E X509v3 Authority Key Identifier: keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:30:89:48:8c:69:07:11:8b:98:84:dc:8f:14:63:29:be:87: de:c5:db:aa:c5:2e:f6:e1:ca:19:33:e9:ed:45:18:48:30:c3: 4b:32:56:e3:fc:49:fe:67:ee:28:c6:97:dd:e6:fd:8e:01:27: 34:e9:c6:f7:ef:af:18:62:89:b7:e0:a6:b0:16:30:ba:c8:0a: 85:6f:d9:f3:68:92:63:12:74:b1:f4:ad:ae:10:79:59:01:33: 05:f9:8a:1c:d5:71:48:3b:8d:14:18:1b:48:bc:4a:c3:a6:59: e1:08:ca:98:26:44:8f:54:0f:2e:aa:34:9c:3e:34:9e:c3:95: f0:ba:b4:f5:8a:a8:1a:dc:02:23:b1:e5:c2:f4:3b:36:eb:0f: b8:ee:62:ac:24:4d:de:e6:9e:85:c5:6b:f0:94:6a:f1:41:82: 48:0b:81:17:24:ba:23:f8:e9:83:58:99:db:2b:ef:c7:82:2a: 91:a7:4f:8f:28:38:bb:85:e8:15:2f:fe:3e:e7:71:2e:81:1b: 42:a7:9f:e0:d2:07:a6:3a:5e:9f:ba:f5:3d:64:58:46:1b:30: f8:08:cb:c8:37:d6:88:d6:49:74:d2:ee:54:32:c7:86:59:01: 0c:aa:16:61:b2:ec:25:e2:4c:1e:62:46:58:c1:3e:cf:03:40: 1b:db:a6:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDGNBrNeqSO4SaoZ4GlFfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZjNmMDQ5ZjNmMjg0NTFlM2UxYmY2OGI5NzRmZmRiYzhj NDE0YzcwHhcNMjUxMjE4MDYwMTE2WhcNMjUxMjE5MDYwMTE2WjAzMTEwLwYDVQQD EygwMDM4M2ViYTIxN2YzYWNjYjQyNjYwMWZkZjcwMmE0YWFhYzk4ZTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFPGtIsIXZPFHTbTj1R7ztOqUnfu lmDSyNnS5qap3+QQwtTG0OK+5Vmfk5FZOVFjOWhrCKZA546dm9mWnGpkECZZ9bBV qsDVYe/xUQjBB8W/qpZ9+PAxPDt1xWfs92A51zPqL1faeZDO3f/yKAMZ+fgx2mSx Q+F6ftlT6uzynCNFMsXIqQMU5s0PM3qNlF8SPYjJ7DGx0iSZ428zZnNaJfSSWn8n 122iq/fvf5A2uwnlhNoUJqR4DrKgWLcsxCvEAkTjRhqLJqOLyx2kByKQbQ4azhX7 8ghiPaUiazxFeZf669a3iYH78XACRjoCK4SHZZPAcI8ZhuX3l+cay3E6NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAA4ProhfzrMtCZgH99wKkqqyY6eMB8GA1UdIwQY MBaAFPDz8Enz8oRR4+G/aLl0/9vIxBTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgt NWU1MjNiYThjOWQ3LzEvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgtNWU1MjNiYThjOWQ3 LzEvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTCJSIxp BxGLmITcjxRjKb6H3sXbqsUu9uHKGTPp7UUYSDDDSzJW4/xJ/mfuKMaX3eb9jgEn NOnG9++vGGKJt+CmsBYwusgKhW/Z82iSYxJ0sfStrhB5WQEzBfmKHNVxSDuNFBgb SLxKw6ZZ4QjKmCZEj1QPLqo0nD40nsOV8Lq09YqoGtwCI7HlwvQ7NusPuO5irCRN 3uaehcVr8JRq8UGCSAuBFyS6I/jpg1iZ2yvvx4IqkadPjyg4u4XoFS/+PudxLoEb Qqef4NIHpjpen7r1PWRYRhsw+AjLyDfWiNZJdNLuVDLHhlkBDKoWYbLsJeJMHmJG WME+zwNAG9umYQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:50:50 2025 by rpki-client