This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft File: 8khYdchHDmqs3JR0IQXzDFl6wrs.mft (raw, json) Hash identifier: OshERoScUFSYk06NUgWQOZl6hWmYCi0OFBJVrn+g03w= Subject key identifier: 30:75:FC:1B:1A:F8:FE:FC:3F:2E:05:8E:F7:9E:39:1D:E8:84:7D:16 Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB Certificate issuer: /CN=f2485875c8470e6aacdc94742105f30c597ac2bb Certificate serial: 019B1615339F6EC8AE56405B19FA1F0EA355 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft Manifest number: 0E6D Signing time: Sat 13 Dec 2025 05:00:46 +0000 Manifest this update: Sat 13 Dec 2025 05:00:46 +0000 Manifest next update: Sun 14 Dec 2025 05:00:46 +0000 Files and hashes: 1: 8khYdchHDmqs3JR0IQXzDFl6wrs.crl (hash: yBeaJwua4J5G7yj7dSIt44o8GPwg7zpTQQ98R/Pwqu0=) 2: KFfztoP4zYUm8dNJiEnSrQ7R73c.roa (hash: qCCYAIXwUSpfylEwHT2IABft9ieDjEL8N4YCjK7uS7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:15:33:9f:6e:c8:ae:56:40:5b:19:fa:1f:0e:a3:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb Validity Not Before: Dec 13 05:00:46 2025 GMT Not After : Dec 14 05:00:46 2025 GMT Subject: CN=3075fc1b1af8fefc3f2e058ef79e391de8847d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:44:e2:89:22:74:33:4b:0a:81:4d:b2:5e:10: 6b:ed:00:9d:ee:85:41:66:1a:49:dd:14:ac:86:a3: a9:9e:58:0d:02:b6:b3:f2:19:52:f3:40:f6:ba:fd: 08:1a:20:e8:8f:1c:56:81:65:00:00:d0:5a:f6:00: 61:e9:c8:36:5c:55:72:9d:3e:80:2e:7f:3a:ed:0d: c7:60:25:fd:fb:d3:1b:21:ea:ad:04:3e:ff:de:e0: 29:74:68:94:f5:27:fa:70:d0:35:c0:66:ef:db:85: ca:d9:cc:55:5d:7f:bb:29:aa:80:f1:54:ce:bb:da: 64:7f:af:59:b4:91:84:23:5a:b1:53:a0:12:e8:fc: 23:ca:a6:cb:d0:10:9d:9b:4e:ad:94:68:65:c9:e6: 17:cf:dc:fb:12:b3:a1:bb:74:f5:2c:80:e4:37:6a: 23:64:43:5d:ab:27:9d:48:09:59:58:1f:d7:08:ab: 23:cd:ba:4a:c5:50:2d:fb:35:23:69:a1:a8:b8:19: 1b:80:58:48:bf:bd:56:3d:09:2b:4c:3d:ce:64:d2: 02:a6:7b:41:23:d0:d4:32:65:79:df:2e:1e:87:89: 2b:56:74:0e:a5:c5:89:11:e6:9d:71:b8:52:4c:91: 21:16:49:84:7d:c3:9a:d8:03:f2:a0:2f:d1:51:b2: 21:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:75:FC:1B:1A:F8:FE:FC:3F:2E:05:8E:F7:9E:39:1D:E8:84:7D:16 X509v3 Authority Key Identifier: keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e9:e1:fc:1c:c6:56:8e:45:93:11:24:c7:10:41:1b:46:16: 2e:77:16:32:e5:31:26:ac:02:87:19:4c:87:49:f9:31:85:f2: 82:df:d2:95:4b:a4:95:2b:c1:b1:d2:fd:10:60:11:49:3e:c4: 9a:51:b0:54:2c:8e:27:d2:f7:b7:91:f2:ac:5e:4d:92:5f:95: 34:71:10:01:33:55:de:57:b5:83:3d:48:7b:ea:f0:8d:c6:18: 03:ec:b2:0c:0c:44:2d:ab:a6:da:e3:f1:cb:87:b0:6a:58:75: 9c:16:21:78:ae:fc:08:36:2c:6d:7d:aa:2d:52:0f:27:bc:68: b0:4d:4b:99:77:f7:37:e0:f9:a6:a0:cd:3e:9d:fe:cf:0f:68: 9f:2b:4b:a2:36:e4:88:42:88:7e:e5:36:93:3d:71:de:d2:f5: 23:ce:72:b4:e1:23:e7:28:04:ae:ef:d5:b7:58:bf:a8:32:8a: 85:29:32:12:68:fa:58:06:42:6f:c6:d7:43:cf:74:39:5b:79: 74:db:ee:93:0c:fc:ad:89:09:62:38:0c:0b:71:f0:ff:20:66: 4a:13:8e:cc:40:a8:4e:40:57:ff:e5:99:8e:aa:f5:0c:da:13: 20:10:1a:89:f8:0c:77:19:7d:f3:80:b4:28:64:57:56:cf:fa: e3:a9:49:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsWFTOfbsiuVkBbGfofDqNVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNDg1ODc1Yzg0NzBlNmFhY2RjOTQ3NDIxMDVmMzBjNTk3 YWMyYmIwHhcNMjUxMjEzMDUwMDQ2WhcNMjUxMjE0MDUwMDQ2WjAzMTEwLwYDVQQD EygzMDc1ZmMxYjFhZjhmZWZjM2YyZTA1OGVmNzllMzkxZGU4ODQ3ZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUTiiSJ0M0sKgU2yXhBr7QCd7oVB ZhpJ3RSshqOpnlgNAraz8hlS80D2uv0IGiDojxxWgWUAANBa9gBh6cg2XFVynT6A Ln867Q3HYCX9+9MbIeqtBD7/3uApdGiU9Sf6cNA1wGbv24XK2cxVXX+7KaqA8VTO u9pkf69ZtJGEI1qxU6AS6PwjyqbL0BCdm06tlGhlyeYXz9z7ErOhu3T1LIDkN2oj ZENdqyedSAlZWB/XCKsjzbpKxVAt+zUjaaGouBkbgFhIv71WPQkrTD3OZNICpntB I9DUMmV53y4eh4krVnQOpcWJEeadcbhSTJEhFkmEfcOa2APyoC/RUbIh2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDB1/Bsa+P78Py4FjveeOR3ohH0WMB8GA1UdIwQY MBaAFPJIWHXIRw5qrNyUdCEF8wxZesK7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGtoWWRjaEhEbXFzM0pSMElRWHpERmw2d3JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81YTNmMGItODZmNS00MDZlLTkxZDUt OGZkNGMwMjQ0ODhlLzEvOGtoWWRjaEhEbXFzM0pSMElRWHpERmw2d3JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81YTNmMGItODZmNS00MDZlLTkxZDUtOGZkNGMwMjQ0ODhl LzEvOGtoWWRjaEhEbXFzM0pSMElRWHpERmw2d3JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACunh/BzG Vo5FkxEkxxBBG0YWLncWMuUxJqwChxlMh0n5MYXygt/SlUuklSvBsdL9EGARST7E mlGwVCyOJ9L3t5HyrF5Nkl+VNHEQATNV3le1gz1Ie+rwjcYYA+yyDAxELaum2uPx y4ewalh1nBYheK78CDYsbX2qLVIPJ7xosE1LmXf3N+D5pqDNPp3+zw9onytLojbk iEKIfuU2kz1x3tL1I85ytOEj5ygEru/Vt1i/qDKKhSkyEmj6WAZCb8bXQ890OVt5 dNvukwz8rYkJYjgMC3Hw/yBmShOOzECoTkBX/+WZjqr1DNoTIBAaifgMdxl984C0 KGRXVs/646lJew== -----END CERTIFICATE-----Generated at Sat Dec 13 10:28:17 2025 by rpki-client