This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft File: 8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json) Hash identifier: 9Djj1Q73oCTvAFEjo1YUjUD8dWIH8XoGNBlTmUKsd4U= Subject key identifier: 7F:05:A7:D9:41:2A:32:3A:D4:23:34:8B:00:FB:5E:1E:47:50:E5:6D Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16 Certificate issuer: /CN=f278acbcc46f133efd393f51160fdbb7607e1e16 Certificate serial: 019AF19B33D58480EF086874E00CD1CEBEE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft Manifest number: 1126 Signing time: Sat 06 Dec 2025 03:01:11 +0000 Manifest this update: Sat 06 Dec 2025 03:01:11 +0000 Manifest next update: Sun 07 Dec 2025 03:01:11 +0000 Files and hashes: 1: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: aURD5XQhr7Tc0/39s4hcMXdS0WCS3se6KneFevAY0zk=) 2: Mkl44sEh_I1NJhSRpZogcHN-KpQ.roa (hash: UFBdvkUQHMElnZ7pMex1cDJSyxO3mce2NK6vzaKBwPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:33:d5:84:80:ef:08:68:74:e0:0c:d1:ce:be:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16 Validity Not Before: Dec 6 03:01:11 2025 GMT Not After : Dec 7 03:01:11 2025 GMT Subject: CN=7f05a7d9412a323ad423348b00fb5e1e4750e56d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6b:b4:f1:d3:a0:45:6f:ea:9c:04:3e:d1:4f: 08:ac:4d:f1:85:b8:e5:5c:b1:90:98:25:6d:c7:5b: 9c:f5:fb:bf:71:3e:5e:43:df:4f:30:34:67:2f:b2: 55:e9:ba:ea:9d:dc:ea:1c:98:36:3d:6b:24:4b:3a: 31:40:36:d3:df:fa:0c:28:02:6c:2b:0b:bd:81:30: 92:71:e6:25:06:7f:cb:8b:1c:ee:90:f5:fd:95:9b: 0f:80:62:a3:ac:a8:e6:a2:5b:a2:d8:72:0f:46:89: 1f:a4:c3:b9:2d:34:e9:a3:63:40:8d:6b:fe:8d:91: f7:96:18:47:a1:11:6d:19:3d:08:7f:51:2a:21:8e: d5:33:d7:e3:70:43:15:f7:86:02:cf:23:9b:6c:c2: a4:04:36:fb:5c:66:65:ba:96:84:f1:94:fe:49:db: 6e:39:8a:83:4d:df:42:a9:37:67:b6:f7:1c:41:9f: 15:f7:5e:8b:de:f1:02:40:8e:9a:f9:02:b2:22:80: 4d:f3:b6:01:46:24:dc:a7:4e:c6:78:68:cb:64:31: 85:bb:0c:3b:7a:24:fb:e1:0f:2d:95:ad:07:96:43: 81:d7:f0:66:56:2f:1d:25:f1:75:40:49:eb:32:93: b2:29:98:03:89:13:53:35:fa:75:64:fe:de:ff:0f: f0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:05:A7:D9:41:2A:32:3A:D4:23:34:8B:00:FB:5E:1E:47:50:E5:6D X509v3 Authority Key Identifier: keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:c5:c7:3b:da:b4:b7:69:9d:40:65:b5:ed:5a:76:91:6f:97: 10:45:17:c3:74:30:9c:c2:f0:c3:1a:cb:7c:d2:d9:a1:1d:03: 90:05:03:fa:a0:9b:cd:5b:23:c9:9b:39:00:01:7d:84:e3:1e: 88:c4:d0:3d:9a:9e:0d:04:e7:85:46:24:43:5d:87:13:56:2a: b8:9e:a5:05:88:bb:ee:51:09:72:93:b6:ed:61:9e:8d:f0:f8: 81:d0:b8:29:76:aa:d8:a2:8e:d4:b7:26:61:33:d1:3f:cf:9a: 6b:80:fe:5d:dd:01:f9:d8:21:ef:55:5a:43:05:95:4c:87:67: 02:10:23:82:45:a1:65:ce:20:2b:ca:38:a9:d2:05:35:f2:f8: 22:c5:14:f0:1f:4d:72:c0:fa:66:2a:68:05:e3:ee:c6:a9:c0: df:6e:ec:9b:bd:6d:97:9d:a3:9c:24:85:1f:9d:cc:5e:77:c7: e2:97:a7:c8:20:c6:45:70:aa:7a:2e:12:c5:e1:7c:21:bd:28: fb:8a:3a:73:ff:0a:59:0a:61:00:4e:19:7f:e8:12:d2:a0:f3: cd:d7:ad:59:12:f2:34:1f:d8:ae:21:d7:e0:3d:6c:c5:92:0e: 67:98:16:c5:79:44:13:51:2e:35:f6:06:c9:e0:0f:ed:7b:2f: 3c:54:e7:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzPVhIDvCGh04AzRzr7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNzhhY2JjYzQ2ZjEzM2VmZDM5M2Y1MTE2MGZkYmI3NjA3 ZTFlMTYwHhcNMjUxMjA2MDMwMTExWhcNMjUxMjA3MDMwMTExWjAzMTEwLwYDVQQD Eyg3ZjA1YTdkOTQxMmEzMjNhZDQyMzM0OGIwMGZiNWUxZTQ3NTBlNTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGu08dOgRW/qnAQ+0U8IrE3xhbjl XLGQmCVtx1uc9fu/cT5eQ99PMDRnL7JV6brqndzqHJg2PWskSzoxQDbT3/oMKAJs Kwu9gTCSceYlBn/LixzukPX9lZsPgGKjrKjmolui2HIPRokfpMO5LTTpo2NAjWv+ jZH3lhhHoRFtGT0If1EqIY7VM9fjcEMV94YCzyObbMKkBDb7XGZlupaE8ZT+Sdtu OYqDTd9CqTdntvccQZ8V916L3vECQI6a+QKyIoBN87YBRiTcp07GeGjLZDGFuww7 eiT74Q8tla0HlkOB1/BmVi8dJfF1QEnrMpOyKZgDiRNTNfp1ZP7e/w/wMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8Fp9lBKjI61CM0iwD7Xh5HUOVtMB8GA1UdIwQY MBaAFPJ4rLzEbxM+/Tk/URYP27dgfh4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG5pc3ZNUnZFejc5T1Q5UkZnX2J0MkItSGhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS81MzcyNjctYjI0My00NjU3LTk5ZmYt OTRiNTE0NDMzYzExLzEvOG5pc3ZNUnZFejc5T1Q5UkZnX2J0MkItSGhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS81MzcyNjctYjI0My00NjU3LTk5ZmYtOTRiNTE0NDMzYzEx LzEvOG5pc3ZNUnZFejc5T1Q5UkZnX2J0MkItSGhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcXHO9q0 t2mdQGW17Vp2kW+XEEUXw3QwnMLwwxrLfNLZoR0DkAUD+qCbzVsjyZs5AAF9hOMe iMTQPZqeDQTnhUYkQ12HE1YquJ6lBYi77lEJcpO27WGejfD4gdC4KXaq2KKO1Lcm YTPRP8+aa4D+Xd0B+dgh71VaQwWVTIdnAhAjgkWhZc4gK8o4qdIFNfL4IsUU8B9N csD6ZipoBePuxqnA327sm71tl52jnCSFH53MXnfH4penyCDGRXCqei4SxeF8Ib0o +4o6c/8KWQphAE4Zf+gS0qDzzdetWRLyNB/YriHX4D1sxZIOZ5gWxXlEE1EuNfYG yeAP7XsvPFTnrA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:28 2025 by rpki-client