This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft File: f8lWpStzUEpPH_NFRxmSl6f13p0.mft (raw, json) Hash identifier: TWpoH92rTgn6bSCwY/YJJqDkCO0WH8lBHoee25k62DA= Subject key identifier: 45:80:F4:FB:A6:3A:8F:6A:45:AC:4E:77:32:7A:0B:4D:B9:1C:15:BE Authority key identifier: 7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D Certificate issuer: /CN=7fc956a52b73504a4f1ff34547199297a7f5de9d Certificate serial: 019B311EEAF0D52842B7BE303F132AE2642A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft Manifest number: 0B35 Signing time: Thu 18 Dec 2025 11:01:08 +0000 Manifest this update: Thu 18 Dec 2025 11:01:08 +0000 Manifest next update: Fri 19 Dec 2025 11:01:08 +0000 Files and hashes: 1: f8lWpStzUEpPH_NFRxmSl6f13p0.crl (hash: KV2L8XoKAStsQzVSC96Ny6zIDNv5ArkUID6JfDgVujw=) 2: oABxc2AhceHbFWdSMSjl8hsmwIU.roa (hash: TEY8sctZHera/7HF2OtPuy78+8vJU3t66DtmPXEJjBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1e:ea:f0:d5:28:42:b7:be:30:3f:13:2a:e2:64:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fc956a52b73504a4f1ff34547199297a7f5de9d Validity Not Before: Dec 18 11:01:08 2025 GMT Not After : Dec 19 11:01:08 2025 GMT Subject: CN=4580f4fba63a8f6a45ac4e77327a0b4db91c15be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1e:e8:c7:70:2d:5e:a3:6b:ca:82:45:de:49: fb:1c:2a:9e:7d:66:fc:0f:d7:bc:57:a1:9d:4f:de: 73:8d:02:6a:be:bb:d8:0a:0d:1e:d2:43:c9:56:bd: 52:77:ad:d5:c4:97:54:d7:b1:65:d6:c2:90:76:f7: e0:5c:19:9e:e0:46:62:ac:6b:aa:95:17:2d:91:14: 35:24:be:37:ea:78:fb:d9:d9:3f:ba:da:c4:59:89: 97:3b:9d:86:fd:13:36:c6:3b:a5:3b:a2:2b:40:f4: 5f:c5:9f:88:44:f5:9f:0e:5e:ea:33:cb:f2:2d:78: 6c:3c:6a:1a:6c:c0:aa:6a:4b:0e:df:0c:c3:0d:bb: 18:2c:a1:b1:e2:f1:e8:2f:f0:0a:a5:56:81:c8:8c: d0:e3:40:27:bd:76:a2:3d:64:d2:22:ca:5f:2b:cd: 8d:be:9a:1a:84:3e:fe:1c:f2:7c:3d:c1:49:b9:25: ae:7b:88:6c:42:99:a9:07:3c:0f:86:9d:e6:a9:ec: 1e:32:c4:37:57:75:c7:4a:b1:66:ff:dc:b0:5e:bc: e1:95:e0:49:5f:4e:a0:4b:6a:c5:d1:4d:0d:20:dd: 55:5b:4b:12:60:05:82:f1:e7:38:de:3b:8e:07:98: 44:6b:b1:15:03:7f:58:42:5c:5f:5a:d4:c6:3b:05: 9e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:80:F4:FB:A6:3A:8F:6A:45:AC:4E:77:32:7A:0B:4D:B9:1C:15:BE X509v3 Authority Key Identifier: keyid:7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:6b:b7:72:99:2f:60:bd:80:ad:ff:40:2a:b1:bf:49:7b:7a: 00:98:cb:f2:a7:c2:27:4e:e2:15:b2:1a:ca:24:a3:6a:78:8c: 50:7c:2c:0e:bd:7c:68:5e:4f:df:27:02:58:67:88:f5:c7:4c: a4:c2:f8:17:5f:74:16:d1:67:ab:48:76:69:79:c5:d7:29:52: 1a:3f:25:e2:d1:d8:c5:fd:0f:55:07:2e:fb:9c:a6:60:3d:f5: 6a:df:e8:14:1f:85:8a:a2:41:d3:bb:fa:b7:93:7e:97:a5:77: 07:a8:e4:a7:51:8f:c5:f8:61:ae:0d:08:45:53:04:6d:3c:43: a6:74:89:0f:bc:4b:c6:4b:6b:3e:7e:b6:5d:c0:13:6f:eb:37: 87:b8:8b:be:58:cb:eb:dc:1c:8d:61:d8:d6:a5:76:82:ac:fc: 77:7b:ec:b0:9d:8d:94:74:ac:1c:66:41:10:40:b2:38:c0:51: 38:65:fd:e6:60:61:69:3c:00:17:4c:e0:d4:f2:9f:3e:00:0e: 96:58:58:92:b0:d5:61:98:05:64:d7:15:17:fa:a2:56:d0:fe: 23:47:e8:c1:ec:de:88:8e:45:95:19:d4:36:ea:10:e3:3a:6f: 49:2b:a8:2f:4b:08:4e:95:37:bc:5b:82:45:d7:4f:b4:4f:74: 56:d1:71:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHurw1ShCt74wPxMq4mQqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmYzk1NmE1MmI3MzUwNGE0ZjFmZjM0NTQ3MTk5Mjk3YTdm NWRlOWQwHhcNMjUxMjE4MTEwMTA4WhcNMjUxMjE5MTEwMTA4WjAzMTEwLwYDVQQD Eyg0NTgwZjRmYmE2M2E4ZjZhNDVhYzRlNzczMjdhMGI0ZGI5MWMxNWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB7ox3AtXqNryoJF3kn7HCqefWb8 D9e8V6GdT95zjQJqvrvYCg0e0kPJVr1Sd63VxJdU17Fl1sKQdvfgXBme4EZirGuq lRctkRQ1JL436nj72dk/utrEWYmXO52G/RM2xjulO6IrQPRfxZ+IRPWfDl7qM8vy LXhsPGoabMCqaksO3wzDDbsYLKGx4vHoL/AKpVaByIzQ40AnvXaiPWTSIspfK82N vpoahD7+HPJ8PcFJuSWue4hsQpmpBzwPhp3mqeweMsQ3V3XHSrFm/9ywXrzhleBJ X06gS2rF0U0NIN1VW0sSYAWC8ec43juOB5hEa7EVA39YQlxfWtTGOwWe4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWA9PumOo9qRaxOdzJ6C025HBW+MB8GA1UdIwQY MBaAFH/JVqUrc1BKTx/zRUcZkpen9d6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83MWFiNjktNjk2NS00YjcwLTk2OGQt YmI1N2E0ZWY3MTUzLzEvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS83MWFiNjktNjk2NS00YjcwLTk2OGQtYmI1N2E0ZWY3MTUz LzEvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWu3cpkv YL2Arf9AKrG/SXt6AJjL8qfCJ07iFbIayiSjaniMUHwsDr18aF5P3ycCWGeI9cdM pML4F190FtFnq0h2aXnF1ylSGj8l4tHYxf0PVQcu+5ymYD31at/oFB+FiqJB07v6 t5N+l6V3B6jkp1GPxfhhrg0IRVMEbTxDpnSJD7xLxktrPn62XcATb+s3h7iLvljL 69wcjWHY1qV2gqz8d3vssJ2NlHSsHGZBEECyOMBROGX95mBhaTwAF0zg1PKfPgAO llhYkrDVYZgFZNcVF/qiVtD+I0fowezeiI5FlRnUNuoQ4zpvSSuoL0sITpU3vFuC RddPtE90VtFx1g== -----END CERTIFICATE-----Generated at Thu Dec 18 19:06:47 2025 by rpki-client