This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft File: f8lWpStzUEpPH_NFRxmSl6f13p0.mft (raw, json) Hash identifier: JqzQm5SKxGaySqCzXtDEe4qC+FuYcaJQSKKESEFlqcA= Subject key identifier: 1A:59:F7:19:FC:B9:C1:E1:8A:F5:99:F3:98:0F:BD:68:B9:99:1A:8C Authority key identifier: 7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D Certificate issuer: /CN=7fc956a52b73504a4f1ff34547199297a7f5de9d Certificate serial: 019AF1644219A622F878C939D8EBBB035A3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft Manifest number: 0B14 Signing time: Sat 06 Dec 2025 02:01:10 +0000 Manifest this update: Sat 06 Dec 2025 02:01:10 +0000 Manifest next update: Sun 07 Dec 2025 02:01:10 +0000 Files and hashes: 1: f8lWpStzUEpPH_NFRxmSl6f13p0.crl (hash: TJN8+McOEcdixyyTrie5jcol3GW0ZtXJeFjCA8UFrsw=) 2: oABxc2AhceHbFWdSMSjl8hsmwIU.roa (hash: TEY8sctZHera/7HF2OtPuy78+8vJU3t66DtmPXEJjBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:42:19:a6:22:f8:78:c9:39:d8:eb:bb:03:5a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fc956a52b73504a4f1ff34547199297a7f5de9d Validity Not Before: Dec 6 02:01:10 2025 GMT Not After : Dec 7 02:01:10 2025 GMT Subject: CN=1a59f719fcb9c1e18af599f3980fbd68b9991a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ba:97:9c:1a:33:70:59:a7:87:46:38:5b:7a: b4:2d:75:b7:65:8f:03:4e:d0:47:0b:4d:51:bc:34: b7:09:e5:98:e0:a2:9b:fd:4b:74:b6:82:7c:c6:2f: fe:46:3d:c3:39:26:5e:d1:08:b4:53:bc:18:bf:5e: f8:b5:27:94:2e:bd:73:16:9b:8d:41:99:ad:eb:e8: ee:d2:d6:cb:e8:b5:80:e7:c1:c9:14:2b:27:bf:0b: a9:52:5e:ab:b7:95:d1:93:d4:43:5b:7f:2c:5e:de: 4f:97:47:e9:a9:1d:0b:dc:d5:15:40:cf:70:0d:56: b2:0f:3b:f2:6c:af:d1:f0:e0:a5:bf:e2:02:8d:36: d8:c5:4a:6a:bc:dd:0b:08:9e:89:11:48:03:2c:54: 45:68:d8:e8:e2:14:2e:9c:66:27:f8:6d:58:70:21: 82:20:9e:d4:d7:a9:63:05:96:f1:ea:d7:2e:ff:25: 53:1d:a5:b1:ff:5d:b4:da:19:b4:e5:ae:34:a6:2a: b8:f3:0d:57:b0:3b:3f:5e:45:08:2a:82:f9:e6:cb: 6c:9d:e7:f4:c1:b8:ad:b5:66:72:9c:6e:52:d7:50: ad:eb:0d:85:78:00:ea:3f:70:31:54:47:f2:ce:58: 64:d2:16:aa:49:8d:8a:86:b3:2b:68:df:6f:6d:a0: ae:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:59:F7:19:FC:B9:C1:E1:8A:F5:99:F3:98:0F:BD:68:B9:99:1A:8C X509v3 Authority Key Identifier: keyid:7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:5e:18:f8:2d:00:54:1d:79:02:9a:65:44:bf:3e:f6:d1:c1: 0d:1f:9a:0b:b6:ef:03:0d:21:4e:ba:0a:f2:15:fe:79:3f:f7: 77:12:81:67:ad:14:74:b7:1e:04:0b:9e:58:64:b3:25:a5:81: ef:db:14:74:b1:00:02:01:40:10:f9:18:06:8f:ef:20:13:73: 2d:e7:c4:8a:d8:a5:9a:b9:51:af:35:3b:1d:98:b6:a7:22:ba: bb:bd:db:4b:a7:47:b7:37:a6:c5:be:ba:bc:d5:12:d5:8a:4d: 18:07:a1:a2:fb:16:e3:f8:36:52:35:6f:e8:11:ac:72:b6:b9: 4c:c3:75:99:cc:35:69:72:76:f5:19:4a:30:80:fb:ef:ea:80: f7:6c:e8:63:9b:83:97:57:ff:14:bd:ac:8e:d4:0b:b5:dc:b6: e1:27:b4:4c:3b:31:d3:42:1d:2d:03:7d:d6:82:5e:c6:8c:1e: 3c:20:90:5c:21:51:2e:3d:f5:2d:d7:50:e5:68:0b:ba:bb:3c: 5b:13:72:56:7a:c5:66:8d:55:fd:4f:b2:1b:8c:70:88:6f:8d: 3c:2f:b5:84:dd:54:be:96:41:4a:5b:de:83:89:8b:91:27:76: 3a:c0:52:3e:c6:d7:6d:6e:48:cd:ea:50:32:cd:1f:9c:bd:b7: 34:f6:fb:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEIZpiL4eMk52Ou7A1o9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmYzk1NmE1MmI3MzUwNGE0ZjFmZjM0NTQ3MTk5Mjk3YTdm NWRlOWQwHhcNMjUxMjA2MDIwMTEwWhcNMjUxMjA3MDIwMTEwWjAzMTEwLwYDVQQD EygxYTU5ZjcxOWZjYjljMWUxOGFmNTk5ZjM5ODBmYmQ2OGI5OTkxYThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LqXnBozcFmnh0Y4W3q0LXW3ZY8D TtBHC01RvDS3CeWY4KKb/Ut0toJ8xi/+Rj3DOSZe0Qi0U7wYv174tSeULr1zFpuN QZmt6+ju0tbL6LWA58HJFCsnvwupUl6rt5XRk9RDW38sXt5Pl0fpqR0L3NUVQM9w DVayDzvybK/R8OClv+ICjTbYxUpqvN0LCJ6JEUgDLFRFaNjo4hQunGYn+G1YcCGC IJ7U16ljBZbx6tcu/yVTHaWx/1202hm05a40piq48w1XsDs/XkUIKoL55stsnef0 wbittWZynG5S11Ct6w2FeADqP3AxVEfyzlhk0haqSY2KhrMraN9vbaCujQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpZ9xn8ucHhivWZ85gPvWi5mRqMMB8GA1UdIwQY MBaAFH/JVqUrc1BKTx/zRUcZkpen9d6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83MWFiNjktNjk2NS00YjcwLTk2OGQt YmI1N2E0ZWY3MTUzLzEvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS83MWFiNjktNjk2NS00YjcwLTk2OGQtYmI1N2E0ZWY3MTUz LzEvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXl4Y+C0A VB15ApplRL8+9tHBDR+aC7bvAw0hTroK8hX+eT/3dxKBZ60UdLceBAueWGSzJaWB 79sUdLEAAgFAEPkYBo/vIBNzLefEitilmrlRrzU7HZi2pyK6u73bS6dHtzemxb66 vNUS1YpNGAehovsW4/g2UjVv6BGscra5TMN1mcw1aXJ29RlKMID77+qA92zoY5uD l1f/FL2sjtQLtdy24Se0TDsx00IdLQN91oJexowePCCQXCFRLj31LddQ5WgLurs8 WxNyVnrFZo1V/U+yG4xwiG+NPC+1hN1UvpZBSlveg4mLkSd2OsBSPsbXbW5IzepQ Ms0fnL23NPb7gg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:41 2025 by rpki-client