This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft File: 8mJAZfhrTPmEjex9q4ak24bBXhE.mft (raw, json) Hash identifier: xOMd5GOPxcZ3nHy4jFsG2L3d+ZscYg63JWTyQbCcM9w= Subject key identifier: DD:FB:F8:CD:D1:9A:ED:A1:B7:3B:AE:3D:82:FA:86:A8:C4:F8:C4:52 Authority key identifier: F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11 Certificate issuer: /CN=f2624065f86b4cf9848dec7dab86a4db86c15e11 Certificate serial: 019AF19B14B11B1803C8B9CA8D9B9C460A76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft Manifest number: 0350 Signing time: Sat 06 Dec 2025 03:01:03 +0000 Manifest this update: Sat 06 Dec 2025 03:01:03 +0000 Manifest next update: Sun 07 Dec 2025 03:01:03 +0000 Files and hashes: 1: 8mJAZfhrTPmEjex9q4ak24bBXhE.crl (hash: S+LlC25U8OAKVS+noime4XqoiR03TTD1PMJHJklWh+c=) 2: cD-tw650Z_Y6Vmxx9pyza1DBukk.roa (hash: wcc3gJVDDM85KdHRToySGGF6W2lO6V1fBEScrl4XQJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:14:b1:1b:18:03:c8:b9:ca:8d:9b:9c:46:0a:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2624065f86b4cf9848dec7dab86a4db86c15e11 Validity Not Before: Dec 6 03:01:03 2025 GMT Not After : Dec 7 03:01:03 2025 GMT Subject: CN=ddfbf8cdd19aeda1b73bae3d82fa86a8c4f8c452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c6:e4:f9:e9:02:b7:00:c0:13:95:00:ce:b2: 7c:fe:bc:48:0f:a3:ed:71:5e:ed:12:4e:71:73:02: 1d:a6:7f:86:82:25:f3:41:92:37:a5:28:db:01:ce: 6b:ab:99:2d:58:b9:89:b3:ea:25:ff:c0:3e:e8:7e: 62:1c:22:c5:10:8c:9b:61:ae:fb:bc:04:9a:41:71: 86:f9:23:f4:54:8f:2c:e8:77:cd:dd:9b:84:ee:4e: a5:83:09:45:92:87:af:cb:53:09:ea:a7:e6:e1:20: 9c:78:4d:f2:fb:c3:f7:40:eb:fd:b8:3b:ca:29:bd: 2a:24:bf:29:17:c4:67:4f:42:0c:dd:af:07:85:9c: a5:37:27:ba:20:9f:31:83:c1:1f:32:da:20:42:ef: c2:35:8b:53:be:71:f4:03:e7:fb:f8:c4:d3:e3:55: d0:03:50:38:c9:6f:d5:64:12:25:96:00:92:42:36: 1c:76:ce:ed:45:4d:bb:61:91:0b:dc:c1:9f:82:c6: 6a:2e:f4:ca:1f:9a:1b:02:c4:b8:9c:ce:0b:f9:b3: dc:f1:24:32:ad:66:12:08:10:23:33:f9:bf:b4:24: 52:4f:66:e9:d7:0f:ee:cd:b2:56:3e:fa:3d:1c:8c: 82:6b:74:3b:02:89:27:6e:06:47:66:1f:f6:1e:d7: f5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FB:F8:CD:D1:9A:ED:A1:B7:3B:AE:3D:82:FA:86:A8:C4:F8:C4:52 X509v3 Authority Key Identifier: keyid:F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:b4:35:39:58:ba:ba:63:43:10:c8:d3:c7:75:6e:4d:71:5a: 5c:31:07:1b:04:cd:ba:4d:23:9d:3e:61:0f:f5:cf:8a:f6:eb: 6d:30:d2:02:d9:4d:1c:fd:10:e6:d6:21:3d:ca:f1:05:2e:b7: 97:6f:e6:61:0b:40:18:82:6a:4e:d4:e0:ea:f4:0b:3a:c3:32: 46:6c:af:e0:a1:56:42:1c:e8:0c:58:d0:aa:77:c1:42:70:34: 92:8c:63:56:17:22:a3:5a:13:94:00:bc:03:6a:8f:fb:7a:07: bd:03:77:8e:8b:84:41:3f:05:eb:73:48:e6:e7:a2:ad:be:04: c2:9e:fd:a6:4d:5c:0e:16:41:7a:e6:83:08:ca:15:4b:d9:82: 47:fb:e9:72:20:b6:18:7c:70:b4:fb:86:25:53:82:a9:38:91: 44:14:3b:92:6d:ed:f3:3c:df:40:d2:cb:76:c4:51:1f:14:04: cb:87:9d:d2:9d:61:22:a7:78:b3:31:56:96:c9:bd:69:c4:49: c1:f7:29:31:13:51:c0:4c:4f:0f:e6:1f:99:78:c3:a6:ed:3d: e9:75:5f:1c:94:12:24:b2:0f:72:43:5f:ec:07:03:9d:39:04: 3d:61:4e:5c:95:8b:5f:3f:87:72:ac:fe:05:28:d9:fa:f0:88: b0:ab:b3:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxSxGxgDyLnKjZucRgp2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjI0MDY1Zjg2YjRjZjk4NDhkZWM3ZGFiODZhNGRiODZj MTVlMTEwHhcNMjUxMjA2MDMwMTAzWhcNMjUxMjA3MDMwMTAzWjAzMTEwLwYDVQQD EyhkZGZiZjhjZGQxOWFlZGExYjczYmFlM2Q4MmZhODZhOGM0ZjhjNDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA98bk+ekCtwDAE5UAzrJ8/rxID6Pt cV7tEk5xcwIdpn+GgiXzQZI3pSjbAc5rq5ktWLmJs+ol/8A+6H5iHCLFEIybYa77 vASaQXGG+SP0VI8s6HfN3ZuE7k6lgwlFkoevy1MJ6qfm4SCceE3y+8P3QOv9uDvK Kb0qJL8pF8RnT0IM3a8HhZylNye6IJ8xg8EfMtogQu/CNYtTvnH0A+f7+MTT41XQ A1A4yW/VZBIllgCSQjYcds7tRU27YZEL3MGfgsZqLvTKH5obAsS4nM4L+bPc8SQy rWYSCBAjM/m/tCRST2bp1w/uzbJWPvo9HIyCa3Q7AoknbgZHZh/2Htf1twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN37+M3Rmu2htzuuPYL6hqjE+MRSMB8GA1UdIwQY MBaAFPJiQGX4a0z5hI3sfauGpNuGwV4RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1KQVpmaHJUUG1FamV4OXE0YWsyNGJCWGhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84MTg0OTEtZDY1Ny00MmM4LWJjOWEt ZTU0NzBjNTJkNGRkLzEvOG1KQVpmaHJUUG1FamV4OXE0YWsyNGJCWGhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84MTg0OTEtZDY1Ny00MmM4LWJjOWEtZTU0NzBjNTJkNGRk LzEvOG1KQVpmaHJUUG1FamV4OXE0YWsyNGJCWGhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7Q1OVi6 umNDEMjTx3VuTXFaXDEHGwTNuk0jnT5hD/XPivbrbTDSAtlNHP0Q5tYhPcrxBS63 l2/mYQtAGIJqTtTg6vQLOsMyRmyv4KFWQhzoDFjQqnfBQnA0koxjVhcio1oTlAC8 A2qP+3oHvQN3jouEQT8F63NI5ueirb4Ewp79pk1cDhZBeuaDCMoVS9mCR/vpciC2 GHxwtPuGJVOCqTiRRBQ7km3t8zzfQNLLdsRRHxQEy4ed0p1hIqd4szFWlsm9acRJ wfcpMRNRwExPD+YfmXjDpu096XVfHJQSJLIPckNf7AcDnTkEPWFOXJWLXz+Hcqz+ BSjZ+vCIsKuzLg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:59:56 2025 by rpki-client