This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json) Hash identifier: UNe5KhEuYseRF6aFGbdL4VUKESXsJ7TuSNSb6N8nZ9I= Subject key identifier: AE:D0:41:8E:D4:94:7E:54:17:A0:32:57:2C:2C:5A:57:63:FC:01:89 Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a Certificate serial: 019AF1D1DAA999F43A5CC1677BB6A3A0A519 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:00:53 +0000 Manifest this update: Sat 06 Dec 2025 04:00:53 +0000 Manifest next update: Sun 07 Dec 2025 04:00:53 +0000 Files and hashes: 1: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: mgUnhYRXGITDYvHMTk664t6wAy2/PDi7VUr5ukkh04c=) 2: Uq0vloXHdFb2aIE_oUN66H2BMxU.roa (hash: 8OMhbaYnopF2Asv1tjCQ758nxv0+wParcC98envOi54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:da:a9:99:f4:3a:5c:c1:67:7b:b6:a3:a0:a5:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a Validity Not Before: Dec 6 04:00:53 2025 GMT Not After : Dec 7 04:00:53 2025 GMT Subject: CN=aed0418ed4947e5417a032572c2c5a5763fc0189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c4:42:0b:a8:fe:2e:90:8d:60:3b:ab:96:a7: 2c:e0:6a:62:c2:1f:f8:06:a0:06:9c:25:c9:4d:e6: 72:94:ca:ac:f1:56:b7:b9:5d:72:f2:25:e1:47:73: 4a:5e:72:af:f0:fd:a9:56:75:f3:38:ae:3c:27:be: 0d:30:4b:53:7f:7e:da:41:f6:80:f9:b9:2b:c6:e9: 21:9c:ff:25:db:77:e7:e4:f7:1c:f1:37:9e:17:e0: 47:e3:a6:a0:d5:f7:6c:39:26:66:73:7b:91:4c:fa: 5e:63:20:92:fe:f9:6f:6a:fd:71:de:36:b5:01:aa: a6:7b:fd:61:97:4d:d0:17:25:47:9b:1b:33:16:87: 61:59:a8:cd:73:89:09:ab:a9:d7:fd:b5:18:bc:a9: fe:5e:c8:4c:3a:8c:5b:eb:e1:75:fa:39:b5:a9:db: e5:94:15:ea:51:7a:54:ce:3d:92:8c:35:fe:b9:09: d0:c3:b9:e7:c2:12:c0:78:ed:ae:d9:a3:1b:16:ed: 9d:a1:f0:77:df:a4:5d:f0:72:d1:c0:f3:39:14:33: 39:e9:1a:6b:a9:a7:e7:bf:b7:a6:c8:13:00:5a:c7: 94:cc:c0:d5:8f:fd:6c:31:0f:e4:d9:23:77:a7:75: 5d:62:c3:d1:9e:44:0f:73:13:0f:ac:0e:03:03:2a: ab:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D0:41:8E:D4:94:7E:54:17:A0:32:57:2C:2C:5A:57:63:FC:01:89 X509v3 Authority Key Identifier: keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:1e:65:66:ed:7d:37:b7:96:f2:f3:3d:88:e0:d8:53:78:de: d4:7b:b5:95:9e:fe:91:d9:4b:cb:03:14:fa:1c:cd:d5:b0:7e: 10:0e:29:52:9f:6f:cd:f7:eb:1f:05:81:f9:eb:17:b2:26:dc: e5:17:1d:ad:0a:c5:59:7e:f4:73:7c:a5:0b:90:66:9e:d2:a4: 77:c6:60:e0:bf:6b:fe:bc:0d:7a:ba:ff:ea:46:8e:1b:40:36: e8:c7:a5:b1:7a:2b:e9:ac:bd:7f:37:45:db:e4:ed:6d:e4:ca: c4:ca:e9:72:ef:2f:de:eb:f0:22:8a:4a:28:52:c7:5d:a6:75: 61:1a:b7:df:2c:86:66:8c:ce:de:20:0c:b6:5d:08:3e:1e:df: a5:37:52:4e:8b:d3:86:9d:3e:ec:23:11:05:42:99:c1:e0:0f: c3:e3:f8:99:98:f4:2e:57:6c:15:0d:5e:31:18:42:32:57:a2: 10:95:29:19:a8:6d:9c:d4:f9:6b:95:3a:87:b0:a6:c3:f1:1d: e4:2c:c5:d8:33:4c:83:ec:8d:d0:1c:93:0e:e1:6d:84:6b:d1: 5a:6f:b2:da:af:77:cc:af:a6:89:91:60:e6:84:19:4a:19:ff: ae:34:8f:ab:a6:64:cf:2d:8e:73:78:ad:7b:c5:3d:59:55:37: ba:da:fc:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dqpmfQ6XMFne7ajoKUZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmUyOGU4YWM3YWIxOGM3MzA3OWRlODRjODA5N2Q3ODJh YWI2OWEwHhcNMjUxMjA2MDQwMDUzWhcNMjUxMjA3MDQwMDUzWjAzMTEwLwYDVQQD EyhhZWQwNDE4ZWQ0OTQ3ZTU0MTdhMDMyNTcyYzJjNWE1NzYzZmMwMTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMRCC6j+LpCNYDurlqcs4Gpiwh/4 BqAGnCXJTeZylMqs8Va3uV1y8iXhR3NKXnKv8P2pVnXzOK48J74NMEtTf37aQfaA +bkrxukhnP8l23fn5Pcc8TeeF+BH46ag1fdsOSZmc3uRTPpeYyCS/vlvav1x3ja1 Aaqme/1hl03QFyVHmxszFodhWajNc4kJq6nX/bUYvKn+XshMOoxb6+F1+jm1qdvl lBXqUXpUzj2SjDX+uQnQw7nnwhLAeO2u2aMbFu2dofB336Rd8HLRwPM5FDM56Rpr qafnv7emyBMAWseUzMDVj/1sMQ/k2SN3p3VdYsPRnkQPcxMPrA4DAyqrvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7QQY7UlH5UF6AyVywsWldj/AGJMB8GA1UdIwQY MBaAFPAuKOiserGMcwed6EyAl9eCqraaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODkt OWZmYjBlNDFjNGVmLzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODktOWZmYjBlNDFjNGVm LzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkx5lZu19 N7eW8vM9iODYU3je1Hu1lZ7+kdlLywMU+hzN1bB+EA4pUp9vzffrHwWB+esXsibc 5RcdrQrFWX70c3ylC5BmntKkd8Zg4L9r/rwNerr/6kaOG0A26MelsXor6ay9fzdF 2+TtbeTKxMrpcu8v3uvwIopKKFLHXaZ1YRq33yyGZozO3iAMtl0IPh7fpTdSTovT hp0+7CMRBUKZweAPw+P4mZj0LldsFQ1eMRhCMleiEJUpGahtnNT5a5U6h7Cmw/Ed 5CzF2DNMg+yN0ByTDuFthGvRWm+y2q93zK+miZFg5oQZShn/rjSPq6Zkzy2Oc3it e8U9WVU3utr8Tw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:54:14 2025 by rpki-client