This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.mft File: a8Szt0G7W1thchrTBscRR8TfK8E.mft (raw, json) Hash identifier: jkg3WhjDXuK2ieAbYdx+g0ML2h5Xcxbm/4wImoJH5K4= Subject key identifier: 7D:69:2E:8A:88:9D:46:C2:F4:59:20:7A:C0:31:9D:E4:80:B9:6F:78 Authority key identifier: 6B:C4:B3:B7:41:BB:5B:5B:61:72:1A:D3:06:C7:11:47:C4:DF:2B:C1 Certificate issuer: /CN=6bc4b3b741bb5b5b61721ad306c71147c4df2bc1 Certificate serial: 019AF0BEE000A24BAFA4C9EED7537C21502A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Szt0G7W1thchrTBscRR8TfK8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.mft Manifest number: 1763 Signing time: Fri 05 Dec 2025 23:00:32 +0000 Manifest this update: Fri 05 Dec 2025 23:00:32 +0000 Manifest next update: Sat 06 Dec 2025 23:00:32 +0000 Files and hashes: 1: a8Szt0G7W1thchrTBscRR8TfK8E.crl (hash: VscZSAi3+k09DRDrFwCJ0vJc6arNlw4+PEt68G6svGo=) 2: lptkvzqZ3YAXA8erbwtu8Z-p7p0.roa (hash: WUNdsd7uaJayOlmZESESWmlDWN7XrWQH54c9bPYnQ6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.mft rsync://rpki.ripe.net/repository/DEFAULT/a8Szt0G7W1thchrTBscRR8TfK8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:e0:00:a2:4b:af:a4:c9:ee:d7:53:7c:21:50:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc4b3b741bb5b5b61721ad306c71147c4df2bc1 Validity Not Before: Dec 5 23:00:32 2025 GMT Not After : Dec 6 23:00:32 2025 GMT Subject: CN=7d692e8a889d46c2f459207ac0319de480b96f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ba:ec:b2:37:fb:eb:d5:1f:1a:72:32:19:d1: 8a:af:bc:d2:41:4e:de:6e:94:e0:1c:e6:70:d4:ee: 0c:50:58:bf:b4:5d:28:3b:07:63:b9:82:27:d1:6e: b5:72:2d:26:72:42:86:6e:fe:1c:0e:3c:e0:49:4a: 5d:f8:84:2d:58:dd:31:30:22:09:4e:77:82:b9:54: 45:06:7c:40:4d:b0:72:eb:f9:db:1e:83:b0:3b:ac: 7c:e8:43:e5:77:d2:26:64:e6:47:dc:c9:cf:73:91: 3d:61:1b:31:15:88:9f:39:f3:2d:c5:3b:64:2e:ea: 30:56:43:a2:96:d9:06:a7:01:8c:49:e8:27:79:c3: 88:ba:41:7c:a0:3b:5a:0b:3d:07:d3:f2:dd:6a:b2: 15:30:bb:40:6c:11:32:21:41:74:3d:6c:30:23:b5: 12:aa:ba:5c:d4:a0:a7:d8:e6:3c:57:c3:2e:28:5f: eb:b3:68:08:ae:02:9d:ba:80:9c:b8:c9:2b:7e:1c: 76:30:b8:1a:0b:fc:f3:63:09:9c:96:fe:72:5d:01: e1:17:f6:ff:7a:9d:91:c5:4c:4d:14:eb:4e:ca:ad: d1:a1:21:8a:a0:f2:89:15:8b:89:a1:83:c7:be:c1: 4b:d5:d0:bb:af:5f:f8:59:c7:b7:e1:c9:06:cd:17: fa:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:69:2E:8A:88:9D:46:C2:F4:59:20:7A:C0:31:9D:E4:80:B9:6F:78 X509v3 Authority Key Identifier: keyid:6B:C4:B3:B7:41:BB:5B:5B:61:72:1A:D3:06:C7:11:47:C4:DF:2B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Szt0G7W1thchrTBscRR8TfK8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:a0:79:4d:11:fe:9c:45:72:31:d0:e7:0a:cd:c5:de:f1:dd: 42:d8:df:b1:29:30:7c:44:a5:17:6a:bd:98:7c:db:45:f1:8a: 55:9f:71:3e:18:72:f5:02:b2:f0:ad:bb:44:9d:b7:e8:1a:d9: ba:53:56:04:64:26:d9:d5:82:c4:33:40:53:ec:12:5f:fb:37: 87:9c:73:d2:9a:26:a1:23:f6:b8:22:12:42:b4:ff:ee:cb:a0: 2e:63:25:da:7a:a4:a1:81:9f:d8:f8:a9:9a:1a:1d:03:09:74: 08:99:a5:1a:25:d1:2f:01:c8:be:c9:73:51:f3:c1:aa:8c:10: 03:c6:22:b3:b4:da:ce:29:b6:ac:fc:7e:c8:90:e5:98:be:9e: 2f:e6:1c:a9:f1:5a:89:77:01:fb:fe:bd:25:38:e0:7a:61:4b: cb:49:32:8c:8e:ea:78:03:65:bb:97:6d:88:25:b4:bb:6b:72: 07:a9:4b:85:de:28:71:99:0e:8f:d7:6f:df:de:52:fb:ad:14: fd:49:e1:f1:45:1b:c4:69:08:b6:9c:14:ef:35:c3:87:bb:3b: 23:a3:d0:07:42:4a:d6:43:e0:b0:64:a7:df:46:c3:be:1e:6c: ec:ec:e5:20:14:50:ee:33:1a:d2:82:1d:0d:78:4a:d6:f4:85: f0:36:4d:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvuAAokuvpMnu11N8IVAqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzRiM2I3NDFiYjViNWI2MTcyMWFkMzA2YzcxMTQ3YzRk ZjJiYzEwHhcNMjUxMjA1MjMwMDMyWhcNMjUxMjA2MjMwMDMyWjAzMTEwLwYDVQQD Eyg3ZDY5MmU4YTg4OWQ0NmMyZjQ1OTIwN2FjMDMxOWRlNDgwYjk2Zjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Lrssjf769UfGnIyGdGKr7zSQU7e bpTgHOZw1O4MUFi/tF0oOwdjuYIn0W61ci0mckKGbv4cDjzgSUpd+IQtWN0xMCIJ TneCuVRFBnxATbBy6/nbHoOwO6x86EPld9ImZOZH3MnPc5E9YRsxFYifOfMtxTtk LuowVkOiltkGpwGMSegnecOIukF8oDtaCz0H0/LdarIVMLtAbBEyIUF0PWwwI7US qrpc1KCn2OY8V8MuKF/rs2gIrgKduoCcuMkrfhx2MLgaC/zzYwmclv5yXQHhF/b/ ep2RxUxNFOtOyq3RoSGKoPKJFYuJoYPHvsFL1dC7r1/4Wce34ckGzRf6XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1pLoqInUbC9FkgesAxneSAuW94MB8GA1UdIwQY MBaAFGvEs7dBu1tbYXIa0wbHEUfE3yvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThTenQwRzdXMXRoY2hyVEJzY1JSOFRmSzhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mZDE3YTEtYmM1Zi00OWNkLThhZWQt Y2I3MjdiNGZjMzc5LzEvYThTenQwRzdXMXRoY2hyVEJzY1JSOFRmSzhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mZDE3YTEtYmM1Zi00OWNkLThhZWQtY2I3MjdiNGZjMzc5 LzEvYThTenQwRzdXMXRoY2hyVEJzY1JSOFRmSzhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANaB5TRH+ nEVyMdDnCs3F3vHdQtjfsSkwfESlF2q9mHzbRfGKVZ9xPhhy9QKy8K27RJ236BrZ ulNWBGQm2dWCxDNAU+wSX/s3h5xz0pomoSP2uCISQrT/7sugLmMl2nqkoYGf2Pip mhodAwl0CJmlGiXRLwHIvslzUfPBqowQA8Yis7Tazim2rPx+yJDlmL6eL+YcqfFa iXcB+/69JTjgemFLy0kyjI7qeANlu5dtiCW0u2tyB6lLhd4ocZkOj9dv395S+60U /Unh8UUbxGkItpwU7zXDh7s7I6PQB0JK1kPgsGSn30bDvh5s7OzlIBRQ7jMa0oId DXhK1vSF8DZN9w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:01:24 2025 by rpki-client