This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft File: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft (raw, json) Hash identifier: V5CrRp9KSMPs5f+mCE0dmBIZw3vSKPQx87LTLT1S8L0= Subject key identifier: AC:18:82:31:EC:D3:9A:E6:15:71:01:AC:E8:6E:7B:12:87:06:D5:EA Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4 Certificate issuer: /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4 Certificate serial: 019AF3524D49993241ADE1414722255F85B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft Manifest number: 0EE6 Signing time: Sat 06 Dec 2025 11:00:48 +0000 Manifest this update: Sat 06 Dec 2025 11:00:48 +0000 Manifest next update: Sun 07 Dec 2025 11:00:48 +0000 Files and hashes: 1: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl (hash: 9cFhPoNYTAaDbyPDRwe6uTrzb2MNZLhyeQl67eGddos=) 2: GGAjioujqBIqTrQAhNRgglPPRkE.roa (hash: 1FpErs46KltIuhJLiOWBLzSL1Xf0hQCI/1w1QmIm60Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:4d:49:99:32:41:ad:e1:41:47:22:25:5f:85:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4 Validity Not Before: Dec 6 11:00:48 2025 GMT Not After : Dec 7 11:00:48 2025 GMT Subject: CN=ac188231ecd39ae6157101ace86e7b128706d5ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e1:58:52:6d:e6:68:dc:b5:6c:07:4a:02:11: 61:43:49:25:3c:06:96:c4:80:51:e4:60:a8:29:bb: 84:8b:f5:0c:db:06:f0:07:5b:1a:cb:88:ae:5b:e3: 92:61:3f:5b:d1:5c:c5:eb:3c:ec:47:12:09:83:e6: 1b:b0:ca:78:03:66:5b:a7:90:b3:b1:63:ca:cb:6e: 48:6e:90:c5:05:6b:bb:91:03:fb:16:fd:5b:cf:e9: 15:a5:36:d2:61:8f:ba:71:39:4f:55:84:75:fa:70: 42:27:96:2d:87:13:2a:03:a5:94:19:d2:30:4d:cf: 06:d8:1d:87:ff:09:c0:81:f8:3d:ca:01:fe:d9:81: 5f:4f:c3:3e:9d:ea:d7:ca:bd:44:69:ab:ff:dd:9f: 23:d4:79:bb:a7:23:a6:a0:7f:82:6b:c4:02:d1:30: bb:81:a3:ef:b6:8e:4f:64:72:ec:ed:46:53:c2:0a: 56:a4:67:1c:66:61:36:d1:65:71:04:4f:c1:9a:df: 01:25:23:47:c4:16:6d:9f:8c:87:a1:5e:d9:64:76: 5e:ca:67:6b:2b:08:59:ee:54:59:de:f6:c8:83:b7: 9c:f6:98:69:53:c4:12:ce:6a:fa:41:40:0b:2f:54: e4:de:ed:2b:80:47:f2:3f:26:9a:bd:e8:a7:17:94: 52:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:18:82:31:EC:D3:9A:E6:15:71:01:AC:E8:6E:7B:12:87:06:D5:EA X509v3 Authority Key Identifier: keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:fe:f7:08:c7:15:07:65:53:6b:6c:f9:d2:4d:bb:67:8b:2f: 49:14:d3:89:85:96:4a:6a:0b:39:b9:56:80:7c:53:0d:f6:d9: 91:8b:06:37:ce:9e:0c:67:ca:45:c7:3a:29:62:e4:dd:57:8d: 2a:c9:72:b6:9a:bd:a9:40:8c:cd:3e:ab:81:d1:07:55:d6:52: d6:2d:f0:9d:b5:66:6c:ec:fd:37:10:10:a0:80:9f:ee:69:c0: bd:82:2c:42:e3:34:8a:32:82:53:07:6d:a6:72:2c:f3:90:9f: f4:74:4b:e6:4a:9f:40:81:d5:12:37:1c:fc:c2:27:43:4e:45: d9:14:c5:0a:09:d7:40:7e:88:aa:5e:9f:34:4a:66:e5:49:06: 6f:f3:03:9b:8e:18:04:80:43:62:ed:61:af:e0:75:2d:0f:6e: 61:16:e5:14:05:b9:3a:1b:88:c7:75:2d:72:e2:82:43:80:de: b2:dd:59:e0:8f:63:d4:59:6e:94:13:b8:b9:c5:0d:b5:ed:2d: 43:43:ec:4f:25:e8:82:5f:37:43:fa:5a:c9:63:dc:db:40:a4: 6d:a4:6b:d6:46:5c:a1:7d:57:19:8d:30:73:ab:dc:33:39:56: 78:7a:2c:97:74:b9:59:ff:ec:84:e8:e8:52:8a:0b:86:9a:db: b7:2d:ca:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUk1JmTJBreFBRyIlX4W2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYjk4ZjU4NGJjMTIzNDc4MGEyYzQ3ZmM4ODMyNGQ0OWVl MGU2ZjQwHhcNMjUxMjA2MTEwMDQ4WhcNMjUxMjA3MTEwMDQ4WjAzMTEwLwYDVQQD EyhhYzE4ODIzMWVjZDM5YWU2MTU3MTAxYWNlODZlN2IxMjg3MDZkNWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+FYUm3maNy1bAdKAhFhQ0klPAaW xIBR5GCoKbuEi/UM2wbwB1say4iuW+OSYT9b0VzF6zzsRxIJg+YbsMp4A2Zbp5Cz sWPKy25IbpDFBWu7kQP7Fv1bz+kVpTbSYY+6cTlPVYR1+nBCJ5YthxMqA6WUGdIw Tc8G2B2H/wnAgfg9ygH+2YFfT8M+nerXyr1Eaav/3Z8j1Hm7pyOmoH+Ca8QC0TC7 gaPvto5PZHLs7UZTwgpWpGccZmE20WVxBE/Bmt8BJSNHxBZtn4yHoV7ZZHZeymdr KwhZ7lRZ3vbIg7ec9phpU8QSzmr6QUALL1Tk3u0rgEfyPyaaveinF5RSjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwYgjHs05rmFXEBrOhuexKHBtXqMB8GA1UdIwQY MBaAFPK5j1hLwSNHgKLEf8iDJNSe4Ob0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYt NGVjMWFiZTA4NWVmLzEvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYtNGVjMWFiZTA4NWVm LzEvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/73CMcV B2VTa2z50k27Z4svSRTTiYWWSmoLOblWgHxTDfbZkYsGN86eDGfKRcc6KWLk3VeN Kslytpq9qUCMzT6rgdEHVdZS1i3wnbVmbOz9NxAQoICf7mnAvYIsQuM0ijKCUwdt pnIs85Cf9HRL5kqfQIHVEjcc/MInQ05F2RTFCgnXQH6Iql6fNEpm5UkGb/MDm44Y BIBDYu1hr+B1LQ9uYRblFAW5OhuIx3UtcuKCQ4Dest1Z4I9j1FlulBO4ucUNte0t Q0PsTyXogl83Q/payWPc20CkbaRr1kZcoX1XGY0wc6vcMzlWeHosl3S5Wf/shOjo UooLhprbty3KAw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:42 2025 by rpki-client