This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft File: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft (raw, json) Hash identifier: JdK9KpL/Id3czynBoO02fjQx58e6PQ1wJe+NvYMn/Cw= Subject key identifier: A3:FB:B0:29:EF:E4:BB:15:BD:49:7E:05:68:10:64:AF:55:A5:72:31 Authority key identifier: F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58 Certificate issuer: /CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58 Certificate serial: 019AF5775F90AF030A1C712611CA106C404D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft Manifest number: 0E71 Signing time: Sat 06 Dec 2025 21:00:32 +0000 Manifest this update: Sat 06 Dec 2025 21:00:32 +0000 Manifest next update: Sun 07 Dec 2025 21:00:32 +0000 Files and hashes: 1: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl (hash: dKStYlIkr+5zSD8a3Z+0UgL6Wm090oVvzhlBGvd+0Z0=) 2: otWydKJIblYoFDAZjlf3bz3XaMM.roa (hash: xwlrdUyrXAa6g8e84xQqVsN9ku3EVyiSX1A/Nu5VNrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:5f:90:af:03:0a:1c:71:26:11:ca:10:6c:40:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58 Validity Not Before: Dec 6 21:00:32 2025 GMT Not After : Dec 7 21:00:32 2025 GMT Subject: CN=a3fbb029efe4bb15bd497e05681064af55a57231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:67:e8:67:e2:d8:2b:78:a8:72:ae:33:d3:05: ef:2a:41:88:a9:6c:0f:e5:36:dc:53:5b:d2:38:8d: 03:00:0a:e1:5e:a9:55:66:c8:fd:d7:e4:20:ce:cc: 09:ed:06:b8:c3:cd:08:9a:50:32:bd:29:bc:b3:cc: 35:05:44:bb:1a:64:fc:93:84:15:d8:a1:b4:3b:da: 85:ec:e4:42:91:76:3e:d8:9e:3e:92:b1:fe:cd:49: de:e4:1e:d4:07:c1:0a:f0:f4:31:00:ea:d7:c8:3b: 2e:1f:7a:c8:b6:5c:35:f9:bb:bf:cc:8e:40:db:7d: b7:e6:41:5a:a9:5a:c4:03:3b:09:42:36:09:ce:f2: fa:dd:f7:f2:41:69:40:99:21:d9:37:2e:b0:30:2b: 50:9a:32:bc:7b:b4:58:1d:3f:a4:af:92:f6:73:34: 90:5d:33:96:10:9b:d0:7c:f1:01:36:e5:a2:b5:7d: a7:b0:41:78:0e:93:61:82:ef:1a:cd:45:3e:0d:a7: 34:36:32:ad:df:67:31:eb:f9:08:dc:e9:bd:b9:56: 85:86:80:d9:85:51:ea:6b:60:09:84:80:e3:bf:78: 10:1d:b5:f2:d8:b0:e2:49:a8:eb:4e:cb:2c:0e:36: 11:17:71:78:f4:d2:72:d7:79:6e:fe:25:fe:05:ee: 82:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FB:B0:29:EF:E4:BB:15:BD:49:7E:05:68:10:64:AF:55:A5:72:31 X509v3 Authority Key Identifier: keyid:F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5b:db:6e:08:8c:e4:dc:82:03:78:47:84:40:43:9c:1e:0c: fc:7e:08:ec:bc:f1:0d:99:71:ec:e3:a4:3e:16:8f:cc:16:09: 75:18:c3:80:e8:a8:d0:d7:9c:21:8e:0b:9d:5b:2a:a2:6b:25: 79:c6:9f:12:d4:bc:ff:f6:6c:cd:96:38:98:48:b1:fe:18:53: ec:aa:1f:1b:7d:82:1f:4a:69:00:44:3f:2e:fd:d1:be:e6:66: 62:f4:55:b7:2b:48:22:58:17:65:17:b9:d1:4b:55:50:b6:02: 02:b4:85:19:42:ef:96:7b:dd:3f:58:4b:0f:b0:0a:55:1c:3e: 2b:0d:75:0f:30:4a:87:b8:25:c5:50:c7:28:72:33:00:03:07: 39:17:22:e1:8a:d8:02:6a:c5:82:f7:ad:40:d9:41:3c:fb:42: 84:05:0b:7f:b1:18:4a:e5:5a:ee:5a:90:15:3f:7f:10:22:bd: 44:ff:81:39:10:cf:7c:20:f6:ef:34:8a:53:26:56:f6:81:9c: fd:fb:53:1b:d7:c6:e4:5a:c2:9d:d5:4b:2a:10:5f:f2:a5:f2: fd:6c:67:e2:d0:60:da:72:7a:f7:00:c4:14:be:96:c7:28:9f: f8:2c:cc:dd:e1:4c:b7:8a:b0:88:35:9d:cb:50:2c:da:39:23: 31:53:d5:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d1+QrwMKHHEmEcoQbEBNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMTUwYjNhOTQxOTYyN2ZkYmNkYjY1ODBlODc4YTFjOWZh MGNjNTgwHhcNMjUxMjA2MjEwMDMyWhcNMjUxMjA3MjEwMDMyWjAzMTEwLwYDVQQD EyhhM2ZiYjAyOWVmZTRiYjE1YmQ0OTdlMDU2ODEwNjRhZjU1YTU3MjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2foZ+LYK3iocq4z0wXvKkGIqWwP 5TbcU1vSOI0DAArhXqlVZsj91+QgzswJ7Qa4w80ImlAyvSm8s8w1BUS7GmT8k4QV 2KG0O9qF7ORCkXY+2J4+krH+zUne5B7UB8EK8PQxAOrXyDsuH3rItlw1+bu/zI5A 23235kFaqVrEAzsJQjYJzvL63ffyQWlAmSHZNy6wMCtQmjK8e7RYHT+kr5L2czSQ XTOWEJvQfPEBNuWitX2nsEF4DpNhgu8azUU+Dac0NjKt32cx6/kI3Om9uVaFhoDZ hVHqa2AJhIDjv3gQHbXy2LDiSajrTsssDjYRF3F49NJy13lu/iX+Be6CJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKP7sCnv5LsVvUl+BWgQZK9VpXIxMB8GA1UdIwQY MBaAFPAVCzqUGWJ/2822WA6HihyfoMxYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEJVTE9wUVpZbl9iemJaWURvZUtISi1nekZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81NzUxNzItZjdhMi00ZTQzLTk2MmMt ZWRjNWFiOTk1ZGJmLzEvOEJVTE9wUVpZbl9iemJaWURvZUtISi1nekZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC81NzUxNzItZjdhMi00ZTQzLTk2MmMtZWRjNWFiOTk1ZGJm LzEvOEJVTE9wUVpZbl9iemJaWURvZUtISi1nekZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFvbbgiM 5NyCA3hHhEBDnB4M/H4I7LzxDZlx7OOkPhaPzBYJdRjDgOio0NecIY4LnVsqomsl ecafEtS8//ZszZY4mEix/hhT7KofG32CH0ppAEQ/Lv3RvuZmYvRVtytIIlgXZRe5 0UtVULYCArSFGULvlnvdP1hLD7AKVRw+Kw11DzBKh7glxVDHKHIzAAMHORci4YrY AmrFgvetQNlBPPtChAULf7EYSuVa7lqQFT9/ECK9RP+BORDPfCD27zSKUyZW9oGc /ftTG9fG5FrCndVLKhBf8qXy/Wxn4tBg2nJ69wDEFL6Wxyif+CzM3eFMt4qwiDWd y1As2jkjMVPVIw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:56:24 2025 by rpki-client