This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft File: 8nptTTKDKDFyXEjbUYokAPGpJL0.mft (raw, json) Hash identifier: 4n4bfo57VGwIwIIr6UPcgeXJ+48LWKBoF1zEq0TSUYI= Subject key identifier: 86:E9:16:D8:28:90:04:EF:4D:A8:67:C0:EF:0A:67:6A:C4:9A:AB:FC Authority key identifier: F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD Certificate issuer: /CN=f27a6d4d32832831725c48db518a2400f1a924bd Certificate serial: 019AF352246864811B1F172F1D24C7D47991 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft Manifest number: 1674 Signing time: Sat 06 Dec 2025 11:00:37 +0000 Manifest this update: Sat 06 Dec 2025 11:00:37 +0000 Manifest next update: Sun 07 Dec 2025 11:00:37 +0000 Files and hashes: 1: 8nptTTKDKDFyXEjbUYokAPGpJL0.crl (hash: xtAPanEt3EWjQHUY8VILgIzHufmHPl5ZIjit4X5Lqok=) 2: m0jbiHxRktR_kE-i3D3woRX2ZsI.roa (hash: fSOohTJ+oYWg/YD/VykP7b8U7lIYd4B0MDv4mOCNuT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:24:68:64:81:1b:1f:17:2f:1d:24:c7:d4:79:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f27a6d4d32832831725c48db518a2400f1a924bd Validity Not Before: Dec 6 11:00:37 2025 GMT Not After : Dec 7 11:00:37 2025 GMT Subject: CN=86e916d8289004ef4da867c0ef0a676ac49aabfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:47:58:d7:e7:2f:08:17:0a:e9:73:4b:5d:39: df:aa:b4:df:9d:3e:9a:be:63:4d:5d:d1:db:9d:7b: ee:e4:6e:78:da:95:9c:15:b7:8d:82:f1:67:93:a8: 38:93:35:5d:0c:63:ce:12:cb:a0:fe:95:90:d7:06: 4f:c2:4a:8c:d7:e7:73:24:d7:05:b1:19:58:92:21: 22:19:ff:fb:4d:fa:f4:df:3f:15:ea:f2:cb:c5:cc: 8e:e5:81:e6:eb:f9:f3:29:83:4d:57:42:e9:c9:b7: 0e:cc:2b:fa:56:c9:5a:5f:f6:c8:f3:dc:0f:8e:c2: 42:41:32:9d:9a:68:1f:5d:18:e6:95:2f:5f:92:9a: ac:86:f2:5b:de:f0:a9:65:c3:e8:f3:ea:5a:f4:71: 6f:44:cd:ec:db:44:00:78:ef:0f:1a:24:e3:4c:ba: f4:38:0e:cb:42:93:45:ce:b9:9d:6d:12:8c:5c:72: eb:fa:db:81:13:50:50:ca:3f:82:47:72:a7:09:f9: 76:21:7a:68:77:dd:eb:92:cf:1d:14:4f:d6:1e:56: c1:8b:cf:01:0e:a8:b8:06:9c:da:58:89:f9:bf:ce: 80:68:bc:ec:a8:37:21:22:e5:48:9f:1c:0f:7b:1b: da:74:b6:c6:8b:18:88:34:bb:9e:20:98:ff:58:36: ce:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E9:16:D8:28:90:04:EF:4D:A8:67:C0:EF:0A:67:6A:C4:9A:AB:FC X509v3 Authority Key Identifier: keyid:F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:09:f7:e5:ff:8c:28:c3:c0:cc:16:c0:46:65:ed:13:7d:05: 04:90:5a:97:16:2a:a0:5e:ff:1c:1a:dc:42:38:8e:42:ba:6d: cb:31:6a:0e:5d:74:fb:cb:95:83:ec:e4:3e:06:22:53:02:73: 2d:1b:47:98:fb:c7:39:ef:4b:f1:99:41:c2:14:66:1f:e1:94: ae:29:43:99:85:86:e2:f1:34:28:25:81:5e:26:47:80:ca:67: e9:d1:4b:c0:d3:af:70:fe:6f:9d:96:1b:5e:da:59:2d:7f:18: dc:9d:12:4a:da:55:80:c5:37:93:55:81:20:7f:a4:66:2c:e6: a1:f9:2b:12:16:8a:4f:10:68:b8:65:8f:e5:bd:7e:e8:b8:38: 3e:91:73:c9:bc:f8:07:9e:98:53:a9:66:09:ac:09:80:e7:74: 66:87:7d:98:a3:07:06:f9:4a:8a:b7:95:65:86:81:f4:2b:5f: e9:ce:38:a9:ed:21:15:68:c7:26:9f:1b:38:02:69:6b:a4:48: f7:ec:0c:6b:69:cc:cc:cd:72:01:3d:ba:b7:82:c5:06:95:a3: fe:ba:bf:74:2a:3b:32:3d:9c:e7:e8:72:de:90:0c:54:7c:51: 8e:11:f3:a2:59:0f:2c:1e:f2:b3:66:60:fc:00:a2:be:07:8d: 73:8e:7e:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUiRoZIEbHxcvHSTH1HmRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyN2E2ZDRkMzI4MzI4MzE3MjVjNDhkYjUxOGEyNDAwZjFh OTI0YmQwHhcNMjUxMjA2MTEwMDM3WhcNMjUxMjA3MTEwMDM3WjAzMTEwLwYDVQQD Eyg4NmU5MTZkODI4OTAwNGVmNGRhODY3YzBlZjBhNjc2YWM0OWFhYmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0dY1+cvCBcK6XNLXTnfqrTfnT6a vmNNXdHbnXvu5G542pWcFbeNgvFnk6g4kzVdDGPOEsug/pWQ1wZPwkqM1+dzJNcF sRlYkiEiGf/7Tfr03z8V6vLLxcyO5YHm6/nzKYNNV0LpybcOzCv6VslaX/bI89wP jsJCQTKdmmgfXRjmlS9fkpqshvJb3vCpZcPo8+pa9HFvRM3s20QAeO8PGiTjTLr0 OA7LQpNFzrmdbRKMXHLr+tuBE1BQyj+CR3KnCfl2IXpod93rks8dFE/WHlbBi88B Dqi4BpzaWIn5v86AaLzsqDchIuVInxwPexvadLbGixiINLueIJj/WDbOMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbpFtgokATvTahnwO8KZ2rEmqv8MB8GA1UdIwQY MBaAFPJ6bU0ygygxclxI21GKJADxqSS9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG5wdFRUS0RLREZ5WEVqYlVZb2tBUEdwSkwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8yOGY4ZWMtZTU3Ny00NzUyLTg2ODUt MTU3M2VmNjI3MWViLzEvOG5wdFRUS0RLREZ5WEVqYlVZb2tBUEdwSkwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8yOGY4ZWMtZTU3Ny00NzUyLTg2ODUtMTU3M2VmNjI3MWVi LzEvOG5wdFRUS0RLREZ5WEVqYlVZb2tBUEdwSkwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFwn35f+M KMPAzBbARmXtE30FBJBalxYqoF7/HBrcQjiOQrptyzFqDl10+8uVg+zkPgYiUwJz LRtHmPvHOe9L8ZlBwhRmH+GUrilDmYWG4vE0KCWBXiZHgMpn6dFLwNOvcP5vnZYb XtpZLX8Y3J0SStpVgMU3k1WBIH+kZizmofkrEhaKTxBouGWP5b1+6Lg4PpFzybz4 B56YU6lmCawJgOd0Zod9mKMHBvlKireVZYaB9Ctf6c44qe0hFWjHJp8bOAJpa6RI 9+wMa2nMzM1yAT26t4LFBpWj/rq/dCo7Mj2c5+hy3pAMVHxRjhHzolkPLB7ys2Zg /ACivgeNc45+lg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:05:06 2025 by rpki-client