This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json) Hash identifier: xKnZALrUBW1iSDoEiPzHGb4mHpBkwbBkqyPItwS7U3I= Subject key identifier: 7B:9A:24:C5:35:FD:17:CE:AF:C1:2C:5B:08:9B:95:1E:4D:C1:D1:A4 Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b Certificate serial: 019AF23F69FB544BBE987EF5213C87E66CC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft Manifest number: 11B0 Signing time: Sat 06 Dec 2025 06:00:33 +0000 Manifest this update: Sat 06 Dec 2025 06:00:33 +0000 Manifest next update: Sun 07 Dec 2025 06:00:33 +0000 Files and hashes: 1: 3hbfOacsgkP1pg9qyg2MfHcWFYc.roa (hash: cOfUIokArUM0fSLBq8ZJr6uobm8IIPK6h0yhiKwO2kU=) 2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: NrfH+IPf9cUXTyI7Lg6dJw4eSQarzXe8FGYF6+It8H8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:69:fb:54:4b:be:98:7e:f5:21:3c:87:e6:6c:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b Validity Not Before: Dec 6 06:00:33 2025 GMT Not After : Dec 7 06:00:33 2025 GMT Subject: CN=7b9a24c535fd17ceafc12c5b089b951e4dc1d1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8b:4a:ae:3f:34:e3:40:25:a0:f9:77:09:cd: 5e:8e:c7:ef:84:ae:89:ef:bd:1e:f2:90:0a:44:b6: 1d:00:9a:20:a4:99:93:0d:4e:07:66:bf:39:1e:ec: 40:35:69:39:8e:40:7c:36:c2:82:e0:ae:cf:e6:7b: 65:78:28:f4:ec:79:e3:35:89:1b:85:d3:bd:1b:56: 4f:c9:69:42:18:bf:0e:7d:d4:9b:5e:bb:e2:63:58: 4a:46:51:9d:85:c7:6e:d7:3d:e2:f5:3e:27:d6:4c: 78:0f:72:27:94:6c:00:53:87:56:a8:c9:7a:18:be: 15:09:1d:43:6b:29:85:1e:c5:62:a0:89:79:29:5a: 47:71:79:40:9e:9b:f3:a6:7e:53:05:94:a8:59:f0: af:a5:11:87:da:f8:88:0e:ef:ac:79:22:01:b5:d4: 5c:32:ea:76:9c:2c:0f:c4:3b:08:dd:c4:d4:9f:5a: c7:57:2b:72:97:05:17:75:c1:7a:35:51:23:e3:1f: 97:e5:6c:e8:ff:12:47:11:73:83:04:a0:2b:c5:74: 38:e4:d8:7c:d0:0e:70:da:1b:18:10:85:05:41:2a: fa:e8:a7:4e:bc:47:a9:9d:65:a0:24:41:9f:5e:bf: c0:9e:35:4f:bd:6e:15:fa:9c:87:18:42:b0:64:1e: 61:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9A:24:C5:35:FD:17:CE:AF:C1:2C:5B:08:9B:95:1E:4D:C1:D1:A4 X509v3 Authority Key Identifier: keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2c:ad:8e:67:35:c7:12:23:80:da:9a:27:0a:24:a9:93:67: 47:b0:b7:ec:2d:e3:53:a5:65:0e:17:3d:1a:1a:ee:e3:61:3b: ab:a8:29:e3:6a:66:96:7a:f9:19:1d:d5:46:28:c8:45:27:15: 77:3e:b2:97:7f:d0:18:c8:de:44:e2:bd:a9:3d:20:05:57:a0: 46:40:c5:42:a5:7e:67:85:56:11:fb:1a:d8:a3:7d:44:9d:ed: 50:7c:77:84:16:b8:a4:01:e6:0b:cf:b8:f5:9f:fb:0a:ce:ba: ac:d9:c5:43:6e:ac:dc:f7:5f:ce:90:fa:3a:2d:77:97:87:0b: 5b:44:7e:09:59:2a:8a:f6:96:b8:51:94:d1:76:38:02:ac:74: c5:d4:50:75:cd:b0:6b:19:23:67:43:b5:22:45:65:10:01:e9: a6:87:c8:83:28:2c:a4:91:04:61:50:46:7e:63:c4:25:4e:11: 50:29:eb:2c:7d:c4:ea:3a:d9:49:f0:f8:ae:e0:08:2c:c0:d0: 5d:1a:84:87:36:67:ac:14:ed:a5:6e:59:dd:25:0a:f2:3f:b5: 37:f5:02:61:fd:a3:16:a1:1c:47:bc:62:57:79:f3:c6:32:dd: cd:45:e8:b9:e2:52:d6:b2:e7:56:de:e6:f4:7b:25:69:a0:4f: cb:a9:13:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2n7VEu+mH71ITyH5mzFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNTkwNzdlMDQzODc3MDU5NjAzY2FhMGUzZTU4NGIxNjI2 ZThmN2IwHhcNMjUxMjA2MDYwMDMzWhcNMjUxMjA3MDYwMDMzWjAzMTEwLwYDVQQD Eyg3YjlhMjRjNTM1ZmQxN2NlYWZjMTJjNWIwODliOTUxZTRkYzFkMWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYtKrj8040AloPl3Cc1ejsfvhK6J 770e8pAKRLYdAJogpJmTDU4HZr85HuxANWk5jkB8NsKC4K7P5ntleCj07HnjNYkb hdO9G1ZPyWlCGL8OfdSbXrviY1hKRlGdhcdu1z3i9T4n1kx4D3InlGwAU4dWqMl6 GL4VCR1DaymFHsVioIl5KVpHcXlAnpvzpn5TBZSoWfCvpRGH2viIDu+seSIBtdRc Mup2nCwPxDsI3cTUn1rHVytylwUXdcF6NVEj4x+X5Wzo/xJHEXODBKArxXQ45Nh8 0A5w2hsYEIUFQSr66KdOvEepnWWgJEGfXr/AnjVPvW4V+pyHGEKwZB5hBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuaJMU1/RfOr8EsWwiblR5NwdGkMB8GA1UdIwQY MBaAFPFZB34EOHcFlgPKoOPlhLFibo97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wYWE1NDEtZTkwZi00NmZkLWEwZGMt MDNkOTA0YzgwMmNlLzEvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8wYWE1NDEtZTkwZi00NmZkLWEwZGMtMDNkOTA0YzgwMmNl LzEvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCytjmc1 xxIjgNqaJwokqZNnR7C37C3jU6VlDhc9Ghru42E7q6gp42pmlnr5GR3VRijIRScV dz6yl3/QGMjeROK9qT0gBVegRkDFQqV+Z4VWEfsa2KN9RJ3tUHx3hBa4pAHmC8+4 9Z/7Cs66rNnFQ26s3PdfzpD6Oi13l4cLW0R+CVkqivaWuFGU0XY4Aqx0xdRQdc2w axkjZ0O1IkVlEAHppofIgygspJEEYVBGfmPEJU4RUCnrLH3E6jrZSfD4ruAILMDQ XRqEhzZnrBTtpW5Z3SUK8j+1N/UCYf2jFqEcR7xiV3nzxjLdzUXoueJS1rLnVt7m 9HslaaBPy6kTiw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:09:18 2025 by rpki-client