This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft File: 8Q057dsAjRuJ35dBlg2_IET2V_s.mft (raw, json) Hash identifier: jM8xLB2gEbS0kgsf5idJaLq8+vQf2yE7M1zGx/aeLIY= Subject key identifier: DB:81:91:37:EF:DB:CE:38:C5:63:03:9A:DE:8C:29:65:3B:02:0A:0B Authority key identifier: F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB Certificate issuer: /CN=f10d39eddb008d1b89df9741960dbf2044f657fb Certificate serial: 019AF19AB5730630CC2EE20EC964A585A736 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 03:00:39 +0000 Manifest this update: Sat 06 Dec 2025 03:00:39 +0000 Manifest next update: Sun 07 Dec 2025 03:00:39 +0000 Files and hashes: 1: 8Q057dsAjRuJ35dBlg2_IET2V_s.crl (hash: 7+mKDpP6mOi/x+Ohu99j0WfejvvnA6yFQe1kxcsv1Ss=) 2: jV20P4i0v4psPgGy6zXjkv_uoCc.roa (hash: LRoq6PhnzYAWBMT+zoK5/SNdijqn8yZf6GzBfp4aJ0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b5:73:06:30:cc:2e:e2:0e:c9:64:a5:85:a7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f10d39eddb008d1b89df9741960dbf2044f657fb Validity Not Before: Dec 6 03:00:39 2025 GMT Not After : Dec 7 03:00:39 2025 GMT Subject: CN=db819137efdbce38c563039ade8c29653b020a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ee:5b:fc:1b:98:4f:63:32:ec:c6:56:2e:a3: 3f:9e:3e:61:99:5b:2d:1b:eb:5a:03:af:d8:37:35: 13:b1:1b:f6:a1:ac:d0:69:60:c0:18:b6:ce:bb:17: 76:0d:04:38:87:7d:1c:c2:27:7e:11:c8:9f:1a:63: 86:d4:53:00:a6:52:6b:f1:22:4d:d7:a7:14:19:6e: 67:ce:fb:55:79:cb:da:68:8c:b5:54:bf:94:f7:0b: 7d:5a:67:96:5e:34:91:af:42:22:88:79:49:aa:80: 5e:d6:1b:e6:49:34:66:54:8a:a5:19:c3:40:87:86: 83:93:09:3d:d4:8c:47:69:2b:65:af:4c:7a:3e:d8: f4:7f:09:72:66:18:48:2a:4e:f6:26:b0:e4:54:53: 0a:37:32:e7:74:4c:7c:d4:3f:b3:78:72:f6:48:2c: 5a:48:b2:f7:10:0c:ea:b8:65:79:85:af:8c:17:71: cf:36:56:f1:20:bb:db:27:33:11:25:d3:0e:cf:85: 9c:88:97:a7:1b:a1:5a:ef:de:80:41:b3:2c:b1:3c: ed:99:b5:53:45:7a:f3:85:5e:64:1b:32:39:7b:16: d4:58:7f:40:1a:b2:0b:dc:24:e9:09:9a:e5:e0:9a: 95:fe:c1:91:90:d7:d0:a9:ff:ea:f0:58:04:d3:fb: b9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:81:91:37:EF:DB:CE:38:C5:63:03:9A:DE:8C:29:65:3B:02:0A:0B X509v3 Authority Key Identifier: keyid:F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:1c:d7:b5:0d:3c:6b:af:ab:c8:b0:3f:e2:d3:79:1c:1b:64: 35:5d:64:a6:97:93:7a:a8:dd:b6:79:64:af:c7:0f:f4:b3:da: 83:0a:4e:53:f5:97:99:71:37:34:76:74:35:15:84:97:9d:85: b4:cc:90:a8:f4:8b:80:22:03:c9:7d:e9:7b:a5:48:13:6a:c6: 47:58:0f:1b:0b:57:5e:79:85:b5:cf:07:27:c2:5d:18:6c:23: 31:42:26:27:87:a6:57:92:81:4b:53:5e:67:55:f5:4a:d4:2f: f8:96:f2:45:30:b2:99:da:cc:9e:f1:42:a9:b2:07:c9:09:88: bc:25:90:68:3e:c8:58:07:3b:c5:0a:91:c0:99:9c:88:54:d5: 6f:ed:d2:d9:42:78:a7:37:e3:fd:00:63:72:71:3e:a4:62:7e: 32:34:be:4d:1a:98:8b:2e:f8:bc:fb:dd:ed:76:3f:86:f2:41: 98:91:1f:21:fd:94:0f:b9:41:30:b2:bc:ec:b0:06:13:50:10: 36:e7:7e:a1:b9:83:a7:b6:de:b3:18:91:4f:ac:9e:a5:66:81: c9:dd:a2:a8:20:d7:70:1e:8c:2f:dd:b9:f4:19:59:69:9f:e6: 34:c8:cb:44:1f:81:2f:0d:14:6e:75:30:94:40:55:fe:1d:f0: bf:4a:58:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrVzBjDMLuIOyWSlhac2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMGQzOWVkZGIwMDhkMWI4OWRmOTc0MTk2MGRiZjIwNDRm NjU3ZmIwHhcNMjUxMjA2MDMwMDM5WhcNMjUxMjA3MDMwMDM5WjAzMTEwLwYDVQQD EyhkYjgxOTEzN2VmZGJjZTM4YzU2MzAzOWFkZThjMjk2NTNiMDIwYTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre5b/BuYT2My7MZWLqM/nj5hmVst G+taA6/YNzUTsRv2oazQaWDAGLbOuxd2DQQ4h30cwid+EcifGmOG1FMAplJr8SJN 16cUGW5nzvtVecvaaIy1VL+U9wt9WmeWXjSRr0IiiHlJqoBe1hvmSTRmVIqlGcNA h4aDkwk91IxHaStlr0x6Ptj0fwlyZhhIKk72JrDkVFMKNzLndEx81D+zeHL2SCxa SLL3EAzquGV5ha+MF3HPNlbxILvbJzMRJdMOz4WciJenG6Fa796AQbMssTztmbVT RXrzhV5kGzI5exbUWH9AGrIL3CTpCZrl4JqV/sGRkNfQqf/q8FgE0/u5zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNuBkTfv2844xWMDmt6MKWU7AgoLMB8GA1UdIwQY MBaAFPENOe3bAI0bid+XQZYNvyBE9lf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNzBlMWEtNzMyZS00ZTZiLWIzYjUt ZjU2MmI4OTc0ZDhiLzEvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mNzBlMWEtNzMyZS00ZTZiLWIzYjUtZjU2MmI4OTc0ZDhi LzEvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhzXtQ08 a6+ryLA/4tN5HBtkNV1kppeTeqjdtnlkr8cP9LPagwpOU/WXmXE3NHZ0NRWEl52F tMyQqPSLgCIDyX3pe6VIE2rGR1gPGwtXXnmFtc8HJ8JdGGwjMUImJ4emV5KBS1Ne Z1X1StQv+JbyRTCymdrMnvFCqbIHyQmIvCWQaD7IWAc7xQqRwJmciFTVb+3S2UJ4 pzfj/QBjcnE+pGJ+MjS+TRqYiy74vPvd7XY/hvJBmJEfIf2UD7lBMLK87LAGE1AQ Nud+obmDp7besxiRT6yepWaByd2iqCDXcB6ML9259BlZaZ/mNMjLRB+BLw0UbnUw lEBV/h3wv0pYjg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:54 2025 by rpki-client