This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft File: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft (raw, json) Hash identifier: 0L949zbLxI03UYtyHDc8TkchFeK2k+agqAictCTZVC0= Subject key identifier: A3:E0:41:26:8E:8C:DB:A4:02:4A:0A:DF:22:E1:88:12:CE:77:E8:0F Authority key identifier: F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57 Certificate issuer: /CN=f0f27aebf02abc355212afbf1621e3e0d4a76057 Certificate serial: 019AF42E809D09727DF78A06F1AAB6593073 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft Manifest number: 0533 Signing time: Sat 06 Dec 2025 15:01:19 +0000 Manifest this update: Sat 06 Dec 2025 15:01:19 +0000 Manifest next update: Sun 07 Dec 2025 15:01:19 +0000 Files and hashes: 1: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl (hash: rj+KxRBXTtVazhIhedtKclrUAOkyv4+5hbPERJcvzOc=) 2: _MwQhKVnR_aG2vdLhL9GNdGXvOU.roa (hash: L7braIyd07lwFhqp60fjEjjTIhLctM+CjmNa1wVvJFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:80:9d:09:72:7d:f7:8a:06:f1:aa:b6:59:30:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0f27aebf02abc355212afbf1621e3e0d4a76057 Validity Not Before: Dec 6 15:01:19 2025 GMT Not After : Dec 7 15:01:19 2025 GMT Subject: CN=a3e041268e8cdba4024a0adf22e18812ce77e80f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:01:1a:dc:f7:f0:c0:eb:b2:82:63:0a:97:48: 1d:4b:cf:fc:bf:dd:2a:67:11:d9:32:09:57:e7:2c: 46:5b:6f:04:82:6c:59:9c:12:ac:3d:ff:b9:34:a4: f6:84:39:af:d2:13:1c:e2:ba:15:41:dc:be:31:a3: 77:5f:95:4c:23:29:5a:f2:4c:5d:82:bb:1e:53:c9: a1:32:21:89:4c:4f:d2:86:45:b5:7c:50:b5:9a:c5: c0:ff:b7:60:cc:b3:f6:90:82:68:26:45:92:e3:3e: 0d:bb:8e:07:ed:53:3f:ca:48:c2:45:48:8f:38:09: 42:df:76:c9:5d:fb:06:77:25:78:9f:0f:d2:9e:24: fb:41:4f:d0:9c:8b:29:6f:05:5e:0f:51:fd:35:0f: 6b:0f:31:93:50:ba:63:cc:5d:c1:c8:e8:b5:0d:4e: 6a:ac:0d:ae:b7:41:98:71:13:ad:75:25:6e:7a:06: 12:fa:6b:02:29:f2:17:05:bf:cc:0e:68:65:c1:40: e0:94:93:73:e4:50:fc:74:81:52:e3:bf:51:3c:c4: 3d:29:93:af:36:2e:13:8f:11:32:ef:06:61:81:36: 48:69:00:b5:16:a8:08:94:ec:24:23:ad:74:4b:65: 2a:12:e2:49:5d:2f:6e:ae:cf:44:5f:44:a9:90:bb: 12:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E0:41:26:8E:8C:DB:A4:02:4A:0A:DF:22:E1:88:12:CE:77:E8:0F X509v3 Authority Key Identifier: keyid:F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:33:60:bc:cf:4c:13:6e:28:2a:43:c6:40:87:34:1a:42:08: 25:f4:fe:22:a8:a9:93:f7:f1:60:e5:8b:08:d8:f1:3f:6c:bd: 41:bd:c9:cc:8a:b4:ee:a0:a8:cf:49:00:98:d6:c8:4a:f6:d6: 94:80:9f:ea:a9:98:65:2b:b6:4a:80:ff:b2:58:21:6e:83:44: 29:60:1c:f5:a5:00:c8:0f:ae:24:51:aa:d5:c6:f7:e8:96:50: 22:01:7c:c1:bb:9c:f3:eb:a6:8f:2a:ac:22:bc:29:79:07:8f: c5:9f:b8:a5:7e:91:66:de:b4:b7:91:8c:8e:52:7a:15:3f:0e: 1d:87:04:cf:f6:5d:f9:fa:d3:f0:a1:49:d1:44:12:3c:ec:23: d3:e8:b9:10:a1:6f:6e:df:da:cc:ac:f6:cf:d6:28:2f:85:81: de:34:db:96:c0:c6:16:e9:6e:2e:fb:9a:9e:40:83:5c:35:15: 47:c0:a4:1b:50:b7:8d:16:93:d2:0d:ed:b4:43:e6:2b:8e:7a: f4:ef:25:f7:02:29:59:82:74:28:d4:98:bb:e4:2f:24:ef:40: 14:f7:9f:48:a9:77:92:06:8a:0c:c5:48:e6:83:2d:48:40:97: c2:03:64:c6:d4:42:d4:b9:bb:7a:aa:87:41:72:81:6d:b0:5b: 57:ce:51:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LoCdCXJ994oG8aq2WTBzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZjI3YWViZjAyYWJjMzU1MjEyYWZiZjE2MjFlM2UwZDRh NzYwNTcwHhcNMjUxMjA2MTUwMTE5WhcNMjUxMjA3MTUwMTE5WjAzMTEwLwYDVQQD EyhhM2UwNDEyNjhlOGNkYmE0MDI0YTBhZGYyMmUxODgxMmNlNzdlODBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wEa3PfwwOuygmMKl0gdS8/8v90q ZxHZMglX5yxGW28EgmxZnBKsPf+5NKT2hDmv0hMc4roVQdy+MaN3X5VMIyla8kxd grseU8mhMiGJTE/ShkW1fFC1msXA/7dgzLP2kIJoJkWS4z4Nu44H7VM/ykjCRUiP OAlC33bJXfsGdyV4nw/SniT7QU/QnIspbwVeD1H9NQ9rDzGTULpjzF3ByOi1DU5q rA2ut0GYcROtdSVuegYS+msCKfIXBb/MDmhlwUDglJNz5FD8dIFS479RPMQ9KZOv Ni4TjxEy7wZhgTZIaQC1FqgIlOwkI610S2UqEuJJXS9urs9EX0SpkLsSkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPgQSaOjNukAkoK3yLhiBLOd+gPMB8GA1UdIwQY MBaAFPDyeuvwKrw1UhKvvxYh4+DUp2BXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFBKNjZfQXF2RFZTRXEtX0ZpSGo0TlNuWUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83OTEyYzYtYzlkNC00M2MyLTk2ODgt YzQ1ZjhlMjUxMjQ4LzEvOFBKNjZfQXF2RFZTRXEtX0ZpSGo0TlNuWUZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83OTEyYzYtYzlkNC00M2MyLTk2ODgtYzQ1ZjhlMjUxMjQ4 LzEvOFBKNjZfQXF2RFZTRXEtX0ZpSGo0TlNuWUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzNgvM9M E24oKkPGQIc0GkIIJfT+Iqipk/fxYOWLCNjxP2y9Qb3JzIq07qCoz0kAmNbISvbW lICf6qmYZSu2SoD/slghboNEKWAc9aUAyA+uJFGq1cb36JZQIgF8wbuc8+umjyqs IrwpeQePxZ+4pX6RZt60t5GMjlJ6FT8OHYcEz/Zd+frT8KFJ0UQSPOwj0+i5EKFv bt/azKz2z9YoL4WB3jTblsDGFuluLvuankCDXDUVR8CkG1C3jRaT0g3ttEPmK456 9O8l9wIpWYJ0KNSYu+QvJO9AFPefSKl3kgaKDMVI5oMtSECXwgNkxtRC1Lm7eqqH QXKBbbBbV85RKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:10 2025 by rpki-client