This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json) Hash identifier: P+bgwYNCj3GWHSq+jEfxgm4TKOpxLdqFmvqp4Rgy21Q= Subject key identifier: 8F:2A:54:61:5C:8C:9D:3C:59:99:54:79:D4:EC:AE:83:3E:67:07:FA Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b Certificate serial: 019AF42E035AB2F765BAC36808F669E70703 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft Manifest number: 0B51 Signing time: Sat 06 Dec 2025 15:00:47 +0000 Manifest this update: Sat 06 Dec 2025 15:00:47 +0000 Manifest next update: Sun 07 Dec 2025 15:00:47 +0000 Files and hashes: 1: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: dvDYIjiXpVOpiK0nBXhl+X+9GWJR1HXoj0f+TjIIBTQ=) 2: FgbdG0fmPUK0umb6fkCIHBoc4Hk.roa (hash: +cH4y6vUFW9ebAdtQK64RlvVCm6ewXq634ESBVns0pY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:03:5a:b2:f7:65:ba:c3:68:08:f6:69:e7:07:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b Validity Not Before: Dec 6 15:00:47 2025 GMT Not After : Dec 7 15:00:47 2025 GMT Subject: CN=8f2a54615c8c9d3c59995479d4ecae833e6707fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f5:5e:99:75:54:6d:74:43:e4:75:10:82:b9: 10:cf:8d:21:35:d1:49:bb:9a:fc:c6:84:3d:eb:38: e5:0a:09:d1:51:21:b0:5d:3b:65:70:01:98:e6:88: ed:39:9b:1b:b0:c2:73:38:b8:de:69:3a:96:7b:68: ae:dc:5c:db:c7:54:32:5b:42:b7:12:94:87:48:2f: 9c:f2:2c:1f:92:5b:06:d0:ad:d3:fd:64:df:4c:4a: ca:1b:ee:6a:d2:0e:b9:83:35:5b:cf:0a:29:6f:3b: 49:4d:68:21:02:43:3f:8c:2a:30:f5:58:9f:bf:58: 95:dd:37:6a:d9:05:07:c4:40:eb:df:9f:5e:2a:12: b6:dc:a9:1d:e4:f1:a8:68:3f:23:9e:74:89:fe:ce: 1f:a3:ec:7b:89:88:58:ec:9a:0c:01:a7:4a:63:b3: 46:90:d6:d5:cb:6a:9f:ed:1c:95:3c:b8:c4:44:02: 8e:03:47:fb:ae:1c:d9:a1:7a:3c:28:18:f2:f6:56: 2f:9d:cf:a7:66:75:8d:ae:e6:8a:27:79:47:c6:81: 49:f0:5e:b0:30:40:f3:e3:75:b0:5b:3c:fe:83:f5: 99:18:69:f7:cf:9d:3f:0b:d9:95:78:4c:00:7a:2f: 45:4c:32:df:25:78:91:41:bb:eb:d0:d7:02:9b:cc: d1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2A:54:61:5C:8C:9D:3C:59:99:54:79:D4:EC:AE:83:3E:67:07:FA X509v3 Authority Key Identifier: keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:bc:d5:24:f2:da:01:67:47:ad:27:65:9a:8a:e0:6d:e6:6d: 47:00:e9:7a:da:0e:32:43:9b:50:dd:6c:0a:92:46:66:e8:10: 62:5a:3d:75:5c:05:df:b3:a8:e0:65:e6:d2:29:28:2a:d1:ec: 6e:39:dc:b3:9c:60:82:1e:d0:61:b0:fd:a5:e6:41:2c:0b:62: ae:a1:36:c8:94:e4:ef:9c:b5:6a:01:69:95:25:f9:80:e8:1d: 07:2d:59:ac:cd:7f:63:ee:e7:d4:d4:1c:28:1f:48:4e:88:f8: b9:07:e1:46:73:c6:da:3d:be:d7:16:fa:84:1b:98:85:4b:4e: 88:c8:4a:67:2a:57:cc:82:05:2d:9b:38:42:5e:c7:37:af:b8: 49:df:0e:04:db:2b:df:75:f3:63:4d:c2:81:c7:74:5f:c5:09: 97:b0:f0:4a:13:ad:dc:01:37:17:f3:47:8b:20:c7:a2:21:1c: f7:44:b0:bb:6c:e8:e3:e7:9e:5f:1c:cf:70:c9:76:b6:49:31: 09:36:18:7f:00:84:83:31:64:cd:f5:c8:e3:3b:fa:2b:e6:1e: 48:40:e5:37:d3:0f:9b:9f:c6:18:10:8f:93:5f:79:40:55:ca: 6e:3a:35:63:17:6a:65:41:b1:c3:51:43:35:66:9c:b1:be:b6: 69:f4:dd:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LgNasvdlusNoCPZp5wcDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzM2FlNWQyYzFhMzEwN2VmMTJmNGQ2ZGQ5YzkwZjI0OWMy Njc4MWIwHhcNMjUxMjA2MTUwMDQ3WhcNMjUxMjA3MTUwMDQ3WjAzMTEwLwYDVQQD Eyg4ZjJhNTQ2MTVjOGM5ZDNjNTk5OTU0NzlkNGVjYWU4MzNlNjcwN2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fVemXVUbXRD5HUQgrkQz40hNdFJ u5r8xoQ96zjlCgnRUSGwXTtlcAGY5ojtOZsbsMJzOLjeaTqWe2iu3Fzbx1QyW0K3 EpSHSC+c8iwfklsG0K3T/WTfTErKG+5q0g65gzVbzwopbztJTWghAkM/jCow9Vif v1iV3Tdq2QUHxEDr359eKhK23Kkd5PGoaD8jnnSJ/s4fo+x7iYhY7JoMAadKY7NG kNbVy2qf7RyVPLjERAKOA0f7rhzZoXo8KBjy9lYvnc+nZnWNruaKJ3lHxoFJ8F6w MEDz43WwWzz+g/WZGGn3z50/C9mVeEwAei9FTDLfJXiRQbvr0NcCm8zREQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8qVGFcjJ08WZlUedTsroM+Zwf6MB8GA1UdIwQY MBaAFPM65dLBoxB+8S9NbdnJDyScJngbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jYmJkYzgtYTE4MC00ZmQ5LWFkZTQt ZmEyNTY2ZTU4Mjg2LzEvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9jYmJkYzgtYTE4MC00ZmQ5LWFkZTQtZmEyNTY2ZTU4Mjg2 LzEvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALzVJPLa AWdHrSdlmorgbeZtRwDpetoOMkObUN1sCpJGZugQYlo9dVwF37Oo4GXm0ikoKtHs bjncs5xggh7QYbD9peZBLAtirqE2yJTk75y1agFplSX5gOgdBy1ZrM1/Y+7n1NQc KB9IToj4uQfhRnPG2j2+1xb6hBuYhUtOiMhKZypXzIIFLZs4Ql7HN6+4Sd8OBNsr 33XzY03Cgcd0X8UJl7DwShOt3AE3F/NHiyDHoiEc90Swu2zo4+eeXxzPcMl2tkkx CTYYfwCEgzFkzfXI4zv6K+YeSEDlN9MPm5/GGBCPk195QFXKbjo1YxdqZUGxw1FD NWacsb62afTdNA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:57:07 2025 by rpki-client