This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft File: 8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json) Hash identifier: A+RQM4jK62UHYPr7uXChztmhkkrc44y8AsNHFIAUnco= Subject key identifier: 99:56:9D:F2:E9:E1:2D:54:88:71:1D:69:14:FF:BB:0C:B3:2C:24:DD Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC Certificate issuer: /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc Certificate serial: 019AF31CC36BB143D66C77A90FB51E1CC4E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 10:02:19 +0000 Manifest this update: Sat 06 Dec 2025 10:02:19 +0000 Manifest next update: Sun 07 Dec 2025 10:02:19 +0000 Files and hashes: 1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: 622Le51sidfQs4+M4DOmuVv5PW6Yn0wjTrcJOK0s5t0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:c3:6b:b1:43:d6:6c:77:a9:0f:b5:1e:1c:c4:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc Validity Not Before: Dec 6 10:02:19 2025 GMT Not After : Dec 7 10:02:19 2025 GMT Subject: CN=99569df2e9e12d5488711d6914ffbb0cb32c24dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:15:ea:da:d7:2d:c9:86:7b:92:82:b8:70:6e: dd:1c:57:d5:60:9f:d3:4e:f4:ed:fd:1d:7e:66:75: c6:11:34:64:60:aa:3a:d4:f8:4a:0b:c3:d2:3f:96: 6c:b5:a0:cf:c2:d8:ea:45:b2:56:fc:fa:63:d9:5a: 0f:52:f9:ef:41:34:d5:6b:cb:46:e0:26:c1:61:dc: e8:16:ca:09:ed:62:2e:9b:72:59:1c:af:13:bb:cd: 55:7e:e9:45:9d:ea:bd:5c:a9:be:19:54:a6:3f:e5: fc:f7:15:03:09:46:5b:96:f7:33:77:3f:73:fb:f3: 2b:0c:ce:9f:d8:a4:a7:72:25:05:48:dd:2a:78:8a: e5:ae:18:8c:bc:cb:37:e7:80:5c:d7:c2:a5:b7:65: 11:06:49:fa:5e:d0:ed:c5:19:45:c8:16:12:b7:a3: 62:b9:64:cd:4a:98:3f:da:f1:39:d7:fa:5e:c3:c7: 96:82:d3:4a:fd:d3:be:1d:ad:4f:e6:89:6b:15:c0: 12:52:e8:03:fb:b2:ae:aa:06:15:21:70:0c:d8:7d: 9e:8f:70:8a:26:58:43:34:cb:10:15:62:d3:93:6d: 3b:a9:34:f4:ba:6e:17:57:c1:31:2a:bf:f1:4b:52: 68:92:22:0a:c1:5f:94:3a:9e:87:fa:48:cf:b9:44: 66:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:56:9D:F2:E9:E1:2D:54:88:71:1D:69:14:FF:BB:0C:B3:2C:24:DD X509v3 Authority Key Identifier: keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:6f:04:ba:9e:c3:d5:c1:d1:e7:70:b4:2c:9a:2f:39:0a:b9: 70:47:33:8f:ae:a0:9c:90:d1:b4:f6:70:f2:85:fe:53:ad:85: ab:b6:61:10:ac:8a:27:a8:8b:53:ee:b8:0a:95:7d:83:e9:c9: fd:80:b3:1c:48:df:be:48:5c:c5:4d:43:29:d3:c1:bd:81:96: d7:c9:1e:69:ef:2e:2d:34:ad:50:90:86:10:af:51:92:1d:9f: e3:b8:ff:85:84:cb:ec:1c:c2:34:b7:78:95:3d:59:26:2a:bf: b4:c3:05:aa:8d:83:76:69:28:ba:a0:69:72:3a:ef:01:75:18: ed:26:d9:63:34:0a:be:77:b0:76:6a:cb:84:8e:00:25:35:20: e5:13:f7:f4:5a:23:53:f0:93:12:72:94:f1:92:8e:c9:7b:47: 3b:9e:e1:f7:e6:08:23:e5:3e:d4:84:71:c3:ea:69:86:c6:31: fc:57:5d:f7:36:2b:37:3c:97:14:39:60:2b:d6:75:19:1b:56: c3:9b:3f:aa:9a:bc:06:50:0e:11:3f:ba:12:57:74:c3:30:44: 34:6c:d5:56:6b:79:f7:41:cd:60:aa:58:e7:f2:5d:a7:bc:bd: 10:40:5e:b7:94:cd:c5:3e:4b:11:61:fc:21:b8:2d:c3:cf:62: 55:8c:d0:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHMNrsUPWbHepD7UeHMTpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYmJhN2MyZDAyZGUxNDhhYTllOGZhMDlhMWM3YTJiNzcw YTE5ZGMwHhcNMjUxMjA2MTAwMjE5WhcNMjUxMjA3MTAwMjE5WjAzMTEwLwYDVQQD Eyg5OTU2OWRmMmU5ZTEyZDU0ODg3MTFkNjkxNGZmYmIwY2IzMmMyNGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxXq2tctyYZ7koK4cG7dHFfVYJ/T TvTt/R1+ZnXGETRkYKo61PhKC8PSP5ZstaDPwtjqRbJW/Ppj2VoPUvnvQTTVa8tG 4CbBYdzoFsoJ7WIum3JZHK8Tu81VfulFneq9XKm+GVSmP+X89xUDCUZblvczdz9z +/MrDM6f2KSnciUFSN0qeIrlrhiMvMs354Bc18Klt2URBkn6XtDtxRlFyBYSt6Ni uWTNSpg/2vE51/pew8eWgtNK/dO+Ha1P5olrFcASUugD+7KuqgYVIXAM2H2ej3CK JlhDNMsQFWLTk207qTT0um4XV8ExKr/xS1JokiIKwV+UOp6H+kjPuURmxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlWnfLp4S1UiHEdaRT/uwyzLCTdMB8GA1UdIwQY MBaAFPK7p8LQLeFIqp6PoJoceit3ChncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHJ1bnd0QXQ0VWlxbm8tZ21oeDZLM2NLR2R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85NTcxMDktMzg5Mi00ZGM0LTgxNmEt NWJkZDE0MmJhZTc0LzEvOHJ1bnd0QXQ0VWlxbm8tZ21oeDZLM2NLR2R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy85NTcxMDktMzg5Mi00ZGM0LTgxNmEtNWJkZDE0MmJhZTc0 LzEvOHJ1bnd0QXQ0VWlxbm8tZ21oeDZLM2NLR2R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXm8Eup7D 1cHR53C0LJovOQq5cEczj66gnJDRtPZw8oX+U62Fq7ZhEKyKJ6iLU+64CpV9g+nJ /YCzHEjfvkhcxU1DKdPBvYGW18keae8uLTStUJCGEK9Rkh2f47j/hYTL7BzCNLd4 lT1ZJiq/tMMFqo2DdmkouqBpcjrvAXUY7SbZYzQKvnewdmrLhI4AJTUg5RP39Foj U/CTEnKU8ZKOyXtHO57h9+YII+U+1IRxw+pphsYx/Fdd9zYrNzyXFDlgK9Z1GRtW w5s/qpq8BlAOET+6Eld0wzBENGzVVmt590HNYKpY5/Jdp7y9EEBet5TNxT5LEWH8 Ibgtw89iVYzQyw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:14:57 2025 by rpki-client