This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft File: __8PpR5pOdAdyqK7PV3KptAEPaI.mft (raw, json) Hash identifier: I18E2/W3ehXG5yxTlgLE+xQsLvrOxWVyNWyIzmDxAFM= Subject key identifier: 11:BD:BE:6F:FA:C0:D0:38:1D:71:26:41:1E:A8:2B:D4:2E:2B:58:6A Authority key identifier: FF:FF:0F:A5:1E:69:39:D0:1D:CA:A2:BB:3D:5D:CA:A6:D0:04:3D:A2 Certificate issuer: /CN=ffff0fa51e6939d01dcaa2bb3d5dcaa6d0043da2 Certificate serial: 019AF0BF60A1007F6AC830AAE290E7504DD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 23:01:05 +0000 Manifest this update: Fri 05 Dec 2025 23:01:05 +0000 Manifest next update: Sat 06 Dec 2025 23:01:05 +0000 Files and hashes: 1: __8PpR5pOdAdyqK7PV3KptAEPaI.crl (hash: jH1Gm5HpPAvsXZ1scsjRI0HYD1dszixKcMUIhywRObg=) 2: q2RHTYlkcDgCjrfVNvYYh8gtuZ0.roa (hash: rnMDx8HFmMRUD1wSEEKi54fuapDGJDZJ6EgL5LNncSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:60:a1:00:7f:6a:c8:30:aa:e2:90:e7:50:4d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffff0fa51e6939d01dcaa2bb3d5dcaa6d0043da2 Validity Not Before: Dec 5 23:01:05 2025 GMT Not After : Dec 6 23:01:05 2025 GMT Subject: CN=11bdbe6ffac0d0381d7126411ea82bd42e2b586a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a3:b5:e1:dc:9b:eb:d3:28:36:73:d5:c5:8c: 02:d4:e8:c3:46:da:87:0a:f1:e1:df:a7:6b:fd:7b: b8:0a:50:1e:70:a0:2a:bb:8f:ef:41:2b:8a:a2:81: 19:42:56:c6:2e:05:c2:31:e4:a9:78:70:ee:47:69: 50:32:ba:79:88:ee:c6:fe:00:19:18:77:83:b0:03: f8:b2:19:54:b5:e9:70:67:e2:1a:4c:ba:e5:4e:e7: 7a:9f:56:55:79:ca:e9:ff:c0:eb:22:e9:91:aa:93: 52:14:90:3f:70:a0:7f:5c:ed:c3:0f:a4:d0:dd:26: 74:eb:df:45:4b:fe:d0:b4:27:10:95:cf:02:61:4b: 1a:e6:9e:fc:f0:70:b8:fe:66:1c:ae:3a:9d:b0:07: f4:d2:3b:93:4f:c5:48:75:71:55:2e:80:55:15:49: 3e:8d:7f:39:01:4f:54:d5:c0:4d:a1:79:be:e5:38: 84:5f:4e:42:92:9e:ab:ca:85:83:53:48:90:0b:3b: ca:b5:76:68:a9:d5:99:15:60:63:57:4b:63:f8:f9: e0:e5:6f:1a:d9:b7:01:a1:b4:60:5a:7e:4b:b0:30: df:08:6f:bd:55:58:d7:f4:ab:33:bc:fc:ed:a6:6f: 7b:f3:a1:c5:a9:de:8c:15:90:44:5f:dc:8c:28:57: 1f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BD:BE:6F:FA:C0:D0:38:1D:71:26:41:1E:A8:2B:D4:2E:2B:58:6A X509v3 Authority Key Identifier: keyid:FF:FF:0F:A5:1E:69:39:D0:1D:CA:A2:BB:3D:5D:CA:A6:D0:04:3D:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:0b:c7:93:7e:ce:e1:08:9f:f1:6c:af:78:91:42:c7:e7:d4: 9e:27:78:93:88:a7:d1:06:81:6c:0a:e9:cc:5b:f9:c2:9e:38: 93:52:30:3a:39:a7:c3:05:dc:ab:2f:2c:86:29:98:0b:15:7e: 4c:08:b8:d7:70:26:f4:f0:9b:e4:3e:79:73:ad:03:dd:f0:d6: 19:47:58:46:69:25:67:86:6e:0f:f7:0c:79:31:51:40:0c:5f: 75:7d:dd:a3:8a:4a:b8:c5:3a:2b:5f:03:67:a7:95:b3:0c:58: e5:30:e0:e0:6c:d0:ae:eb:b6:17:3c:39:67:73:41:6a:59:a5: d2:c0:f3:dd:60:23:52:22:94:b6:b1:2e:7c:3d:90:4d:96:44: 63:78:8f:37:55:4f:c0:d0:aa:30:4a:5d:c8:8a:6c:2c:36:05: d9:0b:dc:af:ca:48:80:2d:01:9e:79:4b:1b:15:be:82:91:21: 3f:f3:3d:f2:a8:66:29:a3:df:3d:3a:fc:78:79:20:3d:33:a8: 9d:94:fe:5e:63:6f:8c:67:55:1d:01:a2:01:37:0c:bb:df:1f: 64:24:95:9d:30:39:28:e2:0f:35:6b:81:7f:12:05:8f:8a:42: 1b:54:30:75:c8:9b:07:f7:b3:42:b0:c4:96:ad:ac:10:1a:7c: 84:25:f4:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv2ChAH9qyDCq4pDnUE3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZmYwZmE1MWU2OTM5ZDAxZGNhYTJiYjNkNWRjYWE2ZDAw NDNkYTIwHhcNMjUxMjA1MjMwMTA1WhcNMjUxMjA2MjMwMTA1WjAzMTEwLwYDVQQD EygxMWJkYmU2ZmZhYzBkMDM4MWQ3MTI2NDExZWE4MmJkNDJlMmI1ODZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaO14dyb69MoNnPVxYwC1OjDRtqH CvHh36dr/Xu4ClAecKAqu4/vQSuKooEZQlbGLgXCMeSpeHDuR2lQMrp5iO7G/gAZ GHeDsAP4shlUtelwZ+IaTLrlTud6n1ZVecrp/8DrIumRqpNSFJA/cKB/XO3DD6TQ 3SZ0699FS/7QtCcQlc8CYUsa5p788HC4/mYcrjqdsAf00juTT8VIdXFVLoBVFUk+ jX85AU9U1cBNoXm+5TiEX05Ckp6ryoWDU0iQCzvKtXZoqdWZFWBjV0tj+Png5W8a 2bcBobRgWn5LsDDfCG+9VVjX9KszvPztpm9786HFqd6MFZBEX9yMKFcf8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBG9vm/6wNA4HXEmQR6oK9QuK1hqMB8GA1UdIwQY MBaAFP//D6UeaTnQHcqiuz1dyqbQBD2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX184UHBSNXBPZEFkeXFLN1BWM0twdEFFUGFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85Y2I2YjUtN2E1My00MDZmLWFmN2Et MTdjMzhkOWMzNzY4LzEvX184UHBSNXBPZEFkeXFLN1BWM0twdEFFUGFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS85Y2I2YjUtN2E1My00MDZmLWFmN2EtMTdjMzhkOWMzNzY4 LzEvX184UHBSNXBPZEFkeXFLN1BWM0twdEFFUGFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgvHk37O 4Qif8WyveJFCx+fUnid4k4in0QaBbArpzFv5wp44k1IwOjmnwwXcqy8shimYCxV+ TAi413Am9PCb5D55c60D3fDWGUdYRmklZ4ZuD/cMeTFRQAxfdX3do4pKuMU6K18D Z6eVswxY5TDg4GzQruu2Fzw5Z3NBalml0sDz3WAjUiKUtrEufD2QTZZEY3iPN1VP wNCqMEpdyIpsLDYF2Qvcr8pIgC0BnnlLGxW+gpEhP/M98qhmKaPfPTr8eHkgPTOo nZT+XmNvjGdVHQGiATcMu98fZCSVnTA5KOIPNWuBfxIFj4pCG1QwdcibB/ezQrDE lq2sEBp8hCX0HQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:27 2025 by rpki-client