This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft File: 8qsLWFucOWKI0g6c9mWuHeOfeDM.mft (raw, json) Hash identifier: 5LPuBgzXSrxnb7Z0Mvrz/DdoGhbE1bqQsZPWWTElfmY= Subject key identifier: 7D:57:C2:2C:72:50:B0:F2:F9:7B:9C:A0:4C:9A:F3:12:3B:8E:5C:42 Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33 Certificate issuer: /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833 Certificate serial: 019AF1D2455A352D03ACC2DDD7498E781984 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 04:01:20 +0000 Manifest this update: Sat 06 Dec 2025 04:01:20 +0000 Manifest next update: Sun 07 Dec 2025 04:01:20 +0000 Files and hashes: 1: 8qsLWFucOWKI0g6c9mWuHeOfeDM.crl (hash: uPpAAG3m9PPHC0eFlq+QCadumdJ8QgEiwSn2v3jDRpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:45:5a:35:2d:03:ac:c2:dd:d7:49:8e:78:19:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833 Validity Not Before: Dec 6 04:01:20 2025 GMT Not After : Dec 7 04:01:20 2025 GMT Subject: CN=7d57c22c7250b0f2f97b9ca04c9af3123b8e5c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9d:17:e2:f6:66:a5:e3:52:6f:f5:39:93:88: c2:e3:be:2d:4f:5b:61:df:c0:1e:d0:66:e6:a5:28: b7:22:b7:c5:d9:36:6b:e4:24:a7:0e:b8:a5:42:88: 67:7f:10:dd:1c:27:18:b1:5a:e3:59:cf:5c:a7:cc: 68:c3:77:ef:0e:d2:ea:98:f4:c1:ec:b6:ca:bd:c4: ef:6c:e4:4b:6c:32:ea:be:c2:65:61:d0:33:b0:de: cb:0e:89:c5:9f:1e:63:a2:05:53:ca:4d:7c:36:30: 22:9d:a6:b1:d0:fc:23:6d:81:b2:00:2c:c4:ce:67: 24:f1:b1:ad:a0:41:34:16:83:4a:89:a6:d0:6d:b2: b5:bf:81:27:4d:08:19:22:dd:d0:e5:0a:dc:23:50: 79:4d:20:56:a1:94:63:dc:78:66:31:3d:7b:f3:bd: 8d:af:11:ac:b3:7f:22:ec:74:d3:77:8b:38:2a:39: 6c:35:cc:bb:45:ba:49:49:2f:50:a5:a1:12:43:4b: b2:6d:1c:d6:c9:ef:1b:78:bb:88:c9:bb:37:1a:50: 02:6a:b8:f3:75:fd:3c:1b:1f:d3:09:c2:4a:e2:c6: 90:45:3c:0c:36:16:a6:55:7f:3a:b0:b4:fb:08:39: fd:b6:d5:06:eb:fb:e1:57:af:08:96:f7:27:ec:96: b4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:57:C2:2C:72:50:B0:F2:F9:7B:9C:A0:4C:9A:F3:12:3B:8E:5C:42 X509v3 Authority Key Identifier: keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:1d:98:6f:c3:21:95:06:64:19:ae:31:fa:98:33:5b:e0:c4: ee:e3:15:bf:02:2c:fc:0a:2d:95:12:98:87:49:c4:6f:fc:2d: 0b:2b:da:85:5a:25:9c:72:e2:2b:75:50:dc:4a:d3:10:2b:32: d2:8b:0d:b8:82:fc:c8:aa:3d:92:41:d1:7c:d9:ae:ff:5b:7c: 6f:46:d6:2a:7e:d9:32:c5:c1:a1:6e:18:99:32:62:7c:37:16: 4b:bd:ab:26:85:7d:b9:c4:0e:e1:0e:2e:aa:c1:ed:a4:d1:92: 38:e2:84:b4:e0:b0:2d:5e:34:83:eb:a7:ef:e1:8b:2d:1a:89: b4:5d:55:df:82:55:f8:75:63:95:d2:7f:86:2f:f9:9e:13:31: 50:26:d7:db:94:cf:1d:52:54:1b:3a:a9:21:bb:2f:35:b6:c5: 21:ec:0f:e0:cb:77:6d:43:42:b3:7a:e2:b1:8d:55:dc:72:d8: 52:04:e1:f5:ad:77:88:90:aa:62:43:3f:e5:56:f5:57:95:03: 2f:0d:9b:cb:10:18:ae:de:35:61:f5:fc:a1:c2:e2:3a:b3:00: a4:79:6d:e2:8f:6c:58:c9:0e:c4:67:f0:d6:a3:16:e2:5e:4b: c2:83:d4:45:22:b5:ff:7d:6b:6b:06:19:dc:24:f5:e9:2d:c7: f2:63:e6:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kVaNS0DrMLd10mOeBmEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYWIwYjU4NWI5YzM5NjI4OGQyMGU5Y2Y2NjVhZTFkZTM5 Zjc4MzMwHhcNMjUxMjA2MDQwMTIwWhcNMjUxMjA3MDQwMTIwWjAzMTEwLwYDVQQD Eyg3ZDU3YzIyYzcyNTBiMGYyZjk3YjljYTA0YzlhZjMxMjNiOGU1YzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8p0X4vZmpeNSb/U5k4jC474tT1th 38Ae0GbmpSi3IrfF2TZr5CSnDrilQohnfxDdHCcYsVrjWc9cp8xow3fvDtLqmPTB 7LbKvcTvbORLbDLqvsJlYdAzsN7LDonFnx5jogVTyk18NjAinaax0PwjbYGyACzE zmck8bGtoEE0FoNKiabQbbK1v4EnTQgZIt3Q5QrcI1B5TSBWoZRj3HhmMT17872N rxGss38i7HTTd4s4KjlsNcy7RbpJSS9QpaESQ0uybRzWye8beLuIybs3GlACarjz df08Gx/TCcJK4saQRTwMNhamVX86sLT7CDn9ttUG6/vhV68Ilvcn7Ja0pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1XwixyULDy+XucoEya8xI7jlxCMB8GA1UdIwQY MBaAFPKrC1hbnDliiNIOnPZlrh3jn3gzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iYmZhMTktZGViYy00Yzc3LThkNjMt OTA4YjI1MGNiYTc5LzEvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9iYmZhMTktZGViYy00Yzc3LThkNjMtOTA4YjI1MGNiYTc5 LzEvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABh2Yb8Mh lQZkGa4x+pgzW+DE7uMVvwIs/AotlRKYh0nEb/wtCyvahVolnHLiK3VQ3ErTECsy 0osNuIL8yKo9kkHRfNmu/1t8b0bWKn7ZMsXBoW4YmTJifDcWS72rJoV9ucQO4Q4u qsHtpNGSOOKEtOCwLV40g+un7+GLLRqJtF1V34JV+HVjldJ/hi/5nhMxUCbX25TP HVJUGzqpIbsvNbbFIewP4Mt3bUNCs3risY1V3HLYUgTh9a13iJCqYkM/5Vb1V5UD Lw2byxAYrt41YfX8ocLiOrMApHlt4o9sWMkOxGfw1qMW4l5LwoPURSK1/31rawYZ 3CT16S3H8mPm0g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:38 2025 by rpki-client