This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json) Hash identifier: M1BTQ78YvIaK8b9ebADsGpS1FNkBdZETvy9DHeNHNZs= Subject key identifier: EB:F0:CE:DD:19:24:AD:BB:B1:CE:93:4E:D0:E6:8A:51:B0:8A:BA:91 Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50 Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150 Certificate serial: 019AF19B682EBF223E4B7E9D83FB33ECD7E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft Manifest number: 0ECF Signing time: Sat 06 Dec 2025 03:01:25 +0000 Manifest this update: Sat 06 Dec 2025 03:01:25 +0000 Manifest next update: Sun 07 Dec 2025 03:01:25 +0000 Files and hashes: 1: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: gil7PDXBHdtRqh4aDDeq1BccheaLK5c1HAI2CI54Qog=) 2: YkEpFHQglRkkx7TW2iOd8M7ku-c.roa (hash: kIeQhyyEYB0FfxtFkPtqVvMk30nvPQUJg2CwKA7jeLY=) 3: uq0Ty9FTaErs0rzB7yOaaIcCy9E.roa (hash: cH522XBAhZQR4is+g9SDDOs+Uj5P/+RJANdH54+jdMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:68:2e:bf:22:3e:4b:7e:9d:83:fb:33:ec:d7:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150 Validity Not Before: Dec 6 03:01:25 2025 GMT Not After : Dec 7 03:01:25 2025 GMT Subject: CN=ebf0cedd1924adbbb1ce934ed0e68a51b08aba91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:13:05:be:0b:3d:6e:8f:54:8d:21:ee:a0:26: f7:c3:a1:c6:30:07:12:c9:2f:22:b3:81:27:2a:5c: 56:55:c3:73:02:7e:1d:9e:f2:32:2d:c7:45:9f:db: b6:23:8e:15:05:f1:44:8c:ce:2d:a7:1c:fe:ac:4a: 63:7e:35:6e:56:50:00:d0:1c:1e:5b:91:6d:5a:2e: 27:be:46:ec:be:0f:b1:3e:52:7b:9d:f8:5d:ce:cf: 86:d7:61:d2:97:16:76:82:9b:5b:06:7c:a9:df:45: c9:98:6b:84:83:64:48:34:d3:11:3b:38:48:67:eb: 06:d8:b4:36:ea:d1:59:63:b1:14:4d:7b:7b:f3:81: 85:34:f3:cd:ad:45:3b:dc:2e:a0:58:51:04:5f:58: 2d:14:c8:ee:5f:9a:48:58:c6:77:66:e1:f9:b9:33: ca:fd:e4:ba:27:b8:07:e4:30:58:1b:ac:bf:e8:9b: 4a:42:1a:85:69:6b:cf:84:1b:65:ef:95:a4:38:0b: ac:d1:2a:ad:c5:66:f2:3a:91:46:d5:bd:05:c4:0c: 00:dc:e9:c0:32:ef:77:48:be:36:b2:80:93:6c:4c: ad:01:54:a4:d3:60:62:ed:eb:cf:68:93:2d:28:84: 68:e8:f6:da:14:0e:c8:f0:15:3c:89:99:56:18:3f: 7e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F0:CE:DD:19:24:AD:BB:B1:CE:93:4E:D0:E6:8A:51:B0:8A:BA:91 X509v3 Authority Key Identifier: keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:fd:db:ec:ef:f8:7f:63:cb:bd:78:74:8d:49:3a:c5:c2:d3: a5:d4:ef:b4:c6:af:0b:8b:e5:d2:9d:c7:ac:f7:85:e3:e9:72: 6d:68:e9:bf:9b:84:2b:d4:c6:4e:ef:4f:1c:19:04:24:e1:87: 14:bd:e2:fc:7e:ee:01:06:80:ce:df:bb:82:ff:75:36:90:7f: 43:06:9e:43:ca:8c:91:c0:79:53:15:42:60:98:36:e1:74:26: c2:06:28:c6:ee:90:17:43:1b:ae:66:d5:d5:d5:4c:43:bd:28: 1a:68:83:89:8f:0c:08:eb:ed:28:90:5c:ad:13:19:b3:26:87: d0:fc:57:bc:c8:05:91:bc:d1:f8:53:87:7c:34:e6:18:48:97: 39:35:98:b8:94:53:e5:2b:0f:a5:b2:c2:69:67:dd:ea:fd:d1: c4:2c:bf:d0:6c:ec:9f:6d:fe:31:2f:49:28:e5:56:57:98:87: e5:bd:04:b0:f6:2e:5b:33:9a:68:c5:03:36:36:d1:c7:87:5f: f9:7c:32:cd:ee:21:ca:0b:f6:46:9b:d1:be:93:87:5e:56:48: 70:1d:74:55:03:1a:c9:f9:68:c6:1e:35:68:ac:90:e2:e1:dc: 09:5f:f4:75:bc:de:52:00:3f:88:13:f3:05:34:b5:29:83:69: 48:1c:55:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2guvyI+S36dg/sz7NfmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjkzMDg1YjVmNzVjMGYxMGRlMDhlMjJjYmU0YjA2MjQ1 MWIxNTAwHhcNMjUxMjA2MDMwMTI1WhcNMjUxMjA3MDMwMTI1WjAzMTEwLwYDVQQD EyhlYmYwY2VkZDE5MjRhZGJiYjFjZTkzNGVkMGU2OGE1MWIwOGFiYTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxMFvgs9bo9UjSHuoCb3w6HGMAcS yS8is4EnKlxWVcNzAn4dnvIyLcdFn9u2I44VBfFEjM4tpxz+rEpjfjVuVlAA0Bwe W5FtWi4nvkbsvg+xPlJ7nfhdzs+G12HSlxZ2gptbBnyp30XJmGuEg2RINNMROzhI Z+sG2LQ26tFZY7EUTXt784GFNPPNrUU73C6gWFEEX1gtFMjuX5pIWMZ3ZuH5uTPK /eS6J7gH5DBYG6y/6JtKQhqFaWvPhBtl75WkOAus0SqtxWbyOpFG1b0FxAwA3OnA Mu93SL42soCTbEytAVSk02Bi7evPaJMtKIRo6PbaFA7I8BU8iZlWGD9+gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvwzt0ZJK27sc6TTtDmilGwirqRMB8GA1UdIwQY MBaAFPJpMIW191wPEN4I4iy+SwYkUbFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNzMzMjctOTc0Mi00MzViLTg2YzAt NTVlODVlYTA5ZGRlLzEvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xNzMzMjctOTc0Mi00MzViLTg2YzAtNTVlODVlYTA5ZGRl LzEvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQv3b7O/4 f2PLvXh0jUk6xcLTpdTvtMavC4vl0p3HrPeF4+lybWjpv5uEK9TGTu9PHBkEJOGH FL3i/H7uAQaAzt+7gv91NpB/QwaeQ8qMkcB5UxVCYJg24XQmwgYoxu6QF0MbrmbV 1dVMQ70oGmiDiY8MCOvtKJBcrRMZsyaH0PxXvMgFkbzR+FOHfDTmGEiXOTWYuJRT 5SsPpbLCaWfd6v3RxCy/0Gzsn23+MS9JKOVWV5iH5b0EsPYuWzOaaMUDNjbRx4df +Xwyze4hygv2RpvRvpOHXlZIcB10VQMayfloxh41aKyQ4uHcCV/0dbzeUgA/iBPz BTS1KYNpSBxVoA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:31 2025 by rpki-client