This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft File: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft (raw, json) Hash identifier: xciN3UEykruX2VQ+lh3zJH0qo8wYQErunfpRK+lTFNU= Subject key identifier: 8B:51:D2:C8:B2:F6:C5:B7:81:F9:43:1E:48:5F:15:1F:12:C6:D9:E0 Authority key identifier: F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86 Certificate issuer: /CN=f12b381e00d61621acc45cf18a3e70597d5b9186 Certificate serial: 019AF12E58830532EAA0C737B3E952E8AE79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft Manifest number: 1401 Signing time: Sat 06 Dec 2025 01:02:17 +0000 Manifest this update: Sat 06 Dec 2025 01:02:17 +0000 Manifest next update: Sun 07 Dec 2025 01:02:17 +0000 Files and hashes: 1: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl (hash: s0LtRa2p79k5WRHPgPpIjaweQfipDM1m6ACNalobPVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:58:83:05:32:ea:a0:c7:37:b3:e9:52:e8:ae:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f12b381e00d61621acc45cf18a3e70597d5b9186 Validity Not Before: Dec 6 01:02:17 2025 GMT Not After : Dec 7 01:02:17 2025 GMT Subject: CN=8b51d2c8b2f6c5b781f9431e485f151f12c6d9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:26:99:55:04:ef:5c:db:2a:40:5f:21:fd:09: 35:07:85:f8:54:a4:ac:6a:19:af:b4:76:2a:66:39: db:a6:1d:f7:ed:94:e8:c4:bd:7b:2a:d8:b9:bd:70: 77:d3:c7:3d:0c:94:5a:de:3a:d9:c6:77:27:dc:c7: 72:a0:68:eb:f6:24:f4:51:e0:00:bd:69:67:e2:87: d8:34:1e:89:6f:8a:2c:c5:98:96:39:17:31:ae:47: f8:c2:ef:10:3e:3b:73:59:07:d1:2d:79:05:1c:4f: fb:6f:f6:0d:d2:45:e3:29:74:29:2b:9a:63:da:c6: 03:b6:d9:e6:b1:d8:b9:84:0f:0c:48:a3:eb:6e:16: 4b:b1:93:64:f8:9a:be:b1:fc:74:45:32:d0:0a:a6: 9b:6e:79:23:46:41:ec:e2:3a:1b:e3:3f:03:1a:16: a0:23:3e:27:c9:0d:69:ab:34:8a:bc:ca:87:e3:f0: bc:50:a4:52:35:6f:23:04:4e:28:e8:ec:6e:0c:9d: 04:48:24:6f:e1:8f:4c:65:68:dd:6f:48:19:65:df: 17:43:18:c1:fd:f9:bd:bf:b3:e3:d7:0c:66:8a:1c: 5b:38:fd:7f:6e:c6:ac:cb:b6:6e:28:8c:a4:66:e8: f0:7b:10:6d:d9:bd:6d:84:e7:8d:ad:e4:10:23:5f: cd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:51:D2:C8:B2:F6:C5:B7:81:F9:43:1E:48:5F:15:1F:12:C6:D9:E0 X509v3 Authority Key Identifier: keyid:F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:7d:2f:38:d0:41:72:7d:42:6d:3d:cb:9c:ad:1e:95:2d:8d: 9a:2d:fb:02:d6:7e:88:36:8a:75:74:cc:bc:76:ff:e0:2f:e4: b1:e0:4c:50:57:45:8a:fd:bc:b2:c6:fa:3e:52:92:37:c2:da: 6e:01:cb:0e:af:95:be:3d:b9:9f:a3:dc:47:a9:6f:bf:ae:33: bd:b5:b4:96:83:02:71:38:e0:e9:a1:2d:ff:0f:1c:0b:e5:f1: 46:2e:d3:e0:2c:45:43:a6:b9:fe:f8:72:f2:a9:5d:27:63:10: 10:8b:69:20:b6:59:34:9c:1c:cd:0e:e9:58:40:f6:47:f8:5d: 4d:e2:e7:dc:f3:ce:8f:1b:f2:03:59:5e:e2:d7:c7:40:41:c1: 2c:58:98:7e:e6:ad:7e:ef:87:21:1d:43:9a:cd:5d:99:91:d2: 85:d8:f6:46:7e:a7:5b:bf:0d:97:90:d9:ff:d4:ae:ba:e6:44: 7f:7c:2e:4e:96:08:cc:a0:9c:f5:69:64:cf:87:ab:33:31:a6: 6e:50:22:b3:9f:a1:f8:91:1b:63:cb:7a:80:ed:6c:60:6a:66: 01:b2:ed:20:73:a9:35:99:da:b5:45:f4:93:52:2e:74:64:92: 36:fa:0d:66:c5:b1:8c:10:98:b1:96:7d:64:03:14:9f:ca:a0: c7:b1:1d:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLliDBTLqoMc3s+lS6K55MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMmIzODFlMDBkNjE2MjFhY2M0NWNmMThhM2U3MDU5N2Q1 YjkxODYwHhcNMjUxMjA2MDEwMjE3WhcNMjUxMjA3MDEwMjE3WjAzMTEwLwYDVQQD Eyg4YjUxZDJjOGIyZjZjNWI3ODFmOTQzMWU0ODVmMTUxZjEyYzZkOWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSaZVQTvXNsqQF8h/Qk1B4X4VKSs ahmvtHYqZjnbph337ZToxL17Kti5vXB308c9DJRa3jrZxncn3MdyoGjr9iT0UeAA vWln4ofYNB6Jb4osxZiWORcxrkf4wu8QPjtzWQfRLXkFHE/7b/YN0kXjKXQpK5pj 2sYDttnmsdi5hA8MSKPrbhZLsZNk+Jq+sfx0RTLQCqabbnkjRkHs4job4z8DGhag Iz4nyQ1pqzSKvMqH4/C8UKRSNW8jBE4o6OxuDJ0ESCRv4Y9MZWjdb0gZZd8XQxjB /fm9v7Pj1wxmihxbOP1/bsasy7ZuKIykZujwexBt2b1thOeNreQQI1/NdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItR0siy9sW3gflDHkhfFR8SxtngMB8GA1UdIwQY MBaAFPErOB4A1hYhrMRc8Yo+cFl9W5GGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFNzNEhnRFdGaUdzeEZ6eGlqNXdXWDFia1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84YjJjOWYtMTVjZS00MzRlLWJlOTMt NWQ0MzZjZWY2MDhmLzEvOFNzNEhnRFdGaUdzeEZ6eGlqNXdXWDFia1lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS84YjJjOWYtMTVjZS00MzRlLWJlOTMtNWQ0MzZjZWY2MDhm LzEvOFNzNEhnRFdGaUdzeEZ6eGlqNXdXWDFia1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm30vONBB cn1CbT3LnK0elS2Nmi37AtZ+iDaKdXTMvHb/4C/kseBMUFdFiv28ssb6PlKSN8La bgHLDq+Vvj25n6PcR6lvv64zvbW0loMCcTjg6aEt/w8cC+XxRi7T4CxFQ6a5/vhy 8qldJ2MQEItpILZZNJwczQ7pWED2R/hdTeLn3PPOjxvyA1le4tfHQEHBLFiYfuat fu+HIR1Dms1dmZHShdj2Rn6nW78Nl5DZ/9SuuuZEf3wuTpYIzKCc9Wlkz4erMzGm blAis5+h+JEbY8t6gO1sYGpmAbLtIHOpNZnatUX0k1IudGSSNvoNZsWxjBCYsZZ9 ZAMUn8qgx7EddA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:44:00 2025 by rpki-client