This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft File: 8n7hjEY57qoWphkIzLRcepjV3Ws.mft (raw, json) Hash identifier: oe4v9Akxy5cP/KcGcW7EA7WiZHmuqNBJ51BN5G3W+OQ= Subject key identifier: 3B:0E:13:60:2C:32:8C:BA:B8:7A:DE:28:EB:1B:3A:41:36:44:55:61 Authority key identifier: F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B Certificate issuer: /CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b Certificate serial: 019AF2099CFF8E9AE632E6E89DED37F9AFA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:47 +0000 Manifest this update: Sat 06 Dec 2025 05:01:47 +0000 Manifest next update: Sun 07 Dec 2025 05:01:47 +0000 Files and hashes: 1: 8n7hjEY57qoWphkIzLRcepjV3Ws.crl (hash: qGxtjW+zsnlB4eXj/FieYpmaPOHFvVdpgSxMYh9J0g4=) 2: nqRXNoUiyTb4TmIe2_b86I-CG4w.roa (hash: uh5jetKJYfrnWeF7nxGsrvO4F6Y6S/Ud8IP3anKzhdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9c:ff:8e:9a:e6:32:e6:e8:9d:ed:37:f9:af:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b Validity Not Before: Dec 6 05:01:47 2025 GMT Not After : Dec 7 05:01:47 2025 GMT Subject: CN=3b0e13602c328cbab87ade28eb1b3a4136445561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a5:ea:6a:31:92:0b:6c:73:d8:6c:1d:1b:70: 83:25:0d:10:2e:ee:e3:6a:72:8f:fa:af:99:86:f9: 67:27:9c:da:27:11:ed:4e:2c:b7:37:f5:a5:50:a8: 1f:32:39:fa:13:42:bc:96:6f:67:c4:e8:4f:1b:48: d2:7d:d0:21:db:49:a6:be:6a:20:de:eb:5b:a7:09: c9:bc:ed:e1:21:5a:d0:62:7c:9c:28:03:10:e9:1c: ef:38:73:4a:dc:ae:ae:87:3e:d7:0f:e9:23:2e:00: 2c:ee:a0:3f:47:0b:3a:3e:13:76:bf:97:24:45:28: e6:9e:87:77:09:c6:e4:db:68:51:26:db:7b:d6:0b: aa:87:d8:6f:c6:e5:fa:c1:5b:0b:cb:42:95:02:b2: f2:db:05:3c:78:73:86:ee:bf:97:46:e4:07:bb:3e: 28:0b:ca:bd:0e:af:8b:52:35:47:2e:d2:4c:11:ef: aa:c3:54:b2:75:34:75:29:f1:6f:e5:8d:c5:fc:38: 3d:05:8f:17:c3:9b:35:a9:4e:a7:91:fe:f9:4d:ed: bc:bc:45:1b:2a:be:4c:c3:c4:d7:30:49:89:6f:a1: 7a:d2:43:1a:82:6b:b9:c1:72:6a:92:96:00:18:21: f9:30:49:00:5d:8d:8e:0b:f8:fd:e3:37:55:15:78: 54:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0E:13:60:2C:32:8C:BA:B8:7A:DE:28:EB:1B:3A:41:36:44:55:61 X509v3 Authority Key Identifier: keyid:F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:96:12:44:65:4c:a7:2c:8d:4e:c1:a4:83:9b:ec:df:cb:9a: 1c:70:8f:c2:ab:c1:49:56:0a:e8:8b:08:49:36:b3:f3:2f:bd: 2d:ba:17:e8:05:9f:c6:e6:fa:63:06:e4:ad:94:4d:57:94:93: 83:cb:6e:c7:c6:d6:62:9d:f9:68:8c:58:e5:e6:18:80:97:d2: 2c:db:bc:08:51:89:99:88:5b:99:73:ba:71:c0:24:05:d4:34: 3b:30:26:7f:e4:55:d3:b4:bf:b7:e6:40:fd:66:1a:92:a4:3a: 74:f5:88:d5:35:61:5d:00:15:d4:a3:c6:d5:9e:7e:ef:dd:ea: e5:55:d1:0e:e7:c8:96:ef:15:57:3a:f8:8d:79:f1:68:cf:a3: 1a:e7:07:96:d5:62:af:dc:b5:7c:22:3e:fb:32:19:3e:3d:2f: 86:8b:d8:21:6d:8d:b1:8c:f5:47:ad:64:ab:bb:8c:cd:c5:c5: 58:91:4d:d8:ef:40:17:98:58:b7:07:f7:96:a3:33:57:52:d5: 57:6b:4d:e7:27:c3:64:b0:f8:2f:6a:57:8f:14:9f:cd:7b:f8: 69:d2:8f:3f:a4:e2:8c:1d:45:d6:5e:7e:80:a3:9d:f3:2b:55: fd:d0:f6:87:e1:d7:8a:b6:6b:21:57:47:cb:6b:21:32:fb:3e: b9:ce:c9:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZz/jprmMubone03+a+pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyN2VlMThjNDYzOWVlYWExNmE2MTkwOGNjYjQ1YzdhOThk NWRkNmIwHhcNMjUxMjA2MDUwMTQ3WhcNMjUxMjA3MDUwMTQ3WjAzMTEwLwYDVQQD EygzYjBlMTM2MDJjMzI4Y2JhYjg3YWRlMjhlYjFiM2E0MTM2NDQ1NTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaXqajGSC2xz2GwdG3CDJQ0QLu7j anKP+q+ZhvlnJ5zaJxHtTiy3N/WlUKgfMjn6E0K8lm9nxOhPG0jSfdAh20mmvmog 3utbpwnJvO3hIVrQYnycKAMQ6RzvOHNK3K6uhz7XD+kjLgAs7qA/Rws6PhN2v5ck RSjmnod3Ccbk22hRJtt71guqh9hvxuX6wVsLy0KVArLy2wU8eHOG7r+XRuQHuz4o C8q9Dq+LUjVHLtJMEe+qw1SydTR1KfFv5Y3F/Dg9BY8Xw5s1qU6nkf75Te28vEUb Kr5Mw8TXMEmJb6F60kMagmu5wXJqkpYAGCH5MEkAXY2OC/j94zdVFXhU3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsOE2AsMoy6uHreKOsbOkE2RFVhMB8GA1UdIwQY MBaAFPJ+4YxGOe6qFqYZCMy0XHqY1d1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG43aGpFWTU3cW9XcGhrSXpMUmNlcGpWM1dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNThhMmEtMGYyNS00ODMxLWJiMDkt YTBkZDNiNWYxNWY4LzEvOG43aGpFWTU3cW9XcGhrSXpMUmNlcGpWM1dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9mNThhMmEtMGYyNS00ODMxLWJiMDktYTBkZDNiNWYxNWY4 LzEvOG43aGpFWTU3cW9XcGhrSXpMUmNlcGpWM1dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJYSRGVM pyyNTsGkg5vs38uaHHCPwqvBSVYK6IsISTaz8y+9LboX6AWfxub6YwbkrZRNV5ST g8tux8bWYp35aIxY5eYYgJfSLNu8CFGJmYhbmXO6ccAkBdQ0OzAmf+RV07S/t+ZA /WYakqQ6dPWI1TVhXQAV1KPG1Z5+793q5VXRDufIlu8VVzr4jXnxaM+jGucHltVi r9y1fCI++zIZPj0vhovYIW2NsYz1R61kq7uMzcXFWJFN2O9AF5hYtwf3lqMzV1LV V2tN5yfDZLD4L2pXjxSfzXv4adKPP6TijB1F1l5+gKOd8ytV/dD2h+HXirZrIVdH y2shMvs+uc7JHA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:31 2025 by rpki-client