This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft File: v8pT8KWH822Jqcq4K_WlA2xhQKI.mft (raw, json) Hash identifier: jIW8YLXF86UJk2C8deWVw3T542kZPjj2ryv4VJTaoSo= Subject key identifier: C4:D7:35:66:E6:75:9B:9A:19:FE:7E:83:D5:E7:B1:83:9C:AF:DB:F9 Authority key identifier: BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2 Certificate issuer: /CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2 Certificate serial: 019AF0BED8B19653EC480F424AC455742017 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 23:00:30 +0000 Manifest this update: Fri 05 Dec 2025 23:00:30 +0000 Manifest next update: Sat 06 Dec 2025 23:00:30 +0000 Files and hashes: 1: QDWmx_ik_mzSmaKaFjMrEYPMK6E.roa (hash: JZeZqTP/kJM8f2vw7vOLQj4DQbxRzuI8jkZc142sebw=) 2: v8pT8KWH822Jqcq4K_WlA2xhQKI.crl (hash: uaey/6YnyavOhcj/JM1zfKEXXN7w1fb7NNU9Ts0z8bA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:d8:b1:96:53:ec:48:0f:42:4a:c4:55:74:20:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2 Validity Not Before: Dec 5 23:00:30 2025 GMT Not After : Dec 6 23:00:30 2025 GMT Subject: CN=c4d73566e6759b9a19fe7e83d5e7b1839cafdbf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:93:36:ad:67:13:b6:97:80:04:6e:ef:d2:e0: 49:01:eb:06:96:38:72:b4:8a:7a:e7:79:8a:a4:97: ed:fe:81:a9:95:fc:bb:06:77:02:5b:00:a5:2c:69: 97:ae:e3:a7:5f:95:28:7e:ad:56:21:51:97:92:8c: f3:22:53:6d:d7:93:28:79:dd:5a:ce:f3:1f:b0:a6: c0:5d:c5:15:f8:88:24:9c:78:f9:b3:11:84:b3:33: 10:58:57:28:41:e0:55:8c:a1:bb:2c:4e:89:39:6d: c5:36:3b:69:c7:5d:af:be:bb:7c:b3:6a:8b:9e:a9: 6c:1a:92:13:75:6e:5b:5f:e7:2a:87:01:ea:14:36: 7f:1c:27:ee:0d:84:4b:98:5c:91:24:7a:f9:1d:d2: 33:58:6d:04:ea:97:b3:dc:cb:03:fb:7f:31:b7:2d: da:78:c8:dc:3c:9f:e5:59:a7:86:11:ae:78:f1:c4: 6d:bd:2f:2a:84:91:42:54:7e:ad:d0:ea:a6:95:cb: 76:25:9b:1d:86:44:6e:21:5d:72:60:a3:91:01:e0: 2c:95:78:88:d0:49:cd:7e:7c:58:c8:a8:d5:f9:3b: 39:df:54:71:38:6f:a4:d8:6b:3a:17:c1:d6:d9:0d: 71:fc:d6:ca:d5:fd:b3:dc:23:6a:d9:1e:80:6c:f4: a4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D7:35:66:E6:75:9B:9A:19:FE:7E:83:D5:E7:B1:83:9C:AF:DB:F9 X509v3 Authority Key Identifier: keyid:BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e8:7f:d8:18:c1:33:94:20:00:b4:6b:b5:63:d2:56:dc:17: a4:b0:34:00:c8:91:ac:6f:f1:24:76:ff:22:8d:41:30:0d:bc: 81:93:ca:32:d9:db:38:c2:9d:0a:6d:9c:a7:44:3e:4f:f1:3b: c0:aa:a8:cc:4d:18:10:6a:26:58:7c:8c:ef:05:e0:e7:b4:01: 80:ad:df:71:00:e1:15:1d:30:0e:bc:d8:ab:b7:7f:5d:09:1f: a9:d8:a7:f5:2e:16:d5:a7:a6:fd:c4:03:71:5f:47:1f:1f:81: c0:aa:b7:ff:2b:c1:5d:80:52:df:73:66:25:3f:9c:1e:4c:f4: e8:92:9e:4e:04:8e:e8:5b:84:e5:00:fd:a7:9d:37:c5:3e:3c: 8b:35:5c:b4:d2:3a:04:06:98:04:ab:51:dc:a9:d2:97:62:0c: e1:1b:a6:2b:4d:71:db:45:bf:ef:7f:4b:05:aa:84:44:d2:83: 17:b8:d1:73:ee:c4:db:66:15:53:03:a0:75:de:d5:4a:dd:cf: 44:6f:93:c3:cc:c8:46:74:ca:b2:7e:bd:e2:32:1c:9a:2e:f8: 72:0c:bc:e0:b2:2c:21:c0:27:eb:85:c5:4d:fb:4e:98:ad:79: 3b:9a:92:6d:94:55:95:88:0a:14:66:4f:16:34:75:b3:c8:b0: 36:b5:1f:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvtixllPsSA9CSsRVdCAXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmY2E1M2YwYTU4N2YzNmQ4OWE5Y2FiODJiZjVhNTAzNmM2 MTQwYTIwHhcNMjUxMjA1MjMwMDMwWhcNMjUxMjA2MjMwMDMwWjAzMTEwLwYDVQQD EyhjNGQ3MzU2NmU2NzU5YjlhMTlmZTdlODNkNWU3YjE4MzljYWZkYmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpM2rWcTtpeABG7v0uBJAesGljhy tIp653mKpJft/oGplfy7BncCWwClLGmXruOnX5Uofq1WIVGXkozzIlNt15Moed1a zvMfsKbAXcUV+IgknHj5sxGEszMQWFcoQeBVjKG7LE6JOW3FNjtpx12vvrt8s2qL nqlsGpITdW5bX+cqhwHqFDZ/HCfuDYRLmFyRJHr5HdIzWG0E6pez3MsD+38xty3a eMjcPJ/lWaeGEa548cRtvS8qhJFCVH6t0Oqmlct2JZsdhkRuIV1yYKORAeAslXiI 0EnNfnxYyKjV+Ts531RxOG+k2Gs6F8HW2Q1x/NbK1f2z3CNq2R6AbPSkvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTXNWbmdZuaGf5+g9XnsYOcr9v5MB8GA1UdIwQY MBaAFL/KU/Clh/NtianKuCv1pQNsYUCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjhwVDhLV0g4MjJKcWNxNEtfV2xBMnhoUUtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mYzEyZWMtM2VhYy00NDU1LTkxYzkt Zjk5YzRlNWMyOTUzLzEvdjhwVDhLV0g4MjJKcWNxNEtfV2xBMnhoUUtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mYzEyZWMtM2VhYy00NDU1LTkxYzktZjk5YzRlNWMyOTUz LzEvdjhwVDhLV0g4MjJKcWNxNEtfV2xBMnhoUUtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceh/2BjB M5QgALRrtWPSVtwXpLA0AMiRrG/xJHb/Io1BMA28gZPKMtnbOMKdCm2cp0Q+T/E7 wKqozE0YEGomWHyM7wXg57QBgK3fcQDhFR0wDrzYq7d/XQkfqdin9S4W1aem/cQD cV9HHx+BwKq3/yvBXYBS33NmJT+cHkz06JKeTgSO6FuE5QD9p503xT48izVctNI6 BAaYBKtR3KnSl2IM4RumK01x20W/739LBaqERNKDF7jRc+7E22YVUwOgdd7VSt3P RG+Tw8zIRnTKsn694jIcmi74cgy84LIsIcAn64XFTftOmK15O5qSbZRVlYgKFGZP FjR1s8iwNrUfhQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:59:56 2025 by rpki-client