This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json) Hash identifier: pP9dZlwX+XiBYfpPz+J4m3HiClImGED3tU1UwwparfY= Subject key identifier: 56:76:E0:BF:9F:A7:FB:0B:AC:E4:F8:2B:BF:EB:B6:10:99:44:94:F8 Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0 Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0 Certificate serial: 019AF12E255825EA02B06105ED41388AEE04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft Manifest number: 1025 Signing time: Sat 06 Dec 2025 01:02:04 +0000 Manifest this update: Sat 06 Dec 2025 01:02:04 +0000 Manifest next update: Sun 07 Dec 2025 01:02:04 +0000 Files and hashes: 1: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: Fc6kI293a64LWRcd8UnL2tdcShycNeCY56bT6UWVFD0=) 2: FSVMQ4pJCPFoKLSJXQ6SN5sd20I.roa (hash: fn+/BnxEhFcy9tBiYyHkUVxuspdk8dmiFltXF8v88aI=) 3: Z9i6om7Xm-VJTFYr4Gx0uAR_icw.roa (hash: ANNmvdhb68U9bMYUn5YDoB+t5R72eGhNlvH1jCjqt5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:25:58:25:ea:02:b0:61:05:ed:41:38:8a:ee:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0 Validity Not Before: Dec 6 01:02:04 2025 GMT Not After : Dec 7 01:02:04 2025 GMT Subject: CN=5676e0bf9fa7fb0bace4f82bbfebb610994494f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:19:45:bb:e4:db:0b:23:1a:ec:d1:dc:9c:9d: d2:76:e8:cd:54:07:f6:ff:43:cb:eb:db:29:f8:2a: 52:f6:28:64:bb:36:1b:03:e4:23:76:87:71:43:54: af:f8:85:4e:14:c7:c8:1e:e5:4b:90:89:2c:bf:97: ef:db:4f:8d:45:25:16:cb:5f:4b:13:8c:2f:da:4c: 9d:12:af:e0:7f:62:83:32:61:56:0d:96:de:1f:a1: 00:b3:ee:45:59:3e:26:50:81:6d:65:a7:29:34:ed: cb:d5:fc:4c:c3:42:de:a6:86:b7:7f:02:c8:a4:ac: 5e:2a:8a:33:9f:d2:b8:fe:21:15:fd:c6:ae:51:be: 6b:45:93:67:dc:b8:61:91:12:8e:96:db:98:ee:3e: c1:25:ed:8e:cb:ad:d8:84:61:6e:c5:ba:18:1c:85: 54:0d:91:a5:5b:c5:73:5e:0b:57:f1:4f:78:7b:01: c2:60:7f:4b:52:bd:41:ec:ac:22:29:65:f3:62:16: d6:74:d1:74:d8:aa:5d:97:eb:45:a2:37:a7:28:b0: 8b:22:16:7b:83:5f:2e:43:f2:c0:81:f5:e7:aa:7c: 3d:ec:29:c3:5a:20:6f:04:23:6c:0e:19:3d:cf:e6: bd:62:b4:92:f2:25:34:1f:8e:ed:97:5a:60:71:e9: 06:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:76:E0:BF:9F:A7:FB:0B:AC:E4:F8:2B:BF:EB:B6:10:99:44:94:F8 X509v3 Authority Key Identifier: keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:0b:e2:31:82:95:cf:0d:f3:36:3c:ce:9c:da:97:f8:aa:2d: 86:29:6e:e6:58:b6:8d:73:69:16:cd:20:c3:d7:03:43:81:13: 2e:e7:fe:b7:d5:45:db:bd:36:14:e3:44:a0:ee:4d:7b:46:d1: 2c:60:e0:a2:c6:fb:48:5c:47:40:54:4c:e1:83:8c:32:bc:70: 8a:0b:18:fd:7c:30:af:78:c9:12:54:bb:e8:48:00:c0:62:24: da:85:6e:c1:47:d4:b1:ab:d7:ff:38:0f:1c:81:5e:3c:61:c9: a8:bd:6d:9a:71:50:e4:dd:77:12:42:7f:4b:06:dc:db:40:d7: 09:c6:fb:eb:87:ca:ae:e6:2f:b5:c6:b2:8d:0a:23:c2:7c:08: dd:f8:66:eb:3b:e4:cd:6f:bb:ee:56:9e:a5:c1:0b:d9:62:52: 3b:30:86:8d:cc:c9:bc:02:c7:ce:dc:79:11:81:89:19:de:d3: 9b:b5:ca:6f:3d:c4:0a:5f:b2:b8:e9:1e:8f:c3:3a:ad:f1:ef: 2a:a2:f4:cf:c8:49:98:07:60:12:95:ca:4a:49:bc:64:16:cd: 20:62:07:8d:ee:25:89:0b:11:0d:98:28:6e:a1:f4:7f:3b:04: d5:b5:a0:5f:6d:a2:36:3c:83:b8:eb:6b:29:c0:6d:41:02:55: 56:12:e1:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiVYJeoCsGEF7UE4iu4EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwOGZiYTUyNjM1MTliN2MzYTIxNTVjNjk4NzgyMTc3NzZk ZWZiYTAwHhcNMjUxMjA2MDEwMjA0WhcNMjUxMjA3MDEwMjA0WjAzMTEwLwYDVQQD Eyg1Njc2ZTBiZjlmYTdmYjBiYWNlNGY4MmJiZmViYjYxMDk5NDQ5NGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBlFu+TbCyMa7NHcnJ3SdujNVAf2 /0PL69sp+CpS9ihkuzYbA+QjdodxQ1Sv+IVOFMfIHuVLkIksv5fv20+NRSUWy19L E4wv2kydEq/gf2KDMmFWDZbeH6EAs+5FWT4mUIFtZacpNO3L1fxMw0Lepoa3fwLI pKxeKoozn9K4/iEV/cauUb5rRZNn3LhhkRKOltuY7j7BJe2Oy63YhGFuxboYHIVU DZGlW8VzXgtX8U94ewHCYH9LUr1B7KwiKWXzYhbWdNF02Kpdl+tFojenKLCLIhZ7 g18uQ/LAgfXnqnw97CnDWiBvBCNsDhk9z+a9YrSS8iU0H47tl1pgcekG9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZ24L+fp/sLrOT4K7/rthCZRJT4MB8GA1UdIwQY MBaAFPCPulJjUZt8OiFVxph4IXd23vugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xYmIxYTItNjc2My00YjI0LWFkODgt MDY0MTNjZWVmY2UwLzEvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8xYmIxYTItNjc2My00YjI0LWFkODgtMDY0MTNjZWVmY2Uw LzEvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAviMYKV zw3zNjzOnNqX+Kothilu5li2jXNpFs0gw9cDQ4ETLuf+t9VF2702FONEoO5Ne0bR LGDgosb7SFxHQFRM4YOMMrxwigsY/Xwwr3jJElS76EgAwGIk2oVuwUfUsavX/zgP HIFePGHJqL1tmnFQ5N13EkJ/Swbc20DXCcb764fKruYvtcayjQojwnwI3fhm6zvk zW+77laepcEL2WJSOzCGjczJvALHztx5EYGJGd7Tm7XKbz3ECl+yuOkej8M6rfHv KqL0z8hJmAdgEpXKSkm8ZBbNIGIHje4liQsRDZgobqH0fzsE1bWgX22iNjyDuOtr KcBtQQJVVhLhDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:02 2025 by rpki-client