This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft File: 8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json) Hash identifier: mFHOeydmQ5IxYYI/WQz9iF/gigIX7lxZ4WPbDkcLPjs= Subject key identifier: DB:F6:A5:F5:BF:EF:66:3E:47:CD:7B:B9:3D:E6:AB:A8:9C:0D:3F:28 Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37 Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137 Certificate serial: 019AF1645967ABDF4738155285A2EEA7A997 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft Manifest number: 12A2 Signing time: Sat 06 Dec 2025 02:01:16 +0000 Manifest this update: Sat 06 Dec 2025 02:01:16 +0000 Manifest next update: Sun 07 Dec 2025 02:01:16 +0000 Files and hashes: 1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: E0caw5MqLKapj5eXrhD6WcJJa8LVhxPgXCa93gRwUlQ=) 2: egJez3AEE17hCNzFwTYyy-yFWOk.roa (hash: tusTlSSqSFD7zKHlwWaKcKWcJ80R+Gl9wxxF6SdsjMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:59:67:ab:df:47:38:15:52:85:a2:ee:a7:a9:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137 Validity Not Before: Dec 6 02:01:16 2025 GMT Not After : Dec 7 02:01:16 2025 GMT Subject: CN=dbf6a5f5bfef663e47cd7bb93de6aba89c0d3f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b7:90:21:b0:2a:1e:2b:94:6f:1c:65:90:e1: 5d:1b:3e:3a:fb:df:3c:a5:bd:6f:5b:f5:ca:35:89: 28:43:cb:c2:82:6d:54:43:dc:c7:a0:cf:8e:ea:a5: 96:0b:10:92:8b:b9:36:70:ce:4b:b8:b2:4e:f6:6a: bc:90:37:ab:6a:4e:e6:12:d1:3d:1b:5f:7b:6d:bf: 90:9d:3c:3e:0a:be:0e:f4:77:da:58:3a:8b:0c:87: 19:39:e3:0d:9c:71:91:64:30:96:7c:50:fa:35:6a: 6e:30:d3:29:32:0f:3c:f7:a7:17:07:6f:23:2c:21: 3c:97:79:8f:7c:24:b2:45:69:f9:2d:4d:0d:53:a2: e3:cd:d1:30:e1:2b:6d:5b:39:7a:09:89:d2:0a:1f: 30:62:eb:5f:a4:fd:7e:17:9e:48:04:1d:20:93:b1: c1:b7:98:67:bb:c1:2d:f9:ac:db:f2:ee:61:0c:f9: 50:6e:0b:76:4e:77:05:b9:a3:29:cc:7f:89:2e:9d: 14:32:37:e8:97:ed:21:82:63:6b:ff:e6:00:81:3d: a0:0d:b5:20:e9:4f:c5:4e:fd:b1:2f:9f:2f:9c:06: ef:72:24:e3:61:c8:5e:6d:46:89:86:67:c0:d8:61: 0c:6f:b1:a2:21:bb:7c:ba:91:9a:ea:83:ce:f7:12: 6d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F6:A5:F5:BF:EF:66:3E:47:CD:7B:B9:3D:E6:AB:A8:9C:0D:3F:28 X509v3 Authority Key Identifier: keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:94:0a:73:48:17:32:eb:bb:61:39:63:0d:25:a8:6b:da:f4: 50:ec:01:c0:81:b9:8c:7e:8c:df:59:eb:ab:a3:60:67:7c:1d: 69:4b:34:6e:ba:f1:2e:c4:15:e3:3c:0c:f6:6d:42:75:e8:44: 75:99:48:59:da:69:eb:a3:2d:0c:76:a1:d1:2d:b8:0f:2f:15: 9c:89:0c:bd:0a:64:3e:72:ff:b2:e5:37:21:8e:d9:b9:5e:df: 1b:45:d1:da:e2:88:b2:1a:98:b4:90:14:5d:9b:53:60:c2:a7: fd:cb:82:5d:87:65:76:7e:90:4d:8e:1a:da:03:4e:10:5c:12: 2f:bb:d5:9c:a3:ff:04:6f:18:49:52:31:c4:65:99:5f:58:b1: 4a:41:fb:91:6d:4a:21:8f:10:00:1a:ce:1d:af:8c:e0:23:19: 70:cc:ea:1a:b6:43:1b:1a:1d:8d:23:19:3a:da:f5:6c:d9:fe: a7:2e:23:2b:9f:d2:f2:d7:d9:f9:5d:41:29:12:45:6c:eb:d4: f2:bd:63:66:84:58:89:25:9f:e6:4a:7f:ed:1d:ce:04:1a:1b: 60:7c:fd:2d:3a:57:d6:cf:78:91:67:34:0f:b4:82:b8:4a:b9: c2:b3:62:22:ef:ae:65:0c:8f:6a:87:b9:8f:00:7e:5e:a8:57: 85:a6:33:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFlnq99HOBVShaLup6mXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYjI4ZDZhYzZlYzQwZGZiMjJmOTZmN2I1NTYxNjljMDQ5 OTAxMzcwHhcNMjUxMjA2MDIwMTE2WhcNMjUxMjA3MDIwMTE2WjAzMTEwLwYDVQQD EyhkYmY2YTVmNWJmZWY2NjNlNDdjZDdiYjkzZGU2YWJhODljMGQzZjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4beQIbAqHiuUbxxlkOFdGz46+988 pb1vW/XKNYkoQ8vCgm1UQ9zHoM+O6qWWCxCSi7k2cM5LuLJO9mq8kDerak7mEtE9 G197bb+QnTw+Cr4O9HfaWDqLDIcZOeMNnHGRZDCWfFD6NWpuMNMpMg8896cXB28j LCE8l3mPfCSyRWn5LU0NU6LjzdEw4SttWzl6CYnSCh8wYutfpP1+F55IBB0gk7HB t5hnu8Et+azb8u5hDPlQbgt2TncFuaMpzH+JLp0UMjfol+0hgmNr/+YAgT2gDbUg 6U/FTv2xL58vnAbvciTjYchebUaJhmfA2GEMb7GiIbt8upGa6oPO9xJtrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNv2pfW/72Y+R817uT3mq6icDT8oMB8GA1UdIwQY MBaAFPCyjWrG7EDfsi+W97VWFpwEmQE3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOExLTmFzYnNRTi15TDViM3RWWVduQVNaQVRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81Y2U3ZjctZTBmZS00MzYxLTgyYzIt NDc0NjU5ZWRiMzYxLzEvOExLTmFzYnNRTi15TDViM3RWWVduQVNaQVRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81Y2U3ZjctZTBmZS00MzYxLTgyYzItNDc0NjU5ZWRiMzYx LzEvOExLTmFzYnNRTi15TDViM3RWWVduQVNaQVRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZQKc0gX Muu7YTljDSWoa9r0UOwBwIG5jH6M31nrq6NgZ3wdaUs0brrxLsQV4zwM9m1CdehE dZlIWdpp66MtDHah0S24Dy8VnIkMvQpkPnL/suU3IY7ZuV7fG0XR2uKIshqYtJAU XZtTYMKn/cuCXYdldn6QTY4a2gNOEFwSL7vVnKP/BG8YSVIxxGWZX1ixSkH7kW1K IY8QABrOHa+M4CMZcMzqGrZDGxodjSMZOtr1bNn+py4jK5/S8tfZ+V1BKRJFbOvU 8r1jZoRYiSWf5kp/7R3OBBobYHz9LTpX1s94kWc0D7SCuEq5wrNiIu+uZQyPaoe5 jwB+XqhXhaYzuw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:11 2025 by rpki-client