This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft File: 8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json) Hash identifier: bs3jIGaYLr4DGHD9dfd3akf9FmP70uv8eYyuZsxNKV0= Subject key identifier: 8F:F7:CB:91:15:14:D5:14:F8:82:55:5E:B9:C3:1D:98:E2:E6:79:B1 Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03 Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103 Certificate serial: 019B3F7EC4E0A67D81B60F7C925C11CA604C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft Manifest number: 0F17 Signing time: Sun 21 Dec 2025 06:00:31 +0000 Manifest this update: Sun 21 Dec 2025 06:00:31 +0000 Manifest next update: Mon 22 Dec 2025 06:00:31 +0000 Files and hashes: 1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: EVHJsh9fVlBsaPv/agC0/mqOJsdyQIDKbD090jUeiPc=) 2: Nh04CLMcck1XHS9AATe9hyD29NE.roa (hash: KRd9oxirDVyH2M186/c3VQHXMTtIMq/vRs5kMb4jBs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:c4:e0:a6:7d:81:b6:0f:7c:92:5c:11:ca:60:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103 Validity Not Before: Dec 21 06:00:31 2025 GMT Not After : Dec 22 06:00:31 2025 GMT Subject: CN=8ff7cb911514d514f882555eb9c31d98e2e679b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f9:66:f5:29:58:4a:1b:64:f4:cf:7d:01:de: 8d:05:87:79:38:2b:71:ae:aa:60:29:60:06:b8:31: d7:df:3c:35:b0:20:5b:5d:84:a2:65:14:00:b8:b5: 5c:db:2f:eb:ac:14:dd:af:b8:e9:92:16:c9:51:2f: fd:a6:67:3a:bf:1b:d8:93:e3:a5:95:0d:58:22:e7: ca:d2:0e:f4:08:cd:be:c2:8c:22:4a:07:65:a4:1a: 8d:8b:b7:e4:f3:fb:e8:f1:63:2b:7a:a1:3e:74:2e: 2e:67:30:2a:b5:4a:f6:86:0e:02:26:38:2d:af:3b: e7:d8:77:25:05:cb:a2:64:53:52:d6:fa:06:8e:7b: 4f:90:ba:6c:f5:2f:65:65:2e:2b:b6:34:2e:2c:bc: 71:a9:f2:95:39:c2:41:e5:15:cf:97:c0:7b:ca:76: bb:75:13:43:44:27:52:63:bb:ce:74:37:f3:e2:3b: 24:04:2f:6a:f8:06:bc:d8:41:8c:0c:b0:46:14:67: a4:8d:d1:11:8c:f6:31:6c:de:e5:76:69:79:ef:64: d2:20:96:30:ca:22:3e:25:e0:b3:36:9a:4c:b0:36: c7:cc:23:b7:12:38:3c:f9:1c:a6:b1:19:f8:de:76: 78:26:20:96:61:26:35:24:35:40:76:5a:9a:1e:a1: d4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F7:CB:91:15:14:D5:14:F8:82:55:5E:B9:C3:1D:98:E2:E6:79:B1 X509v3 Authority Key Identifier: keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:08:f6:d0:c5:17:d6:ed:1a:a5:0f:db:31:e4:c7:6b:31:f8: 6b:bc:40:e5:31:80:bb:91:36:b9:04:6b:a3:80:ea:a7:16:92: f0:3a:f5:8d:15:f3:a5:f7:f6:01:b0:54:92:05:af:bf:d9:3f: e7:27:69:1d:52:d1:da:e9:99:40:af:3f:ab:5d:f7:b4:7f:46: 07:31:ca:04:7a:55:13:55:cd:39:48:da:13:82:a4:c4:e8:46: 14:89:21:ac:f7:0d:d9:20:10:87:df:69:4d:2a:06:75:87:0e: fc:f4:73:4d:03:51:93:18:d4:02:d6:a5:fb:f2:9b:63:e0:50: b6:71:2d:86:13:2a:ba:64:7f:18:52:58:de:de:bc:8a:cb:99: 5f:ec:70:60:75:84:c7:31:55:71:a6:3f:6a:43:9c:82:5f:d3: 80:52:90:af:3b:9b:d7:df:5e:75:25:30:c5:ce:b0:3c:d8:1a: 9a:63:17:a6:ec:74:12:ea:76:bc:59:f8:a0:41:8d:a0:ed:d0: 3c:12:55:ac:27:53:b1:70:b8:c5:b1:cf:ca:51:e1:6e:db:45: e4:06:83:7d:26:b4:80:90:75:7b:0b:89:58:31:fb:88:ea:2d: 03:32:13:1a:75:03:cf:8e:eb:74:2d:f2:0a:5d:10:a2:4a:7b: d0:41:b9:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fsTgpn2Btg98klwRymBMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZDVkZmRkZTRkNjc5YzcxMWNjZTA2ZWRmNDAzNmNhNGU1 Y2MxMDMwHhcNMjUxMjIxMDYwMDMxWhcNMjUxMjIyMDYwMDMxWjAzMTEwLwYDVQQD Eyg4ZmY3Y2I5MTE1MTRkNTE0Zjg4MjU1NWViOWMzMWQ5OGUyZTY3OWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArflm9SlYShtk9M99Ad6NBYd5OCtx rqpgKWAGuDHX3zw1sCBbXYSiZRQAuLVc2y/rrBTdr7jpkhbJUS/9pmc6vxvYk+Ol lQ1YIufK0g70CM2+wowiSgdlpBqNi7fk8/vo8WMreqE+dC4uZzAqtUr2hg4CJjgt rzvn2HclBcuiZFNS1voGjntPkLps9S9lZS4rtjQuLLxxqfKVOcJB5RXPl8B7yna7 dRNDRCdSY7vOdDfz4jskBC9q+Aa82EGMDLBGFGekjdERjPYxbN7ldml572TSIJYw yiI+JeCzNppMsDbHzCO3Ejg8+RymsRn43nZ4JiCWYSY1JDVAdlqaHqHUKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/3y5EVFNUU+IJVXrnDHZji5nmxMB8GA1UdIwQY MBaAFPDV393k1nnHEczgbt9ANspOXMEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mMmVjZjgtN2M1Yy00NWFiLTgzZjct ZTc0ZDQ0OTBhZjZjLzEvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9mMmVjZjgtN2M1Yy00NWFiLTgzZjctZTc0ZDQ0OTBhZjZj LzEvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwj20MUX 1u0apQ/bMeTHazH4a7xA5TGAu5E2uQRro4DqpxaS8Dr1jRXzpff2AbBUkgWvv9k/ 5ydpHVLR2umZQK8/q133tH9GBzHKBHpVE1XNOUjaE4KkxOhGFIkhrPcN2SAQh99p TSoGdYcO/PRzTQNRkxjUAtal+/KbY+BQtnEthhMqumR/GFJY3t68isuZX+xwYHWE xzFVcaY/akOcgl/TgFKQrzub199edSUwxc6wPNgammMXpux0Eup2vFn4oEGNoO3Q PBJVrCdTsXC4xbHPylHhbttF5AaDfSa0gJB1ewuJWDH7iOotAzITGnUDz47rdC3y Cl0Qokp70EG5uA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:18:05 2025 by rpki-client