This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft File: 8l2dskSP6XudF6RL5dZEhI-gGOE.mft (raw, json) Hash identifier: lSaSTRxKdMZjOOGN58T2JzA0AC+v+NrP8JN4xJ65h/Y= Subject key identifier: 03:B3:F0:EE:71:FF:11:20:6B:A5:8F:81:F0:9D:9D:17:3B:7B:02:B6 Authority key identifier: F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1 Certificate issuer: /CN=f25d9db2448fe97b9d17a44be5d644848fa018e1 Certificate serial: 019AF12E2098592BE32BCC02141EE216E363 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:02:03 +0000 Manifest this update: Sat 06 Dec 2025 01:02:03 +0000 Manifest next update: Sun 07 Dec 2025 01:02:03 +0000 Files and hashes: 1: 8l2dskSP6XudF6RL5dZEhI-gGOE.crl (hash: HkSoeVhetnYYWXMDkRddK9/ZToaIk3dZZBMAIaPsC3g=) 2: Mp26SDBIvgVqZ2UGJotoJUFrQYY.roa (hash: EI7XvBXkkd55hdBHcnfva3vB3xf9LKxoCK2MkhKmBG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:20:98:59:2b:e3:2b:cc:02:14:1e:e2:16:e3:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f25d9db2448fe97b9d17a44be5d644848fa018e1 Validity Not Before: Dec 6 01:02:03 2025 GMT Not After : Dec 7 01:02:03 2025 GMT Subject: CN=03b3f0ee71ff11206ba58f81f09d9d173b7b02b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:eb:c0:18:71:91:8e:7a:4c:98:89:99:95:fa: fc:5f:8b:93:42:0e:07:10:cb:fa:2d:0f:26:46:ae: d6:ad:d3:f9:02:6b:62:3e:63:1b:26:95:f0:13:bd: 09:76:f6:1e:01:8d:be:2e:a5:2c:99:85:10:4e:0c: e2:5b:ca:21:4a:25:fa:98:12:c6:39:cc:47:f5:a7: 78:03:f5:56:71:f0:c2:0a:9a:6d:9c:9b:b0:45:af: 00:e3:c0:01:4d:87:6a:59:86:01:50:37:9a:b9:8f: e2:da:75:ad:1b:8d:13:a2:f6:02:7d:46:26:91:37: 43:ca:f0:43:6f:5a:03:05:ff:62:be:29:8c:cf:e4: ea:e0:7b:e3:ce:f6:98:9d:3d:3b:f5:2e:29:22:20: a7:76:e3:ea:07:9d:aa:23:d9:d3:54:2f:41:2b:3f: 9c:34:b7:6d:74:57:93:d0:11:17:9f:2f:75:41:3a: f2:c3:90:72:9d:22:9d:be:0d:e9:7d:0d:3d:8e:a4: 7a:0a:f0:92:1e:2f:85:c9:82:5c:97:f7:c9:da:3b: ad:3b:16:b8:c3:fc:b7:40:3b:bb:1d:d9:e1:0c:bb: b0:7e:3f:98:97:a9:4a:e4:bc:23:7d:2a:ad:8d:e1: 05:f8:ff:c3:7f:80:be:a8:59:98:4c:b7:0c:5b:04: 99:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B3:F0:EE:71:FF:11:20:6B:A5:8F:81:F0:9D:9D:17:3B:7B:02:B6 X509v3 Authority Key Identifier: keyid:F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:29:d5:97:33:fd:4d:bc:de:26:d3:f0:3c:a6:a9:af:97:fc: 8d:f6:7e:5b:bc:50:a4:23:94:b8:fa:87:7b:51:3c:1c:55:1a: 45:2b:68:6f:0e:5c:b2:dd:58:b2:97:1b:a3:a3:f4:40:07:29: 73:b6:1f:0e:c3:63:8e:e7:f9:f5:c9:d1:ac:d9:a8:33:79:3e: a3:74:b4:1d:6f:e7:1d:12:a7:48:93:96:df:1a:4c:d7:8c:17: 35:1e:28:b4:ac:2c:75:02:44:f2:18:ae:27:8a:6a:66:5e:ee: ad:b8:82:69:e7:32:14:e7:ef:bc:0f:0a:7f:f0:97:72:59:c7: 01:58:5c:fb:a0:be:93:27:06:53:ff:8c:f2:fb:af:b4:fd:0e: d9:89:7e:f5:62:5a:6c:c1:c7:59:08:65:51:42:8e:ea:e6:9e: ba:2f:fd:da:6d:3a:e4:59:25:52:07:e5:bb:f6:ef:8f:a1:78: 4a:23:9c:e8:e2:50:33:94:f8:ad:ad:4a:55:1e:bb:27:40:4c: 96:2d:c0:87:7b:ed:f8:ff:8b:62:cd:03:01:bc:d2:87:4f:92: a4:a7:f7:c7:89:a1:4b:e9:5c:8c:8a:e6:10:a7:68:df:14:ce: b7:45:88:67:9f:99:ed:4e:8e:f7:e1:fe:03:18:45:d3:e4:ab: dd:17:00:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiCYWSvjK8wCFB7iFuNjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNWQ5ZGIyNDQ4ZmU5N2I5ZDE3YTQ0YmU1ZDY0NDg0OGZh MDE4ZTEwHhcNMjUxMjA2MDEwMjAzWhcNMjUxMjA3MDEwMjAzWjAzMTEwLwYDVQQD EygwM2IzZjBlZTcxZmYxMTIwNmJhNThmODFmMDlkOWQxNzNiN2IwMmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+vAGHGRjnpMmImZlfr8X4uTQg4H EMv6LQ8mRq7WrdP5AmtiPmMbJpXwE70JdvYeAY2+LqUsmYUQTgziW8ohSiX6mBLG OcxH9ad4A/VWcfDCCpptnJuwRa8A48ABTYdqWYYBUDeauY/i2nWtG40TovYCfUYm kTdDyvBDb1oDBf9ivimMz+Tq4HvjzvaYnT079S4pIiCnduPqB52qI9nTVC9BKz+c NLdtdFeT0BEXny91QTryw5BynSKdvg3pfQ09jqR6CvCSHi+FyYJcl/fJ2jutOxa4 w/y3QDu7HdnhDLuwfj+Yl6lK5LwjfSqtjeEF+P/Df4C+qFmYTLcMWwSZwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOz8O5x/xEga6WPgfCdnRc7ewK2MB8GA1UdIwQY MBaAFPJdnbJEj+l7nRekS+XWRISPoBjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MTYwOGYtZmQ0Yi00MjY4LWE2ZTMt NWVjYjIxZmNmYTc1LzEvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS81MTYwOGYtZmQ0Yi00MjY4LWE2ZTMtNWVjYjIxZmNmYTc1 LzEvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCnVlzP9 TbzeJtPwPKapr5f8jfZ+W7xQpCOUuPqHe1E8HFUaRStobw5cst1Yspcbo6P0QAcp c7YfDsNjjuf59cnRrNmoM3k+o3S0HW/nHRKnSJOW3xpM14wXNR4otKwsdQJE8hiu J4pqZl7urbiCaecyFOfvvA8Kf/CXclnHAVhc+6C+kycGU/+M8vuvtP0O2Yl+9WJa bMHHWQhlUUKO6uaeui/92m065FklUgflu/bvj6F4SiOc6OJQM5T4ra1KVR67J0BM li3Ah3vt+P+LYs0DAbzSh0+SpKf3x4mhS+lcjIrmEKdo3xTOt0WIZ5+Z7U6O9+H+ AxhF0+Sr3RcAww== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:28 2025 by rpki-client