This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft File: 8SEJSHr0AKY-PLARo9VJ51H9LBg.mft (raw, json) Hash identifier: z+DkcrQaF8c/oJr4JKKdq8DYBs/Y34utX3Sc3eX8z8o= Subject key identifier: E6:A5:5D:6B:AA:70:E0:BB:CD:DC:92:19:6C:9F:BE:9A:A4:A7:C5:31 Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18 Certificate issuer: /CN=f12109487af400a63e3cb011a3d549e751fd2c18 Certificate serial: 019AF38948BB8FDD52BA06B14B8D228E940F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft Manifest number: 0E44 Signing time: Sat 06 Dec 2025 12:00:51 +0000 Manifest this update: Sat 06 Dec 2025 12:00:51 +0000 Manifest next update: Sun 07 Dec 2025 12:00:51 +0000 Files and hashes: 1: 8SEJSHr0AKY-PLARo9VJ51H9LBg.crl (hash: 9e5CzB/lRMlcb97a/dZVsAEY6AhCYiK6lNJtTas3808=) 2: r15VgfDzfklLUPcVx6y07YzgPWU.roa (hash: px8SZ3fdpiQxLHW7vHT/LHov8V1krmhAYBpslqeJkek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:48:bb:8f:dd:52:ba:06:b1:4b:8d:22:8e:94:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18 Validity Not Before: Dec 6 12:00:51 2025 GMT Not After : Dec 7 12:00:51 2025 GMT Subject: CN=e6a55d6baa70e0bbcddc92196c9fbe9aa4a7c531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:22:9d:64:03:01:76:98:6b:4b:75:56:12:6f: e8:c7:b6:85:b9:a3:12:28:eb:34:45:fa:02:c7:e2: f5:9e:6f:0c:8d:ed:3e:c7:5e:72:9f:d2:db:85:80: 1f:a0:59:ee:33:68:c5:52:5b:15:63:6e:86:56:50: 54:5e:c9:53:42:9f:a8:9d:aa:a1:fa:24:e5:6c:b9: ee:b0:5d:11:bc:4f:76:1c:a0:43:a2:b5:ae:f0:dc: 47:06:34:fb:4d:a3:ff:83:50:fb:be:64:78:a3:8d: 27:b9:57:ae:83:17:38:0a:ef:b2:38:82:25:bc:dd: 75:82:14:92:f9:45:93:a2:ea:92:73:5e:5c:52:66: 3c:ff:1c:e3:db:a5:fc:df:1e:53:5d:b2:0e:51:9c: 54:27:09:a2:c5:b4:f2:65:ea:7c:d7:1a:38:92:ae: f4:a1:0e:31:6c:45:0c:63:2c:6f:01:ec:af:1f:32: e2:8d:fb:4a:4b:8a:ca:cf:a0:23:4c:ba:df:25:d5: 01:fe:ec:10:36:83:35:20:ab:18:51:1d:01:65:09: 60:92:1e:03:9f:72:74:9a:a4:49:f3:e5:8c:5b:5a: d3:f3:92:ef:f0:12:71:fe:ee:4d:3c:9e:00:b3:45: e0:24:f5:42:3e:a9:f0:02:ea:a0:16:10:a6:50:b6: a3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A5:5D:6B:AA:70:E0:BB:CD:DC:92:19:6C:9F:BE:9A:A4:A7:C5:31 X509v3 Authority Key Identifier: keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:35:81:03:c9:82:e8:5b:35:70:e6:3b:01:94:c4:97:13:e5: af:86:c7:a7:3d:14:a3:e1:cc:fa:93:c5:b3:51:8b:1c:61:35: a5:bc:8c:2c:a3:52:a5:b6:3d:51:39:3e:af:61:aa:6d:e8:45: ab:c5:d4:b9:73:ae:1a:5a:5e:c0:52:a7:1d:91:bc:c1:fa:1e: 03:e5:33:2a:26:f1:c2:e2:5f:e6:55:cf:e0:bf:8a:2e:e6:58: 76:d9:46:cb:3f:cb:fb:ac:1c:2c:8b:1d:16:6d:77:32:f5:ed: ea:b6:a0:30:86:7a:a3:46:06:b7:39:15:ae:fa:c0:f9:1d:f6: 0f:20:e0:15:e4:d1:33:fb:53:e7:11:95:9e:d9:17:c4:ca:14: b5:36:38:e7:05:4d:80:59:20:6a:77:ca:4b:89:1f:38:df:3f: d9:0f:25:67:ed:56:d7:61:b1:2d:f3:97:7c:b7:48:b3:ce:55: a2:3e:4e:b2:20:5d:54:58:ad:8e:86:ce:2b:7c:ac:a3:f5:4d: 98:2c:49:47:45:ca:74:b0:16:01:8c:fd:b9:d4:16:36:30:1e: be:b4:f1:f7:04:83:f0:ae:18:8c:08:55:88:45:80:c2:f2:08: 50:00:02:e6:92:2d:47:f3:dd:39:a3:74:86:53:ed:b3:39:09: 0d:6f:3f:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziUi7j91SugaxS40ijpQPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMjEwOTQ4N2FmNDAwYTYzZTNjYjAxMWEzZDU0OWU3NTFm ZDJjMTgwHhcNMjUxMjA2MTIwMDUxWhcNMjUxMjA3MTIwMDUxWjAzMTEwLwYDVQQD EyhlNmE1NWQ2YmFhNzBlMGJiY2RkYzkyMTk2YzlmYmU5YWE0YTdjNTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyKdZAMBdphrS3VWEm/ox7aFuaMS KOs0RfoCx+L1nm8Mje0+x15yn9LbhYAfoFnuM2jFUlsVY26GVlBUXslTQp+onaqh +iTlbLnusF0RvE92HKBDorWu8NxHBjT7TaP/g1D7vmR4o40nuVeugxc4Cu+yOIIl vN11ghSS+UWTouqSc15cUmY8/xzj26X83x5TXbIOUZxUJwmixbTyZep81xo4kq70 oQ4xbEUMYyxvAeyvHzLijftKS4rKz6AjTLrfJdUB/uwQNoM1IKsYUR0BZQlgkh4D n3J0mqRJ8+WMW1rT85Lv8BJx/u5NPJ4As0XgJPVCPqnwAuqgFhCmULajpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOalXWuqcOC7zdySGWyfvpqkp8UxMB8GA1UdIwQY MBaAFPEhCUh69ACmPjywEaPVSedR/SwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFNFSlNIcjBBS1ktUExBUm85Vko1MUg5TEJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83NWNkMTctMDQ0MS00YTRhLWI3ZWUt ZjA1ZWZhYjc0ZjczLzEvOFNFSlNIcjBBS1ktUExBUm85Vko1MUg5TEJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy83NWNkMTctMDQ0MS00YTRhLWI3ZWUtZjA1ZWZhYjc0Zjcz LzEvOFNFSlNIcjBBS1ktUExBUm85Vko1MUg5TEJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzWBA8mC 6Fs1cOY7AZTElxPlr4bHpz0Uo+HM+pPFs1GLHGE1pbyMLKNSpbY9UTk+r2GqbehF q8XUuXOuGlpewFKnHZG8wfoeA+UzKibxwuJf5lXP4L+KLuZYdtlGyz/L+6wcLIsd Fm13MvXt6ragMIZ6o0YGtzkVrvrA+R32DyDgFeTRM/tT5xGVntkXxMoUtTY45wVN gFkganfKS4kfON8/2Q8lZ+1W12GxLfOXfLdIs85Voj5OsiBdVFitjobOK3yso/VN mCxJR0XKdLAWAYz9udQWNjAevrTx9wSD8K4YjAhViEWAwvIIUAAC5pItR/PdOaN0 hlPtszkJDW8/2A== -----END CERTIFICATE-----Generated at Sat Dec 6 19:35:23 2025 by rpki-client