This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft File: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft (raw, json) Hash identifier: ECeY/mEakZOHrP98jIj9xf5okrhehzTxSKsIovGsg7w= Subject key identifier: F0:EB:E2:B0:D9:C5:9D:BF:10:E5:BE:16:B0:98:7F:EC:BB:08:82:A2 Authority key identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32 Certificate issuer: /CN=f1af38ad44069be654d2e787f96c4e8fd26a5132 Certificate serial: 019B2BF8D2661F0389B2A25042A5C2474CBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft Manifest number: 088E Signing time: Wed 17 Dec 2025 11:01:25 +0000 Manifest this update: Wed 17 Dec 2025 11:01:25 +0000 Manifest next update: Thu 18 Dec 2025 11:01:25 +0000 Files and hashes: 1: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl (hash: qHGVDQUvlFF4Rnpx7dy/jmWwJ4O6JStMxstZeCt5XJA=) 2: zFKwxmaeEautk9glZTACNxiJuHI.roa (hash: SSRDLDzbM3kxops586eTzqegDVIiP8cLLFUXY14RKCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:d2:66:1f:03:89:b2:a2:50:42:a5:c2:47:4c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1af38ad44069be654d2e787f96c4e8fd26a5132 Validity Not Before: Dec 17 11:01:25 2025 GMT Not After : Dec 18 11:01:25 2025 GMT Subject: CN=f0ebe2b0d9c59dbf10e5be16b0987fecbb0882a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d5:2c:14:fe:0d:e2:bc:a6:b6:45:8c:73:9b: 0a:90:6b:9c:e0:28:3e:16:a9:c2:47:79:7e:b3:80: 45:19:6a:c9:51:03:3b:d0:13:5d:96:09:a2:d6:dc: ee:da:0f:c4:6c:da:52:1b:9c:c8:19:da:b3:fd:d7: bb:43:a5:50:b1:f3:20:3f:ab:02:9c:c4:71:86:0f: 72:f4:52:6c:e2:62:6b:88:e7:c7:4c:61:f9:3a:16: e5:ae:95:37:c2:bc:b0:57:f6:2d:58:3c:bd:9d:53: 47:4f:18:b0:4f:c5:06:12:c2:b6:60:0c:96:d9:18: 40:6f:88:0b:94:8e:3f:4a:4f:c8:56:7f:a3:65:32: d0:e5:4c:28:8a:59:4f:9f:50:25:10:58:e6:a2:c6: 63:f8:d7:b9:1a:a4:b1:91:20:2a:b3:9d:bd:8f:0b: 19:c1:6e:06:70:74:97:ec:ce:5a:ce:6a:88:d8:9d: 03:5c:01:f0:a4:5b:fd:9c:be:27:94:80:15:f6:fd: 60:37:b3:07:fa:3e:de:ea:31:7e:f9:fb:15:97:7a: ef:ff:1a:d3:6d:49:0a:18:9f:48:7d:f2:6f:7c:91: b1:af:5e:a6:cf:f1:b8:93:30:72:41:b5:dc:01:79: 1f:b4:d9:33:f6:61:5d:8d:97:5c:0f:8e:26:d2:a8: 88:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EB:E2:B0:D9:C5:9D:BF:10:E5:BE:16:B0:98:7F:EC:BB:08:82:A2 X509v3 Authority Key Identifier: keyid:F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:de:06:33:a0:d5:3a:c2:fb:16:c4:59:30:02:60:bc:23:af: f5:25:51:b2:76:d4:34:00:59:28:96:77:20:0c:83:a2:3a:18: 9b:38:85:22:9c:b4:f8:dd:96:23:0d:87:61:7d:37:2a:bd:19: 5e:7c:b7:b3:fb:1b:4a:3d:8d:e0:24:a2:b5:1c:52:ff:a5:ae: 83:6b:41:51:2a:17:52:32:5b:5f:74:03:a9:04:fc:a9:63:5c: 82:23:5b:bc:af:0d:d6:d1:51:19:3a:41:ba:99:e0:f2:ec:99: db:cc:1a:61:77:35:8e:1b:b1:7b:dd:dc:8d:56:82:f8:50:24: 53:a2:37:bf:c1:5f:48:55:82:de:20:f4:12:6b:46:e2:3a:b4: a9:60:06:19:71:d7:b6:2f:3d:c8:b9:3c:ea:f3:8b:98:26:90: 09:13:69:6f:40:04:d0:11:f7:4f:cc:16:87:d7:da:81:3b:de: 2b:c4:e5:ce:26:00:cb:8a:80:d4:90:2b:f3:03:0e:31:d8:ea: b1:63:7d:22:bd:db:9f:04:c0:eb:6f:b6:7c:7b:90:62:26:8e: 31:f7:8f:6e:6f:42:ce:20:ff:b6:3b:16:b9:46:83:4e:d4:8b: 5e:96:e6:38:79:da:14:6f:f0:d5:df:cb:44:ed:b8:70:27:3a: 5e:e2:e0:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+NJmHwOJsqJQQqXCR0y8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYWYzOGFkNDQwNjliZTY1NGQyZTc4N2Y5NmM0ZThmZDI2 YTUxMzIwHhcNMjUxMjE3MTEwMTI1WhcNMjUxMjE4MTEwMTI1WjAzMTEwLwYDVQQD EyhmMGViZTJiMGQ5YzU5ZGJmMTBlNWJlMTZiMDk4N2ZlY2JiMDg4MmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9UsFP4N4rymtkWMc5sKkGuc4Cg+ FqnCR3l+s4BFGWrJUQM70BNdlgmi1tzu2g/EbNpSG5zIGdqz/de7Q6VQsfMgP6sC nMRxhg9y9FJs4mJriOfHTGH5OhblrpU3wrywV/YtWDy9nVNHTxiwT8UGEsK2YAyW 2RhAb4gLlI4/Sk/IVn+jZTLQ5UwoillPn1AlEFjmosZj+Ne5GqSxkSAqs529jwsZ wW4GcHSX7M5azmqI2J0DXAHwpFv9nL4nlIAV9v1gN7MH+j7e6jF++fsVl3rv/xrT bUkKGJ9IffJvfJGxr16mz/G4kzByQbXcAXkftNkz9mFdjZdcD44m0qiIUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDr4rDZxZ2/EOW+FrCYf+y7CIKiMB8GA1UdIwQY MBaAFPGvOK1EBpvmVNLnh/lsTo/SalEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGE4NHJVUUdtLVpVMHVlSC1XeE9qOUpxVVRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wZmMzYTgtMGNmMS00ZTA1LThlNmMt ZDdhMWIzZGY5YTAzLzEvOGE4NHJVUUdtLVpVMHVlSC1XeE9qOUpxVVRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wZmMzYTgtMGNmMS00ZTA1LThlNmMtZDdhMWIzZGY5YTAz LzEvOGE4NHJVUUdtLVpVMHVlSC1XeE9qOUpxVVRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAod4GM6DV OsL7FsRZMAJgvCOv9SVRsnbUNABZKJZ3IAyDojoYmziFIpy0+N2WIw2HYX03Kr0Z Xny3s/sbSj2N4CSitRxS/6Wug2tBUSoXUjJbX3QDqQT8qWNcgiNbvK8N1tFRGTpB upng8uyZ28waYXc1jhuxe93cjVaC+FAkU6I3v8FfSFWC3iD0EmtG4jq0qWAGGXHX ti89yLk86vOLmCaQCRNpb0AE0BH3T8wWh9fagTveK8TlziYAy4qA1JAr8wMOMdjq sWN9Ir3bnwTA62+2fHuQYiaOMfePbm9CziD/tjsWuUaDTtSLXpbmOHnaFG/w1d/L RO24cCc6XuLg9Q== -----END CERTIFICATE-----Generated at Wed Dec 17 18:11:47 2025 by rpki-client