This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft File: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft (raw, json) Hash identifier: Q663G1OphhH1gmavyagmLd7oBT9XGWSGsOpSGE58syU= Subject key identifier: 39:85:D4:11:91:85:F4:9F:50:08:ED:66:2E:B0:F8:DF:BD:D5:69:D5 Authority key identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32 Certificate issuer: /CN=f1af38ad44069be654d2e787f96c4e8fd26a5132 Certificate serial: 019AF2094E8798BA4C8A5B40443DAF98BA2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft Manifest number: 0870 Signing time: Sat 06 Dec 2025 05:01:27 +0000 Manifest this update: Sat 06 Dec 2025 05:01:27 +0000 Manifest next update: Sun 07 Dec 2025 05:01:27 +0000 Files and hashes: 1: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl (hash: Wwm2YJskbLEdvUHo644PveQ8afscnV2GVaxL9xL5bj0=) 2: zFKwxmaeEautk9glZTACNxiJuHI.roa (hash: SSRDLDzbM3kxops586eTzqegDVIiP8cLLFUXY14RKCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:4e:87:98:ba:4c:8a:5b:40:44:3d:af:98:ba:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1af38ad44069be654d2e787f96c4e8fd26a5132 Validity Not Before: Dec 6 05:01:27 2025 GMT Not After : Dec 7 05:01:27 2025 GMT Subject: CN=3985d4119185f49f5008ed662eb0f8dfbdd569d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:90:90:78:62:b6:84:28:fd:92:40:d1:55:52: 8b:15:e9:59:17:a2:74:37:87:ea:6f:c2:29:14:fc: 44:34:7b:cd:28:e1:cd:84:2b:0d:e2:ff:37:75:61: be:3e:51:24:fa:2e:dc:01:23:ec:e2:0b:b7:30:e9: a3:ca:24:16:ab:3c:26:5d:57:bb:a3:e3:be:ad:f9: 28:96:74:c8:3f:30:75:fd:f9:f3:4a:ba:fd:ca:1d: 77:a8:d6:60:fa:bb:1e:41:69:3a:d8:a8:5e:4a:54: 54:77:fe:e9:28:eb:62:f1:fb:29:c7:86:86:c3:ba: ce:06:0c:3b:06:26:14:63:77:d8:99:ef:e8:4f:a0: 9e:ee:a6:1c:42:3f:fe:a8:cd:91:ea:8f:0f:84:e2: 75:65:e0:3c:3b:a1:f4:20:23:0a:d7:26:18:9a:d7: 7e:4a:20:98:70:cf:47:8f:87:90:6d:1c:f6:00:a6: a3:6c:5d:2c:90:3d:07:6f:8b:6a:1f:0d:75:c9:a4: 05:24:9c:d3:f4:f4:f8:07:22:29:00:5f:4a:63:0d: c8:90:d5:ae:54:39:e9:d8:f9:76:05:70:d1:01:b6: 97:4d:9a:0f:34:be:8c:b1:73:81:1d:8f:f0:2f:69: 2d:29:15:09:e6:22:e0:11:e0:70:68:45:e4:f5:c4: 63:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:85:D4:11:91:85:F4:9F:50:08:ED:66:2E:B0:F8:DF:BD:D5:69:D5 X509v3 Authority Key Identifier: keyid:F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:f7:a3:dd:02:ce:44:4b:65:b9:0d:d9:e3:5f:80:be:1d:fc: 8d:26:1e:9e:cc:67:b3:b5:e6:e4:46:da:b9:06:4b:f5:35:2a: 7f:48:91:fc:17:53:51:d1:16:90:b2:77:87:1f:97:93:fc:8a: f9:88:83:9a:6c:54:90:ee:a6:e4:14:60:32:8c:fc:3e:f9:7c: 36:e7:34:0c:cf:e3:e7:4b:73:ec:7c:3a:f8:b8:49:b5:1c:75: 9b:01:01:d4:c2:cd:4a:67:36:fb:3a:98:5f:6e:35:7b:7d:e3: 03:cd:05:f6:8c:ee:c1:09:11:be:0e:fd:52:2c:eb:3b:2c:70: b8:aa:81:02:a9:e3:8d:64:ef:37:c6:2f:f6:fb:4c:3a:64:27: 66:77:bb:47:26:38:34:e3:9e:91:3b:9f:e7:9f:e7:23:a5:b1: 18:25:38:65:91:85:ac:95:05:ff:9e:86:5c:66:6c:58:88:df: 5f:28:87:94:b6:56:8c:4b:de:c3:a2:f0:8e:dd:c6:e8:8e:35: f8:74:be:50:c4:08:26:fe:83:c9:27:05:e5:ad:c4:fa:f2:db: 48:e0:d1:e3:49:54:e8:9b:57:1f:22:47:9a:49:c7:c1:0d:8e: 69:c1:e7:d2:3d:e2:b2:5c:c3:49:33:bb:f9:c1:62:e9:a1:df: 75:4c:39:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCU6HmLpMiltARD2vmLovMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYWYzOGFkNDQwNjliZTY1NGQyZTc4N2Y5NmM0ZThmZDI2 YTUxMzIwHhcNMjUxMjA2MDUwMTI3WhcNMjUxMjA3MDUwMTI3WjAzMTEwLwYDVQQD EygzOTg1ZDQxMTkxODVmNDlmNTAwOGVkNjYyZWIwZjhkZmJkZDU2OWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZCQeGK2hCj9kkDRVVKLFelZF6J0 N4fqb8IpFPxENHvNKOHNhCsN4v83dWG+PlEk+i7cASPs4gu3MOmjyiQWqzwmXVe7 o+O+rfkolnTIPzB1/fnzSrr9yh13qNZg+rseQWk62KheSlRUd/7pKOti8fspx4aG w7rOBgw7BiYUY3fYme/oT6Ce7qYcQj/+qM2R6o8PhOJ1ZeA8O6H0ICMK1yYYmtd+ SiCYcM9Hj4eQbRz2AKajbF0skD0Hb4tqHw11yaQFJJzT9PT4ByIpAF9KYw3IkNWu VDnp2Pl2BXDRAbaXTZoPNL6MsXOBHY/wL2ktKRUJ5iLgEeBwaEXk9cRj1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmF1BGRhfSfUAjtZi6w+N+91WnVMB8GA1UdIwQY MBaAFPGvOK1EBpvmVNLnh/lsTo/SalEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGE4NHJVUUdtLVpVMHVlSC1XeE9qOUpxVVRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wZmMzYTgtMGNmMS00ZTA1LThlNmMt ZDdhMWIzZGY5YTAzLzEvOGE4NHJVUUdtLVpVMHVlSC1XeE9qOUpxVVRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wZmMzYTgtMGNmMS00ZTA1LThlNmMtZDdhMWIzZGY5YTAz LzEvOGE4NHJVUUdtLVpVMHVlSC1XeE9qOUpxVVRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfej3QLO REtluQ3Z41+Avh38jSYensxns7Xm5EbauQZL9TUqf0iR/BdTUdEWkLJ3hx+Xk/yK +YiDmmxUkO6m5BRgMoz8Pvl8Nuc0DM/j50tz7Hw6+LhJtRx1mwEB1MLNSmc2+zqY X241e33jA80F9ozuwQkRvg79UizrOyxwuKqBAqnjjWTvN8Yv9vtMOmQnZne7RyY4 NOOekTuf55/nI6WxGCU4ZZGFrJUF/56GXGZsWIjfXyiHlLZWjEvew6Lwjt3G6I41 +HS+UMQIJv6DyScF5a3E+vLbSODR40lU6JtXHyJHmknHwQ2OacHn0j3islzDSTO7 +cFi6aHfdUw5Vg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:56 2025 by rpki-client