This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json) Hash identifier: ceJ42mNp7D8x25fOJx6PL3XY3kUXtsMO+vAR5CVKvoY= Subject key identifier: 6E:B3:BB:F0:00:6E:9F:13:16:4B:D6:07:07:5E:E9:F9:D0:F4:E6:7C Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21 Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421 Certificate serial: 019AF0F5C7161F6AA1B7469E582B66FEA77C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 00:00:30 +0000 Manifest this update: Sat 06 Dec 2025 00:00:30 +0000 Manifest next update: Sun 07 Dec 2025 00:00:30 +0000 Files and hashes: 1: 7XoxbsiH0tvuamwOaZJkHsbncU8.roa (hash: eOLDYEBs+ePiFOo04IA8xxSpoLseLj4knNzwy/AuO7c=) 2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: PS07EnmulwnVegHM7zdTuUL0juJ5wi9IT1lv7jEjSv0=) 3: Jt7bihKghc7zukL52uY8fgD1W-o.roa (hash: 2TGz2CMfaxj9aqkazkTK9wOsLvIeBADGDZnq6/Vnqk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:c7:16:1f:6a:a1:b7:46:9e:58:2b:66:fe:a7:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421 Validity Not Before: Dec 6 00:00:30 2025 GMT Not After : Dec 7 00:00:30 2025 GMT Subject: CN=6eb3bbf0006e9f13164bd607075ee9f9d0f4e67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:04:4d:9e:ed:70:46:3c:84:35:e3:27:21: d4:85:95:d5:70:b6:8c:fa:b9:89:a7:84:18:59:e2: 01:ad:f4:e6:72:4f:de:97:42:f8:32:ea:3d:73:ee: 2c:e7:ca:89:11:48:a6:e8:f6:a6:9f:e8:47:a5:f8: 40:ef:7c:6c:bb:61:6f:15:f6:bd:df:c8:71:c6:7d: a2:b1:c0:38:c9:c6:94:de:12:a7:4f:9a:06:83:d8: 1b:d2:7d:e0:04:8d:fb:27:f7:e9:c0:70:3f:d5:fc: a1:b4:95:e8:17:42:92:bc:83:f4:92:fc:5a:cd:b9: f0:c9:37:62:04:3b:6c:c2:4b:9b:bc:6f:68:9d:23: ed:c1:d0:20:97:66:4c:1c:20:8a:17:ed:a4:ff:7e: ee:d0:c2:db:a3:c9:3b:12:52:0c:7e:77:3a:cf:0a: 76:1f:5b:23:f9:02:2f:d8:37:cf:4d:0c:dc:dc:0e: 1e:60:f0:64:94:a2:8f:65:36:2e:1a:83:f6:7b:c1: fc:9c:a0:e4:c8:6b:e3:0e:fc:52:bd:82:d5:c7:a7: 6c:ea:95:3d:74:da:49:82:f7:7b:96:80:24:a6:5d: 19:bd:2e:8f:28:de:06:2e:69:53:36:50:9b:57:be: e2:e5:5d:2e:f0:5b:07:1f:63:e7:d0:2c:26:0b:a7: 9b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B3:BB:F0:00:6E:9F:13:16:4B:D6:07:07:5E:E9:F9:D0:F4:E6:7C X509v3 Authority Key Identifier: keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:23:16:4f:50:4a:52:a4:1d:e6:99:9e:1a:00:0c:84:82:0f: 60:d8:e8:02:55:39:7e:6f:5a:81:b2:ca:c5:1b:0a:c1:d5:a2: a5:5b:37:3a:54:ad:36:0e:57:4d:3d:00:f8:1a:0a:c9:27:c5: 7b:07:24:69:4f:e9:60:75:d8:de:05:38:0b:b3:b6:f0:db:50: dc:6c:a8:03:b1:12:fd:6e:b6:ed:20:38:8f:36:4a:c0:bf:d5: 77:1e:c1:f9:09:bf:2c:f3:32:7f:4d:8c:65:9d:85:d2:62:2f: 37:8d:88:b7:40:dd:a9:27:c5:32:f7:ff:f2:28:23:40:b2:1f: e3:f9:5d:21:3f:30:34:fd:0f:15:15:0e:e3:cb:bf:53:ce:9f: 4f:a9:45:f6:7a:01:e2:5f:6e:a5:66:c9:07:b6:da:e7:42:2a: d1:3b:d7:fa:35:ac:f1:42:78:a1:98:32:c0:bf:84:d5:11:94: db:55:43:84:3a:62:36:35:5a:c1:f7:2c:f6:8e:e0:eb:f4:35: a4:f3:fe:8b:bf:ec:7f:8f:c9:0a:3f:6d:0e:ae:23:bb:4b:12: f7:66:11:6a:57:8f:29:7c:8b:e3:1e:2a:bc:d8:f7:43:48:76: 11:65:ef:c1:1b:42:d5:47:7c:13:62:97:d7:1a:ab:b4:b8:07: 3f:f3:18:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9ccWH2qht0aeWCtm/qd8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYjE1ZTc3YWY0ZWRkZTExMTkyYzZmZWNkNTBiMjFjZDM3 OWQ0MjEwHhcNMjUxMjA2MDAwMDMwWhcNMjUxMjA3MDAwMDMwWjAzMTEwLwYDVQQD Eyg2ZWIzYmJmMDAwNmU5ZjEzMTY0YmQ2MDcwNzVlZTlmOWQwZjRlNjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZoETZ7tcEY8hDXjJyHUhZXVcLaM +rmJp4QYWeIBrfTmck/el0L4Muo9c+4s58qJEUim6Pamn+hHpfhA73xsu2FvFfa9 38hxxn2iscA4ycaU3hKnT5oGg9gb0n3gBI37J/fpwHA/1fyhtJXoF0KSvIP0kvxa zbnwyTdiBDtswkubvG9onSPtwdAgl2ZMHCCKF+2k/37u0MLbo8k7ElIMfnc6zwp2 H1sj+QIv2DfPTQzc3A4eYPBklKKPZTYuGoP2e8H8nKDkyGvjDvxSvYLVx6ds6pU9 dNpJgvd7loAkpl0ZvS6PKN4GLmlTNlCbV77i5V0u8FsHH2Pn0CwmC6eblwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6zu/AAbp8TFkvWBwde6fnQ9OZ8MB8GA1UdIwQY MBaAFPGxXnevTt3hEZLG/s1QshzTedQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUt MTM0MGNjNWIzZDU3LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUtMTM0MGNjNWIzZDU3 LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCMWT1BK UqQd5pmeGgAMhIIPYNjoAlU5fm9agbLKxRsKwdWipVs3OlStNg5XTT0A+BoKySfF ewckaU/pYHXY3gU4C7O28NtQ3GyoA7ES/W627SA4jzZKwL/Vdx7B+Qm/LPMyf02M ZZ2F0mIvN42It0DdqSfFMvf/8igjQLIf4/ldIT8wNP0PFRUO48u/U86fT6lF9noB 4l9upWbJB7ba50Iq0TvX+jWs8UJ4oZgywL+E1RGU21VDhDpiNjVawfcs9o7g6/Q1 pPP+i7/sf4/JCj9tDq4ju0sS92YRalePKXyL4x4qvNj3Q0h2EWXvwRtC1Ud8E2KX 1xqrtLgHP/MYEA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:43 2025 by rpki-client