This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json) Hash identifier: fSUUED90RwYCzMkhHb1fkQ9PiQ3z9sI+aVZZ4vy3Cfs= Subject key identifier: 16:81:E7:7D:6A:B2:A4:66:65:20:01:8B:DC:EE:EF:A0:34:6C:9C:EB Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5 Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5 Certificate serial: 019AF2769B61391EF37ABD6ED71F984DE80D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft Manifest number: 0FF3 Signing time: Sat 06 Dec 2025 07:00:50 +0000 Manifest this update: Sat 06 Dec 2025 07:00:50 +0000 Manifest next update: Sun 07 Dec 2025 07:00:50 +0000 Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: E9F0y3v7p8NZmHPiIjMTzAPh1+Yzk8AxvH8kTaeiGuA=) 2: FGmjTJ5BNIGcHTaYOHKezd1P2zY.roa (hash: Erq/bi/faVpdLd489gfJpnnRsTbaiEt6kPr4sQ09lTM=) 3: ZK76vlPS_FSysziBAdOIgNMogW0.roa (hash: xB77QsTFqqCgmtvQaPv1mOIqwZjp+Xnt/7UaUeOP1pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:9b:61:39:1e:f3:7a:bd:6e:d7:1f:98:4d:e8:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5 Validity Not Before: Dec 6 07:00:50 2025 GMT Not After : Dec 7 07:00:50 2025 GMT Subject: CN=1681e77d6ab2a4666520018bdceeefa0346c9ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ea:e6:5b:97:d3:91:37:bf:6c:93:77:ca:e4: 9b:a3:43:e6:01:3c:c9:bd:51:a4:55:7e:ee:46:3e: f7:b8:c1:cd:f5:73:93:3a:ce:79:62:48:60:a0:88: f6:51:2f:43:45:04:95:29:6b:6d:81:71:00:4b:fc: 03:2d:39:07:21:5f:26:3f:99:8b:98:e4:f7:c8:4f: b6:e2:9d:f2:89:89:54:52:93:4c:98:33:d2:2b:13: ad:f7:dc:04:aa:35:00:4a:ac:49:96:44:dc:39:07: 60:93:b7:7c:f0:46:d2:1b:ac:4d:db:32:6b:16:4c: ef:31:ac:28:8c:83:14:a9:a3:12:e7:16:17:db:16: f2:e4:8f:6d:59:9d:c8:08:63:5f:c5:20:45:d8:82: df:77:28:77:48:92:f7:da:74:87:e8:cc:56:07:0a: a7:a1:b2:87:7e:c1:f1:ed:fd:88:43:12:18:8f:45: ab:6c:3b:77:c4:6d:94:a3:14:0d:01:0f:8a:98:02: 08:32:9d:0e:78:e2:89:97:7a:43:60:5b:df:d3:95: ba:f5:91:47:6e:c0:d7:e7:42:c6:1a:7b:39:02:4d: 24:24:39:a9:26:95:bc:1c:71:26:51:66:56:28:bb: 1d:86:3b:de:7d:a0:02:e5:6a:e3:d9:ce:95:6f:6e: 7f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:81:E7:7D:6A:B2:A4:66:65:20:01:8B:DC:EE:EF:A0:34:6C:9C:EB X509v3 Authority Key Identifier: keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:1e:a9:47:e3:4d:73:18:92:a2:10:10:c9:ab:d8:78:c3:81: 96:91:87:e2:32:be:23:6e:c0:7b:43:d6:91:a0:09:7b:20:8c: 54:68:48:04:cd:45:62:24:75:10:8d:b9:62:8b:ce:c7:cd:16: 94:52:ed:9b:47:bc:90:e5:79:a9:69:23:4c:74:80:e2:93:8f: f0:b3:5b:8b:f9:07:c5:4f:4d:ef:0b:35:b3:d4:10:26:38:b1: 33:e9:9e:12:f4:8a:0d:65:54:08:3d:3e:16:b2:ee:63:6d:69: 3b:28:02:e3:f5:7a:ef:85:eb:c6:f9:20:50:88:23:51:01:c7: 59:a9:3c:c5:59:0f:80:dd:f2:e1:18:2a:fb:97:0e:d5:a3:b8: 05:4f:ab:3b:84:9b:1e:70:b3:a1:88:23:a6:ab:f0:6a:6c:6c: 15:69:68:fc:f4:9c:5b:78:84:fc:79:5a:22:84:7d:ba:6f:2c: 21:08:80:50:75:1c:e3:05:35:09:38:36:c3:73:f7:3f:93:79: c3:40:8b:ba:b8:f2:d2:0f:10:8e:ee:bd:30:7a:d9:51:ab:35: 20:ed:f9:39:69:a6:f3:64:66:e3:ad:74:a1:91:ed:4f:c0:56: a0:54:23:00:8d:dd:34:37:29:f0:01:67:dd:50:bf:af:ea:a3: 0a:5d:38:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpthOR7zer1u1x+YTegNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjkzMGUyM2IwOGExNWNjZDRkYzlhYjE4MjljNjA3ZmVk ZGU4YTUwHhcNMjUxMjA2MDcwMDUwWhcNMjUxMjA3MDcwMDUwWjAzMTEwLwYDVQQD EygxNjgxZTc3ZDZhYjJhNDY2NjUyMDAxOGJkY2VlZWZhMDM0NmM5Y2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOrmW5fTkTe/bJN3yuSbo0PmATzJ vVGkVX7uRj73uMHN9XOTOs55YkhgoIj2US9DRQSVKWttgXEAS/wDLTkHIV8mP5mL mOT3yE+24p3yiYlUUpNMmDPSKxOt99wEqjUASqxJlkTcOQdgk7d88EbSG6xN2zJr FkzvMawojIMUqaMS5xYX2xby5I9tWZ3ICGNfxSBF2ILfdyh3SJL32nSH6MxWBwqn obKHfsHx7f2IQxIYj0WrbDt3xG2UoxQNAQ+KmAIIMp0OeOKJl3pDYFvf05W69ZFH bsDX50LGGns5Ak0kJDmpJpW8HHEmUWZWKLsdhjvefaAC5Wrj2c6Vb25/PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBaB531qsqRmZSABi9zu76A0bJzrMB8GA1UdIwQY MBaAFPH5MOI7CKFczU3Jqxgpxgf+3eilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lYTEyOGMtYTA5ZC00MGU4LWJiMTEt YWVhNzE0ZWM1MTEzLzEvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lYTEyOGMtYTA5ZC00MGU4LWJiMTEtYWVhNzE0ZWM1MTEz LzEvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjB6pR+NN cxiSohAQyavYeMOBlpGH4jK+I27Ae0PWkaAJeyCMVGhIBM1FYiR1EI25YovOx80W lFLtm0e8kOV5qWkjTHSA4pOP8LNbi/kHxU9N7ws1s9QQJjixM+meEvSKDWVUCD0+ FrLuY21pOygC4/V674XrxvkgUIgjUQHHWak8xVkPgN3y4Rgq+5cO1aO4BU+rO4Sb HnCzoYgjpqvwamxsFWlo/PScW3iE/HlaIoR9um8sIQiAUHUc4wU1CTg2w3P3P5N5 w0CLurjy0g8Qju69MHrZUas1IO35OWmm82Rm4610oZHtT8BWoFQjAI3dNDcp8AFn 3VC/r+qjCl044Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:06:43 2025 by rpki-client