This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft File: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft (raw, json) Hash identifier: wyYM+JTfWMNttQvWlxcmhH4N3XLH6PrZTp9Z0KtKBts= Subject key identifier: 1F:64:96:BE:26:70:8C:01:4B:E3:B5:A5:8D:97:1B:FA:BE:76:69:3D Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26 Certificate issuer: /CN=f20bf46303ff54a505f533c554251923e41f5926 Certificate serial: 019B3DC79AEBB61433354D14B9CB1254481E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft Manifest number: 08FA Signing time: Sat 20 Dec 2025 22:00:50 +0000 Manifest this update: Sat 20 Dec 2025 22:00:50 +0000 Manifest next update: Sun 21 Dec 2025 22:00:50 +0000 Files and hashes: 1: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl (hash: OMhaDXzdsx7Z+cQvZD8wG1gAJtwgC4B/+Oj8OVfxmNg=) 2: nJ3bZDTF3klediLdsGzrGEizejI.roa (hash: XOv5pl5Y0ikBc3XP047Nh+8GGnppEmfe5vg+dWr14YI=) 3: qnlY-2XHeoB5T91L-eAv--psw3s.roa (hash: GlcTsLYuOrrcX+rD96Cshdq9OCpUu7GdPBcBG+rwyLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:9a:eb:b6:14:33:35:4d:14:b9:cb:12:54:48:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926 Validity Not Before: Dec 20 22:00:50 2025 GMT Not After : Dec 21 22:00:50 2025 GMT Subject: CN=1f6496be26708c014be3b5a58d971bfabe76693d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:64:8d:c9:e6:7c:b5:73:9f:35:49:da:20:0b: 2d:0c:34:8b:00:67:8f:d4:45:0b:f9:d4:b4:00:05: 4c:1a:8a:cd:60:88:f8:47:4f:26:e9:0e:8f:fe:10: 46:10:0e:8d:9b:36:f8:3f:c6:44:ba:28:ca:97:f8: 71:5d:95:4b:07:0c:01:76:41:f6:53:31:0d:86:e7: 49:1d:79:00:27:d3:b7:27:f2:2a:fa:03:67:9a:b3: 0b:69:3a:0b:09:6d:b7:33:dd:84:03:a5:6f:d8:dd: c0:12:6f:fb:af:07:c4:bb:f6:ea:59:7f:63:eb:c2: 09:ae:44:da:a4:70:ac:a0:23:62:06:9b:32:3b:5b: c3:9c:26:30:c8:f4:62:c6:05:e6:b2:d6:2f:e1:e2: f8:89:9c:ed:5b:cf:9b:5e:90:8d:ab:fa:54:5f:d9: 2b:24:98:ec:35:0b:5a:7f:f4:f0:07:02:b0:8c:cc: 06:7b:41:cd:23:63:78:ef:74:4a:7f:42:2d:e7:e5: 06:0d:43:4e:36:0e:ea:a9:4c:ff:93:2d:f2:79:6e: 49:8b:99:50:36:8f:8f:47:8a:17:6e:1c:94:78:8f: 7f:cd:d6:58:d9:84:9b:c2:c6:74:9c:07:42:ee:23: 26:05:a3:31:b7:0d:10:54:61:ee:8f:f8:e2:9b:a7: 4e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:64:96:BE:26:70:8C:01:4B:E3:B5:A5:8D:97:1B:FA:BE:76:69:3D X509v3 Authority Key Identifier: keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:a6:51:ed:9c:49:e2:3c:4f:5f:7f:4f:e2:e5:e4:ba:2f:90: 5a:dc:9c:d9:54:3c:ae:85:e1:23:06:30:a9:0d:0d:31:68:2b: 7c:75:bb:81:10:13:59:4f:9f:1b:37:6c:65:d0:7b:01:d4:95: 89:e6:a1:84:e1:1c:4d:da:39:6d:a4:c0:9b:df:ce:8d:84:93: 71:48:8f:de:25:d8:aa:3b:7b:db:ec:b5:01:6f:49:ce:36:a5: b7:dc:96:da:29:d1:2f:b7:c4:0d:79:c9:ca:9b:3b:c9:b0:21: c3:08:a2:26:bf:bb:0a:b6:86:ab:54:ee:11:4d:55:83:4f:a2: e7:78:3b:05:1d:36:23:3b:1f:3b:8f:8f:92:d1:ea:5a:8a:30: fc:93:e6:84:4a:4b:7a:a9:36:d2:2a:92:d6:ab:44:e5:59:36: 57:42:9e:cd:bd:5b:26:19:4e:94:91:b3:2e:3a:98:8f:99:b8: 7c:df:04:6f:59:70:0b:ae:7d:5a:5b:c2:e5:15:df:bf:78:9e: b7:50:c1:a7:cc:b9:23:b1:3b:ab:cd:51:f1:a0:ec:70:bb:69: 79:c7:9f:c8:a3:3a:d6:aa:dc:bc:b0:be:6a:59:89:a4:e5:9c: 14:0e:28:8b:5e:73:77:c8:d2:aa:c0:29:13:37:e7:6d:6a:0f: f9:4c:14:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x5rrthQzNU0UucsSVEgeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMGJmNDYzMDNmZjU0YTUwNWY1MzNjNTU0MjUxOTIzZTQx ZjU5MjYwHhcNMjUxMjIwMjIwMDUwWhcNMjUxMjIxMjIwMDUwWjAzMTEwLwYDVQQD EygxZjY0OTZiZTI2NzA4YzAxNGJlM2I1YTU4ZDk3MWJmYWJlNzY2OTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmSNyeZ8tXOfNUnaIAstDDSLAGeP 1EUL+dS0AAVMGorNYIj4R08m6Q6P/hBGEA6Nmzb4P8ZEuijKl/hxXZVLBwwBdkH2 UzENhudJHXkAJ9O3J/Iq+gNnmrMLaToLCW23M92EA6Vv2N3AEm/7rwfEu/bqWX9j 68IJrkTapHCsoCNiBpsyO1vDnCYwyPRixgXmstYv4eL4iZztW8+bXpCNq/pUX9kr JJjsNQtaf/TwBwKwjMwGe0HNI2N473RKf0It5+UGDUNONg7qqUz/ky3yeW5Ji5lQ No+PR4oXbhyUeI9/zdZY2YSbwsZ0nAdC7iMmBaMxtw0QVGHuj/jim6dOhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9klr4mcIwBS+O1pY2XG/q+dmk9MB8GA1UdIwQY MBaAFPIL9GMD/1SlBfUzxVQlGSPkH1kmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGd2MFl3UF9WS1VGOVRQRlZDVVpJLVFmV1NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84MTU1OTAtOTUxYy00YzFmLTg2OTct YzM2OTQwODhmMzRhLzEvOGd2MFl3UF9WS1VGOVRQRlZDVVpJLVFmV1NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS84MTU1OTAtOTUxYy00YzFmLTg2OTctYzM2OTQwODhmMzRh LzEvOGd2MFl3UF9WS1VGOVRQRlZDVVpJLVFmV1NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqZR7ZxJ 4jxPX39P4uXkui+QWtyc2VQ8roXhIwYwqQ0NMWgrfHW7gRATWU+fGzdsZdB7AdSV ieahhOEcTdo5baTAm9/OjYSTcUiP3iXYqjt72+y1AW9Jzjalt9yW2inRL7fEDXnJ yps7ybAhwwiiJr+7CraGq1TuEU1Vg0+i53g7BR02IzsfO4+PktHqWoow/JPmhEpL eqk20iqS1qtE5Vk2V0Kezb1bJhlOlJGzLjqYj5m4fN8Eb1lwC659WlvC5RXfv3ie t1DBp8y5I7E7q81R8aDscLtpecefyKM61qrcvLC+almJpOWcFA4oi15zd8jSqsAp EzfnbWoP+UwUEQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:25:07 2025 by rpki-client