This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft File: 8fGG6XCXyEF9lDfXDP38UnMxtag.mft (raw, json) Hash identifier: 9ULSe103NwJKuJYU8OW3CDHOUW1B0qUTGn8tRivj0Wk= Subject key identifier: A1:E0:D6:D3:79:C0:E7:66:1A:13:23:FF:9C:C5:39:60:91:72:45:23 Authority key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8 Certificate issuer: /CN=f1f186e97097c8417d9437d70cfdfc527331b5a8 Certificate serial: 019AF05164270AA9E073DB5954CA67AF3E65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft Manifest number: 0BE5 Signing time: Fri 05 Dec 2025 21:00:57 +0000 Manifest this update: Fri 05 Dec 2025 21:00:57 +0000 Manifest next update: Sat 06 Dec 2025 21:00:57 +0000 Files and hashes: 1: 8fGG6XCXyEF9lDfXDP38UnMxtag.crl (hash: /6BiwekcJ9QhK48w7aArgBcd9YAkKtFR1cyd9ivzHpw=) 2: Bb-dCG0MYANSL8Bk5tQCjYBHu7I.roa (hash: 0dT55FR6gYNAR7wtBsJy+EY1xVBw/famE9UI3Od2H8A=) 3: K5Oof9CYQW5Wc9ghK1PUdN-aFTY.roa (hash: 2dlcOZzL+Eim7W+NTEiKqnv/Tt9OOEdX1RMt+wWQD9U=) 4: hwiO597jiOerCy1jD6kKNf_z4mE.roa (hash: At2Ig8rywEMbpAnMXYd8IjR4QLHdmR+nptBnEkQohjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:64:27:0a:a9:e0:73:db:59:54:ca:67:af:3e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8 Validity Not Before: Dec 5 21:00:57 2025 GMT Not After : Dec 6 21:00:57 2025 GMT Subject: CN=a1e0d6d379c0e7661a1323ff9cc5396091724523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:13:be:75:49:ba:0e:ec:10:0f:59:47:32: e8:ee:55:0b:cc:82:b1:91:7d:81:66:98:90:fd:23: 9e:44:7f:db:7d:95:a2:2f:8b:9d:a6:1e:90:db:5c: d9:13:70:a1:5d:6e:b0:6a:6d:c9:5b:ef:50:e2:14: 77:ab:b0:1b:d3:b5:b7:41:20:33:06:b9:51:d2:a6: b8:ab:22:2b:70:b2:ad:8a:76:ad:ba:87:dc:1f:44: d2:a9:24:8b:b8:e6:40:d7:35:ff:82:b7:5a:a4:a1: 6b:23:34:ed:c2:fb:61:1d:b2:2e:fb:5c:04:b8:82: 39:26:b8:5f:e3:f5:c9:ae:9d:ad:25:87:57:cb:21: f9:36:c5:72:ca:a1:1c:e3:95:a9:45:76:59:6a:fb: c1:80:36:00:8e:5c:5e:91:80:5b:56:90:9b:4d:ae: 02:28:2d:18:4d:d5:a1:5a:a1:9b:42:de:26:99:9b: 52:e4:87:0b:c2:aa:e5:e2:eb:32:48:a8:1a:0e:23: 73:75:14:19:5d:c6:cf:84:70:2f:8c:74:0d:59:02: e6:ed:74:88:5a:1e:20:52:57:7e:6e:73:c8:ae:54: 1c:1a:cf:69:63:28:88:86:58:16:b9:63:7d:4f:5a: 38:16:bf:58:44:c0:56:d8:6f:98:15:28:32:12:00: 5c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E0:D6:D3:79:C0:E7:66:1A:13:23:FF:9C:C5:39:60:91:72:45:23 X509v3 Authority Key Identifier: keyid:F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:73:c7:4c:c0:e1:a5:91:58:03:9f:07:e5:91:dd:a2:a7:ad: 48:6a:a2:57:05:b1:3c:89:0a:42:46:67:30:4d:9c:e4:5f:93: fd:dc:ec:f8:41:78:4b:bf:fe:d0:5e:66:ad:72:0b:7a:25:12: 47:cd:03:ab:fa:d0:1a:b0:5f:28:44:7c:12:4d:90:06:0b:0d: 77:dc:a2:86:37:7c:ba:21:03:02:6d:72:d2:55:6d:31:f2:df: 21:11:4d:b1:44:f6:49:44:ab:11:fc:b4:4c:26:d9:36:af:65: 32:17:eb:03:52:d0:3a:b9:eb:86:09:c9:94:12:bb:1f:f7:92: e5:b7:50:72:70:92:23:59:c0:ae:f3:1e:e0:c8:d2:ac:33:27: 96:2f:03:70:32:56:5b:a2:38:6d:ab:91:eb:61:40:3e:97:f3: 6e:2a:93:d4:ce:95:92:89:e0:eb:fb:b6:bc:04:56:bb:88:96: c3:a8:71:16:fc:86:3c:3d:c8:d4:68:61:89:f8:90:cb:cb:ef: e6:f4:cf:97:53:4c:38:c2:f0:40:6d:88:0a:bc:14:7d:3b:f4: b6:ad:d6:66:4d:73:ce:ac:d9:dd:f5:84:4d:0d:07:8b:49:88: e0:d2:09:ba:67:8b:a4:c3:01:bf:05:d1:18:50:b0:7b:32:f5: 03:a5:12:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUWQnCqngc9tZVMpnrz5lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjE4NmU5NzA5N2M4NDE3ZDk0MzdkNzBjZmRmYzUyNzMz MWI1YTgwHhcNMjUxMjA1MjEwMDU3WhcNMjUxMjA2MjEwMDU3WjAzMTEwLwYDVQQD EyhhMWUwZDZkMzc5YzBlNzY2MWExMzIzZmY5Y2M1Mzk2MDkxNzI0NTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxloTvnVJug7sEA9ZRzLo7lULzIKx kX2BZpiQ/SOeRH/bfZWiL4udph6Q21zZE3ChXW6wam3JW+9Q4hR3q7Ab07W3QSAz BrlR0qa4qyIrcLKtinatuofcH0TSqSSLuOZA1zX/grdapKFrIzTtwvthHbIu+1wE uII5Jrhf4/XJrp2tJYdXyyH5NsVyyqEc45WpRXZZavvBgDYAjlxekYBbVpCbTa4C KC0YTdWhWqGbQt4mmZtS5IcLwqrl4usySKgaDiNzdRQZXcbPhHAvjHQNWQLm7XSI Wh4gUld+bnPIrlQcGs9pYyiIhlgWuWN9T1o4Fr9YRMBW2G+YFSgyEgBcDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHg1tN5wOdmGhMj/5zFOWCRckUjMB8GA1UdIwQY MBaAFPHxhulwl8hBfZQ31wz9/FJzMbWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZHRzZYQ1h5RUY5bERmWERQMzhVbk14dGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81YzNiOTktYjhlZi00ZWQxLTg1N2Mt YjY1Y2QxMzYyNjJlLzEvOGZHRzZYQ1h5RUY5bERmWERQMzhVbk14dGFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi81YzNiOTktYjhlZi00ZWQxLTg1N2MtYjY1Y2QxMzYyNjJl LzEvOGZHRzZYQ1h5RUY5bERmWERQMzhVbk14dGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXPHTMDh pZFYA58H5ZHdoqetSGqiVwWxPIkKQkZnME2c5F+T/dzs+EF4S7/+0F5mrXILeiUS R80Dq/rQGrBfKER8Ek2QBgsNd9yihjd8uiEDAm1y0lVtMfLfIRFNsUT2SUSrEfy0 TCbZNq9lMhfrA1LQOrnrhgnJlBK7H/eS5bdQcnCSI1nArvMe4MjSrDMnli8DcDJW W6I4bauR62FAPpfzbiqT1M6Vkong6/u2vARWu4iWw6hxFvyGPD3I1GhhifiQy8vv 5vTPl1NMOMLwQG2ICrwUfTv0tq3WZk1zzqzZ3fWETQ0Hi0mI4NIJumeLpMMBvwXR GFCwezL1A6US6A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:18 2025 by rpki-client