This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft File: t8VYxCxDrVlAbqRGye7-1CpJHuw.mft (raw, json) Hash identifier: xCGNqcA+dsybldIn8nFWk6nkKKabqjqjvKeIOSh44LA= Subject key identifier: BB:F2:35:01:46:15:5E:DF:12:67:17:6C:FD:24:74:DC:7D:33:B6:CD Authority key identifier: B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC Certificate issuer: /CN=b7c558c42c43ad59406ea446c9eefed42a491eec Certificate serial: 019AF46517D3704C6E36265F07FB06F19972 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft Manifest number: 0E0F Signing time: Sat 06 Dec 2025 16:00:56 +0000 Manifest this update: Sat 06 Dec 2025 16:00:56 +0000 Manifest next update: Sun 07 Dec 2025 16:00:56 +0000 Files and hashes: 1: 9Vm6E83e5XfSlTSJaJsgPOsbxg8.roa (hash: VGm9skjMPVUUg6edMcPusOOmF7cXf1kchI2oKrFFOoI=) 2: t8VYxCxDrVlAbqRGye7-1CpJHuw.crl (hash: AA3vZq2RgyA1Ov3/90kThrBM8Akpve0uJ8Gm0OuLxdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:17:d3:70:4c:6e:36:26:5f:07:fb:06:f1:99:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c558c42c43ad59406ea446c9eefed42a491eec Validity Not Before: Dec 6 16:00:56 2025 GMT Not After : Dec 7 16:00:56 2025 GMT Subject: CN=bbf2350146155edf1267176cfd2474dc7d33b6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:8b:54:05:0b:1a:87:bc:7e:1f:28:41:f3:62: 3e:54:95:91:84:df:61:6b:56:81:6b:ee:b5:a0:3f: 27:d5:0f:90:2f:26:2f:5a:05:d9:85:94:39:c8:62: 48:c7:83:6b:d1:82:42:ab:d5:3f:c6:79:ea:2d:b9: ed:0d:d5:41:be:fd:2b:db:ef:43:11:09:96:bf:27: 07:50:df:a2:8f:21:6d:03:68:9a:7a:67:6f:32:f2: 2a:36:2e:a1:7c:0f:27:91:96:30:24:34:0f:43:5a: e6:8e:3d:42:5c:36:02:6f:43:d3:1b:71:94:3e:75: 20:16:96:fa:4c:c2:06:23:cf:39:7c:9d:b4:cb:7b: 1e:45:1c:ac:f0:81:5f:61:4c:24:d8:a4:49:d9:e5: 88:01:69:77:6e:af:2f:07:fd:9b:c5:e6:80:8d:d7: f7:5a:3b:09:9e:97:9b:2c:e9:e7:01:18:02:a9:62: cd:a9:59:98:2f:1b:3a:a1:26:4c:ec:14:85:e2:97: ae:6c:70:bd:3a:40:fe:b6:0d:64:bf:66:85:a4:ab: 5d:e5:0b:7b:74:28:34:47:38:f9:67:c2:69:9a:13: bf:29:59:5b:53:56:2b:a3:9e:75:b8:29:5f:52:e2: cc:40:0d:b3:a3:d0:a2:da:e5:3a:dd:82:76:e6:96: 51:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F2:35:01:46:15:5E:DF:12:67:17:6C:FD:24:74:DC:7D:33:B6:CD X509v3 Authority Key Identifier: keyid:B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:e1:3b:bc:6f:fd:47:e5:ce:0f:9b:ef:db:59:e6:34:52:6c: d9:94:b8:3c:0d:35:9c:a2:93:5b:32:71:f4:81:16:56:e1:d2: 01:11:d5:12:87:d8:d3:a3:da:cb:2c:73:7f:16:e2:24:b3:eb: d2:8f:e7:36:89:9c:a6:c0:5b:ef:e3:15:5b:62:0e:5b:f7:b4: ba:a2:28:7d:b5:23:90:b8:8d:6f:e7:b2:b6:45:8b:a0:33:d6: f2:cf:7d:84:2f:16:b3:55:b8:dc:cc:87:04:c8:f8:e7:6f:f8: 31:84:a4:3d:bb:fe:ba:21:d8:39:dc:ea:d0:dc:5f:0a:73:29: 2f:60:d3:f4:b5:03:c2:08:0c:9c:89:fa:33:f1:2d:fb:da:4a: bc:a3:9e:14:48:6e:35:95:aa:21:15:d1:ef:09:92:86:60:e5: b2:dc:e9:f7:69:74:52:cc:d9:90:ca:4a:f2:6d:e6:4f:22:47: 09:70:80:2a:91:c3:21:81:04:e5:cb:cd:c9:98:0d:16:71:6f: e2:15:81:85:23:f7:8b:90:b1:86:cc:1c:8a:53:85:25:47:f8: 04:b0:fd:5c:4c:39:c2:e1:45:b9:df:a7:b0:51:0a:14:53:ef: cb:b7:af:01:39:50:79:49:bf:9e:43:07:1f:3c:51:97:a1:1f: 44:3a:c3:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZRfTcExuNiZfB/sG8ZlyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YzU1OGM0MmM0M2FkNTk0MDZlYTQ0NmM5ZWVmZWQ0MmE0 OTFlZWMwHhcNMjUxMjA2MTYwMDU2WhcNMjUxMjA3MTYwMDU2WjAzMTEwLwYDVQQD EyhiYmYyMzUwMTQ2MTU1ZWRmMTI2NzE3NmNmZDI0NzRkYzdkMzNiNmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/YtUBQsah7x+HyhB82I+VJWRhN9h a1aBa+61oD8n1Q+QLyYvWgXZhZQ5yGJIx4Nr0YJCq9U/xnnqLbntDdVBvv0r2+9D EQmWvycHUN+ijyFtA2iaemdvMvIqNi6hfA8nkZYwJDQPQ1rmjj1CXDYCb0PTG3GU PnUgFpb6TMIGI885fJ20y3seRRys8IFfYUwk2KRJ2eWIAWl3bq8vB/2bxeaAjdf3 WjsJnpebLOnnARgCqWLNqVmYLxs6oSZM7BSF4peubHC9OkD+tg1kv2aFpKtd5Qt7 dCg0Rzj5Z8JpmhO/KVlbU1Yro551uClfUuLMQA2zo9Ci2uU63YJ25pZRtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvyNQFGFV7fEmcXbP0kdNx9M7bNMB8GA1UdIwQY MBaAFLfFWMQsQ61ZQG6kRsnu/tQqSR7sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDhWWXhDeERyVmxBYnFSR3llNy0xQ3BKSHV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83MTg5N2UtNWY2Zi00NDlkLWI4MmMt YTI1ZWY0NDIwYTJhLzEvdDhWWXhDeERyVmxBYnFSR3llNy0xQ3BKSHV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83MTg5N2UtNWY2Zi00NDlkLWI4MmMtYTI1ZWY0NDIwYTJh LzEvdDhWWXhDeERyVmxBYnFSR3llNy0xQ3BKSHV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkuE7vG/9 R+XOD5vv21nmNFJs2ZS4PA01nKKTWzJx9IEWVuHSARHVEofY06PayyxzfxbiJLPr 0o/nNomcpsBb7+MVW2IOW/e0uqIofbUjkLiNb+eytkWLoDPW8s99hC8Ws1W43MyH BMj452/4MYSkPbv+uiHYOdzq0NxfCnMpL2DT9LUDwggMnIn6M/Et+9pKvKOeFEhu NZWqIRXR7wmShmDlstzp92l0UszZkMpK8m3mTyJHCXCAKpHDIYEE5cvNyZgNFnFv 4hWBhSP3i5CxhswcilOFJUf4BLD9XEw5wuFFud+nsFEKFFPvy7evATlQeUm/nkMH HzxRl6EfRDrDuQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:15 2025 by rpki-client