This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft File: 8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json) Hash identifier: mnMuh6mg8yjxzCfx91NlkYx0U+1Sxuf58+DTlNizPxg= Subject key identifier: 90:84:B8:45:D6:4C:FE:6A:B9:37:11:36:9C:C1:05:17:AD:DC:C2:51 Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A Certificate issuer: /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a Certificate serial: 019AF61C27CC74BE52E31ED01BA08F13B566 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft Manifest number: 1668 Signing time: Sun 07 Dec 2025 00:00:31 +0000 Manifest this update: Sun 07 Dec 2025 00:00:31 +0000 Manifest next update: Mon 08 Dec 2025 00:00:31 +0000 Files and hashes: 1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: fWtAxPYN6MngO//CGkjI2L2o1xcTkMNBL4RjC+xUYz0=) 2: YuVFbu671lxJtgp8Dd5trr77imo.roa (hash: eoCcK7MisnOAgEVb/tn2NdbeYwDzl1a566p1bHV7AcM=) 3: n5Snke9qrVszV2r6iCOXAr8xpfU.roa (hash: OcodRKZ+v9kxH+amb1gjlja43PdbaBmuEGTA3TTwgu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:27:cc:74:be:52:e3:1e:d0:1b:a0:8f:13:b5:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a Validity Not Before: Dec 7 00:00:31 2025 GMT Not After : Dec 8 00:00:31 2025 GMT Subject: CN=9084b845d64cfe6ab93711369cc10517addcc251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:3f:37:a7:8b:9e:f4:5d:51:97:c7:f7:b2: 54:c1:aa:03:c2:6d:c1:bc:ac:f5:f8:9e:66:de:49: 79:43:7a:18:0a:b5:4e:b6:07:bd:e4:ec:83:20:bc: bf:08:68:4e:6a:a4:9a:d2:38:e5:f2:a3:46:d5:49: e6:5d:27:79:67:d4:01:33:34:d5:51:74:fb:94:b9: 04:36:84:79:19:11:5e:b6:5e:16:6f:96:8c:08:f7: 58:ca:ef:75:2f:4a:69:32:29:84:da:d8:f9:17:8d: 2d:02:46:16:aa:07:28:e7:57:7d:0b:c8:64:93:0b: c7:2e:83:1d:c6:63:b2:a7:cd:ef:e6:ad:f4:1d:9c: 5e:a2:4a:c9:7b:e4:be:35:b3:97:2b:ce:7e:d2:e4: da:c1:16:80:b9:51:47:40:8c:07:88:f9:d9:f0:69: f7:e3:52:12:80:4c:3d:5a:8b:0b:c8:09:30:a4:c9: 66:47:71:4a:08:ad:d4:3f:5b:db:5f:1c:06:2b:8c: 8b:38:bf:d8:50:7b:c6:6c:fd:d0:7d:ee:13:af:ec: f9:5f:2b:bb:c0:7c:8a:51:f1:1b:b2:95:14:1c:f6: 60:f1:ef:73:04:94:4f:c6:45:f0:aa:27:3e:1e:e1: 7e:fb:65:af:57:68:08:2b:4c:46:49:8a:fb:b0:59: d7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:84:B8:45:D6:4C:FE:6A:B9:37:11:36:9C:C1:05:17:AD:DC:C2:51 X509v3 Authority Key Identifier: keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:98:2d:cb:ac:d4:85:d3:90:32:ad:8b:68:ed:bd:21:c9:bd: 13:b7:29:a2:a5:bd:08:47:d1:9d:3a:6e:54:d8:63:17:58:a3: 76:06:cd:eb:ca:9a:e8:4e:1e:0b:b7:70:71:63:f7:b2:0e:ba: 12:91:f8:f8:88:8d:93:17:5e:2d:e4:bc:15:e5:be:ba:5d:91: c6:9d:1e:2a:95:74:76:9f:0a:59:a3:ab:8d:d9:ca:ff:52:a4: b4:a2:cb:8a:57:de:c6:1b:ee:da:65:c6:7c:f4:a9:1d:d7:26: e9:83:24:bb:d9:fb:e1:9e:90:1e:22:56:e8:68:6f:e9:7f:6a: 69:48:96:a4:0d:c5:3d:8a:db:83:e1:7d:ec:4d:3e:a9:ff:3e: 8c:91:ce:22:f0:cf:f1:5c:6b:79:b1:7c:78:29:35:13:ff:98: f3:5a:4b:f4:8c:e6:c2:13:0a:a6:1a:05:5c:9d:6e:34:b6:a3: 66:3d:02:85:44:6a:29:76:ad:27:db:84:6b:7a:da:48:a8:07: f1:64:1a:77:4c:64:2e:74:95:b8:e9:5b:7d:5d:3e:7a:be:ef: db:e7:2c:2d:f9:c0:47:e1:06:6e:8d:ef:da:77:ab:98:be:3a: 6a:a4:d2:f5:0f:aa:32:d7:f2:ad:ad:c8:9e:32:98:ba:30:01: 13:97:72:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HCfMdL5S4x7QG6CPE7VmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwY2Y0OTYzMzU3ZGRiOTg1NWY5YmFjNGM3ZDk5NWFkYzg5 YTM3MmEwHhcNMjUxMjA3MDAwMDMxWhcNMjUxMjA4MDAwMDMxWjAzMTEwLwYDVQQD Eyg5MDg0Yjg0NWQ2NGNmZTZhYjkzNzExMzY5Y2MxMDUxN2FkZGNjMjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjg/N6eLnvRdUZfH97JUwaoDwm3B vKz1+J5m3kl5Q3oYCrVOtge95OyDILy/CGhOaqSa0jjl8qNG1UnmXSd5Z9QBMzTV UXT7lLkENoR5GRFetl4Wb5aMCPdYyu91L0ppMimE2tj5F40tAkYWqgco51d9C8hk kwvHLoMdxmOyp83v5q30HZxeokrJe+S+NbOXK85+0uTawRaAuVFHQIwHiPnZ8Gn3 41ISgEw9WosLyAkwpMlmR3FKCK3UP1vbXxwGK4yLOL/YUHvGbP3Qfe4Tr+z5Xyu7 wHyKUfEbspUUHPZg8e9zBJRPxkXwqic+HuF++2WvV2gIK0xGSYr7sFnXcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCEuEXWTP5quTcRNpzBBRet3MJRMB8GA1UdIwQY MBaAFPDPSWM1fduYVfm6xMfZla3ImjcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NzU5MTItZmQwYy00MzE4LWIwYjAt NmUwNTZiNjE3ZDJhLzEvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85NzU5MTItZmQwYy00MzE4LWIwYjAtNmUwNTZiNjE3ZDJh LzEvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJgty6zU hdOQMq2LaO29Icm9E7cpoqW9CEfRnTpuVNhjF1ijdgbN68qa6E4eC7dwcWP3sg66 EpH4+IiNkxdeLeS8FeW+ul2Rxp0eKpV0dp8KWaOrjdnK/1KktKLLilfexhvu2mXG fPSpHdcm6YMku9n74Z6QHiJW6Ghv6X9qaUiWpA3FPYrbg+F97E0+qf8+jJHOIvDP 8VxrebF8eCk1E/+Y81pL9IzmwhMKphoFXJ1uNLajZj0ChURqKXatJ9uEa3raSKgH 8WQad0xkLnSVuOlbfV0+er7v2+csLfnAR+EGbo3v2nermL46aqTS9Q+qMtfyra3I njKYujABE5dy2A== -----END CERTIFICATE-----Generated at Sun Dec 7 02:11:53 2025 by rpki-client