This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft File: 8L-tMcFMk9qlNEugT0tSNUaW368.mft (raw, json) Hash identifier: ouQQt+M4qUH1bb8pkFKgIGezmj7sohm7nDIsS0e28Ss= Subject key identifier: 9C:E7:F8:6A:11:61:E9:ED:3F:2F:EB:9E:9D:C8:7E:15:A9:E1:33:02 Authority key identifier: F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF Certificate issuer: /CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf Certificate serial: 019B4B15B923E4E3DE749EA14C45372C8666 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 12:01:13 +0000 Manifest this update: Tue 23 Dec 2025 12:01:13 +0000 Manifest next update: Wed 24 Dec 2025 12:01:13 +0000 Files and hashes: 1: 8L-tMcFMk9qlNEugT0tSNUaW368.crl (hash: 8aS8y+TpwWTiPahuz6fuMwaA7ocPzXUUy0lBdSMRA5g=) 2: UW4EyDU9bcfR_a5RruA-KGiV3Uw.roa (hash: yNneGYRFbH3ZhAuncPonvd3a6cecW1xrZDzoeBjGnHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:b9:23:e4:e3:de:74:9e:a1:4c:45:37:2c:86:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf Validity Not Before: Dec 23 12:01:13 2025 GMT Not After : Dec 24 12:01:13 2025 GMT Subject: CN=9ce7f86a1161e9ed3f2feb9e9dc87e15a9e13302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:48:aa:c8:7b:6d:25:59:13:76:ed:c3:1a:fe: da:cc:d5:14:c3:b2:dc:9f:18:93:78:57:14:9c:25: 8b:c5:50:71:ba:a8:a8:b5:45:95:97:d3:e2:02:a1: 83:11:e3:85:f8:08:b9:ee:99:ed:db:e0:58:99:9d: 4c:cb:01:26:e3:f5:3c:64:07:83:a3:5d:5c:4e:f7: ca:fa:ad:c4:84:46:ec:8c:0c:5a:aa:48:ef:8e:0e: 4f:ee:65:bc:92:5a:cd:a0:84:df:ab:4e:7f:20:5c: f8:9a:67:43:85:ea:1f:11:d2:53:c8:f9:37:28:6a: e2:62:5e:bd:ba:a8:05:fd:e9:fd:fb:a2:f5:61:ec: e0:32:b3:6d:82:66:eb:13:2b:46:2a:68:66:9c:61: 42:cc:aa:b6:60:78:a7:90:7a:4f:1e:5b:fa:74:53: 0d:24:c8:69:5d:68:c2:d4:f1:53:3f:2f:54:ad:50: b6:ed:b1:ae:3b:c9:d8:00:dc:5b:ba:b1:f6:ef:d7: e2:ff:e5:f1:5b:b9:b7:1f:00:80:50:b2:91:a9:39: 99:7e:9b:75:14:bd:44:11:b8:60:12:e9:20:ba:91: 0f:3b:5f:08:39:dd:da:57:6a:0d:a9:33:d7:9b:f6: 84:ae:60:a0:ff:92:52:70:7a:dd:7d:9b:60:0a:46: da:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E7:F8:6A:11:61:E9:ED:3F:2F:EB:9E:9D:C8:7E:15:A9:E1:33:02 X509v3 Authority Key Identifier: keyid:F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:58:73:c5:01:09:40:89:25:ee:25:ff:f2:33:98:f1:d8:5b: 29:9f:6c:fc:d5:e1:25:7b:0a:09:f3:52:1a:38:b3:7b:db:3f: 3a:09:ad:e1:a3:2d:a9:46:c6:20:f6:27:30:50:65:31:29:62: 7f:69:7e:d8:0d:0d:95:40:12:73:da:e8:a7:ae:d7:6b:ee:93: e6:b9:33:07:62:18:14:13:1e:66:59:0e:8c:b7:52:55:81:f2: 69:27:13:47:77:10:fb:07:95:cf:94:5f:96:0c:a0:90:9c:ec: 99:3b:74:93:02:1e:c8:1c:e8:07:c7:01:f4:3b:a8:db:5d:b7: 8a:f2:d8:05:33:ce:f3:c1:f9:f6:af:20:8b:5e:9c:1a:97:55: 74:9a:aa:9a:99:5e:b9:68:a6:60:cf:96:69:a5:8f:86:e8:ae: d7:bc:2b:c0:7b:81:cf:1c:60:f4:18:f4:a1:65:e3:70:70:52: 11:50:06:5b:d4:f0:86:67:99:0a:3e:ee:da:2f:64:5b:e5:dd: 6d:d5:05:15:c4:85:11:bf:a1:4f:83:73:e3:7c:81:db:97:c0: 6c:89:98:93:18:39:d4:e4:a1:34:a8:39:97:11:90:1e:b9:a1: a2:74:3c:af:25:bf:fd:4c:1a:12:70:ef:75:70:05:29:b3:db: 3a:44:3f:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFbkj5OPedJ6hTEU3LIZmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYmZhZDMxYzE0YzkzZGFhNTM0NGJhMDRmNGI1MjM1NDY5 NmRmYWYwHhcNMjUxMjIzMTIwMTEzWhcNMjUxMjI0MTIwMTEzWjAzMTEwLwYDVQQD Eyg5Y2U3Zjg2YTExNjFlOWVkM2YyZmViOWU5ZGM4N2UxNWE5ZTEzMzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEiqyHttJVkTdu3DGv7azNUUw7Lc nxiTeFcUnCWLxVBxuqiotUWVl9PiAqGDEeOF+Ai57pnt2+BYmZ1MywEm4/U8ZAeD o11cTvfK+q3EhEbsjAxaqkjvjg5P7mW8klrNoITfq05/IFz4mmdDheofEdJTyPk3 KGriYl69uqgF/en9+6L1YezgMrNtgmbrEytGKmhmnGFCzKq2YHinkHpPHlv6dFMN JMhpXWjC1PFTPy9UrVC27bGuO8nYANxburH279fi/+XxW7m3HwCAULKRqTmZfpt1 FL1EEbhgEukgupEPO18IOd3aV2oNqTPXm/aErmCg/5JScHrdfZtgCkbadwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzn+GoRYentPy/rnp3IfhWp4TMCMB8GA1UdIwQY MBaAFPC/rTHBTJPapTRLoE9LUjVGlt+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9kYzM1ZWItNmVjZi00NDUyLTg1OTkt NzBkNTljYzRmN2NjLzEvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9kYzM1ZWItNmVjZi00NDUyLTg1OTktNzBkNTljYzRmN2Nj LzEvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlhzxQEJ QIkl7iX/8jOY8dhbKZ9s/NXhJXsKCfNSGjize9s/Ogmt4aMtqUbGIPYnMFBlMSli f2l+2A0NlUASc9rop67Xa+6T5rkzB2IYFBMeZlkOjLdSVYHyaScTR3cQ+weVz5Rf lgygkJzsmTt0kwIeyBzoB8cB9Duo2123ivLYBTPO88H59q8gi16cGpdVdJqqmple uWimYM+WaaWPhuiu17wrwHuBzxxg9Bj0oWXjcHBSEVAGW9TwhmeZCj7u2i9kW+Xd bdUFFcSFEb+hT4Nz43yB25fAbImYkxg51OShNKg5lxGQHrmhonQ8ryW//UwaEnDv dXAFKbPbOkQ/Qw== -----END CERTIFICATE-----Generated at Tue Dec 23 16:07:03 2025 by rpki-client