This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft File: r8GT7hHlRxYWn5TI-THq4fyFSSE.mft (raw, json) Hash identifier: hz/kUanY6ArVm9PMJobyr8EcxbuxfYfTPctIzEKeXb4= Subject key identifier: 98:97:C6:B6:7C:BE:6A:0D:68:1A:22:8C:D0:77:7A:1A:8B:FF:44:6D Authority key identifier: AF:C1:93:EE:11:E5:47:16:16:9F:94:C8:F9:31:EA:E1:FC:85:49:21 Certificate issuer: /CN=afc193ee11e54716169f94c8f931eae1fc854921 Certificate serial: 019B3C7F24594854298C30EBA4D9B9D3B860 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft Manifest number: 0CDB Signing time: Sat 20 Dec 2025 16:02:03 +0000 Manifest this update: Sat 20 Dec 2025 16:02:03 +0000 Manifest next update: Sun 21 Dec 2025 16:02:03 +0000 Files and hashes: 1: AaiQ-SNQmt6l5xOeIk4PwVHWfh4.roa (hash: 6CQTrWnDAV45WpOAHO1NfVL9iDI/ELlZY8vizp+bA9s=) 2: r8GT7hHlRxYWn5TI-THq4fyFSSE.crl (hash: y4e3poLqkZdCSGCOoX7KeIcYnk3rYoSmbhrBmeZXZtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:24:59:48:54:29:8c:30:eb:a4:d9:b9:d3:b8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc193ee11e54716169f94c8f931eae1fc854921 Validity Not Before: Dec 20 16:02:03 2025 GMT Not After : Dec 21 16:02:03 2025 GMT Subject: CN=9897c6b67cbe6a0d681a228cd0777a1a8bff446d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:70:2c:63:9e:33:68:db:0c:40:b5:5a:86:c7: f2:fd:52:ac:0b:f3:af:b8:06:41:6e:31:35:5f:46: 4c:fa:fb:9a:47:e0:cc:10:eb:cc:51:e3:54:ad:d6: c6:e0:5d:de:7a:c4:bc:86:2e:90:47:ac:4a:9b:70: a5:8f:05:f6:9b:3b:57:12:9a:cf:73:1e:b9:0f:57: 2f:14:e4:ba:df:a2:92:79:6b:d8:b6:b6:bb:4d:c7: 8c:97:e9:5b:a9:7f:96:45:d0:41:0e:e5:36:be:ba: 18:1c:97:ce:3b:9f:33:22:ee:93:95:89:bb:46:a8: bb:3d:49:a9:f8:36:5e:88:bb:a5:1e:2f:64:f4:de: 81:82:75:a6:9e:3a:12:66:ee:3a:b6:3b:6c:34:5b: 76:8e:e8:53:0e:9e:b0:08:e6:b9:cf:a4:6e:8c:91: 84:42:97:3e:49:e1:95:00:a8:1a:16:02:34:bb:59: 7b:83:9a:3b:1f:68:87:88:69:e3:7e:e0:b0:43:08: 23:b9:ed:0a:02:1c:24:1e:22:36:53:10:b3:81:0d: 22:3a:58:04:5b:6e:7b:4c:8d:25:e9:26:d9:b0:f3: 32:20:8d:c3:cd:b0:b6:10:d4:c8:11:4c:5a:c3:a8: e8:d5:01:1e:6a:f7:24:48:e8:48:90:1a:f8:47:f2: dd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:97:C6:B6:7C:BE:6A:0D:68:1A:22:8C:D0:77:7A:1A:8B:FF:44:6D X509v3 Authority Key Identifier: keyid:AF:C1:93:EE:11:E5:47:16:16:9F:94:C8:F9:31:EA:E1:FC:85:49:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:e1:c2:9e:1c:e9:26:c5:d1:71:ca:5c:86:97:30:6a:15:aa: 4d:73:04:d9:20:af:bb:ba:e0:8f:57:1b:f7:05:da:bf:fb:a4: 6d:25:e2:f4:72:c2:4e:98:e6:2a:0a:f7:fe:3f:72:f7:87:8b: 30:34:65:d9:2d:ad:bb:3c:9f:44:95:4d:1b:b8:a7:02:fe:57: 9c:e4:fe:37:dc:7c:8b:51:7c:e5:8d:94:bb:98:93:16:4d:c6: 6f:a9:aa:43:75:fe:6d:84:5b:a5:42:4a:7a:28:70:3a:b0:f4: cc:69:f3:5e:0a:44:14:02:51:69:1e:fe:db:20:18:ca:f5:a1: c1:fd:95:58:50:18:1f:9d:69:a8:a7:9f:3a:a9:a6:d4:09:6f: 5a:11:ee:c6:6b:5e:5a:8e:ad:e4:85:43:f0:55:51:0b:02:55: 76:6d:bb:0d:b7:17:22:92:7b:f3:80:99:98:e8:5e:27:6b:b6: a4:67:91:bb:3a:74:90:a3:e2:e6:44:ee:b3:eb:64:75:62:df: f4:f1:68:c4:62:bc:89:68:fa:0c:75:5c:1c:15:a5:ba:09:57: 9d:8f:2e:4c:4e:58:fd:9f:ae:84:0c:eb:1f:85:dc:e7:c3:2f: 55:b8:1b:0c:21:46:d3:ce:bc:d7:6e:7f:8f:99:39:da:2b:55: 86:eb:4f:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fyRZSFQpjDDrpNm507hgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYzE5M2VlMTFlNTQ3MTYxNjlmOTRjOGY5MzFlYWUxZmM4 NTQ5MjEwHhcNMjUxMjIwMTYwMjAzWhcNMjUxMjIxMTYwMjAzWjAzMTEwLwYDVQQD Eyg5ODk3YzZiNjdjYmU2YTBkNjgxYTIyOGNkMDc3N2ExYThiZmY0NDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonAsY54zaNsMQLVahsfy/VKsC/Ov uAZBbjE1X0ZM+vuaR+DMEOvMUeNUrdbG4F3eesS8hi6QR6xKm3CljwX2mztXEprP cx65D1cvFOS636KSeWvYtra7TceMl+lbqX+WRdBBDuU2vroYHJfOO58zIu6TlYm7 Rqi7PUmp+DZeiLulHi9k9N6BgnWmnjoSZu46tjtsNFt2juhTDp6wCOa5z6RujJGE Qpc+SeGVAKgaFgI0u1l7g5o7H2iHiGnjfuCwQwgjue0KAhwkHiI2UxCzgQ0iOlgE W257TI0l6SbZsPMyII3DzbC2ENTIEUxaw6jo1QEeavckSOhIkBr4R/LdZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJiXxrZ8vmoNaBoijNB3ehqL/0RtMB8GA1UdIwQY MBaAFK/Bk+4R5UcWFp+UyPkx6uH8hUkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjhHVDdoSGxSeFlXbjVUSS1USHE0ZnlGU1NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wYjljYmYtMjVhZS00MzI3LTk4YWEt YTdkZDlhZWExZDdhLzEvcjhHVDdoSGxSeFlXbjVUSS1USHE0ZnlGU1NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8wYjljYmYtMjVhZS00MzI3LTk4YWEtYTdkZDlhZWExZDdh LzEvcjhHVDdoSGxSeFlXbjVUSS1USHE0ZnlGU1NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOHCnhzp JsXRccpchpcwahWqTXME2SCvu7rgj1cb9wXav/ukbSXi9HLCTpjmKgr3/j9y94eL MDRl2S2tuzyfRJVNG7inAv5XnOT+N9x8i1F85Y2Uu5iTFk3Gb6mqQ3X+bYRbpUJK eihwOrD0zGnzXgpEFAJRaR7+2yAYyvWhwf2VWFAYH51pqKefOqmm1AlvWhHuxmte Wo6t5IVD8FVRCwJVdm27DbcXIpJ784CZmOheJ2u2pGeRuzp0kKPi5kTus+tkdWLf 9PFoxGK8iWj6DHVcHBWluglXnY8uTE5Y/Z+uhAzrH4Xc58MvVbgbDCFG0868125/ j5k52itVhutPzQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:10:29 2025 by rpki-client