This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft File: 8fF-vMKlJa_PySIYFZyvUogpeNI.mft (raw, json) Hash identifier: feoW8QbCAxKgC2dWjF/68ehAEeym7G502UJCo9GjQZk= Subject key identifier: 68:46:C5:D3:3B:33:20:0A:9C:6F:5C:71:54:30:E7:99:16:C6:38:69 Authority key identifier: F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2 Certificate issuer: /CN=f1f17ebcc2a525afcfc92218159caf52882978d2 Certificate serial: 019B18A8ACCBA3E4808CD3C83053317DF939 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft Manifest number: 07D5 Signing time: Sat 13 Dec 2025 17:01:06 +0000 Manifest this update: Sat 13 Dec 2025 17:01:06 +0000 Manifest next update: Sun 14 Dec 2025 17:01:06 +0000 Files and hashes: 1: 8fF-vMKlJa_PySIYFZyvUogpeNI.crl (hash: 7PlJ5HRBUDy8JqL4ndwjXAd/YPzk+MoP9+lYioOgHMU=) 2: xG5nFDK1Nyvy5vl4sT_P7td-s98.roa (hash: 9ZslVC10Wq5A6L0EoqSP1oGGII0oefI9/cuRC4XS49Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a8:ac:cb:a3:e4:80:8c:d3:c8:30:53:31:7d:f9:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f17ebcc2a525afcfc92218159caf52882978d2 Validity Not Before: Dec 13 17:01:06 2025 GMT Not After : Dec 14 17:01:06 2025 GMT Subject: CN=6846c5d33b33200a9c6f5c715430e79916c63869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:89:5b:c1:01:78:81:3d:6a:e8:4e:78:3b:73: f7:82:0b:0a:a9:10:d4:1a:9d:5d:9e:cc:a8:b0:96: b2:76:da:d9:da:f6:48:71:f0:b7:ca:2f:38:c4:e3: a8:63:d8:ce:76:e0:cb:48:90:8e:11:3d:0f:f5:e7: 0d:52:e7:21:27:6b:3e:ca:94:95:b6:08:86:30:42: d0:24:bc:23:db:e9:38:47:7d:d5:1a:4e:28:f6:2c: 84:78:49:8f:79:83:6a:5f:1f:ef:0a:67:31:0b:16: 84:06:5f:a3:2e:5a:89:96:a9:32:70:6c:27:92:67: 2a:10:b9:b0:b4:54:d5:93:d0:a0:7f:f9:75:0a:84: 14:91:c7:34:9d:64:19:e1:76:3a:da:ab:a9:e1:44: 20:39:79:69:00:b5:ac:55:a1:49:d3:2e:63:50:e8: 23:43:25:90:eb:42:5d:f9:66:76:3c:b1:7f:c9:10: 8f:86:b0:e8:8e:c2:79:a4:d9:37:e9:e1:d8:38:64: 9b:99:e1:d0:7a:eb:38:80:43:92:50:96:a5:18:74: f4:11:74:43:22:5a:f2:52:00:24:1e:4d:0f:c9:ae: 28:4b:ff:ff:35:3b:88:f2:40:82:ce:e2:f7:27:dc: 25:68:60:31:32:9e:db:ff:6b:7a:94:8c:c0:1e:95: 69:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:46:C5:D3:3B:33:20:0A:9C:6F:5C:71:54:30:E7:99:16:C6:38:69 X509v3 Authority Key Identifier: keyid:F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:dc:0a:6f:6e:c9:f1:af:f5:a2:89:76:94:3e:3f:8a:fe:01: 50:d2:67:f4:2e:d6:59:06:dd:d8:0b:92:b0:17:13:9a:ff:e8: 91:64:b8:21:2f:40:0f:57:61:2b:60:4d:3d:18:de:b2:9b:61: 00:d8:06:22:9c:9a:c2:b4:57:6e:cc:86:34:b0:ea:66:9f:7f: bf:7b:a8:3c:75:f5:13:1f:19:88:ff:bd:8d:eb:31:23:7e:ad: dd:7a:db:f6:49:b4:16:29:e7:98:e9:b7:2f:b3:fd:cd:d4:3f: ef:9a:34:29:2c:dd:45:e9:70:54:c3:54:4d:f1:7f:da:32:c0: b8:a1:ca:99:93:3f:5f:3f:4f:01:3f:0d:13:18:fc:cb:d9:da: e2:62:1b:c1:5a:5a:8e:d5:f3:8e:bf:0a:42:b2:59:88:d6:b9: a0:22:28:42:2f:75:7f:f3:a1:c2:11:3d:92:b2:e5:4c:a5:d9: 26:c8:b5:fe:53:2c:18:2b:64:2d:f6:c0:3a:ce:f7:4c:d3:db: 70:e4:29:39:c6:57:17:8c:37:15:6a:a8:a3:cc:57:b1:d2:db: c9:ee:1a:aa:b3:99:91:ab:1b:9a:0a:d6:7b:40:42:9e:e6:61: 6f:7e:1d:54:f6:75:72:02:de:a7:a5:94:f3:98:e7:0a:e4:8d: e4:df:2c:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqKzLo+SAjNPIMFMxffk5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjE3ZWJjYzJhNTI1YWZjZmM5MjIxODE1OWNhZjUyODgy OTc4ZDIwHhcNMjUxMjEzMTcwMTA2WhcNMjUxMjE0MTcwMTA2WjAzMTEwLwYDVQQD Eyg2ODQ2YzVkMzNiMzMyMDBhOWM2ZjVjNzE1NDMwZTc5OTE2YzYzODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIlbwQF4gT1q6E54O3P3ggsKqRDU Gp1dnsyosJaydtrZ2vZIcfC3yi84xOOoY9jOduDLSJCOET0P9ecNUuchJ2s+ypSV tgiGMELQJLwj2+k4R33VGk4o9iyEeEmPeYNqXx/vCmcxCxaEBl+jLlqJlqkycGwn kmcqELmwtFTVk9Cgf/l1CoQUkcc0nWQZ4XY62qup4UQgOXlpALWsVaFJ0y5jUOgj QyWQ60Jd+WZ2PLF/yRCPhrDojsJ5pNk36eHYOGSbmeHQeus4gEOSUJalGHT0EXRD IlryUgAkHk0Pya4oS///NTuI8kCCzuL3J9wlaGAxMp7b/2t6lIzAHpVp6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhGxdM7MyAKnG9ccVQw55kWxjhpMB8GA1UdIwQY MBaAFPHxfrzCpSWvz8kiGBWcr1KIKXjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hNzJkYTEtYWY4MS00Nzg3LWEwODUt ZmYzNGE4YWU5MDFhLzEvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hNzJkYTEtYWY4MS00Nzg3LWEwODUtZmYzNGE4YWU5MDFh LzEvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqdwKb27J 8a/1ool2lD4/iv4BUNJn9C7WWQbd2AuSsBcTmv/okWS4IS9AD1dhK2BNPRjespth ANgGIpyawrRXbsyGNLDqZp9/v3uoPHX1Ex8ZiP+9jesxI36t3Xrb9km0FinnmOm3 L7P9zdQ/75o0KSzdRelwVMNUTfF/2jLAuKHKmZM/Xz9PAT8NExj8y9na4mIbwVpa jtXzjr8KQrJZiNa5oCIoQi91f/OhwhE9krLlTKXZJsi1/lMsGCtkLfbAOs73TNPb cOQpOcZXF4w3FWqoo8xXsdLbye4aqrOZkasbmgrWe0BCnuZhb34dVPZ1cgLep6WU 85jnCuSN5N8sFw== -----END CERTIFICATE-----Generated at Sun Dec 14 00:08:06 2025 by rpki-client