This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft File: 8kufSnwM67H5f6JAO2Me5tFuxjM.mft (raw, json) Hash identifier: k/F2FBIDS5ll07fMUlSlaQ+uH2ZmfR945pXoXvz00UI= Subject key identifier: 4B:34:92:62:18:86:98:5A:37:16:00:83:F5:E7:0E:5F:B8:3A:7C:1F Authority key identifier: F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33 Certificate issuer: /CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633 Certificate serial: 019B5A1B0931914B28A4276CD8089E645C72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft Manifest number: ED Signing time: Fri 26 Dec 2025 10:01:19 +0000 Manifest this update: Fri 26 Dec 2025 10:01:19 +0000 Manifest next update: Sat 27 Dec 2025 10:01:19 +0000 Files and hashes: 1: 8kufSnwM67H5f6JAO2Me5tFuxjM.crl (hash: z6+H2kYCQIgSzdNhJpA43K/EtxCCL9AM/wCXTOvDONw=) 2: zVCCoN-U0ius3abDeot_YngoJfc.roa (hash: fP+nwjzWvUa3O/fKfTzCwxd5RWiCPK08gubU5L+iEvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1b:09:31:91:4b:28:a4:27:6c:d8:08:9e:64:5c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633 Validity Not Before: Dec 26 10:01:19 2025 GMT Not After : Dec 27 10:01:19 2025 GMT Subject: CN=4b3492621886985a37160083f5e70e5fb83a7c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:00:0a:54:4f:76:81:fb:89:33:8d:00:0f:90: 19:db:0e:e9:d7:73:41:54:7c:64:49:89:6d:41:af: 9f:eb:03:d9:de:06:94:6a:74:3d:5f:ab:3b:30:65: 59:8a:98:32:21:9b:35:00:0c:77:85:8b:c7:51:46: a7:ca:e8:d2:10:09:39:ee:ef:e1:57:5f:a8:ec:d5: 02:bd:76:c3:c8:04:2f:e1:8a:80:b2:bd:2e:5a:dc: b5:cc:98:f4:41:50:d3:13:2b:9a:21:ca:60:7b:3c: 7a:39:14:72:00:22:39:c6:aa:03:69:cc:82:c4:9c: 7d:f3:94:45:8f:02:04:53:e3:c4:93:df:1f:34:bd: fb:80:d2:08:46:74:21:27:db:7d:2d:9d:3b:1c:b8: e7:5b:cf:a2:ff:40:a9:db:b7:89:ed:5e:7e:34:e7: 2a:57:83:dd:1b:21:51:22:91:5b:9a:a0:ff:df:44: d3:41:46:9d:c7:ed:25:40:84:d2:bc:11:66:c0:45: 05:88:0b:ea:0b:f4:f5:d4:8a:d0:bc:11:2c:87:e5: 34:e9:7c:f2:bd:b8:d1:ce:09:99:95:bb:fa:f6:da: 87:ef:56:52:c9:5e:1d:3d:91:f9:5f:a1:92:1f:03: 40:4a:a4:1d:7b:20:c0:2e:97:49:2c:a3:dc:6b:da: a7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:34:92:62:18:86:98:5A:37:16:00:83:F5:E7:0E:5F:B8:3A:7C:1F X509v3 Authority Key Identifier: keyid:F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:b2:ba:83:3e:77:03:f9:79:1c:83:d2:e3:cb:36:9c:b5:7a: 89:c9:6b:0c:2a:2d:a1:9d:55:4c:80:a7:12:00:52:b4:bd:ba: 0d:fc:6b:1e:13:fc:22:4c:21:3a:57:9c:62:b2:eb:c4:44:b9: 75:43:b8:95:97:44:89:17:c6:e5:aa:92:50:01:07:54:f9:00: d5:3e:57:2c:9f:59:01:4c:5e:c7:ed:fe:9d:fb:a9:2f:78:0b: 46:9d:df:04:fa:e7:b4:a5:28:e9:a6:d2:a2:35:ad:ab:d0:1b: b5:91:90:fd:e3:03:9f:dd:9e:c5:a4:38:3e:42:26:96:a7:65: 35:ca:b1:45:bb:75:1f:64:96:66:49:2c:12:9c:b5:9b:b2:05: d3:10:3b:28:77:82:2c:ef:bd:0a:5a:7e:ab:1e:4e:db:97:b7: 36:46:f2:3a:92:c8:66:70:20:7c:c6:62:bf:04:4a:b3:72:2d: 84:26:92:69:bc:21:f2:c0:1e:61:db:8b:30:72:9f:c8:50:ab: 09:90:8c:87:33:b8:a6:37:37:11:50:1c:81:eb:8f:e0:cd:17: ce:6a:3f:61:c0:b7:b1:52:ae:a0:7d:67:16:ce:b3:06:a4:97: 1c:d7:27:06:f6:52:e8:8d:cd:e5:29:45:db:03:d1:ff:63:7d: 7a:81:77:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGwkxkUsopCds2AieZFxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNGI5ZjRhN2MwY2ViYjFmOTdmYTI0MDNiNjMxZWU2ZDE2 ZWM2MzMwHhcNMjUxMjI2MTAwMTE5WhcNMjUxMjI3MTAwMTE5WjAzMTEwLwYDVQQD Eyg0YjM0OTI2MjE4ODY5ODVhMzcxNjAwODNmNWU3MGU1ZmI4M2E3YzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAAKVE92gfuJM40AD5AZ2w7p13NB VHxkSYltQa+f6wPZ3gaUanQ9X6s7MGVZipgyIZs1AAx3hYvHUUanyujSEAk57u/h V1+o7NUCvXbDyAQv4YqAsr0uWty1zJj0QVDTEyuaIcpgezx6ORRyACI5xqoDacyC xJx985RFjwIEU+PEk98fNL37gNIIRnQhJ9t9LZ07HLjnW8+i/0Cp27eJ7V5+NOcq V4PdGyFRIpFbmqD/30TTQUadx+0lQITSvBFmwEUFiAvqC/T11IrQvBEsh+U06Xzy vbjRzgmZlbv69tqH71ZSyV4dPZH5X6GSHwNASqQdeyDALpdJLKPca9qnbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEs0kmIYhphaNxYAg/XnDl+4OnwfMB8GA1UdIwQY MBaAFPJLn0p8DOux+X+iQDtjHubRbsYzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zZGUyMDgtMzQ3ZS00NmQ3LTljYzkt OWM4ZWFiNzZkYTk4LzEvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zZGUyMDgtMzQ3ZS00NmQ3LTljYzktOWM4ZWFiNzZkYTk4 LzEvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhLK6gz53 A/l5HIPS48s2nLV6iclrDCotoZ1VTICnEgBStL26DfxrHhP8IkwhOlecYrLrxES5 dUO4lZdEiRfG5aqSUAEHVPkA1T5XLJ9ZAUxex+3+nfupL3gLRp3fBPrntKUo6abS ojWtq9AbtZGQ/eMDn92exaQ4PkImlqdlNcqxRbt1H2SWZkksEpy1m7IF0xA7KHeC LO+9Clp+qx5O25e3NkbyOpLIZnAgfMZivwRKs3IthCaSabwh8sAeYduLMHKfyFCr CZCMhzO4pjc3EVAcgeuP4M0Xzmo/YcC3sVKuoH1nFs6zBqSXHNcnBvZS6I3N5SlF 2wPR/2N9eoF3WA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:11 2025 by rpki-client