This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft File: 8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json) Hash identifier: pJqxrxIkNWksw6cjPypHYduSfsGvB5opodbP1fwvshE= Subject key identifier: 8D:91:47:8E:2B:37:5D:6A:15:AF:65:12:29:3F:D0:A5:73:6C:0D:09 Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A Certificate issuer: /CN=f06de29e9356df44707c8396d918e6b289129c4a Certificate serial: 019B0F00A251921BED3BA097E567E75CA9DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft Manifest number: 02D3 Signing time: Thu 11 Dec 2025 20:00:58 +0000 Manifest this update: Thu 11 Dec 2025 20:00:58 +0000 Manifest next update: Fri 12 Dec 2025 20:00:58 +0000 Files and hashes: 1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: hOs7efa6xGZL90o9cDMtYpiX/P0xV3cKMUZ9HUWpXmo=) 2: FruHS8sKA0UVPBPUKiJYlzj46rI.roa (hash: If8vnhAP47c8P1zX/kOfX6rctIeesg8CbkDyipSuox4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:a2:51:92:1b:ed:3b:a0:97:e5:67:e7:5c:a9:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a Validity Not Before: Dec 11 20:00:58 2025 GMT Not After : Dec 12 20:00:58 2025 GMT Subject: CN=8d91478e2b375d6a15af6512293fd0a5736c0d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:4a:02:bc:18:68:05:9f:3b:77:ac:25:47: 3f:35:5a:cd:4b:48:3e:a1:aa:7b:be:31:08:64:e9: ba:e3:a1:8e:ca:61:c0:1b:86:81:ed:2a:c3:57:1f: d1:50:f4:08:56:eb:af:2b:ca:82:b6:2e:bb:ac:e2: 00:27:fc:13:33:01:ab:5e:60:04:23:4f:c3:a5:92: af:30:28:72:4a:96:80:eb:be:5e:e1:0c:6e:d2:ac: a2:2a:27:43:88:10:3d:ec:5b:75:f4:0e:1e:82:e4: dd:a7:3b:2b:d2:3b:aa:a4:9c:69:cf:b9:77:96:52: 5e:37:74:a1:87:ec:73:63:27:09:a8:32:b6:0b:73: c7:95:6a:c8:46:7b:e2:31:a8:1c:62:0a:bb:ff:59: db:c4:98:f2:47:bf:12:62:c3:85:de:9d:bf:64:97: 12:50:08:41:cb:f0:89:ed:ff:dd:f8:4c:8b:d8:36: 22:7f:fb:dc:6d:b8:a7:79:92:b6:f7:27:9b:77:62: 5c:87:00:25:50:c7:b5:02:2a:c2:4c:f4:90:db:8e: 56:38:74:9b:97:70:c7:58:c0:10:91:48:cf:e5:56: b0:00:9e:66:c0:8b:7d:e1:ca:91:38:31:7e:d0:28: 17:11:57:55:87:43:42:35:31:c3:2e:0e:25:b0:1d: c8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:91:47:8E:2B:37:5D:6A:15:AF:65:12:29:3F:D0:A5:73:6C:0D:09 X509v3 Authority Key Identifier: keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ac:60:d5:11:2b:75:b9:de:79:51:28:15:13:ce:35:f1:38: c3:68:a9:af:70:02:95:3b:d9:9d:1d:6b:55:9e:50:bb:f4:0e: ca:de:8c:50:46:26:17:25:b0:1d:97:36:9a:41:da:91:c6:34: 14:c8:d8:b0:fd:8d:15:49:4d:ee:8e:18:ab:83:ae:0d:85:0b: b1:35:17:e3:47:fb:e8:58:83:63:f7:5a:0c:a2:74:11:5f:6a: d7:aa:10:20:39:4d:94:b6:2c:68:69:ab:c7:b3:28:7e:a2:26: cb:4e:62:dc:b3:4a:48:01:54:a5:41:0d:c5:28:07:fd:6e:93: 55:89:2d:af:88:f7:0f:95:71:ca:3e:9e:84:0d:b1:a5:a8:a9: fc:96:57:53:8d:3b:c2:9e:2d:ef:84:69:ae:ac:c4:14:95:1f: 60:05:b1:6e:61:c1:40:da:58:ce:4e:2e:fe:42:e7:b1:1b:36: b4:23:88:3b:d4:01:58:1a:ac:35:b0:db:b1:0a:89:47:37:d7: d9:33:17:40:a6:da:bf:d6:6e:5a:cc:77:5c:cc:a5:5c:3b:71: 74:1c:ea:bf:0c:c8:bc:7f:fe:0d:b8:ee:c4:a0:8c:b6:fe:14: 36:16:01:fd:32:e8:41:a9:5d:6b:fc:e9:ad:bc:90:c2:34:aa: f5:1e:f6:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAKJRkhvtO6CX5WfnXKnbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNmRlMjllOTM1NmRmNDQ3MDdjODM5NmQ5MThlNmIyODkx MjljNGEwHhcNMjUxMjExMjAwMDU4WhcNMjUxMjEyMjAwMDU4WjAzMTEwLwYDVQQD Eyg4ZDkxNDc4ZTJiMzc1ZDZhMTVhZjY1MTIyOTNmZDBhNTczNmMwZDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+5KArwYaAWfO3esJUc/NVrNS0g+ oap7vjEIZOm646GOymHAG4aB7SrDVx/RUPQIVuuvK8qCti67rOIAJ/wTMwGrXmAE I0/DpZKvMChySpaA675e4Qxu0qyiKidDiBA97Ft19A4eguTdpzsr0juqpJxpz7l3 llJeN3Shh+xzYycJqDK2C3PHlWrIRnviMagcYgq7/1nbxJjyR78SYsOF3p2/ZJcS UAhBy/CJ7f/d+EyL2DYif/vcbbineZK29yebd2JchwAlUMe1AirCTPSQ245WOHSb l3DHWMAQkUjP5VawAJ5mwIt94cqRODF+0CgXEVdVh0NCNTHDLg4lsB3IkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2RR44rN11qFa9lEik/0KVzbA0JMB8GA1UdIwQY MBaAFPBt4p6TVt9EcHyDltkY5rKJEpxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lNDRkNTgtMTVkNS00OGM3LWJlMjEt ZjgxNmQzYmU0MDEyLzEvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lNDRkNTgtMTVkNS00OGM3LWJlMjEtZjgxNmQzYmU0MDEy LzEvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6xg1REr dbneeVEoFRPONfE4w2ipr3AClTvZnR1rVZ5Qu/QOyt6MUEYmFyWwHZc2mkHakcY0 FMjYsP2NFUlN7o4Yq4OuDYULsTUX40f76FiDY/daDKJ0EV9q16oQIDlNlLYsaGmr x7MofqImy05i3LNKSAFUpUENxSgH/W6TVYktr4j3D5Vxyj6ehA2xpaip/JZXU407 wp4t74RprqzEFJUfYAWxbmHBQNpYzk4u/kLnsRs2tCOIO9QBWBqsNbDbsQqJRzfX 2TMXQKbav9ZuWsx3XMylXDtxdBzqvwzIvH/+DbjuxKCMtv4UNhYB/TLoQalda/zp rbyQwjSq9R72rA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:25:08 2025 by rpki-client