This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft File: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft (raw, json) Hash identifier: nw+ixtyJp6UAW/MiL9uRBVJS8vNdCZrUHIW2JVUsXRQ= Subject key identifier: 86:01:E7:81:02:E4:86:23:F3:46:8E:AA:D4:E2:15:AE:36:CC:F3:91 Authority key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94 Certificate issuer: /CN=f0d03098b8356fffc5a597e9c45b84edf87cf994 Certificate serial: 019B0F3725831E28CF9C76CA6C2FF7E49016 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft Manifest number: 1524 Signing time: Thu 11 Dec 2025 21:00:30 +0000 Manifest this update: Thu 11 Dec 2025 21:00:30 +0000 Manifest next update: Fri 12 Dec 2025 21:00:30 +0000 Files and hashes: 1: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl (hash: R1Cp/47RE4g72NVJOQtJ5djZRZ/Dj1El2Zfd/2RWr10=) 2: OkXBNJnUgokPx0Xxs8AUPN40aT4.roa (hash: E/UomHj5ST+3/lio4VV13yWumaIvNp+hYEYFZLaJR7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:25:83:1e:28:cf:9c:76:ca:6c:2f:f7:e4:90:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994 Validity Not Before: Dec 11 21:00:30 2025 GMT Not After : Dec 12 21:00:30 2025 GMT Subject: CN=8601e78102e48623f3468eaad4e215ae36ccf391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b3:d7:06:80:34:0b:ea:bb:88:19:43:b4:98: 04:17:28:0b:bd:70:3b:8e:ac:34:a2:04:56:1e:56: 06:8d:e1:b7:a6:7a:90:7e:70:39:a9:a7:25:11:10: 73:fe:a3:08:cd:3a:e6:34:f4:e3:71:3b:0a:36:63: 20:f2:f2:1a:80:f3:25:fd:85:9b:f6:63:6d:5b:98: 7f:aa:87:98:4e:6d:cc:41:fb:fc:1a:eb:58:16:4f: 5d:3d:f3:18:52:c9:2c:26:cb:00:2c:34:db:5a:0b: fb:a3:b9:84:2d:f5:ac:3f:b9:ba:26:5d:4a:8a:40: 5c:ad:5c:5b:00:ea:b7:dd:ef:cd:12:d0:f0:7a:f5: 0b:0b:4b:ab:60:36:b5:fb:65:d9:ea:40:a7:c5:32: 66:36:69:44:91:34:90:67:f9:a5:dd:49:89:2b:5d: c7:39:15:20:20:0a:b0:1f:83:d1:a2:ed:c2:e2:3f: 1c:71:12:8b:48:29:aa:64:f7:9b:12:ee:1c:6a:30: 54:15:7c:3e:b7:55:50:80:de:4c:09:28:2b:dd:a8: f9:e2:81:a9:08:c4:2f:6d:55:b2:75:b8:4b:fa:e4: 9f:f9:44:12:20:3d:91:91:a2:13:92:47:a5:28:a1: ef:da:08:3e:e2:b0:fd:3a:bd:30:6b:b3:73:b2:25: eb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:01:E7:81:02:E4:86:23:F3:46:8E:AA:D4:E2:15:AE:36:CC:F3:91 X509v3 Authority Key Identifier: keyid:F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:0c:db:a1:04:1f:b4:c7:f7:a5:de:13:0a:76:f8:b7:77:06: ca:28:44:2a:f7:f5:f6:12:5a:c9:e2:e5:b2:33:d5:a2:e4:25: 1e:ae:aa:37:9f:4d:02:65:2a:4e:76:5d:4b:cb:86:b0:d6:8f: ef:1b:8a:c0:ed:17:2b:a9:b3:2a:35:3e:af:b7:11:76:74:a1: ee:c0:24:05:d1:68:73:1d:2a:ec:ae:b2:40:9a:3f:ff:9c:72: f7:83:fa:7c:41:c4:0f:d5:96:24:2a:93:8a:8d:5f:01:f9:2d: f9:a6:67:9c:54:ad:75:bd:2e:4a:2a:95:cd:46:1f:ee:7a:2e: 28:13:98:02:1d:a6:8e:2e:7b:b6:0b:5e:b3:9e:f2:4d:05:89: 8d:b4:24:ca:a2:1a:48:46:7a:32:10:11:01:c7:b5:e0:c6:04: d2:9d:96:78:0d:d6:22:1a:fb:aa:c3:b4:1a:96:95:42:6e:b4: 8e:95:d0:93:98:d3:88:58:e9:24:36:d3:11:27:ea:c2:24:91: 24:72:fb:26:2e:ea:38:c5:44:68:dd:ac:ed:de:05:2d:a1:9f: 49:17:97:6e:a3:b1:63:43:79:58:bc:d7:74:b7:31:3c:a6:50: 88:16:f7:43:fd:cd:ac:da:ae:3f:0c:8c:6c:85:3e:91:d3:ec: 26:45:54:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPNyWDHijPnHbKbC/35JAWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZDAzMDk4YjgzNTZmZmZjNWE1OTdlOWM0NWI4NGVkZjg3 Y2Y5OTQwHhcNMjUxMjExMjEwMDMwWhcNMjUxMjEyMjEwMDMwWjAzMTEwLwYDVQQD Eyg4NjAxZTc4MTAyZTQ4NjIzZjM0NjhlYWFkNGUyMTVhZTM2Y2NmMzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrPXBoA0C+q7iBlDtJgEFygLvXA7 jqw0ogRWHlYGjeG3pnqQfnA5qaclERBz/qMIzTrmNPTjcTsKNmMg8vIagPMl/YWb 9mNtW5h/qoeYTm3MQfv8GutYFk9dPfMYUsksJssALDTbWgv7o7mELfWsP7m6Jl1K ikBcrVxbAOq33e/NEtDwevULC0urYDa1+2XZ6kCnxTJmNmlEkTSQZ/ml3UmJK13H ORUgIAqwH4PRou3C4j8ccRKLSCmqZPebEu4cajBUFXw+t1VQgN5MCSgr3aj54oGp CMQvbVWydbhL+uSf+UQSID2RkaITkkelKKHv2gg+4rD9Or0wa7NzsiXrWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYB54EC5IYj80aOqtTiFa42zPORMB8GA1UdIwQY MBaAFPDQMJi4NW//xaWX6cRbhO34fPmUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE5Bd21MZzFiX19GcFpmcHhGdUU3Zmg4LVpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kZjU2ZWUtZGQ3MS00Y2E3LTk4ZWQt MzI3ZjgzMTk0NWZkLzEvOE5Bd21MZzFiX19GcFpmcHhGdUU3Zmg4LVpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kZjU2ZWUtZGQ3MS00Y2E3LTk4ZWQtMzI3ZjgzMTk0NWZk LzEvOE5Bd21MZzFiX19GcFpmcHhGdUU3Zmg4LVpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQzboQQf tMf3pd4TCnb4t3cGyihEKvf19hJayeLlsjPVouQlHq6qN59NAmUqTnZdS8uGsNaP 7xuKwO0XK6mzKjU+r7cRdnSh7sAkBdFocx0q7K6yQJo//5xy94P6fEHED9WWJCqT io1fAfkt+aZnnFStdb0uSiqVzUYf7nouKBOYAh2mji57tgtes57yTQWJjbQkyqIa SEZ6MhARAce14MYE0p2WeA3WIhr7qsO0GpaVQm60jpXQk5jTiFjpJDbTESfqwiSR JHL7Ji7qOMVEaN2s7d4FLaGfSReXbqOxY0N5WLzXdLcxPKZQiBb3Q/3NrNquPwyM bIU+kdPsJkVUDw== -----END CERTIFICATE-----Generated at Fri Dec 12 03:08:02 2025 by rpki-client