This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft File: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft (raw, json) Hash identifier: NOlVM/Q/T26oKIwyNC8IfEf88IeF+EE9N0W1gvnDnXs= Subject key identifier: 94:DC:C0:60:AE:E1:77:17:02:F4:AE:B4:EA:22:B1:FA:4B:EA:6F:39 Authority key identifier: F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C Certificate issuer: /CN=f2a959dc16715c8a54c8094267b8e491fe321d2c Certificate serial: 019B194D5B3DBD226C6499F8B82B791DF684 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft Manifest number: 1676 Signing time: Sat 13 Dec 2025 20:00:58 +0000 Manifest this update: Sat 13 Dec 2025 20:00:58 +0000 Manifest next update: Sun 14 Dec 2025 20:00:58 +0000 Files and hashes: 1: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl (hash: WWiuTT1GHgOR8Eib9qE75/DWAhOD7DxxPucpJf96WNk=) 2: d2hoUpvor7BPW8nmpz4xnZjE2u4.roa (hash: hIY/GtYHLCsuos0GvnTm5ot49GmbZ9W7yYzcGZgrlOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:5b:3d:bd:22:6c:64:99:f8:b8:2b:79:1d:f6:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2a959dc16715c8a54c8094267b8e491fe321d2c Validity Not Before: Dec 13 20:00:58 2025 GMT Not After : Dec 14 20:00:58 2025 GMT Subject: CN=94dcc060aee1771702f4aeb4ea22b1fa4bea6f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e3:8d:76:a9:b5:25:17:95:9f:8a:5b:9e:3e: b7:b3:19:81:f2:7a:14:39:fa:9b:d5:d1:d6:bb:0a: 6b:2c:f2:1b:0c:00:6a:1e:32:de:43:15:72:89:55: 90:53:a5:04:69:26:7b:6e:79:a6:44:66:ac:c7:84: 28:b0:1c:d1:ef:fe:45:f2:bc:21:5e:13:57:51:71: ff:e4:d6:d4:97:13:56:2d:1d:09:80:d4:55:22:01: d7:62:8f:5f:6a:70:90:ae:b8:60:68:cf:63:23:5d: a6:85:c1:80:64:4b:55:f6:b2:8c:ba:2f:09:b5:ee: 1a:22:b0:f2:cf:19:53:bd:5b:64:74:de:a6:04:7b: c9:0a:87:cd:84:d3:70:f6:9e:9b:18:0c:6c:8b:62: b8:83:cc:6d:a2:b7:39:59:db:ce:a1:34:7b:2c:df: ce:74:32:72:4a:e2:57:42:cd:2f:c9:e3:69:e6:04: 19:0a:97:f0:16:e7:63:d4:01:06:45:62:32:ad:53: 43:ad:46:67:29:b5:1e:25:66:9c:ae:0f:a6:91:e8: 65:61:45:61:8e:65:f4:71:23:91:ed:e1:a1:19:6b: 73:21:21:b6:e9:6f:a8:76:aa:fc:12:28:6e:40:df: 6d:72:44:62:00:d8:40:e0:de:e6:97:95:0d:ca:05: b9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DC:C0:60:AE:E1:77:17:02:F4:AE:B4:EA:22:B1:FA:4B:EA:6F:39 X509v3 Authority Key Identifier: keyid:F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:05:c1:15:b2:00:d6:62:49:a1:32:86:33:ae:79:50:13:15: 49:84:66:f6:dc:11:2d:c4:5a:6f:2e:e7:21:fe:65:ad:fd:dd: db:76:48:00:fb:21:58:66:ef:db:3a:4c:e0:f0:65:db:b8:c4: 99:17:e7:f7:ad:73:28:97:ad:8c:c5:32:01:06:d4:7f:84:3c: 6c:1a:f4:92:9c:92:3a:c4:5b:89:7f:f5:c4:5f:22:b3:5a:3b: d8:39:32:5e:38:01:0c:0c:96:ec:9b:69:93:41:eb:c3:64:0c: 86:ca:8c:30:32:b2:b7:59:af:24:08:0b:92:7f:06:44:14:83: 0f:88:f4:bd:4f:3f:4f:7f:ec:d5:a0:df:1a:b9:45:70:7d:25: 1e:1a:c1:1d:bd:94:cf:f3:68:59:6a:91:84:06:a4:88:23:13: 91:7b:13:c0:25:11:69:76:72:cd:67:38:81:16:68:8b:9c:3a: a4:2d:1e:ef:79:a2:b6:4b:19:26:57:66:52:3d:a9:cf:0d:de: 0b:19:19:cb:36:0c:04:f1:c5:b4:da:01:37:1b:c8:06:bb:26: 54:02:46:07:26:79:4d:d0:38:2a:a5:10:7e:88:1b:49:66:6a: 2e:84:5e:8d:4c:a2:3f:22:57:a9:47:06:95:63:8b:8d:15:c3: 79:42:b3:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTVs9vSJsZJn4uCt5HfaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYTk1OWRjMTY3MTVjOGE1NGM4MDk0MjY3YjhlNDkxZmUz MjFkMmMwHhcNMjUxMjEzMjAwMDU4WhcNMjUxMjE0MjAwMDU4WjAzMTEwLwYDVQQD Eyg5NGRjYzA2MGFlZTE3NzE3MDJmNGFlYjRlYTIyYjFmYTRiZWE2ZjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuONdqm1JReVn4pbnj63sxmB8noU Ofqb1dHWuwprLPIbDABqHjLeQxVyiVWQU6UEaSZ7bnmmRGasx4QosBzR7/5F8rwh XhNXUXH/5NbUlxNWLR0JgNRVIgHXYo9fanCQrrhgaM9jI12mhcGAZEtV9rKMui8J te4aIrDyzxlTvVtkdN6mBHvJCofNhNNw9p6bGAxsi2K4g8xtorc5WdvOoTR7LN/O dDJySuJXQs0vyeNp5gQZCpfwFudj1AEGRWIyrVNDrUZnKbUeJWacrg+mkehlYUVh jmX0cSOR7eGhGWtzISG26W+odqr8EihuQN9tckRiANhA4N7ml5UNygW52wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTcwGCu4XcXAvSutOoisfpL6m85MB8GA1UdIwQY MBaAFPKpWdwWcVyKVMgJQme45JH+Mh0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHFsWjNCWnhYSXBVeUFsQ1o3amtrZjR5SFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84OGEzODMtMDMwYy00NTQ1LTllOWMt NGViZWVjN2U4Mjc1LzEvOHFsWjNCWnhYSXBVeUFsQ1o3amtrZjR5SFN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi84OGEzODMtMDMwYy00NTQ1LTllOWMtNGViZWVjN2U4Mjc1 LzEvOHFsWjNCWnhYSXBVeUFsQ1o3amtrZjR5SFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgXBFbIA 1mJJoTKGM655UBMVSYRm9twRLcRaby7nIf5lrf3d23ZIAPshWGbv2zpM4PBl27jE mRfn961zKJetjMUyAQbUf4Q8bBr0kpySOsRbiX/1xF8is1o72DkyXjgBDAyW7Jtp k0Hrw2QMhsqMMDKyt1mvJAgLkn8GRBSDD4j0vU8/T3/s1aDfGrlFcH0lHhrBHb2U z/NoWWqRhAakiCMTkXsTwCURaXZyzWc4gRZoi5w6pC0e73mitksZJldmUj2pzw3e CxkZyzYMBPHFtNoBNxvIBrsmVAJGByZ5TdA4KqUQfogbSWZqLoRejUyiPyJXqUcG lWOLjRXDeUKzRw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:13:20 2025 by rpki-client