This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft File: 8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json) Hash identifier: vcreVS22RwJx7YdPEiw9a+9d/0YO/O5lajlU2wxpIDE= Subject key identifier: 8E:F7:53:2A:B0:0A:B5:A9:1C:6A:7C:2F:CE:C5:2A:A2:60:AA:E4:2D Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B Certificate issuer: /CN=f21153011de4586ad8a803887ee7d2b00aefd61b Certificate serial: 019B59E467A087B522026BB52891C739ECE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft Manifest number: 05EE Signing time: Fri 26 Dec 2025 09:01:39 +0000 Manifest this update: Fri 26 Dec 2025 09:01:39 +0000 Manifest next update: Sat 27 Dec 2025 09:01:39 +0000 Files and hashes: 1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: nOS+EYEGTubEuZp4TePLBGD1BePiJjSUBuMquSgX70Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:67:a0:87:b5:22:02:6b:b5:28:91:c7:39:ec:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b Validity Not Before: Dec 26 09:01:39 2025 GMT Not After : Dec 27 09:01:39 2025 GMT Subject: CN=8ef7532ab00ab5a91c6a7c2fcec52aa260aae42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:89:af:2f:22:9a:97:9f:03:2c:fe:b7:5e:1f: 50:b2:10:fa:54:d3:cd:15:be:7f:5e:bf:e7:78:fa: c2:fb:e4:93:49:84:28:a9:f3:95:27:25:95:8d:89: 6c:05:ba:b2:9d:58:58:e9:00:79:56:80:2d:43:74: c2:fd:09:9d:41:3c:b7:de:c1:1c:67:e6:ef:96:ac: e4:11:e1:66:75:52:e3:87:8c:0f:20:12:3c:b1:a5: fb:f2:3a:03:50:14:75:82:ca:c5:7f:9b:04:0d:99: 4c:cd:9d:78:7d:d6:34:f3:6b:75:6b:54:87:91:b4: ac:53:7d:67:e0:34:e0:26:1a:ca:7e:9f:17:fe:fd: 60:25:89:b1:7a:5b:4f:2d:86:e1:77:2d:7f:cf:0a: 35:25:9e:65:07:25:67:1c:02:8f:be:0d:85:55:d6: a0:1f:7a:5a:52:3b:af:3d:f2:3a:eb:20:d4:9c:73: 31:4a:f3:7b:10:5e:31:6d:9e:62:c6:a5:0c:f7:d9: 98:45:16:83:36:af:1d:89:c2:05:40:51:75:53:16: 4e:af:f5:9e:92:9c:db:6e:80:7d:09:74:2b:2a:a5: 73:e1:63:7f:c8:75:5b:74:5b:68:0a:ca:2f:31:42: 13:8e:a5:9b:ab:cf:eb:b4:87:5b:37:fe:3c:aa:69: 4c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F7:53:2A:B0:0A:B5:A9:1C:6A:7C:2F:CE:C5:2A:A2:60:AA:E4:2D X509v3 Authority Key Identifier: keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ed:c4:f8:08:0f:c3:0f:5d:c7:98:b0:d6:12:f4:d6:f8:cb: 17:bb:8d:08:0f:61:cc:b6:e9:ff:a6:ef:44:02:48:cd:71:5c: 72:98:19:a0:40:bf:e8:37:cc:e3:e0:b1:a1:f1:08:b1:a5:16: 69:fa:bf:6f:7e:22:ff:41:51:a3:e5:a3:01:ca:4c:52:7f:1e: a1:92:de:84:8e:33:75:ee:42:c3:85:16:ef:5b:7a:ca:cf:af: 1b:56:53:ce:f5:f7:06:d4:88:31:4b:81:eb:45:a8:bf:bd:45: 26:b1:20:9a:46:8c:22:62:7c:58:67:4f:88:db:df:14:7c:4b: 6b:aa:df:e7:75:c2:50:b9:fe:de:9d:c4:4c:12:ae:87:c5:e3: 4c:d4:f1:33:d4:fd:1e:3e:4e:f1:6c:14:45:c9:2d:2f:c9:ae: ab:17:0d:5a:69:7f:69:97:44:a1:4e:c9:2a:7e:bf:1f:85:a4: a9:a0:d5:e8:92:79:8f:91:1e:c6:fa:97:79:b0:44:61:c7:41: 88:84:7b:77:e5:32:f8:89:af:e2:24:70:64:94:23:fe:3a:f5: 21:56:af:7f:f2:6d:a6:47:f1:2a:66:ce:ca:f8:7c:58:3b:7e: fc:47:40:67:74:90:e6:bc:28:f2:9b:11:2f:3f:f2:74:79:0f: 3b:6b:20:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5Gegh7UiAmu1KJHHOezgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMTE1MzAxMWRlNDU4NmFkOGE4MDM4ODdlZTdkMmIwMGFl ZmQ2MWIwHhcNMjUxMjI2MDkwMTM5WhcNMjUxMjI3MDkwMTM5WjAzMTEwLwYDVQQD Eyg4ZWY3NTMyYWIwMGFiNWE5MWM2YTdjMmZjZWM1MmFhMjYwYWFlNDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ImvLyKal58DLP63Xh9QshD6VNPN Fb5/Xr/nePrC++STSYQoqfOVJyWVjYlsBbqynVhY6QB5VoAtQ3TC/QmdQTy33sEc Z+bvlqzkEeFmdVLjh4wPIBI8saX78joDUBR1gsrFf5sEDZlMzZ14fdY082t1a1SH kbSsU31n4DTgJhrKfp8X/v1gJYmxeltPLYbhdy1/zwo1JZ5lByVnHAKPvg2FVdag H3paUjuvPfI66yDUnHMxSvN7EF4xbZ5ixqUM99mYRRaDNq8dicIFQFF1UxZOr/We kpzbboB9CXQrKqVz4WN/yHVbdFtoCsovMUITjqWbq8/rtIdbN/48qmlMQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI73UyqwCrWpHGp8L87FKqJgquQtMB8GA1UdIwQY MBaAFPIRUwEd5Fhq2KgDiH7n0rAK79YbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGhGVEFSM2tXR3JZcUFPSWZ1ZlNzQXJ2MWhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85ODgxODEtMWQxOS00MmUyLThkYzct MjgyNTM3MGM5NWZlLzEvOGhGVEFSM2tXR3JZcUFPSWZ1ZlNzQXJ2MWhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85ODgxODEtMWQxOS00MmUyLThkYzctMjgyNTM3MGM5NWZl LzEvOGhGVEFSM2tXR3JZcUFPSWZ1ZlNzQXJ2MWhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHu3E+AgP ww9dx5iw1hL01vjLF7uNCA9hzLbp/6bvRAJIzXFccpgZoEC/6DfM4+CxofEIsaUW afq/b34i/0FRo+WjAcpMUn8eoZLehI4zde5Cw4UW71t6ys+vG1ZTzvX3BtSIMUuB 60Wov71FJrEgmkaMImJ8WGdPiNvfFHxLa6rf53XCULn+3p3ETBKuh8XjTNTxM9T9 Hj5O8WwURcktL8muqxcNWml/aZdEoU7JKn6/H4WkqaDV6JJ5j5EexvqXebBEYcdB iIR7d+Uy+Imv4iRwZJQj/jr1IVavf/JtpkfxKmbOyvh8WDt+/EdAZ3SQ5rwo8psR Lz/ydHkPO2sg5A== -----END CERTIFICATE-----Generated at Fri Dec 26 17:42:50 2025 by rpki-client