This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft File: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft (raw, json) Hash identifier: 8oo2+/63LmhmCaJRyNWpoUqMjsXouLVjH595a6UbTko= Subject key identifier: 62:C6:FF:0E:B8:7C:59:94:09:4E:CB:48:0A:42:BC:D3:9D:67:6B:04 Authority key identifier: F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC Certificate issuer: /CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc Certificate serial: 019B4815FA22CCE25505B8BC3813FACE2D88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft Manifest number: 03FE Signing time: Mon 22 Dec 2025 22:02:38 +0000 Manifest this update: Mon 22 Dec 2025 22:02:38 +0000 Manifest next update: Tue 23 Dec 2025 22:02:38 +0000 Files and hashes: 1: 5706RB7xeG9S4d5Ob5hAT-sWDQM.roa (hash: 3YUiY2PHwBycE1YPX5AAcbWdNPxFb9hnL/xR1TAUp9s=) 2: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl (hash: lrwA+ZosXnREZwBvDelDbn7SvK0mJB2EXnfyRk+XdSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:fa:22:cc:e2:55:05:b8:bc:38:13:fa:ce:2d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc Validity Not Before: Dec 22 22:02:38 2025 GMT Not After : Dec 23 22:02:38 2025 GMT Subject: CN=62c6ff0eb87c5994094ecb480a42bcd39d676b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2e:d3:67:55:64:d5:de:9a:d9:19:31:7d:58: 8c:96:af:55:da:48:38:de:b4:5f:ad:fd:30:2a:17: 35:95:27:4a:a3:40:84:2b:d0:63:e7:c5:2b:6b:79: 32:3d:b0:2e:22:b2:9c:01:bb:ea:4d:04:3f:17:e3: d3:d6:95:e5:03:16:bc:f2:fd:7a:7d:6d:1b:9a:fe: d6:ab:1f:b4:bb:46:d6:6b:4c:32:46:bf:e2:b0:3a: 23:11:a9:36:b2:2d:91:02:ca:f3:01:ec:94:52:d3: 00:94:e3:e0:ab:32:fb:5b:1b:4e:0c:57:15:cf:d1: ee:c6:71:4c:f2:39:dd:7a:6f:47:b3:04:c3:d5:94: e1:61:cc:f8:e3:24:6c:c0:06:0d:e1:5c:2a:e6:f6: dc:ef:42:1c:1a:e5:21:34:aa:19:7b:c3:50:b9:c8: ed:10:7c:c0:76:86:74:0e:e5:db:52:3a:fd:a2:20: 13:1e:68:94:a4:42:60:f8:d1:b1:01:b1:a8:bc:b5: a6:34:f3:ee:b1:f1:cb:ef:72:8d:e4:99:b6:30:e2: 1e:e5:9f:80:39:8a:16:7d:f6:dd:28:19:2b:d7:c8: a3:cf:ba:28:35:60:bd:86:bd:99:94:0c:39:54:cc: 29:df:53:d7:bd:b6:08:91:9a:41:1d:5a:1a:65:7b: 07:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C6:FF:0E:B8:7C:59:94:09:4E:CB:48:0A:42:BC:D3:9D:67:6B:04 X509v3 Authority Key Identifier: keyid:F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:c3:3c:f1:6c:1c:2b:35:ca:84:29:90:09:e6:c7:73:26:bf: d2:7d:71:77:46:26:42:88:7b:20:d5:0a:96:3c:ed:f5:ed:f0: 7f:e6:11:7a:3d:67:32:5a:c8:4c:a3:de:d4:4b:e9:8f:84:a2: c5:51:77:d7:0d:d2:54:76:e5:34:0c:68:93:89:0b:eb:16:87: 25:88:47:e1:29:d5:b0:ec:dc:e1:42:5b:3e:25:28:d4:d4:13: 7f:f3:20:ba:fb:68:9c:bb:74:6b:02:ab:48:c9:29:e2:72:69: 8b:11:2c:34:cd:50:7d:40:64:b8:04:eb:57:27:8f:06:e4:f5: 1a:35:6c:22:46:71:ba:d4:d6:8f:cf:e0:a8:01:59:76:a3:6e: 17:cf:aa:f0:1b:39:12:6e:88:6f:82:f9:88:11:8f:98:5b:6e: aa:f1:8c:45:e3:11:e8:e9:ff:95:6a:d4:61:ca:7a:08:7b:96: 0d:c9:59:7e:0b:d1:fe:f9:bc:cb:78:ec:27:9c:ff:e2:ba:01: ac:54:4d:6e:5e:eb:a8:13:6b:6a:2b:97:76:71:14:ab:6b:6c: 22:96:57:b1:60:d6:e0:d5:69:1e:08:78:2e:9e:2c:24:1e:86: 72:de:e8:3f:2e:d6:98:b5:ef:62:28:bf:59:43:4f:66:57:9d: d0:16:3a:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFfoizOJVBbi8OBP6zi2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMWZmYjU0Y2FjN2Y1YjU3Njg1NjllNDE5N2Q0MWQ3NDQ2 YmYxZmMwHhcNMjUxMjIyMjIwMjM4WhcNMjUxMjIzMjIwMjM4WjAzMTEwLwYDVQQD Eyg2MmM2ZmYwZWI4N2M1OTk0MDk0ZWNiNDgwYTQyYmNkMzlkNjc2YjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS7TZ1Vk1d6a2RkxfViMlq9V2kg4 3rRfrf0wKhc1lSdKo0CEK9Bj58Ura3kyPbAuIrKcAbvqTQQ/F+PT1pXlAxa88v16 fW0bmv7Wqx+0u0bWa0wyRr/isDojEak2si2RAsrzAeyUUtMAlOPgqzL7WxtODFcV z9HuxnFM8jndem9HswTD1ZThYcz44yRswAYN4Vwq5vbc70IcGuUhNKoZe8NQucjt EHzAdoZ0DuXbUjr9oiATHmiUpEJg+NGxAbGovLWmNPPusfHL73KN5Jm2MOIe5Z+A OYoWffbdKBkr18ijz7ooNWC9hr2ZlAw5VMwp31PXvbYIkZpBHVoaZXsHHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLG/w64fFmUCU7LSApCvNOdZ2sEMB8GA1UdIwQY MBaAFPMf+1TKx/W1doVp5Bl9QddEa/H8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHhfN1ZNckg5YlYyaFdua0dYMUIxMFJyOGZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS82YzM3MDItMTE3OC00Y2JkLThlYmEt YzAzODRmZTFiMDA3LzEvOHhfN1ZNckg5YlYyaFdua0dYMUIxMFJyOGZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS82YzM3MDItMTE3OC00Y2JkLThlYmEtYzAzODRmZTFiMDA3 LzEvOHhfN1ZNckg5YlYyaFdua0dYMUIxMFJyOGZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqcM88Wwc KzXKhCmQCebHcya/0n1xd0YmQoh7INUKljzt9e3wf+YRej1nMlrITKPe1Evpj4Si xVF31w3SVHblNAxok4kL6xaHJYhH4SnVsOzc4UJbPiUo1NQTf/MguvtonLt0awKr SMkp4nJpixEsNM1QfUBkuATrVyePBuT1GjVsIkZxutTWj8/gqAFZdqNuF8+q8Bs5 Em6Ib4L5iBGPmFtuqvGMReMR6On/lWrUYcp6CHuWDclZfgvR/vm8y3jsJ5z/4roB rFRNbl7rqBNraiuXdnEUq2tsIpZXsWDW4NVpHgh4Lp4sJB6Gct7oPy7WmLXvYii/ WUNPZled0BY6pw== -----END CERTIFICATE-----Generated at Tue Dec 23 04:12:39 2025 by rpki-client