This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft File: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft (raw, json) Hash identifier: /I5AqPkuAznmrplgCLyOetU4Gn6WxeaXDWsCrJOJOy0= Subject key identifier: 1E:82:B3:1C:73:BD:B2:C4:13:73:E5:F6:FF:6E:59:06:8E:79:C0:1C Authority key identifier: F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9 Certificate issuer: /CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9 Certificate serial: 019B5A1A5F46D33501E54E0A65D7F1D90A73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft Manifest number: 0681 Signing time: Fri 26 Dec 2025 10:00:36 +0000 Manifest this update: Fri 26 Dec 2025 10:00:36 +0000 Manifest next update: Sat 27 Dec 2025 10:00:36 +0000 Files and hashes: 1: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl (hash: 2QOuuvcf3B+sln5meVJCaS6NyJK43xn558qXqG9f0ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:5f:46:d3:35:01:e5:4e:0a:65:d7:f1:d9:0a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9 Validity Not Before: Dec 26 10:00:36 2025 GMT Not After : Dec 27 10:00:36 2025 GMT Subject: CN=1e82b31c73bdb2c41373e5f6ff6e59068e79c01c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4e:c3:8e:0c:7b:c8:93:73:86:bb:69:e2:37: c2:32:88:0a:9b:39:17:90:89:43:ae:ff:f6:fc:84: 38:fe:58:92:3a:ad:85:fe:b3:9d:0d:80:ff:fe:22: 62:cd:bd:29:11:ae:7e:c2:35:39:11:54:4c:cf:5e: 2a:91:90:5a:f3:18:82:73:e3:32:1d:b5:d6:a8:cc: de:19:f2:a4:6d:55:a8:61:66:5e:71:30:5e:3e:ea: a2:3c:0f:d7:eb:2e:ae:78:80:fd:43:08:cc:e4:cf: 96:1f:62:3f:d0:ea:11:2f:c7:81:a3:c4:f4:43:ff: 0f:65:a8:2d:93:ed:c1:19:8c:5e:3a:88:21:85:f6: b6:fe:de:5e:d0:7e:9a:4c:8a:63:e7:ea:c3:8d:be: e3:ca:3d:1e:a4:eb:43:c7:95:8b:5a:41:23:f1:cb: e4:11:ff:b0:81:75:7a:7d:4e:58:d1:16:8b:f4:66: 00:32:be:2a:ec:17:86:53:04:33:7f:b5:94:d1:5b: 2c:bc:13:17:24:1c:72:cc:44:f8:64:81:52:e6:00: 12:0e:3f:ba:1b:f3:3e:a1:c6:60:4b:26:be:db:9d: 95:9a:28:0b:f8:5a:0f:8a:e3:03:3a:9b:e4:26:76: af:18:09:8a:f4:35:43:d7:ee:05:ec:d1:bb:43:65: 3d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:82:B3:1C:73:BD:B2:C4:13:73:E5:F6:FF:6E:59:06:8E:79:C0:1C X509v3 Authority Key Identifier: keyid:F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c8:b6:c8:1b:f3:37:05:b3:84:05:16:a5:d0:54:1d:06:86: 7a:77:00:d9:e9:d6:1c:c5:b6:16:af:e4:49:6a:e5:8a:bf:1f: a9:7e:1e:aa:fe:4d:51:47:ec:d8:01:0f:a0:e9:9c:35:c3:3b: 82:72:05:fa:80:ba:06:d5:01:de:87:03:a6:3f:fc:4e:ff:f8: 3b:8b:33:73:fa:9c:21:10:1b:38:68:16:1f:1d:0d:4e:b2:da: fb:88:45:39:94:0e:fc:8f:de:97:c6:0a:69:1c:83:58:23:9b: 50:82:1e:a5:29:9b:07:3a:e5:b3:28:c2:00:01:8e:40:ac:6a: fd:8f:55:b7:cc:b5:81:22:7a:77:f0:41:0f:05:4d:3c:aa:31: d7:97:a9:57:f1:07:cb:97:08:84:0d:9c:56:71:ef:f4:67:b5: f6:b3:84:58:08:d7:a5:70:e0:6d:dd:20:3e:a8:49:92:cd:0f: 1e:8a:42:5c:0e:1f:92:20:30:6a:c2:59:01:a2:24:31:8d:ec: 61:34:7c:93:33:87:c6:4e:c2:39:dc:11:e7:cd:47:74:c9:d3: 88:1e:1e:15:4b:8b:2a:4f:23:5a:43:96:9a:25:39:1b:33:d3: a6:f9:63:c0:f7:f9:24:c8:dc:76:9c:57:26:c4:66:09:c9:d4: 50:7f:f9:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGl9G0zUB5U4KZdfx2QpzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwM2YxZjMzNWM3ZDA0YjM2MDhmZDE5MTRhOWMwNTNiMDRh N2ZjYjkwHhcNMjUxMjI2MTAwMDM2WhcNMjUxMjI3MTAwMDM2WjAzMTEwLwYDVQQD EygxZTgyYjMxYzczYmRiMmM0MTM3M2U1ZjZmZjZlNTkwNjhlNzljMDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4E7Djgx7yJNzhrtp4jfCMogKmzkX kIlDrv/2/IQ4/liSOq2F/rOdDYD//iJizb0pEa5+wjU5EVRMz14qkZBa8xiCc+My HbXWqMzeGfKkbVWoYWZecTBePuqiPA/X6y6ueID9QwjM5M+WH2I/0OoRL8eBo8T0 Q/8PZagtk+3BGYxeOoghhfa2/t5e0H6aTIpj5+rDjb7jyj0epOtDx5WLWkEj8cvk Ef+wgXV6fU5Y0RaL9GYAMr4q7BeGUwQzf7WU0VssvBMXJBxyzET4ZIFS5gASDj+6 G/M+ocZgSya+252VmigL+FoPiuMDOpvkJnavGAmK9DVD1+4F7NG7Q2U9ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6CsxxzvbLEE3Pl9v9uWQaOecAcMB8GA1UdIwQY MBaAFPA/HzNcfQSzYI/RkUqcBTsEp/y5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTdjZjctYjM4Ni00Yzg3LTg0MWYt MzM4YTA3ZThlYmQ2LzEvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84OTdjZjctYjM4Ni00Yzg3LTg0MWYtMzM4YTA3ZThlYmQ2 LzEvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsi2yBvz NwWzhAUWpdBUHQaGencA2enWHMW2Fq/kSWrlir8fqX4eqv5NUUfs2AEPoOmcNcM7 gnIF+oC6BtUB3ocDpj/8Tv/4O4szc/qcIRAbOGgWHx0NTrLa+4hFOZQO/I/el8YK aRyDWCObUIIepSmbBzrlsyjCAAGOQKxq/Y9Vt8y1gSJ6d/BBDwVNPKox15epV/EH y5cIhA2cVnHv9Ge19rOEWAjXpXDgbd0gPqhJks0PHopCXA4fkiAwasJZAaIkMY3s YTR8kzOHxk7COdwR581HdMnTiB4eFUuLKk8jWkOWmiU5GzPTpvljwPf5JMjcdpxX JsRmCcnUUH/5uA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:52 2025 by rpki-client