This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft File: 8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json) Hash identifier: /ETKexjCdj6UpxoifGgt/aoyfbg9rxYWCRDV2M0XwwM= Subject key identifier: 87:C2:BB:44:26:FC:0E:67:42:9D:A6:4E:55:91:50:FA:E9:9C:69:D6 Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48 Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48 Certificate serial: 019B0E5B9A06F8017BF1E161E0B52084E818 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft Manifest number: 165A Signing time: Thu 11 Dec 2025 17:00:42 +0000 Manifest this update: Thu 11 Dec 2025 17:00:42 +0000 Manifest next update: Fri 12 Dec 2025 17:00:42 +0000 Files and hashes: 1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: Na9HTBnYXjIjk/hUS3/dax7SJ9+XvZ8iwj120BqDtJ8=) 2: E1bqejAdTN3uYMBTKCwH33KmoEE.roa (hash: /XRVb9kLwHV21UKOVZ0MM6evc9apWkwvTlQRZL1Tohg=) 3: gAbWpwUUphvqV25CUB0maQ_pAx0.roa (hash: BLsk+LJxA+WagSmLj3Bzfhh4p3QvCZDF/XVfmTYGdec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:9a:06:f8:01:7b:f1:e1:61:e0:b5:20:84:e8:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48 Validity Not Before: Dec 11 17:00:42 2025 GMT Not After : Dec 12 17:00:42 2025 GMT Subject: CN=87c2bb4426fc0e67429da64e559150fae99c69d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:9b:ee:df:41:a7:54:dc:a4:cd:43:f3:89: 09:42:2a:4b:6e:78:90:2f:a9:ef:6f:09:43:43:5f: d4:52:51:56:59:fe:c2:96:2f:82:48:50:ff:01:e9: 77:2a:11:1e:0b:63:58:96:b4:7f:ce:0b:1e:e3:8c: 3a:ff:4b:02:4d:ef:57:8f:05:36:8d:a6:b6:84:9b: 20:c0:7d:41:0e:98:81:f1:e6:55:a9:5b:a4:c6:0e: 32:5a:9a:d4:ed:ac:83:d8:cc:97:20:02:fa:13:3b: d8:d5:87:f0:d1:6d:d7:4e:bc:94:70:2c:93:a1:20: ee:31:54:74:7b:85:d3:41:c8:90:7c:99:cf:27:ee: 5c:1e:a9:15:26:74:93:82:83:63:63:30:8d:54:00: f5:4c:7b:3d:6d:53:a4:67:3c:1a:00:95:8b:e8:cb: 19:5a:a2:09:5c:a2:74:b0:52:df:0e:73:a6:d9:9f: 6b:9c:46:bb:e9:40:2a:86:87:e1:49:16:5e:5d:ce: 2d:a1:93:de:f7:2e:ac:97:ea:f6:78:07:00:bf:8c: c6:1c:be:73:1d:ad:ad:90:df:48:13:d3:15:41:74: 4e:77:bd:98:6c:a5:81:91:29:a7:0d:8d:fa:66:8e: fe:5b:c8:4f:4c:65:d9:70:8a:fa:ea:29:3f:5c:b2: 77:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C2:BB:44:26:FC:0E:67:42:9D:A6:4E:55:91:50:FA:E9:9C:69:D6 X509v3 Authority Key Identifier: keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:6a:28:c6:f9:51:29:de:7b:b6:15:b0:ba:8e:6e:47:8c:67: 35:35:15:3d:2c:9f:66:fb:aa:1f:ad:79:26:71:f6:34:fb:40: 0b:d4:7a:b4:98:b0:28:bb:c5:78:17:c6:90:c1:3c:aa:b0:d9: 3e:f7:50:14:a3:f5:46:1d:19:e5:04:d4:bb:a3:3f:75:81:93: f9:41:95:b5:31:aa:c8:f3:3b:02:4b:65:b5:03:8a:6e:2e:7f: 16:20:ae:45:6a:71:72:d4:d1:2e:a7:6e:9e:4c:c7:62:ea:ef: e9:a3:b8:0b:0a:6f:e4:d3:b9:cb:23:0c:92:68:dd:ab:ac:01: 4a:32:e1:87:4b:c2:8b:1c:3e:4b:2f:6d:b1:18:c9:17:18:ba: ea:33:35:ef:a5:fe:76:22:ce:c6:d2:9e:49:c5:f2:0d:5c:49: a7:26:87:72:ef:94:6c:d0:60:22:70:61:10:c0:67:08:b9:1f: 1c:b7:f1:83:42:50:55:32:38:ce:72:96:1f:6d:6b:a0:42:ae: c6:c2:a7:19:87:f7:a8:23:20:f2:2c:a2:20:0d:8b:f0:4f:77: f2:c3:01:6d:7d:c7:da:ef:47:86:d9:82:0d:ed:bc:eb:3d:98: 91:e4:ee:ee:c2:ff:25:ca:52:9f:08:99:ad:b9:9d:cc:03:21: 0c:80:e8:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW5oG+AF78eFh4LUghOgYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzQ5YzIxNzhlODJmZGMxZjQxOWY1YTdjNTE3MjFkZjUz ZDdhNDgwHhcNMjUxMjExMTcwMDQyWhcNMjUxMjEyMTcwMDQyWjAzMTEwLwYDVQQD Eyg4N2MyYmI0NDI2ZmMwZTY3NDI5ZGE2NGU1NTkxNTBmYWU5OWM2OWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt2b7t9Bp1TcpM1D84kJQipLbniQ L6nvbwlDQ1/UUlFWWf7Cli+CSFD/Ael3KhEeC2NYlrR/zgse44w6/0sCTe9XjwU2 jaa2hJsgwH1BDpiB8eZVqVukxg4yWprU7ayD2MyXIAL6EzvY1Yfw0W3XTryUcCyT oSDuMVR0e4XTQciQfJnPJ+5cHqkVJnSTgoNjYzCNVAD1THs9bVOkZzwaAJWL6MsZ WqIJXKJ0sFLfDnOm2Z9rnEa76UAqhofhSRZeXc4toZPe9y6sl+r2eAcAv4zGHL5z Ha2tkN9IE9MVQXROd72YbKWBkSmnDY36Zo7+W8hPTGXZcIr66ik/XLJ3UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfCu0Qm/A5nQp2mTlWRUPrpnGnWMB8GA1UdIwQY MBaAFPDEnCF46C/cH0GfWnxRch31PXpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1TY0lYam9MOXdmUVo5YWZGRnlIZlU5ZWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lMjJmZWEtODRkMC00MDZhLThhNmYt NDZmNWZhMmM5MzAzLzEvOE1TY0lYam9MOXdmUVo5YWZGRnlIZlU5ZWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9lMjJmZWEtODRkMC00MDZhLThhNmYtNDZmNWZhMmM5MzAz LzEvOE1TY0lYam9MOXdmUVo5YWZGRnlIZlU5ZWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWooxvlR Kd57thWwuo5uR4xnNTUVPSyfZvuqH615JnH2NPtAC9R6tJiwKLvFeBfGkME8qrDZ PvdQFKP1Rh0Z5QTUu6M/dYGT+UGVtTGqyPM7AktltQOKbi5/FiCuRWpxctTRLqdu nkzHYurv6aO4Cwpv5NO5yyMMkmjdq6wBSjLhh0vCixw+Sy9tsRjJFxi66jM176X+ diLOxtKeScXyDVxJpyaHcu+UbNBgInBhEMBnCLkfHLfxg0JQVTI4znKWH21roEKu xsKnGYf3qCMg8iyiIA2L8E938sMBbX3H2u9HhtmCDe286z2YkeTu7sL/JcpSnwiZ rbmdzAMhDIDoxg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:17:38 2025 by rpki-client