This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft File: 8gLwqonAZ9ZjOLTVnSBSujmplEs.mft (raw, json) Hash identifier: YgW2FWo/Uw70k8768VlNkwK+oWoY+OyqEPkaFSSBUyI= Subject key identifier: DF:70:B5:B4:2D:1C:B3:33:42:6A:DE:A2:99:7C:C6:56:E9:73:8D:F2 Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B Certificate issuer: /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b Certificate serial: 019B3BD8F1C45A757138E0AC288E8CAE2AFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft Manifest number: 06EA Signing time: Sat 20 Dec 2025 13:00:31 +0000 Manifest this update: Sat 20 Dec 2025 13:00:31 +0000 Manifest next update: Sun 21 Dec 2025 13:00:31 +0000 Files and hashes: 1: 8gLwqonAZ9ZjOLTVnSBSujmplEs.crl (hash: vpd4GyNFpwjGzph3ACg4XI6Yw9ZB51Pj3UBchwm8XCI=) 2: gxY3cqQ9AtbDjrB_-otpHb6Irb0.roa (hash: LD3l5OVkY9IZSD+ZJZMYqJis4oBCr+KMHwZEJzzuk0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d8:f1:c4:5a:75:71:38:e0:ac:28:8e:8c:ae:2a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b Validity Not Before: Dec 20 13:00:31 2025 GMT Not After : Dec 21 13:00:31 2025 GMT Subject: CN=df70b5b42d1cb333426adea2997cc656e9738df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:03:ea:0e:59:6b:91:b5:c4:83:2e:1a:97:26: 99:b3:50:ad:14:bc:23:f2:1e:ca:f2:c1:ee:e4:68: e8:ec:f7:d7:dc:0d:54:21:14:6c:99:7c:c8:fa:50: 95:a7:f1:22:dd:13:90:8e:fb:d0:bf:7e:55:8c:a3: ec:c8:8d:42:f9:49:1b:11:fc:35:33:86:ad:ef:ab: c0:6a:f1:29:ef:5c:b8:5b:cb:9e:00:7a:e4:50:60: 0d:bb:37:83:30:58:9e:6f:8c:71:de:bd:bf:78:4b: 5d:f9:ab:21:4e:e5:28:75:70:0b:33:66:b6:16:43: 7c:2a:66:8f:53:54:9e:9d:d6:6e:df:21:f9:e9:ca: 1d:11:d3:4a:72:09:31:26:9c:d4:2d:21:82:48:3a: 68:ae:ef:8f:ce:c0:51:9b:ae:d9:3f:cc:82:2c:30: 9f:1d:37:4b:36:48:59:1c:0f:bb:29:46:27:52:0a: 3b:d4:a2:db:de:c0:4a:3c:fb:93:45:39:23:82:a7: ec:27:45:cb:cc:97:a8:50:16:60:4d:40:85:f0:2f: 2d:88:1d:1b:13:79:62:85:63:4e:ea:9c:12:20:9e: bf:e9:d2:d9:f3:0d:ec:6d:3f:46:e0:2c:94:9e:b8: a6:33:a0:f1:b1:17:c5:5f:2c:cf:29:9e:b4:cf:ff: 8b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:70:B5:B4:2D:1C:B3:33:42:6A:DE:A2:99:7C:C6:56:E9:73:8D:F2 X509v3 Authority Key Identifier: keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:8a:c9:65:4e:66:62:0b:65:98:4c:a5:2f:9c:87:a5:b8:0d: 67:6c:28:b9:63:1e:16:5c:9c:36:22:dc:b8:06:86:c1:7e:55: 8e:67:ac:64:0a:9d:e1:42:b3:be:02:ac:60:72:c7:af:0d:26: d2:d6:6b:bd:01:b9:f5:94:7b:65:ec:a4:dd:c5:c6:a1:5a:76: 49:79:7e:8c:9d:05:3b:25:de:51:d7:51:68:f9:75:e3:b3:2d: 42:e3:96:73:5e:4a:e6:23:37:16:01:fa:58:19:c9:41:03:8c: 2e:69:88:61:c9:ce:7f:ba:87:1c:a5:e0:5c:a7:b6:cd:b3:50: 59:9c:58:57:96:75:b6:64:c5:0b:22:98:93:6c:71:28:b8:b3: 3e:5e:53:72:17:20:e8:36:e6:b1:1e:7e:ba:96:fe:51:43:3c: 28:df:95:5d:ea:4e:cb:eb:48:c4:ef:26:79:96:50:86:35:bb: 60:b7:67:f1:f3:ff:9d:26:dc:f9:b5:1d:73:69:10:9d:d3:d9: be:0f:0b:66:80:63:05:39:6f:52:20:d3:0c:86:92:b9:9a:df: ae:e4:12:5a:8a:fc:4c:08:e4:2e:2a:a6:2a:91:31:a8:59:6f: 80:1e:71:14:9e:fb:6b:43:67:63:ce:d1:69:85:5a:38:95:30: 81:7c:60:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72PHEWnVxOOCsKI6Mrir+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMDJmMGFhODljMDY3ZDY2MzM4YjRkNTlkMjA1MmJhMzlh OTk0NGIwHhcNMjUxMjIwMTMwMDMxWhcNMjUxMjIxMTMwMDMxWjAzMTEwLwYDVQQD EyhkZjcwYjViNDJkMWNiMzMzNDI2YWRlYTI5OTdjYzY1NmU5NzM4ZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgPqDllrkbXEgy4alyaZs1CtFLwj 8h7K8sHu5Gjo7PfX3A1UIRRsmXzI+lCVp/Ei3ROQjvvQv35VjKPsyI1C+UkbEfw1 M4at76vAavEp71y4W8ueAHrkUGANuzeDMFieb4xx3r2/eEtd+ashTuUodXALM2a2 FkN8KmaPU1SendZu3yH56codEdNKcgkxJpzULSGCSDporu+PzsBRm67ZP8yCLDCf HTdLNkhZHA+7KUYnUgo71KLb3sBKPPuTRTkjgqfsJ0XLzJeoUBZgTUCF8C8tiB0b E3lihWNO6pwSIJ6/6dLZ8w3sbT9G4CyUnrimM6DxsRfFXyzPKZ60z/+LhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9wtbQtHLMzQmreopl8xlbpc43yMB8GA1UdIwQY MBaAFPIC8KqJwGfWYzi01Z0gUro5qZRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGIt ZjYyNTcwMGU4YTkwLzEvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGItZjYyNTcwMGU4YTkw LzEvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARYrJZU5m YgtlmEylL5yHpbgNZ2wouWMeFlycNiLcuAaGwX5VjmesZAqd4UKzvgKsYHLHrw0m 0tZrvQG59ZR7Zeyk3cXGoVp2SXl+jJ0FOyXeUddRaPl147MtQuOWc15K5iM3FgH6 WBnJQQOMLmmIYcnOf7qHHKXgXKe2zbNQWZxYV5Z1tmTFCyKYk2xxKLizPl5Tchcg 6DbmsR5+upb+UUM8KN+VXepOy+tIxO8meZZQhjW7YLdn8fP/nSbc+bUdc2kQndPZ vg8LZoBjBTlvUiDTDIaSuZrfruQSWor8TAjkLiqmKpExqFlvgB5xFJ77a0NnY87R aYVaOJUwgXxgdw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:01:59 2025 by rpki-client