This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft File: 8spAIO_uYcMQasn-znnHpo9xqcs.mft (raw, json) Hash identifier: TqX5aIu5ZYL2EzojwHMmEya3bLctCaauIMrUTkxV8Zc= Subject key identifier: 2D:0F:74:A2:62:73:37:31:7E:1D:CB:89:A1:4C:9D:FB:7F:5F:96:A3 Authority key identifier: F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB Certificate issuer: /CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb Certificate serial: 019B386A144C1615BCAD5EF5059DCAEF16A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft Manifest number: 0B62 Signing time: Fri 19 Dec 2025 21:00:34 +0000 Manifest this update: Fri 19 Dec 2025 21:00:34 +0000 Manifest next update: Sat 20 Dec 2025 21:00:34 +0000 Files and hashes: 1: 8spAIO_uYcMQasn-znnHpo9xqcs.crl (hash: H67H8xPf5kKSprc/1t8mr/cqFP1YvnupHxE/MElpW4w=) 2: qQhJwJzvyO7AKVxT0Cih5AUrQns.roa (hash: BItfqfpG3F7hqQ1NJHEpQWVKKNNg5IgOl83auOyNXFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:14:4c:16:15:bc:ad:5e:f5:05:9d:ca:ef:16:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb Validity Not Before: Dec 19 21:00:34 2025 GMT Not After : Dec 20 21:00:34 2025 GMT Subject: CN=2d0f74a2627337317e1dcb89a14c9dfb7f5f96a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f0:65:11:a7:b4:a7:34:18:0e:82:e1:1e:3a: f6:57:59:ae:4a:89:f2:0d:3a:0f:7f:72:b2:cb:24: cc:8b:f0:ce:53:4f:85:9b:5b:16:b1:74:05:61:d4: f4:64:2c:53:ea:5d:62:b1:69:cb:75:6d:cf:a9:8a: 29:37:fa:1a:71:03:99:2b:c0:94:77:fc:b2:85:98: 45:43:94:7e:cd:db:38:62:81:d7:46:fa:35:23:17: 26:20:11:a8:62:22:18:6e:a6:c3:fe:2f:19:93:a9: 23:db:04:55:2d:c3:7a:8c:b8:79:ef:9b:dc:18:90: 3b:78:ec:5c:22:dc:7d:31:9d:b6:f5:9a:bb:68:3b: d6:de:af:63:12:f0:ed:64:19:a5:bc:e7:9c:ce:67: c0:a1:8b:f5:45:ef:1d:9a:68:db:20:38:5d:25:3d: 6e:79:b2:b7:c1:1c:51:15:cf:a0:9c:15:9a:5d:e1: 82:44:38:0b:d7:1a:62:bf:8a:4c:0a:4c:cf:f3:2a: a9:3b:aa:8d:c6:e2:0a:71:72:a7:ab:47:58:f2:80: 16:89:d8:95:bc:00:41:ab:04:5d:d7:f5:ae:ed:e0: 50:d7:57:5c:1b:47:d6:61:60:f7:78:e4:ad:09:91: c1:f8:62:b4:c8:c9:85:b8:9b:e3:03:5c:3c:02:e1: 83:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0F:74:A2:62:73:37:31:7E:1D:CB:89:A1:4C:9D:FB:7F:5F:96:A3 X509v3 Authority Key Identifier: keyid:F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:db:b1:22:9f:49:31:97:33:c7:4a:a2:a1:f2:68:2f:f4:cc: 88:64:eb:f9:f3:42:8b:3e:d1:53:a4:8c:1f:18:b3:56:f0:2a: 64:1d:db:0e:1f:bc:81:50:e1:d7:23:da:5a:3c:0b:00:37:02: ae:22:5b:0f:b0:15:b4:d4:d2:b8:f7:1e:24:65:c7:90:72:bc: 97:94:bf:97:9e:3c:c2:b1:5a:8c:d4:4f:2f:e1:72:c4:59:9c: 99:c8:52:bd:e3:df:d1:de:33:bf:d6:37:35:6c:14:f0:2c:d5: 13:4e:09:79:1e:2c:84:b7:16:5f:4e:cc:ab:00:cc:47:56:52: 5f:b3:46:3c:e8:6f:f2:22:0d:0b:74:ab:43:87:7e:4f:bd:3c: 58:da:03:7d:5b:70:e3:26:fa:af:c6:74:39:17:4c:d2:f0:1c: bb:68:a6:ea:01:6c:7b:cb:4e:d4:61:ad:c7:05:9f:ca:09:eb: 16:06:9e:dc:ac:3e:f9:db:86:2d:b4:70:f4:9d:d2:9a:7c:ef: 61:eb:ac:b7:d9:cb:f0:c2:a4:e0:f7:29:29:85:7f:21:48:31: 96:b1:83:1c:df:f7:50:85:52:53:e9:0b:9f:59:e9:8d:70:f7: 1b:35:ca:c7:71:29:de:02:ef:4a:82:87:bd:11:9b:ba:b0:5b: f2:5a:22:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ahRMFhW8rV71BZ3K7xalMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyY2E0MDIwZWZlZTYxYzMxMDZhYzlmZWNlNzljN2E2OGY3 MWE5Y2IwHhcNMjUxMjE5MjEwMDM0WhcNMjUxMjIwMjEwMDM0WjAzMTEwLwYDVQQD EygyZDBmNzRhMjYyNzMzNzMxN2UxZGNiODlhMTRjOWRmYjdmNWY5NmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/BlEae0pzQYDoLhHjr2V1muSony DToPf3KyyyTMi/DOU0+Fm1sWsXQFYdT0ZCxT6l1isWnLdW3PqYopN/oacQOZK8CU d/yyhZhFQ5R+zds4YoHXRvo1IxcmIBGoYiIYbqbD/i8Zk6kj2wRVLcN6jLh575vc GJA7eOxcItx9MZ229Zq7aDvW3q9jEvDtZBmlvOeczmfAoYv1Re8dmmjbIDhdJT1u ebK3wRxRFc+gnBWaXeGCRDgL1xpiv4pMCkzP8yqpO6qNxuIKcXKnq0dY8oAWidiV vABBqwRd1/Wu7eBQ11dcG0fWYWD3eOStCZHB+GK0yMmFuJvjA1w8AuGDIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0PdKJiczcxfh3LiaFMnft/X5ajMB8GA1UdIwQY MBaAFPLKQCDv7mHDEGrJ/s55x6aPcanLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHNwQUlPX3VZY01RYXNuLXpubkhwbzl4cWNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS82OGQzNDgtYWI2NS00MTVmLTk3NTEt Y2ExZmJmN2JiOGM4LzEvOHNwQUlPX3VZY01RYXNuLXpubkhwbzl4cWNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS82OGQzNDgtYWI2NS00MTVmLTk3NTEtY2ExZmJmN2JiOGM4 LzEvOHNwQUlPX3VZY01RYXNuLXpubkhwbzl4cWNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtuxIp9J MZczx0qiofJoL/TMiGTr+fNCiz7RU6SMHxizVvAqZB3bDh+8gVDh1yPaWjwLADcC riJbD7AVtNTSuPceJGXHkHK8l5S/l548wrFajNRPL+FyxFmcmchSvePf0d4zv9Y3 NWwU8CzVE04JeR4shLcWX07MqwDMR1ZSX7NGPOhv8iINC3SrQ4d+T708WNoDfVtw 4yb6r8Z0ORdM0vAcu2im6gFse8tO1GGtxwWfygnrFgae3Kw++duGLbRw9J3Smnzv Yeust9nL8MKk4PcpKYV/IUgxlrGDHN/3UIVSU+kLn1npjXD3GzXKx3Ep3gLvSoKH vRGburBb8loiXw== -----END CERTIFICATE-----Generated at Sat Dec 20 00:19:39 2025 by rpki-client