This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft File: 8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft (raw, json) Hash identifier: mh5UWo1tCnJ+Fsq7r3DTQF67PpsoTKdQE89IpLcRTW4= Subject key identifier: 19:27:8E:87:CC:F0:18:AA:BE:BE:00:F8:50:85:28:07:3B:35:70:4D Authority key identifier: F0:59:4E:7A:31:DB:79:37:FA:B5:2F:CC:38:90:59:D3:45:1F:23:66 Certificate issuer: /CN=f0594e7a31db7937fab52fcc389059d3451f2366 Certificate serial: 019B104A1B7C1AFAF26148188CDF2A077984 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft Manifest number: A9 Signing time: Fri 12 Dec 2025 02:00:50 +0000 Manifest this update: Fri 12 Dec 2025 02:00:50 +0000 Manifest next update: Sat 13 Dec 2025 02:00:50 +0000 Files and hashes: 1: 1725gUGQIpKhUhC6TOahnEdES40.roa (hash: gz+cyjfpqWkO2//cF11n4nopLq+bPFaAXZONiWW+enE=) 2: 8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl (hash: 4rb33wIxc21/dyxFMBBZwJ/J8jyqA+xnDQMLI/rEyMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:4a:1b:7c:1a:fa:f2:61:48:18:8c:df:2a:07:79:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0594e7a31db7937fab52fcc389059d3451f2366 Validity Not Before: Dec 12 02:00:50 2025 GMT Not After : Dec 13 02:00:50 2025 GMT Subject: CN=19278e87ccf018aabebe00f8508528073b35704d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:86:06:b9:65:f1:f2:cd:72:60:7b:9b:d2:b1: 3a:d4:f9:e4:c1:29:d6:28:49:1b:da:ab:af:35:70: c1:4c:dc:be:24:59:71:cd:af:30:d5:b0:16:dd:0a: da:b0:0d:1f:3e:17:02:0f:20:d4:8b:b4:a0:63:a1: 50:d3:8a:58:73:52:b7:8d:c2:8f:66:74:4a:da:f7: 85:d2:fa:d5:51:6b:bf:9b:bc:fa:87:44:0f:6e:9e: 69:1b:1e:0f:a8:f2:13:d6:f7:40:81:1c:0c:bd:71: bf:4d:49:88:de:68:49:6d:52:16:e5:48:13:e7:97: 1e:89:e9:36:e6:4e:90:fd:80:aa:dd:25:39:e4:25: c9:15:33:a5:8a:4f:30:5f:ce:8e:b3:2b:bb:8e:d7: 02:aa:c0:d6:1c:34:94:f1:35:a8:aa:03:f9:a6:0e: dc:2f:31:a4:cd:54:16:81:0c:39:ff:82:95:9a:91: f0:b7:33:99:12:c1:62:b9:e8:eb:c9:8d:65:62:21: d6:8e:c3:e8:aa:83:02:51:dc:55:76:c1:1e:76:85: 2e:8a:21:bb:9f:f7:aa:51:75:3d:71:9d:d0:6b:95: 99:25:05:fa:7d:1e:d7:b0:8b:15:da:d8:81:0e:03: 99:06:aa:cf:02:b1:a3:7e:28:81:9b:50:c8:26:20: bc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:27:8E:87:CC:F0:18:AA:BE:BE:00:F8:50:85:28:07:3B:35:70:4D X509v3 Authority Key Identifier: keyid:F0:59:4E:7A:31:DB:79:37:FA:B5:2F:CC:38:90:59:D3:45:1F:23:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:88:10:7a:c8:48:3f:c0:20:e2:51:d4:5c:78:ef:1f:2a:f5: 9a:3a:ce:7e:26:db:89:dc:e0:45:23:e1:a1:ef:73:0b:61:b8: a3:91:61:8a:e2:a5:92:e8:c8:98:21:46:8f:2f:99:0d:52:6e: 34:e4:cb:36:34:32:81:48:1e:66:5c:7b:f4:ce:cb:a1:37:43: 4e:42:c2:2c:65:71:fa:aa:25:f6:ad:ac:6d:31:10:60:9c:81: 71:90:57:9a:39:cf:c0:a8:80:d9:be:06:1d:30:59:d7:99:89: 4d:5f:94:23:21:ff:7d:ea:5b:4c:cf:8a:9f:8f:e5:e6:9c:c8: d1:93:be:9a:2d:7e:be:f5:8e:39:fc:2c:af:a0:6b:1e:6c:8c: 9f:10:be:75:cb:bd:49:32:f1:34:cf:18:47:e6:5f:09:aa:e7: 28:91:ae:af:df:12:e8:d0:8e:e4:4f:96:d8:0b:c7:aa:08:9a: e3:a0:f9:7c:df:50:20:d2:4e:9e:e9:90:c0:8b:ae:ae:e5:e3: bb:bb:a0:a1:9e:33:c6:b3:47:c7:58:40:b1:e1:e5:95:59:f2: 6a:df:46:fb:77:bc:26:86:37:c1:12:a1:89:bf:a0:6c:4b:bb: cc:4b:de:70:0b:66:ce:17:24:95:d4:0c:f3:2a:ff:b8:a1:12: 8b:3a:a3:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSht8GvryYUgYjN8qB3mEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTk0ZTdhMzFkYjc5MzdmYWI1MmZjYzM4OTA1OWQzNDUx ZjIzNjYwHhcNMjUxMjEyMDIwMDUwWhcNMjUxMjEzMDIwMDUwWjAzMTEwLwYDVQQD EygxOTI3OGU4N2NjZjAxOGFhYmViZTAwZjg1MDg1MjgwNzNiMzU3MDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYYGuWXx8s1yYHub0rE61PnkwSnW KEkb2quvNXDBTNy+JFlxza8w1bAW3QrasA0fPhcCDyDUi7SgY6FQ04pYc1K3jcKP ZnRK2veF0vrVUWu/m7z6h0QPbp5pGx4PqPIT1vdAgRwMvXG/TUmI3mhJbVIW5UgT 55ceiek25k6Q/YCq3SU55CXJFTOlik8wX86Osyu7jtcCqsDWHDSU8TWoqgP5pg7c LzGkzVQWgQw5/4KVmpHwtzOZEsFiuejryY1lYiHWjsPoqoMCUdxVdsEedoUuiiG7 n/eqUXU9cZ3Qa5WZJQX6fR7XsIsV2tiBDgOZBqrPArGjfiiBm1DIJiC8JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBknjofM8Biqvr4A+FCFKAc7NXBNMB8GA1UdIwQY MBaAFPBZTnox23k3+rUvzDiQWdNFHyNmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZsT2VqSGJlVGY2dFNfTU9KQlowMFVmSTJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xZDUxMzUtYjcxMi00MzFhLWEyOGIt YjU3ZjUwZjAwODA0LzEvOEZsT2VqSGJlVGY2dFNfTU9KQlowMFVmSTJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xZDUxMzUtYjcxMi00MzFhLWEyOGItYjU3ZjUwZjAwODA0 LzEvOEZsT2VqSGJlVGY2dFNfTU9KQlowMFVmSTJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIgQeshI P8Ag4lHUXHjvHyr1mjrOfibbidzgRSPhoe9zC2G4o5FhiuKlkujImCFGjy+ZDVJu NOTLNjQygUgeZlx79M7LoTdDTkLCLGVx+qol9q2sbTEQYJyBcZBXmjnPwKiA2b4G HTBZ15mJTV+UIyH/fepbTM+Kn4/l5pzI0ZO+mi1+vvWOOfwsr6BrHmyMnxC+dcu9 STLxNM8YR+ZfCarnKJGur98S6NCO5E+W2AvHqgia46D5fN9QINJOnumQwIuuruXj u7ugoZ4zxrNHx1hAseHllVnyat9G+3e8JoY3wRKhib+gbEu7zEvecAtmzhckldQM 8yr/uKESizqjLQ== -----END CERTIFICATE-----Generated at Fri Dec 12 06:12:29 2025 by rpki-client