This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft File: 8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json) Hash identifier: VEMgDezZ4iyW1GX6ENIQnDzKsYvpT5xWKio0HsiJ//o= Subject key identifier: 70:51:EB:0E:C9:37:6F:6C:FB:F8:35:79:A3:7A:5E:22:D7:91:E2:5E Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7 Certificate issuer: /CN=f1359ff10c1564421e974573ace1ba62333b82a7 Certificate serial: 019B34C534BA8D0C9B774FCC2C35161DE95A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft Manifest number: 1419 Signing time: Fri 19 Dec 2025 04:01:37 +0000 Manifest this update: Fri 19 Dec 2025 04:01:37 +0000 Manifest next update: Sat 20 Dec 2025 04:01:37 +0000 Files and hashes: 1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: FrdgkZuvYaoREfbfECwbel1i4uVDvWm30AkoUmwq0Bk=) 2: xcycZms0_ZHCVQVtErEWcPT6uzM.roa (hash: LGvEW3RDqUd1ArWiz/8ADiBje4yqqRUes0HgBtn3AOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:34:ba:8d:0c:9b:77:4f:cc:2c:35:16:1d:e9:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7 Validity Not Before: Dec 19 04:01:37 2025 GMT Not After : Dec 20 04:01:37 2025 GMT Subject: CN=7051eb0ec9376f6cfbf83579a37a5e22d791e25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ee:81:98:4a:7d:af:e4:f7:9e:76:94:5f:46: c2:b1:37:fb:f5:e1:3a:36:3f:0b:c1:41:5b:4d:b8: f4:53:44:7e:eb:c6:be:98:57:a3:aa:dc:98:b2:a8: 46:b9:a2:d1:4c:06:e2:29:c7:55:46:cd:a7:ba:34: f7:98:50:41:23:9e:83:98:51:92:76:cf:04:92:17: 42:1f:a6:5a:66:f5:fa:e7:82:fc:4b:98:56:8d:5e: 08:5a:c2:ca:92:d9:bb:c3:3f:20:fa:3e:9c:fb:b2: 34:54:08:a4:38:2d:18:71:8c:b5:00:e3:fb:53:61: a8:a0:8e:2a:51:ee:33:e4:10:89:54:72:a6:5c:6a: 20:9e:41:c4:34:a6:e3:57:89:2a:f7:28:7f:52:11: ce:5c:3d:82:41:0c:d4:a8:6c:34:35:f9:77:48:f1: 86:ba:be:1f:d4:10:b1:87:31:0c:9f:c8:92:61:89: c8:e9:20:1d:ed:60:da:c9:a3:6b:13:89:04:5b:5d: d5:3f:cd:ad:29:75:59:8a:63:d7:d6:c1:c8:7c:33: 9c:03:07:65:8a:e6:9b:da:74:bc:e1:7b:35:24:02: c5:47:81:0d:7b:e0:49:e5:24:fa:e6:1a:ad:92:19: da:97:e1:15:aa:07:ac:b3:f6:19:6a:65:44:7c:41: e6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:51:EB:0E:C9:37:6F:6C:FB:F8:35:79:A3:7A:5E:22:D7:91:E2:5E X509v3 Authority Key Identifier: keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ae:55:be:ad:c3:d6:7f:00:f3:06:fa:0c:13:b0:81:46:ec: f7:60:ad:92:be:d8:25:d7:16:03:8c:2c:0d:19:e8:58:56:82: 73:d0:95:8a:b7:c7:cc:49:76:da:22:bd:03:03:57:40:38:15: fb:11:b9:79:a2:64:c5:43:7a:81:45:be:2b:b9:02:b2:37:cd: 58:8a:e8:9d:0b:6d:4b:fd:9b:87:89:08:6f:cf:f0:a9:ce:de: 95:8f:2d:16:2d:e2:cf:d3:83:68:64:5c:57:66:99:f5:55:d3: 34:57:97:60:b7:67:88:87:6d:33:ec:42:79:ae:14:5e:25:4c: d7:b5:45:47:14:90:2a:b4:35:67:7c:52:e5:6b:24:8b:3c:fa: 74:b0:dd:a9:ae:38:2a:74:6e:fa:59:32:59:bf:65:b3:be:45: 8d:9d:62:9c:0d:af:64:63:10:f1:fa:5c:ce:f8:bc:d3:13:46: cc:e1:93:e1:ff:a6:71:ff:6d:e9:b8:bc:eb:9c:a6:9c:d3:bd: 3b:b1:8d:25:80:ce:4d:58:40:e6:ea:51:3f:c5:fd:58:1d:92: bd:4e:aa:25:e6:61:fd:25:40:9c:78:84:95:07:d2:28:22:c8: 9e:ee:30:b7:fa:ad:ea:d0:15:b4:c0:7c:ff:e9:5f:59:09:0f: 9e:ac:d4:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xTS6jQybd0/MLDUWHelaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzU5ZmYxMGMxNTY0NDIxZTk3NDU3M2FjZTFiYTYyMzMz YjgyYTcwHhcNMjUxMjE5MDQwMTM3WhcNMjUxMjIwMDQwMTM3WjAzMTEwLwYDVQQD Eyg3MDUxZWIwZWM5Mzc2ZjZjZmJmODM1NzlhMzdhNWUyMmQ3OTFlMjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue6BmEp9r+T3nnaUX0bCsTf79eE6 Nj8LwUFbTbj0U0R+68a+mFejqtyYsqhGuaLRTAbiKcdVRs2nujT3mFBBI56DmFGS ds8EkhdCH6ZaZvX654L8S5hWjV4IWsLKktm7wz8g+j6c+7I0VAikOC0YcYy1AOP7 U2GooI4qUe4z5BCJVHKmXGognkHENKbjV4kq9yh/UhHOXD2CQQzUqGw0Nfl3SPGG ur4f1BCxhzEMn8iSYYnI6SAd7WDayaNrE4kEW13VP82tKXVZimPX1sHIfDOcAwdl iuab2nS84Xs1JALFR4ENe+BJ5ST65hqtkhnal+EVqgess/YZamVEfEHm0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBR6w7JN29s+/g1eaN6XiLXkeJeMB8GA1UdIwQY MBaAFPE1n/EMFWRCHpdFc6zhumIzO4KnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mOGRmZjktNmRhYy00MzEzLTk5ODAt YWI0YmEzMzJmZTE1LzEvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9mOGRmZjktNmRhYy00MzEzLTk5ODAtYWI0YmEzMzJmZTE1 LzEvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa65Vvq3D 1n8A8wb6DBOwgUbs92Ctkr7YJdcWA4wsDRnoWFaCc9CVirfHzEl22iK9AwNXQDgV +xG5eaJkxUN6gUW+K7kCsjfNWIronQttS/2bh4kIb8/wqc7elY8tFi3iz9ODaGRc V2aZ9VXTNFeXYLdniIdtM+xCea4UXiVM17VFRxSQKrQ1Z3xS5Wskizz6dLDdqa44 KnRu+lkyWb9ls75FjZ1inA2vZGMQ8fpczvi80xNGzOGT4f+mcf9t6bi865ymnNO9 O7GNJYDOTVhA5upRP8X9WB2SvU6qJeZh/SVAnHiElQfSKCLInu4wt/qt6tAVtMB8 /+lfWQkPnqzUNw== -----END CERTIFICATE-----Generated at Fri Dec 19 09:22:07 2025 by rpki-client