This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json) Hash identifier: 88OhGU+ybMXko4MUqPcYB5JGid1l5bIFdf4CeHi7Vc8= Subject key identifier: A8:CE:ED:C1:26:0B:BA:2D:DA:83:00:7C:27:D8:FE:DE:E3:07:84:36 Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95 Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195 Certificate serial: 019B4926E3362A5C6B68FC408900A4148BF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft Manifest number: 11F4 Signing time: Tue 23 Dec 2025 03:00:43 +0000 Manifest this update: Tue 23 Dec 2025 03:00:43 +0000 Manifest next update: Wed 24 Dec 2025 03:00:43 +0000 Files and hashes: 1: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: 4BUaBwvxXHdDuomx3wpSietUeqHED5etjshSz73FKgY=) 2: dPscEX-Zy8evMbxWuU7vJ2Ixhv8.roa (hash: D+72QcpH+TK76A0ijjgkoRMMQ5NsFbRIC95DTaeOIrc=) 3: eKaWRxU48jVjME70Pg-sKw71ysM.roa (hash: Fvcwn/TmHPQrbKfRxQXdczBfOElJLonqigBoxqw+IFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 03:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:26:e3:36:2a:5c:6b:68:fc:40:89:00:a4:14:8b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195 Validity Not Before: Dec 23 03:00:43 2025 GMT Not After : Dec 24 03:00:43 2025 GMT Subject: CN=a8ceedc1260bba2dda83007c27d8fedee3078436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:53:56:f5:55:b8:20:6f:c3:9a:77:d2:52:7d: f6:43:2e:28:fe:62:e2:21:61:f2:4f:07:04:30:ca: 9a:2c:54:52:30:36:cf:3f:b4:23:d6:e7:04:9d:fe: 47:18:29:74:a4:32:e4:29:fd:e0:0c:1d:fb:e0:dc: 95:0d:73:5f:a3:4d:a2:43:10:32:92:d5:bf:76:39: d3:98:2a:4a:68:46:5c:16:50:fd:57:4c:fc:97:bb: a4:f6:9d:f6:55:bc:82:b7:a0:69:88:02:c2:00:c4: 70:a2:82:43:08:99:6b:41:e1:e0:1c:d9:3e:27:30: a3:51:82:3f:12:c2:cd:65:a2:17:e1:2a:c5:a9:1d: 50:22:77:2b:9d:ff:2c:6c:5d:61:6a:dd:40:a6:d4: 10:b1:6c:56:2c:36:00:48:be:6d:a9:59:d8:3a:73: e8:71:2b:a3:fa:7f:66:d9:65:97:39:33:05:a4:c8: 57:4a:26:46:69:5c:95:56:49:77:f0:30:0a:11:78: a8:77:93:42:64:cc:6e:b8:6f:a7:98:6c:bb:8b:e0: 5c:7a:2c:62:37:01:72:89:1d:36:1e:24:1c:44:4d: 36:5c:dc:86:d6:6d:57:5b:9d:d1:86:d6:51:7d:ac: 11:6e:c2:a6:34:08:27:61:31:11:69:e3:33:6c:c8: a9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CE:ED:C1:26:0B:BA:2D:DA:83:00:7C:27:D8:FE:DE:E3:07:84:36 X509v3 Authority Key Identifier: keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:dd:6a:35:41:98:fe:23:aa:cb:cc:1d:0a:ed:f4:79:03:62: 14:7b:37:8a:c6:a0:ef:6b:ec:08:4e:12:3e:44:dd:7d:bc:1d: c4:89:42:1d:52:72:69:1d:20:b2:12:54:33:35:21:6e:ca:19: 6d:90:f7:c9:3c:2e:75:31:30:4d:b7:01:76:9d:78:5e:f1:5c: cd:ca:8f:54:96:d8:bd:52:66:94:2e:df:7e:f9:59:87:11:2c: 4b:02:c7:60:83:af:25:28:ba:52:4b:30:3d:96:6f:48:98:fc: 32:f1:9f:b2:67:6c:48:65:02:23:b5:b0:54:32:90:63:29:e6: 57:81:12:8f:0c:c1:69:a1:e0:91:2a:bc:46:56:9f:e2:42:e2: 32:86:e6:7a:4c:c1:e6:19:03:c7:21:91:ae:4f:f6:6b:60:02: bf:03:99:b3:7c:e3:ed:9a:0f:d6:a5:2a:72:e7:52:95:7b:4d: d2:4c:38:c6:94:60:88:31:bf:17:7b:c3:3b:2a:b8:9d:87:4c: b5:04:0e:41:46:10:10:a2:19:d1:3d:e5:01:45:f3:7f:53:26: 18:c5:42:39:80:ca:ab:7a:10:4a:93:82:94:03:c9:9a:bd:65: 08:4c:29:b7:6b:80:7d:19:d9:e9:e5:32:11:d0:63:2d:ab:70: cf:98:1f:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJuM2KlxraPxAiQCkFIvzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjFkZjQ0YjM0NjgyM2NjZThjNjY0M2I1ZmE2OTE5YWZi MjMxOTUwHhcNMjUxMjIzMDMwMDQzWhcNMjUxMjI0MDMwMDQzWjAzMTEwLwYDVQQD EyhhOGNlZWRjMTI2MGJiYTJkZGE4MzAwN2MyN2Q4ZmVkZWUzMDc4NDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1NW9VW4IG/DmnfSUn32Qy4o/mLi IWHyTwcEMMqaLFRSMDbPP7Qj1ucEnf5HGCl0pDLkKf3gDB374NyVDXNfo02iQxAy ktW/djnTmCpKaEZcFlD9V0z8l7uk9p32VbyCt6BpiALCAMRwooJDCJlrQeHgHNk+ JzCjUYI/EsLNZaIX4SrFqR1QIncrnf8sbF1hat1AptQQsWxWLDYASL5tqVnYOnPo cSuj+n9m2WWXOTMFpMhXSiZGaVyVVkl38DAKEXiod5NCZMxuuG+nmGy7i+Bceixi NwFyiR02HiQcRE02XNyG1m1XW53RhtZRfawRbsKmNAgnYTERaeMzbMipfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjO7cEmC7ot2oMAfCfY/t7jB4Q2MB8GA1UdIwQY MBaAFPJh30SzRoI8zoxmQ7X6aRmvsjGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMt NTc1ODYxNTYzNTRlLzEvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMtNTc1ODYxNTYzNTRl LzEvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALd1qNUGY /iOqy8wdCu30eQNiFHs3isag72vsCE4SPkTdfbwdxIlCHVJyaR0gshJUMzUhbsoZ bZD3yTwudTEwTbcBdp14XvFczcqPVJbYvVJmlC7ffvlZhxEsSwLHYIOvJSi6Uksw PZZvSJj8MvGfsmdsSGUCI7WwVDKQYynmV4ESjwzBaaHgkSq8Rlaf4kLiMobmekzB 5hkDxyGRrk/2a2ACvwOZs3zj7ZoP1qUqcudSlXtN0kw4xpRgiDG/F3vDOyq4nYdM tQQOQUYQEKIZ0T3lAUXzf1MmGMVCOYDKq3oQSpOClAPJmr1lCEwpt2uAfRnZ6eUy EdBjLatwz5gfxA== -----END CERTIFICATE-----Generated at Tue Dec 23 13:05:31 2025 by rpki-client