This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft File: 8_alfqKpAutJEt6SffgDBMNVqxI.mft (raw, json) Hash identifier: XUwKRUoXSE2PVvE0n83BPUjl2j35cAwYInJv73EPxs4= Subject key identifier: 63:BB:0A:39:AF:49:CB:9C:EE:F6:1D:CE:2C:21:7F:08:DD:3A:A4:2E Authority key identifier: F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12 Certificate issuer: /CN=f3f6a57ea2a902eb4912de927df80304c355ab12 Certificate serial: 019B36B39F95959FF3A446575BA1579F0157 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft Manifest number: 16D7 Signing time: Fri 19 Dec 2025 13:01:39 +0000 Manifest this update: Fri 19 Dec 2025 13:01:39 +0000 Manifest next update: Sat 20 Dec 2025 13:01:39 +0000 Files and hashes: 1: 8_alfqKpAutJEt6SffgDBMNVqxI.crl (hash: EFs3RmQE3rkWUPP73ekDaOFWw33KM42fLKsOaKn0s44=) 2: u8DCnmiwdvKh2XgFpOMuHJjylj4.roa (hash: pyYbMY7OWkqDVRgEujgw5F9QcQGgPWWbAPnLnwKmM2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.crl rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:9f:95:95:9f:f3:a4:46:57:5b:a1:57:9f:01:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3f6a57ea2a902eb4912de927df80304c355ab12 Validity Not Before: Dec 19 13:01:39 2025 GMT Not After : Dec 20 13:01:39 2025 GMT Subject: CN=63bb0a39af49cb9ceef61dce2c217f08dd3aa42e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:7e:32:89:c3:c4:58:a2:24:1d:b8:3f:0c: a5:86:14:2b:be:33:06:93:62:21:ba:91:54:48:fe: 57:d4:c5:8c:e5:ec:b5:98:f0:40:ef:ce:ce:57:2d: e7:ba:9b:f1:01:d6:0b:ac:a7:41:52:92:a5:09:17: 4e:c1:8d:08:c9:73:5d:7b:f1:55:a2:5e:c1:9e:0c: bb:a5:9e:44:2d:a9:ca:7e:9d:b9:df:ff:95:1f:df: fe:f3:d3:8f:b4:af:14:88:59:9e:63:e7:19:90:db: 9d:ca:1b:58:64:a8:e3:36:e5:1b:d0:af:2d:3c:68: f0:f3:49:04:f1:d5:e7:bb:19:f6:2c:1a:cf:08:fd: 27:d2:52:49:fa:55:a8:51:68:d7:79:af:d2:b1:65: c5:a3:9a:1a:9c:cb:08:50:16:51:a8:45:41:6e:70: 57:a3:40:cb:e5:f2:d2:ac:70:9a:f1:f0:23:a8:31: ae:d2:72:c2:06:16:d9:5b:e9:9e:35:66:0c:9d:a7: 3a:14:a9:3d:de:49:42:b9:b8:a6:14:f2:08:4d:d8: 80:38:1a:ae:0c:96:7d:db:6f:9e:fb:db:21:78:b7: 65:a9:c3:1d:1e:38:11:3f:35:50:8e:f8:68:90:c6: 15:92:d6:8b:02:be:17:7f:52:44:31:50:9b:1c:61: 62:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BB:0A:39:AF:49:CB:9C:EE:F6:1D:CE:2C:21:7F:08:DD:3A:A4:2E X509v3 Authority Key Identifier: keyid:F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8f:5f:ec:c7:87:7a:7a:29:62:f8:88:bb:cc:d3:1d:2e:d6: 1b:df:22:e5:c1:51:57:ad:84:7f:ae:66:8d:d3:b6:45:da:af: db:6a:40:e0:99:38:a5:7e:bc:0b:d5:76:0c:7f:29:3e:25:21: 77:d8:1b:ac:99:cd:4e:8c:f5:cb:85:5f:e2:88:89:3b:a8:68: 4c:58:ae:8e:76:59:d4:e3:f0:0c:86:36:df:bb:7b:83:95:f3: a9:fa:14:28:ca:b3:12:29:22:20:a2:b0:40:d2:c7:3d:5d:4c: 7a:3b:81:24:48:e6:9c:c2:77:f2:49:35:ca:da:8e:ce:c7:09: a7:06:d4:cf:c0:ae:34:5f:9a:d1:ad:be:2c:29:2d:df:f0:ed: 18:7b:2c:1e:0c:b0:23:97:e2:b1:f1:fe:77:c0:b9:0a:31:10: 84:ba:24:ca:be:e3:29:d5:a0:10:b2:e6:9b:1c:50:e9:b9:ce: 91:8b:b8:a1:95:75:3c:3e:b4:a4:77:a6:e5:4e:1c:9d:06:4f: 17:9a:92:a6:c4:22:3e:3e:13:8f:28:e3:c9:36:10:ac:95:ed: 4a:5a:95:5c:76:4f:7f:45:ce:19:99:94:6a:0e:e5:95:ca:08: ce:bd:7c:e3:2d:bf:b6:33:04:36:c4:e0:45:f0:36:ca:12:10: bd:3c:f5:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s5+VlZ/zpEZXW6FXnwFXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZjZhNTdlYTJhOTAyZWI0OTEyZGU5MjdkZjgwMzA0YzM1 NWFiMTIwHhcNMjUxMjE5MTMwMTM5WhcNMjUxMjIwMTMwMTM5WjAzMTEwLwYDVQQD Eyg2M2JiMGEzOWFmNDljYjljZWVmNjFkY2UyYzIxN2YwOGRkM2FhNDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzh+MonDxFiiJB24PwylhhQrvjMG k2IhupFUSP5X1MWM5ey1mPBA787OVy3nupvxAdYLrKdBUpKlCRdOwY0IyXNde/FV ol7Bngy7pZ5ELanKfp253/+VH9/+89OPtK8UiFmeY+cZkNudyhtYZKjjNuUb0K8t PGjw80kE8dXnuxn2LBrPCP0n0lJJ+lWoUWjXea/SsWXFo5oanMsIUBZRqEVBbnBX o0DL5fLSrHCa8fAjqDGu0nLCBhbZW+meNWYMnac6FKk93klCubimFPIITdiAOBqu DJZ922+e+9sheLdlqcMdHjgRPzVQjvhokMYVktaLAr4Xf1JEMVCbHGFiFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGO7CjmvScuc7vYdziwhfwjdOqQuMB8GA1UdIwQY MBaAFPP2pX6iqQLrSRLekn34AwTDVasSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOF9hbGZxS3BBdXRKRXQ2U2ZmZ0RCTU5WcXhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84YmYzODktODEzYy00OWJhLTg1MGMt OTQwYzZiOGI1MDJhLzEvOF9hbGZxS3BBdXRKRXQ2U2ZmZ0RCTU5WcXhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS84YmYzODktODEzYy00OWJhLTg1MGMtOTQwYzZiOGI1MDJh LzEvOF9hbGZxS3BBdXRKRXQ2U2ZmZ0RCTU5WcXhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWo9f7MeH enopYviIu8zTHS7WG98i5cFRV62Ef65mjdO2Rdqv22pA4Jk4pX68C9V2DH8pPiUh d9gbrJnNToz1y4Vf4oiJO6hoTFiujnZZ1OPwDIY237t7g5XzqfoUKMqzEikiIKKw QNLHPV1MejuBJEjmnMJ38kk1ytqOzscJpwbUz8CuNF+a0a2+LCkt3/DtGHssHgyw I5fisfH+d8C5CjEQhLokyr7jKdWgELLmmxxQ6bnOkYu4oZV1PD60pHem5U4cnQZP F5qSpsQiPj4TjyjjyTYQrJXtSlqVXHZPf0XOGZmUag7llcoIzr184y2/tjMENsTg RfA2yhIQvTz1PA== -----END CERTIFICATE-----Generated at Fri Dec 19 20:27:04 2025 by rpki-client