This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft File: 8AI84rpaHU_QpeIn3nTLxB0rucg.mft (raw, json) Hash identifier: IyUseiwEBUAnwSfTaCdI1EzO2aSKBEb6hdQ8rxLtbzE= Subject key identifier: A6:4D:35:C1:5F:96:0B:B3:5B:E9:E1:F5:66:0D:BD:88:0A:DA:26:03 Authority key identifier: F0:02:3C:E2:BA:5A:1D:4F:D0:A5:E2:27:DE:74:CB:C4:1D:2B:B9:C8 Certificate issuer: /CN=f0023ce2ba5a1d4fd0a5e227de74cbc41d2bb9c8 Certificate serial: 019B23D096B9035A98A2162479F6AC2DC86F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft Manifest number: 14C4 Signing time: Mon 15 Dec 2025 21:00:31 +0000 Manifest this update: Mon 15 Dec 2025 21:00:31 +0000 Manifest next update: Tue 16 Dec 2025 21:00:31 +0000 Files and hashes: 1: 8AI84rpaHU_QpeIn3nTLxB0rucg.crl (hash: prFBVGVn3Ghf8sxa8K+/Q0+Iytcal5UraiCzYgBvVV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d0:96:b9:03:5a:98:a2:16:24:79:f6:ac:2d:c8:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0023ce2ba5a1d4fd0a5e227de74cbc41d2bb9c8 Validity Not Before: Dec 15 21:00:31 2025 GMT Not After : Dec 16 21:00:31 2025 GMT Subject: CN=a64d35c15f960bb35be9e1f5660dbd880ada2603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f6:57:05:49:03:2b:a3:6c:d3:be:f5:41:48: 50:de:dd:b2:49:77:29:d7:be:a5:50:cb:e6:1f:28: db:42:86:d1:01:e4:0c:3b:f0:77:2a:47:6a:f9:b8: 3c:61:f4:4e:6a:ad:6c:56:b9:7a:96:1d:3e:8c:af: 1c:bc:86:46:37:55:be:f5:22:19:ff:81:da:86:22: a8:4e:35:24:ab:3c:0a:da:11:e3:6a:e9:b8:53:7a: 29:25:85:eb:a2:93:13:bc:0e:95:d4:37:a6:a9:cd: 14:a3:a4:ff:fb:1c:bc:be:ba:7b:47:03:ca:49:91: 74:51:f6:b3:41:2b:b5:96:bd:8c:6e:3b:56:4b:b2: 6e:03:ba:5d:d5:01:41:00:6b:0e:83:1a:ec:dc:3e: bc:6d:da:dc:6d:71:d0:c1:cb:8a:da:22:3b:6a:09: a0:2e:ef:fd:ea:e9:a1:a7:ff:00:94:c2:6e:52:06: 3f:d6:26:94:38:19:d0:74:4c:75:04:35:b3:55:42: 49:70:cd:c8:7f:97:c0:ea:36:61:48:5d:90:10:f1: a5:20:1b:01:c1:d2:59:c2:94:d5:b3:13:26:9e:c4: 46:e1:9a:b1:ad:85:69:20:23:48:d9:ef:c3:76:1b: 42:f0:c3:ac:3c:60:24:45:a1:e9:a8:c7:b1:41:08: e8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4D:35:C1:5F:96:0B:B3:5B:E9:E1:F5:66:0D:BD:88:0A:DA:26:03 X509v3 Authority Key Identifier: keyid:F0:02:3C:E2:BA:5A:1D:4F:D0:A5:E2:27:DE:74:CB:C4:1D:2B:B9:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:f5:10:17:3e:36:cd:68:30:c1:2f:93:75:5c:6e:d7:69:d9: 11:17:c1:7f:a8:5d:cc:22:60:16:ff:78:68:3d:66:da:2c:6a: 8a:e6:18:e8:23:ba:72:dd:c6:c0:03:0b:1d:96:28:86:da:75: 7c:38:ef:ff:57:21:2f:b4:f2:94:0a:cb:e3:ca:b1:55:1d:cf: 20:9e:38:15:d7:12:54:2f:21:02:e4:da:cc:85:98:88:2d:8f: 7c:2f:d4:41:85:ae:9f:ab:93:e3:15:d4:a0:b7:0f:a6:c9:07: 24:b0:cd:0e:8d:cf:ff:48:a6:9b:b6:57:b2:5d:bb:be:fd:64: 02:75:8c:41:96:e9:cf:3e:11:5c:07:34:18:f6:5b:28:72:f0: 9a:ae:52:26:15:c6:f9:d0:7a:57:56:63:99:bc:2f:09:60:ce: 26:9e:56:a7:b2:5d:4a:78:3e:6d:b7:31:76:af:8e:b1:f3:40: 30:6d:7d:d4:30:57:a5:8b:43:d4:fa:db:df:bf:e3:2e:37:15: 5f:0c:24:72:2d:5d:3a:49:30:9f:23:4b:ea:60:9f:f4:70:d2: f8:e4:f7:fa:7a:dd:49:22:32:42:11:11:ed:cf:b9:8b:ac:6f: b3:e6:d3:91:14:b8:80:97:e9:9b:58:3a:10:82:76:54:5e:89: 02:78:3a:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0Ja5A1qYohYkefasLchvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMDIzY2UyYmE1YTFkNGZkMGE1ZTIyN2RlNzRjYmM0MWQy YmI5YzgwHhcNMjUxMjE1MjEwMDMxWhcNMjUxMjE2MjEwMDMxWjAzMTEwLwYDVQQD EyhhNjRkMzVjMTVmOTYwYmIzNWJlOWUxZjU2NjBkYmQ4ODBhZGEyNjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fZXBUkDK6Ns0771QUhQ3t2ySXcp 176lUMvmHyjbQobRAeQMO/B3Kkdq+bg8YfROaq1sVrl6lh0+jK8cvIZGN1W+9SIZ /4HahiKoTjUkqzwK2hHjaum4U3opJYXropMTvA6V1Demqc0Uo6T/+xy8vrp7RwPK SZF0UfazQSu1lr2MbjtWS7JuA7pd1QFBAGsOgxrs3D68bdrcbXHQwcuK2iI7agmg Lu/96umhp/8AlMJuUgY/1iaUOBnQdEx1BDWzVUJJcM3If5fA6jZhSF2QEPGlIBsB wdJZwpTVsxMmnsRG4ZqxrYVpICNI2e/DdhtC8MOsPGAkRaHpqMexQQjoEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZNNcFflguzW+nh9WYNvYgK2iYDMB8GA1UdIwQY MBaAFPACPOK6Wh1P0KXiJ950y8QdK7nIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEFJODRycGFIVV9RcGVJbjNuVEx4QjBydWNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wYTBjMTktMDIzYy00MGY1LWE3NzIt ZWJkNjlkNzczNGYwLzEvOEFJODRycGFIVV9RcGVJbjNuVEx4QjBydWNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8wYTBjMTktMDIzYy00MGY1LWE3NzItZWJkNjlkNzczNGYw LzEvOEFJODRycGFIVV9RcGVJbjNuVEx4QjBydWNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/UQFz42 zWgwwS+TdVxu12nZERfBf6hdzCJgFv94aD1m2ixqiuYY6CO6ct3GwAMLHZYohtp1 fDjv/1chL7TylArL48qxVR3PIJ44FdcSVC8hAuTazIWYiC2PfC/UQYWun6uT4xXU oLcPpskHJLDNDo3P/0imm7ZXsl27vv1kAnWMQZbpzz4RXAc0GPZbKHLwmq5SJhXG +dB6V1ZjmbwvCWDOJp5Wp7JdSng+bbcxdq+OsfNAMG191DBXpYtD1Prb37/jLjcV Xwwkci1dOkkwnyNL6mCf9HDS+OT3+nrdSSIyQhER7c+5i6xvs+bTkRS4gJfpm1g6 EIJ2VF6JAng6PQ== -----END CERTIFICATE-----Generated at Tue Dec 16 02:51:20 2025 by rpki-client