This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft File: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft (raw, json) Hash identifier: Vjlfau5G3qhppnK5I15Zeui+uD+f1cjW7h7QKHwcXVU= Subject key identifier: B0:EE:7B:DD:29:02:07:D1:CD:FE:02:C7:83:0C:56:65:04:84:F6:A8 Authority key identifier: F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F Certificate issuer: /CN=f2d4116975d3e87bd8a28e643c69a3081de0019f Certificate serial: 019B34C54725C89C11DFC0913E483B1D444C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft Manifest number: 0B91 Signing time: Fri 19 Dec 2025 04:01:42 +0000 Manifest this update: Fri 19 Dec 2025 04:01:42 +0000 Manifest next update: Sat 20 Dec 2025 04:01:42 +0000 Files and hashes: 1: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl (hash: peUDZyGTJNWTrPrLDG+3lZxP+6FaFTcxtfm3BQDhlx4=) 2: SeOuDtHpMnNedoWWR3YCwAFSo6Q.roa (hash: KKrsIQvSnuAAjrYFyC+00nKT3QiU4KGPAaz0PYrqnb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:47:25:c8:9c:11:df:c0:91:3e:48:3b:1d:44:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2d4116975d3e87bd8a28e643c69a3081de0019f Validity Not Before: Dec 19 04:01:42 2025 GMT Not After : Dec 20 04:01:42 2025 GMT Subject: CN=b0ee7bdd290207d1cdfe02c7830c56650484f6a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d6:b4:33:60:54:90:5d:8d:b6:12:23:d2:38: 7b:85:f6:db:80:60:c8:ab:74:6a:f2:7a:c9:c0:99: 33:14:f7:87:eb:cb:cc:55:88:0b:22:3e:de:19:da: c1:a6:f4:09:2d:ff:ad:4d:f9:fb:6d:fc:e9:64:7a: d2:d3:f3:0a:72:81:83:a6:4d:5a:aa:20:ea:36:d2: 00:c4:dd:1d:14:30:97:4f:84:3b:d6:7f:3f:c1:9c: 07:83:ca:31:80:e6:25:b4:21:64:f9:97:3b:f0:41: 2b:0f:bb:ff:03:56:27:b7:62:b8:c9:7c:ec:11:d0: 20:02:99:7a:28:6a:58:7a:ec:11:4b:a1:fe:48:bd: 00:a6:e0:8c:54:ea:ae:66:98:e9:a4:89:50:a9:e5: dc:37:a0:68:7f:53:82:a6:59:7c:8a:78:e4:ea:f9: 98:a5:46:57:5c:e9:7d:10:c3:88:a2:8f:a6:9a:c6: 11:a8:09:69:08:28:74:23:eb:a8:bd:b9:6b:9a:8e: 6c:b4:a9:34:76:f4:63:56:a9:11:fe:45:f2:cb:be: 2f:2a:22:5e:9a:c4:50:70:76:dd:6a:74:40:82:34: 50:27:99:73:49:f6:a3:fe:21:a9:50:3f:95:81:5a: ed:06:ef:52:e5:9e:ba:5d:ce:9d:ca:f8:81:b7:4e: 5d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EE:7B:DD:29:02:07:D1:CD:FE:02:C7:83:0C:56:65:04:84:F6:A8 X509v3 Authority Key Identifier: keyid:F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:66:c1:c7:84:7a:8b:87:b2:53:ef:e6:39:60:3e:c2:f2:af: 80:a0:c8:7d:33:c8:48:7a:73:7e:86:ac:5b:2a:ca:9b:77:f7: 2e:b4:ca:04:dd:ac:3d:0d:c2:6f:a3:fc:b4:33:f6:2e:ae:17: bd:16:dc:0b:ca:30:ec:4b:76:e6:d4:d2:53:d9:11:1a:a4:99: 61:6a:b6:76:c9:ef:b5:4d:61:12:d2:08:0a:92:c7:be:4b:4d: 50:2e:e8:32:06:79:0b:9d:c5:e5:4a:06:05:d8:eb:73:fb:86: c6:d6:c8:b9:3e:f5:01:c5:26:01:10:97:60:7d:9b:7e:35:30: 84:96:38:1f:ea:3d:d3:f3:7b:ca:41:a8:1b:d2:6e:42:a1:4a: a4:31:fe:eb:d6:3a:95:8a:2c:a7:8f:cb:7b:80:ef:e2:64:cf: 55:f1:bd:ea:76:8d:62:3d:8e:42:c5:0c:aa:33:73:56:24:d4: 04:0c:87:f6:c7:3f:3b:19:04:e9:c0:b3:84:e6:1f:49:93:cb: 30:c2:09:68:ec:bb:1b:24:21:39:c8:a8:d3:15:55:d1:aa:63: ac:2f:71:ad:5b:d6:d8:b5:f8:91:4c:bf:23:cf:e1:2f:35:11: 2b:b2:f3:01:38:78:94:14:21:71:40:67:5e:4d:c0:0e:ac:8c: 79:bf:68:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xUclyJwR38CRPkg7HURMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZDQxMTY5NzVkM2U4N2JkOGEyOGU2NDNjNjlhMzA4MWRl MDAxOWYwHhcNMjUxMjE5MDQwMTQyWhcNMjUxMjIwMDQwMTQyWjAzMTEwLwYDVQQD EyhiMGVlN2JkZDI5MDIwN2QxY2RmZTAyYzc4MzBjNTY2NTA0ODRmNmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtta0M2BUkF2NthIj0jh7hfbbgGDI q3Rq8nrJwJkzFPeH68vMVYgLIj7eGdrBpvQJLf+tTfn7bfzpZHrS0/MKcoGDpk1a qiDqNtIAxN0dFDCXT4Q71n8/wZwHg8oxgOYltCFk+Zc78EErD7v/A1Ynt2K4yXzs EdAgApl6KGpYeuwRS6H+SL0ApuCMVOquZpjppIlQqeXcN6Bof1OCpll8injk6vmY pUZXXOl9EMOIoo+mmsYRqAlpCCh0I+uovblrmo5stKk0dvRjVqkR/kXyy74vKiJe msRQcHbdanRAgjRQJ5lzSfaj/iGpUD+VgVrtBu9S5Z66Xc6dyviBt05d3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDue90pAgfRzf4Cx4MMVmUEhPaoMB8GA1UdIwQY MBaAFPLUEWl10+h72KKOZDxpowgd4AGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHRRUmFYWFQ2SHZZb281a1BHbWpDQjNnQVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi81OTk2ZTEtMmZmMC00YmI3LWE4ODAt ZmFhYjljYWUxZTgxLzEvOHRRUmFYWFQ2SHZZb281a1BHbWpDQjNnQVo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi81OTk2ZTEtMmZmMC00YmI3LWE4ODAtZmFhYjljYWUxZTgx LzEvOHRRUmFYWFQ2SHZZb281a1BHbWpDQjNnQVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGbBx4R6 i4eyU+/mOWA+wvKvgKDIfTPISHpzfoasWyrKm3f3LrTKBN2sPQ3Cb6P8tDP2Lq4X vRbcC8ow7Et25tTSU9kRGqSZYWq2dsnvtU1hEtIICpLHvktNUC7oMgZ5C53F5UoG Bdjrc/uGxtbIuT71AcUmARCXYH2bfjUwhJY4H+o90/N7ykGoG9JuQqFKpDH+69Y6 lYosp4/Le4Dv4mTPVfG96naNYj2OQsUMqjNzViTUBAyH9sc/OxkE6cCzhOYfSZPL MMIJaOy7GyQhOcio0xVV0apjrC9xrVvW2LX4kUy/I8/hLzURK7LzATh4lBQhcUBn Xk3ADqyMeb9oGw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:13:27 2025 by rpki-client