This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft File: 8yf6fhlHLlg7cgk2w50P0kJmGf0.mft (raw, json) Hash identifier: LvE2Wj2NVYjE10Gahk0KNRceWF+p801eCFgXh6SA+I8= Subject key identifier: ED:F5:5F:2B:10:89:FB:AD:9C:A2:72:EC:8C:E2:7F:25:CF:E5:FC:DC Authority key identifier: F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD Certificate issuer: /CN=f327fa7e19472e583b720936c39d0fd2426619fd Certificate serial: 019B101401AC3FEFE1C9A24F8775434783FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft Manifest number: 0B1B Signing time: Fri 12 Dec 2025 01:01:45 +0000 Manifest this update: Fri 12 Dec 2025 01:01:45 +0000 Manifest next update: Sat 13 Dec 2025 01:01:45 +0000 Files and hashes: 1: 8yf6fhlHLlg7cgk2w50P0kJmGf0.crl (hash: fKgJ/rE1g0/IRqD7h941YILr86TnsTQf1bRklAX0FMs=) 2: jteACDbaYC2GMTFvAHtj6JRaDvo.roa (hash: FyyB216euYUAYG4P0lTXHk9/k4BDveAtrAV0IpAsB3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:01:ac:3f:ef:e1:c9:a2:4f:87:75:43:47:83:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f327fa7e19472e583b720936c39d0fd2426619fd Validity Not Before: Dec 12 01:01:45 2025 GMT Not After : Dec 13 01:01:45 2025 GMT Subject: CN=edf55f2b1089fbad9ca272ec8ce27f25cfe5fcdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0e:bf:3a:dd:16:a9:20:89:3a:6a:9e:b0:63: fa:9e:4c:5d:36:7e:b1:78:52:d7:cc:c8:2b:26:ad: 24:ea:b6:3e:c5:b5:30:1a:aa:f3:60:ca:e0:c5:49: 30:0b:c0:89:1c:98:44:af:55:91:2c:db:0a:e8:d7: 0c:51:82:5f:af:8e:82:72:54:0c:ab:ba:e8:5f:17: b8:b9:dc:c7:59:2b:fc:1b:69:2f:9a:fe:0f:6b:44: b8:b0:ef:04:d6:cb:50:53:3e:72:7c:6d:2d:09:f2: d3:25:ae:6f:ac:8c:ae:53:ef:cf:cc:af:5a:7a:a1: b3:bc:42:fa:d7:b7:c4:03:01:e4:05:fc:1c:c2:37: 8d:bf:8b:c6:aa:81:c4:45:f6:a8:46:fa:53:6f:b7: 13:ff:47:c0:02:61:1c:f7:c3:ae:22:d4:e1:d3:c9: 11:31:9f:84:57:e2:27:13:3b:e2:e8:ec:b4:66:49: d5:ac:35:78:8d:72:78:e6:d7:71:4a:d2:d0:79:bb: f0:03:9e:16:8b:a0:c4:76:99:fe:52:c7:47:ef:98: 7f:6e:b9:4b:1a:15:54:b0:ff:77:91:68:2b:df:e2: 4b:10:09:fd:19:b4:75:a3:2f:6f:c1:61:77:0c:cd: ca:83:7b:a5:97:a0:f1:6a:6d:e1:97:56:16:98:31: 2a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F5:5F:2B:10:89:FB:AD:9C:A2:72:EC:8C:E2:7F:25:CF:E5:FC:DC X509v3 Authority Key Identifier: keyid:F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:a7:8c:1b:c6:49:a5:e3:af:37:c2:c5:1f:75:90:5e:d6:ec: 7d:a0:6c:3d:20:0d:6e:73:45:34:99:c2:8d:1e:b8:ff:00:83: 13:6e:77:6c:8d:58:2b:19:20:e8:b9:99:97:1c:1c:72:92:9b: e9:2e:53:45:9c:5a:b1:13:9e:51:74:5f:cd:a8:11:22:d0:41: f0:ad:47:e2:3f:f4:25:5f:52:b2:78:e6:3c:19:78:dd:d9:c3: a1:21:61:e2:04:7a:5d:6e:6d:9e:c7:30:f4:32:fd:8c:d2:7d: 01:57:4c:20:9b:d7:d2:c3:06:cc:2a:b4:52:4b:c5:d2:e1:44: 9b:e6:3b:07:82:f3:f9:90:54:32:93:37:4d:03:a7:41:6d:9f: 2b:ef:92:54:7b:7b:12:56:a4:15:c1:92:23:30:67:eb:53:e8: d1:91:36:e7:24:62:11:a4:64:9f:dc:7f:1f:c6:d0:4b:36:9f: c6:7f:5a:52:a8:91:4f:f2:71:5f:f6:36:03:f6:bb:f2:06:1a: fc:0e:e0:0f:27:dd:0c:8d:06:d2:06:3e:33:46:83:52:80:71: 99:41:06:be:f9:b9:fd:e5:c4:a8:57:2c:b6:63:c1:3b:d3:d6: 9b:4b:cb:09:cf:2d:c0:79:9c:44:56:ab:86:6b:79:dc:1a:33: e1:91:e6:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFAGsP+/hyaJPh3VDR4P8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjdmYTdlMTk0NzJlNTgzYjcyMDkzNmMzOWQwZmQyNDI2 NjE5ZmQwHhcNMjUxMjEyMDEwMTQ1WhcNMjUxMjEzMDEwMTQ1WjAzMTEwLwYDVQQD EyhlZGY1NWYyYjEwODlmYmFkOWNhMjcyZWM4Y2UyN2YyNWNmZTVmY2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg6/Ot0WqSCJOmqesGP6nkxdNn6x eFLXzMgrJq0k6rY+xbUwGqrzYMrgxUkwC8CJHJhEr1WRLNsK6NcMUYJfr46CclQM q7roXxe4udzHWSv8G2kvmv4Pa0S4sO8E1stQUz5yfG0tCfLTJa5vrIyuU+/PzK9a eqGzvEL617fEAwHkBfwcwjeNv4vGqoHERfaoRvpTb7cT/0fAAmEc98OuItTh08kR MZ+EV+InEzvi6Oy0ZknVrDV4jXJ45tdxStLQebvwA54Wi6DEdpn+UsdH75h/brlL GhVUsP93kWgr3+JLEAn9GbR1oy9vwWF3DM3Kg3ull6Dxam3hl1YWmDEqnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO31XysQifutnKJy7IzifyXP5fzcMB8GA1UdIwQY MBaAFPMn+n4ZRy5YO3IJNsOdD9JCZhn9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlmNmZobEhMbGc3Y2drMnc1MFAwa0ptR2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mODFhZWItMTgxYy00NWUxLTk5Y2Yt MjNjMTYyNjNjZjNiLzEvOHlmNmZobEhMbGc3Y2drMnc1MFAwa0ptR2YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mODFhZWItMTgxYy00NWUxLTk5Y2YtMjNjMTYyNjNjZjNi LzEvOHlmNmZobEhMbGc3Y2drMnc1MFAwa0ptR2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsqeMG8ZJ peOvN8LFH3WQXtbsfaBsPSANbnNFNJnCjR64/wCDE253bI1YKxkg6LmZlxwccpKb 6S5TRZxasROeUXRfzagRItBB8K1H4j/0JV9SsnjmPBl43dnDoSFh4gR6XW5tnscw 9DL9jNJ9AVdMIJvX0sMGzCq0UkvF0uFEm+Y7B4Lz+ZBUMpM3TQOnQW2fK++SVHt7 ElakFcGSIzBn61Po0ZE25yRiEaRkn9x/H8bQSzafxn9aUqiRT/JxX/Y2A/a78gYa /A7gDyfdDI0G0gY+M0aDUoBxmUEGvvm5/eXEqFcstmPBO9PWm0vLCc8twHmcRFar hmt53Boz4ZHmGA== -----END CERTIFICATE-----Generated at Fri Dec 12 02:45:32 2025 by rpki-client