This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft File: k8XxCvi8tfxuNKRztKbK560C2QI.mft (raw, json) Hash identifier: TMTFc2hLAdxVUP4B/HrPFfowaJS9+y7X3e3imzpneNc= Subject key identifier: CC:44:37:CD:0C:D3:02:D3:4B:80:1C:06:D0:A4:58:A0:9F:2B:3F:6A Authority key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02 Certificate issuer: /CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902 Certificate serial: 019B0F00C561C921DB606B7D87E00F91AA80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft Manifest number: 0B93 Signing time: Thu 11 Dec 2025 20:01:07 +0000 Manifest this update: Thu 11 Dec 2025 20:01:07 +0000 Manifest next update: Fri 12 Dec 2025 20:01:07 +0000 Files and hashes: 1: k8XxCvi8tfxuNKRztKbK560C2QI.crl (hash: kOkTk4XeMRdasa0zudXYNHVCHEXwPN6/UPTJgGO2WHc=) 2: qSlCWIoaBSlT8FJxAqdM3S_JMeY.roa (hash: Zvj6zybG7gbhDX6oesOJPa1rvAoqiKQGPqATyljkt6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:c5:61:c9:21:db:60:6b:7d:87:e0:0f:91:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902 Validity Not Before: Dec 11 20:01:07 2025 GMT Not After : Dec 12 20:01:07 2025 GMT Subject: CN=cc4437cd0cd302d34b801c06d0a458a09f2b3f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b5:b8:bb:bb:c6:10:87:ab:ff:24:ac:6f:a1: 9d:a8:83:e2:a4:e0:95:fc:99:65:ba:e4:5c:c7:df: 45:1c:08:b8:51:60:40:1f:fb:2d:a1:72:1e:01:fb: 42:5f:89:7d:27:f1:ad:58:d1:51:fe:6e:a8:7b:e1: d8:d8:d3:84:5a:0e:87:ca:f3:02:1d:e2:b4:a0:d5: c7:05:26:ff:eb:b4:42:d4:a7:bc:62:76:ce:bd:9f: d3:4c:fa:b8:07:36:3a:26:10:65:2a:ff:a3:43:91: b7:01:bf:b8:94:03:c0:ce:e8:e9:ae:54:0f:c6:74: 11:63:76:78:f7:e0:4a:f8:84:84:83:70:4c:6d:18: f5:8c:9a:9b:f3:81:fe:3a:8a:1e:be:15:b7:66:52: 45:29:3f:93:e8:04:e6:6f:47:a0:4f:04:90:72:3b: 71:48:dc:dc:e2:a6:84:fe:4a:2e:b7:c3:18:d6:b2: 0e:bc:b3:ad:71:75:f7:7d:03:85:fc:f1:3e:2d:5a: 81:62:cf:0c:b2:dc:f8:29:38:f9:40:5d:fd:28:6a: 7f:d0:e4:fc:c1:1d:c9:70:c3:a3:2a:6c:7d:c6:8d: d4:7a:21:f2:17:22:c4:67:c4:13:6e:ec:ea:31:e0: 4e:ea:a6:60:ef:13:1e:18:5a:20:65:b4:1b:32:29: 56:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:44:37:CD:0C:D3:02:D3:4B:80:1C:06:D0:A4:58:A0:9F:2B:3F:6A X509v3 Authority Key Identifier: keyid:93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:8b:9c:68:14:45:8d:f0:29:84:17:a9:42:5f:73:4b:80:4b: f7:63:0b:b8:e9:9c:06:f0:90:5e:a1:93:40:44:e1:d5:3e:e6: e1:fa:dc:a2:79:f2:cc:f9:fa:27:00:96:0a:28:ca:9b:76:b8: 37:03:ae:b3:85:a9:50:8d:60:4c:6e:ad:77:36:f4:d6:58:56: 02:fa:65:d9:81:8d:17:db:3a:31:ee:e1:cd:09:c6:0e:ed:70: c4:69:22:4b:75:8e:36:6b:28:df:e8:fa:7c:96:34:bc:dd:db: 38:12:f2:70:c5:32:78:37:ca:01:4c:5b:f2:01:2c:d3:89:88: 21:3a:45:d6:62:6e:b9:10:0b:95:7d:16:08:fc:03:cf:60:3a: bd:26:c4:0f:6d:b9:8c:63:fb:fb:71:4d:ee:2c:25:10:2b:44: c5:fd:af:5d:7e:1d:9d:5a:ce:41:09:57:fc:42:12:a0:ed:7e: 4e:2b:c0:93:b0:10:87:9f:1c:1d:1c:7f:1f:26:26:94:35:0f: 1a:0f:09:a9:80:94:88:0d:7a:1b:c6:25:1a:c2:cf:af:89:ab: 24:20:94:90:c2:b6:a4:c4:39:23:45:40:a0:bc:4e:9e:c3:74: d4:21:3b:ed:ec:3d:de:39:4b:fe:91:e6:37:11:ad:6b:2e:73: fa:c4:c6:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAMVhySHbYGt9h+APkaqAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYzVmMTBhZjhiY2I1ZmM2ZTM0YTQ3M2I0YTZjYWU3YWQw MmQ5MDIwHhcNMjUxMjExMjAwMTA3WhcNMjUxMjEyMjAwMTA3WjAzMTEwLwYDVQQD EyhjYzQ0MzdjZDBjZDMwMmQzNGI4MDFjMDZkMGE0NThhMDlmMmIzZjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubW4u7vGEIer/ySsb6GdqIPipOCV /JlluuRcx99FHAi4UWBAH/stoXIeAftCX4l9J/GtWNFR/m6oe+HY2NOEWg6HyvMC HeK0oNXHBSb/67RC1Ke8YnbOvZ/TTPq4BzY6JhBlKv+jQ5G3Ab+4lAPAzujprlQP xnQRY3Z49+BK+ISEg3BMbRj1jJqb84H+OooevhW3ZlJFKT+T6ATmb0egTwSQcjtx SNzc4qaE/kout8MY1rIOvLOtcXX3fQOF/PE+LVqBYs8Mstz4KTj5QF39KGp/0OT8 wR3JcMOjKmx9xo3UeiHyFyLEZ8QTbuzqMeBO6qZg7xMeGFogZbQbMilW6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxEN80M0wLTS4AcBtCkWKCfKz9qMB8GA1UdIwQY MBaAFJPF8Qr4vLX8bjSkc7SmyuetAtkCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazhYeEN2aTh0Znh1TktSenRLYks1NjBDMlFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYTAyY2ItYjM3OC00ZmE3LTg4MDMt OGVhYWQwYjA0OWE3LzEvazhYeEN2aTh0Znh1TktSenRLYks1NjBDMlFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mYTAyY2ItYjM3OC00ZmE3LTg4MDMtOGVhYWQwYjA0OWE3 LzEvazhYeEN2aTh0Znh1TktSenRLYks1NjBDMlFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIucaBRF jfAphBepQl9zS4BL92MLuOmcBvCQXqGTQETh1T7m4frconnyzPn6JwCWCijKm3a4 NwOus4WpUI1gTG6tdzb01lhWAvpl2YGNF9s6Me7hzQnGDu1wxGkiS3WONmso3+j6 fJY0vN3bOBLycMUyeDfKAUxb8gEs04mIITpF1mJuuRALlX0WCPwDz2A6vSbED225 jGP7+3FN7iwlECtExf2vXX4dnVrOQQlX/EISoO1+TivAk7AQh58cHRx/HyYmlDUP Gg8JqYCUiA16G8YlGsLPr4mrJCCUkMK2pMQ5I0VAoLxOnsN01CE77ew93jlL/pHm NxGtay5z+sTGwg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:49:57 2025 by rpki-client