This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft File: 8UPRPHu9KqFfVnfBOawzyGeHnyw.mft (raw, json) Hash identifier: Q4L91szrk2EuB4x3/qUcGPJ6OLP7A5qfV7wNnqt2u4s= Subject key identifier: 65:17:A2:B9:F1:45:FB:EF:8F:A1:9A:A7:23:15:CE:30:0D:86:C9:4B Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C Certificate issuer: /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c Certificate serial: 019B0DB75BD2C8C3DBB4C2951CAA2718E466 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft Manifest number: 07C0 Signing time: Thu 11 Dec 2025 14:01:18 +0000 Manifest this update: Thu 11 Dec 2025 14:01:18 +0000 Manifest next update: Fri 12 Dec 2025 14:01:18 +0000 Files and hashes: 1: 8UPRPHu9KqFfVnfBOawzyGeHnyw.crl (hash: ht08qrNON+sOCIcocMZS84Fi5QXW3J2f43E4531aT9o=) 2: UMmv-WY7B5qYJViInJvlNV476mE.roa (hash: jHHOgpNZRXbrpDROEuRDFCxUXMl5uaCZV9NM+NW4eXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:5b:d2:c8:c3:db:b4:c2:95:1c:aa:27:18:e4:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c Validity Not Before: Dec 11 14:01:18 2025 GMT Not After : Dec 12 14:01:18 2025 GMT Subject: CN=6517a2b9f145fbef8fa19aa72315ce300d86c94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ce:db:da:13:3f:c1:26:25:52:b8:fa:52:d9: 47:04:d7:e2:e2:05:24:7e:15:db:cf:e8:86:ce:7b: a3:dc:fa:64:a9:59:b4:d0:da:7a:50:ea:2c:6c:3a: 80:05:24:4f:50:58:38:39:32:67:be:8a:21:e3:5b: 97:c7:e4:5c:b4:de:d1:87:66:e1:f8:b6:9c:89:cb: a0:41:22:d1:9a:ac:a3:a3:0c:e7:7c:ab:68:15:7b: 58:4f:a7:51:85:ec:84:4d:6f:e7:ef:8e:be:6a:8e: 26:65:ef:72:2b:1e:ce:3c:f0:fb:43:11:6a:d3:2d: 04:3f:87:c3:c3:3a:18:00:98:ec:e8:0e:ef:ad:92: d1:e9:59:69:24:4c:a9:e3:2b:88:d6:c4:66:0e:a5: 23:3e:8c:4c:07:b1:71:9e:54:07:61:43:db:81:ba: 07:f6:a9:89:b7:07:78:4b:b4:b9:9d:a8:e1:b8:8a: 77:3e:09:68:5a:5c:28:90:f5:20:91:ba:6d:f7:ef: 0c:ca:7a:5e:d1:94:97:05:22:8b:93:ee:cb:79:40: 35:02:cb:2c:d3:a2:26:0c:4d:8d:fb:77:17:97:ab: bf:dd:7c:2c:a1:c2:a0:ba:a7:1c:50:19:ce:56:93: ad:5a:80:cf:8d:85:8f:2f:17:e4:6e:ab:84:60:f8: 51:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:17:A2:B9:F1:45:FB:EF:8F:A1:9A:A7:23:15:CE:30:0D:86:C9:4B X509v3 Authority Key Identifier: keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:12:3e:9d:48:6d:db:2e:86:bb:fb:fa:6f:61:63:01:28:43: 06:92:08:96:ae:71:ee:3a:55:eb:d9:a2:54:65:e8:e0:61:bc: 16:ed:00:08:12:84:11:85:5d:7e:4c:0e:e6:22:0f:f6:bb:f0: 41:f3:17:be:e8:90:6c:94:91:b3:e6:9c:96:82:7f:18:34:2f: 50:b3:5a:ac:ed:e9:c3:7d:44:f0:b3:41:a4:73:01:31:6b:3d: 79:5b:73:51:4e:5d:0a:be:b8:5b:9c:40:7c:0c:92:57:36:43: f2:03:8d:ba:84:63:83:68:54:16:dc:f5:c2:a8:ce:87:b8:18: 44:a3:77:7b:e5:53:55:cb:fd:2b:8d:d5:e6:74:ac:57:82:11: 2c:97:52:a6:a3:e2:e0:53:1c:08:b6:1f:3b:06:f9:40:6c:76: d0:5f:bb:c2:6d:cb:93:aa:16:71:8b:46:e5:7b:ab:6b:40:fb: 73:14:98:2b:be:ad:29:27:04:52:25:ed:4f:6b:21:5e:42:98: bc:37:67:c9:05:02:f0:3f:24:3e:55:48:b8:e2:9a:5f:93:ad: 80:19:69:3b:ef:de:ae:29:fe:7b:cc:ee:8e:1e:41:d6:9c:60: 5e:9c:88:c2:e7:a0:16:5e:c1:2f:e4:ab:b1:08:c8:6e:81:98: 00:dd:45:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNt1vSyMPbtMKVHKonGORmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNDNkMTNjN2JiZDJhYTE1ZjU2NzdjMTM5YWMzM2M4Njc4 NzlmMmMwHhcNMjUxMjExMTQwMTE4WhcNMjUxMjEyMTQwMTE4WjAzMTEwLwYDVQQD Eyg2NTE3YTJiOWYxNDVmYmVmOGZhMTlhYTcyMzE1Y2UzMDBkODZjOTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9M7b2hM/wSYlUrj6UtlHBNfi4gUk fhXbz+iGznuj3PpkqVm00Np6UOosbDqABSRPUFg4OTJnvooh41uXx+RctN7Rh2bh +LacicugQSLRmqyjowznfKtoFXtYT6dRheyETW/n746+ao4mZe9yKx7OPPD7QxFq 0y0EP4fDwzoYAJjs6A7vrZLR6VlpJEyp4yuI1sRmDqUjPoxMB7FxnlQHYUPbgboH 9qmJtwd4S7S5najhuIp3PgloWlwokPUgkbpt9+8Mynpe0ZSXBSKLk+7LeUA1Asss 06ImDE2N+3cXl6u/3XwsocKguqccUBnOVpOtWoDPjYWPLxfkbquEYPhRJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUXornxRfvvj6GapyMVzjANhslLMB8GA1UdIwQY MBaAFPFD0Tx7vSqhX1Z3wTmsM8hnh58sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFVQUlBIdTlLcUZmVm5mQk9hd3p5R2VIbnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84MzU5Y2UtYmJkNC00MjUzLTk0NjQt YTE0NmExYjAxZjhmLzEvOFVQUlBIdTlLcUZmVm5mQk9hd3p5R2VIbnl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy84MzU5Y2UtYmJkNC00MjUzLTk0NjQtYTE0NmExYjAxZjhm LzEvOFVQUlBIdTlLcUZmVm5mQk9hd3p5R2VIbnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRI+nUht 2y6Gu/v6b2FjAShDBpIIlq5x7jpV69miVGXo4GG8Fu0ACBKEEYVdfkwO5iIP9rvw QfMXvuiQbJSRs+acloJ/GDQvULNarO3pw31E8LNBpHMBMWs9eVtzUU5dCr64W5xA fAySVzZD8gONuoRjg2hUFtz1wqjOh7gYRKN3e+VTVcv9K43V5nSsV4IRLJdSpqPi 4FMcCLYfOwb5QGx20F+7wm3Lk6oWcYtG5Xura0D7cxSYK76tKScEUiXtT2shXkKY vDdnyQUC8D8kPlVIuOKaX5OtgBlpO+/erin+e8zujh5B1pxgXpyIwuegFl7BL+Sr sQjIboGYAN1Fkg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:15 2025 by rpki-client