This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft File: 8fQjYKOXCoCAFv342NujlsWh0DQ.mft (raw, json) Hash identifier: vgkl0T/IVYdh0oiSbhlyLmMFKV77ygdX718k9Pluxk4= Subject key identifier: B1:CE:A7:23:DC:07:D3:95:5E:1B:74:75:F1:01:FB:BC:E8:F2:04:64 Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34 Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034 Certificate serial: 019B0E929275662C55F4EF74183EC5C339DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft Manifest number: 1776 Signing time: Thu 11 Dec 2025 18:00:45 +0000 Manifest this update: Thu 11 Dec 2025 18:00:45 +0000 Manifest next update: Fri 12 Dec 2025 18:00:45 +0000 Files and hashes: 1: 8fQjYKOXCoCAFv342NujlsWh0DQ.crl (hash: Xv1Da8cadfBwb7FpyROdJF9Kyp9lhcj+BElU9vr3Wik=) 2: cDE3EzAZuRkA2qUdMfThi8H1qTc.roa (hash: zcH+YrXnLIMTdiSZDY4vYih+mBv8OXiFFCnkDP60SoA=) 3: w31LkDj-LMN5WUk5kbozH3jiIBA.roa (hash: y5CKPYN2xY1V73cNd1uJ1GGyUm72KbaIXZc2V61uNZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:92:75:66:2c:55:f4:ef:74:18:3e:c5:c3:39:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034 Validity Not Before: Dec 11 18:00:45 2025 GMT Not After : Dec 12 18:00:45 2025 GMT Subject: CN=b1cea723dc07d3955e1b7475f101fbbce8f20464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3e:b0:f8:b7:be:d3:fd:d0:c1:c8:52:d1:9a: 31:e3:05:69:29:47:e6:86:ab:4c:d9:cc:1e:1b:38: cc:8c:09:a0:4f:f9:f1:c5:b1:ca:b4:97:13:f8:03: 82:97:08:50:a3:cf:39:cd:fe:0c:f3:06:40:38:3b: 45:46:ab:1e:53:bc:4c:9c:8a:79:80:8a:a5:45:5a: b3:ff:ad:f3:75:ba:8b:14:bf:2b:8e:fd:8b:97:96: b1:8f:70:a1:46:b1:2d:e1:98:ba:89:76:45:71:f5: 4e:ff:f8:16:c8:21:2f:f9:89:66:8e:49:e2:e6:52: ed:ee:b6:de:5a:cb:7f:0b:ba:4f:47:3f:b5:e9:49: 5f:3c:8a:c8:ca:70:a7:7a:d6:7f:4a:2d:1c:69:25: 18:4d:1f:29:12:87:da:d4:54:c9:15:d6:8e:17:5c: f6:97:2b:3d:99:a4:1c:b5:99:65:35:ff:b4:88:fd: cf:04:43:ba:01:38:69:2b:ae:ca:d1:5c:73:27:c3: 46:c0:8c:bc:c1:47:c0:54:fa:6b:b8:d5:67:c7:e4: 8e:91:f9:d7:9b:26:d0:c3:49:62:3c:ba:ac:20:44: d7:e6:d0:6b:49:ad:18:f9:f4:7e:02:ca:06:a3:b9: 11:2f:e3:0c:9b:56:cb:55:ac:54:9a:cc:d0:f8:cb: 9f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CE:A7:23:DC:07:D3:95:5E:1B:74:75:F1:01:FB:BC:E8:F2:04:64 X509v3 Authority Key Identifier: keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:c0:29:c7:98:90:bb:d6:94:69:88:e7:ca:fa:07:69:5a:12: ac:f8:34:73:27:e7:4e:c0:5e:cc:86:99:99:ab:a6:d3:a0:3a: a5:80:ad:24:a5:ab:a1:83:41:58:ec:cc:da:c1:a5:e8:29:58: 23:aa:f8:db:25:d6:fa:ba:96:bf:b9:21:c9:a7:a3:db:ff:a0: d5:00:7f:cc:b1:d5:64:78:b7:61:e8:c6:72:23:38:71:6d:94: 41:77:24:cc:19:33:88:13:6e:b7:7b:4a:cb:99:85:13:21:cb: fd:27:e5:b4:28:79:80:8f:9e:2d:7e:1c:8c:fa:e1:e4:87:11: dd:6b:ba:57:4b:63:90:4d:f0:19:b0:3a:ca:fb:4a:38:6c:a3: 62:3a:49:86:4e:fc:05:25:8c:eb:d4:ca:b7:d0:05:00:a7:ce: 6e:ae:ce:a4:06:c8:dc:51:2d:1c:75:c6:66:2b:97:8f:f1:9f: 36:40:c5:30:ef:33:94:5d:eb:b7:13:98:52:ff:c9:72:52:0f: b1:96:5b:cc:27:5f:52:d4:63:41:1e:a9:cd:2b:df:42:a7:93: b8:f3:7d:e0:30:f7:8f:10:38:3c:be:c9:6a:d0:45:96:0c:e1: 71:45:d0:a4:fa:3c:0d:d2:3f:f4:e0:71:87:72:c3:43:46:82: 4d:bc:60:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkpJ1ZixV9O90GD7FwzneMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjQyMzYwYTM5NzBhODA4MDE2ZmRmOGQ4ZGJhMzk2YzVh MWQwMzQwHhcNMjUxMjExMTgwMDQ1WhcNMjUxMjEyMTgwMDQ1WjAzMTEwLwYDVQQD EyhiMWNlYTcyM2RjMDdkMzk1NWUxYjc0NzVmMTAxZmJiY2U4ZjIwNDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD6w+Le+0/3QwchS0Zox4wVpKUfm hqtM2cweGzjMjAmgT/nxxbHKtJcT+AOClwhQo885zf4M8wZAODtFRqseU7xMnIp5 gIqlRVqz/63zdbqLFL8rjv2Ll5axj3ChRrEt4Zi6iXZFcfVO//gWyCEv+Ylmjkni 5lLt7rbeWst/C7pPRz+16UlfPIrIynCnetZ/Si0caSUYTR8pEofa1FTJFdaOF1z2 lys9maQctZllNf+0iP3PBEO6AThpK67K0VxzJ8NGwIy8wUfAVPpruNVnx+SOkfnX mybQw0liPLqsIETX5tBrSa0Y+fR+AsoGo7kRL+MMm1bLVaxUmszQ+MufiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHOpyPcB9OVXht0dfEB+7zo8gRkMB8GA1UdIwQY MBaAFPH0I2CjlwqAgBb9+Njbo5bFodA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMt ZDRmMDhiZTA1MGQ1LzEvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMtZDRmMDhiZTA1MGQ1 LzEvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacApx5iQ u9aUaYjnyvoHaVoSrPg0cyfnTsBezIaZmaum06A6pYCtJKWroYNBWOzM2sGl6ClY I6r42yXW+rqWv7khyaej2/+g1QB/zLHVZHi3YejGciM4cW2UQXckzBkziBNut3tK y5mFEyHL/SfltCh5gI+eLX4cjPrh5IcR3Wu6V0tjkE3wGbA6yvtKOGyjYjpJhk78 BSWM69TKt9AFAKfObq7OpAbI3FEtHHXGZiuXj/GfNkDFMO8zlF3rtxOYUv/JclIP sZZbzCdfUtRjQR6pzSvfQqeTuPN94DD3jxA4PL7JatBFlgzhcUXQpPo8DdI/9OBx h3LDQ0aCTbxg8w== -----END CERTIFICATE-----Generated at Fri Dec 12 00:28:36 2025 by rpki-client