This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft File: 8KEScQQ06Frl_m-_Qedr3fk4GM8.mft (raw, json) Hash identifier: U9/XA3qqIW05yskBAEwRFELJYdSF6lfcAcgH6ob3iM8= Subject key identifier: 5E:69:AC:45:43:44:C1:A5:71:A9:B6:E6:1F:76:57:B0:22:C4:CB:7D Authority key identifier: F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF Certificate issuer: /CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf Certificate serial: 019B243F84E69E626A3140CC2341C1056C38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft Manifest number: 05F4 Signing time: Mon 15 Dec 2025 23:01:41 +0000 Manifest this update: Mon 15 Dec 2025 23:01:41 +0000 Manifest next update: Tue 16 Dec 2025 23:01:41 +0000 Files and hashes: 1: 8KEScQQ06Frl_m-_Qedr3fk4GM8.crl (hash: nHWSNtiSCKPny52cwvkFm+sv61WpxWUB9SZ1MPUd4RI=) 2: QxzsJBZ0KnjdWggXNkiPE3mxTiE.roa (hash: wp71B9vMq7Np21xWaUokwt4Wn7Ga2Zz2FhWmCQz4Lj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3f:84:e6:9e:62:6a:31:40:cc:23:41:c1:05:6c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf Validity Not Before: Dec 15 23:01:41 2025 GMT Not After : Dec 16 23:01:41 2025 GMT Subject: CN=5e69ac454344c1a571a9b6e61f7657b022c4cb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f7:9e:fd:d5:22:dd:98:b7:6a:ec:ad:87:ab: cc:27:58:e4:d5:bc:0d:82:4b:37:79:40:28:b3:df: eb:b0:6a:a8:a3:18:9e:31:84:64:0c:9b:c1:2e:37: 98:03:bc:cd:a1:96:40:0e:b1:a7:93:b5:a6:82:eb: 67:cb:24:27:9b:99:04:29:d9:f5:da:1d:54:f7:2f: 52:03:1e:56:c8:73:1d:80:ae:7a:fa:57:0b:eb:f9: 15:fb:8e:4b:9d:03:b0:3c:d2:92:3c:ea:bd:e9:95: d8:7d:c2:05:74:62:b4:2c:b5:b0:1b:a2:3c:7a:57: 96:96:9b:50:8d:e7:f3:64:c3:b5:02:ed:c5:4d:98: 19:2c:f5:92:57:e6:ab:e9:e4:06:ac:e4:af:6c:ac: 32:b1:bb:77:41:c2:9d:23:c0:38:c4:28:6a:47:e6: 42:50:9b:5f:32:88:a3:59:64:e4:6d:78:f6:eb:f7: c6:b9:5f:cf:4d:07:12:67:99:c3:9c:95:86:9c:f9: f7:22:55:22:81:91:af:82:1c:f5:3b:94:bf:3d:09: 93:24:4c:5a:b5:49:5f:b3:e4:47:79:0c:aa:c6:6d: 22:37:dc:ca:c1:47:4e:6b:1b:76:d6:5d:f4:77:b1: ee:c4:d4:96:e4:32:c0:4d:eb:98:b5:09:61:c8:69: 82:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:69:AC:45:43:44:C1:A5:71:A9:B6:E6:1F:76:57:B0:22:C4:CB:7D X509v3 Authority Key Identifier: keyid:F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:a0:74:a4:bc:2e:80:93:a4:23:6c:50:4b:74:b6:43:fa:c5: 2d:a9:74:7c:4b:32:2e:83:7e:8f:52:dc:de:28:5d:b6:de:89: 00:c9:66:cb:f6:34:49:c4:8c:76:54:c3:c9:ee:1c:f5:61:60: 9d:a5:c5:eb:9b:d4:75:b2:75:72:8f:22:c3:bf:f7:30:0f:e9: 33:04:d8:0e:de:7d:68:76:26:38:ce:39:cc:cc:76:0a:e3:b4: c8:3c:0d:e8:54:94:9a:28:93:78:3b:09:d4:3e:82:39:a7:e9: a1:94:39:98:6c:99:5a:31:97:8e:26:67:ec:b1:be:bc:35:78: b5:2b:8a:10:f1:6a:d2:22:51:2b:c0:f7:84:6f:0c:9a:ea:92: 1a:8e:aa:7a:45:b6:de:5e:56:e4:0f:84:21:0c:5a:e8:a5:4d: 97:43:5e:95:67:89:48:47:be:53:ce:5e:9e:3c:45:d4:f4:8a: 16:c7:76:d1:e9:e4:b3:10:d7:9b:23:4e:c7:6b:73:84:4a:e2: bd:a3:97:7e:2e:78:a3:70:da:da:f6:d5:b7:c9:7c:89:17:9f: 8b:79:f7:1b:b3:ad:96:35:89:d4:5b:a7:fb:6b:c3:3a:3a:61: 95:20:05:6b:e0:06:24:32:ff:8a:7b:8e:bc:d1:68:84:1f:7e: 44:d0:31:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskP4TmnmJqMUDMI0HBBWw4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYTExMjcxMDQzNGU4NWFlNWZlNmZiZjQxZTc2YmRkZjkz ODE4Y2YwHhcNMjUxMjE1MjMwMTQxWhcNMjUxMjE2MjMwMTQxWjAzMTEwLwYDVQQD Eyg1ZTY5YWM0NTQzNDRjMWE1NzFhOWI2ZTYxZjc2NTdiMDIyYzRjYjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/ee/dUi3Zi3auyth6vMJ1jk1bwN gks3eUAos9/rsGqooxieMYRkDJvBLjeYA7zNoZZADrGnk7WmgutnyyQnm5kEKdn1 2h1U9y9SAx5WyHMdgK56+lcL6/kV+45LnQOwPNKSPOq96ZXYfcIFdGK0LLWwG6I8 eleWlptQjefzZMO1Au3FTZgZLPWSV+ar6eQGrOSvbKwysbt3QcKdI8A4xChqR+ZC UJtfMoijWWTkbXj26/fGuV/PTQcSZ5nDnJWGnPn3IlUigZGvghz1O5S/PQmTJExa tUlfs+RHeQyqxm0iN9zKwUdOaxt21l30d7HuxNSW5DLATeuYtQlhyGmCqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5prEVDRMGlcam25h92V7AixMt9MB8GA1UdIwQY MBaAFPChEnEENOha5f5vv0Hna935OBjPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEtFU2NRUTA2RnJsX20tX1FlZHIzZms0R004LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yOTRhODEtNTIzNy00YmYzLWEwNWIt YTg4YTRkMDk0YWYwLzEvOEtFU2NRUTA2RnJsX20tX1FlZHIzZms0R004Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8yOTRhODEtNTIzNy00YmYzLWEwNWItYTg4YTRkMDk0YWYw LzEvOEtFU2NRUTA2RnJsX20tX1FlZHIzZms0R004LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqB0pLwu gJOkI2xQS3S2Q/rFLal0fEsyLoN+j1Lc3ihdtt6JAMlmy/Y0ScSMdlTDye4c9WFg naXF65vUdbJ1co8iw7/3MA/pMwTYDt59aHYmOM45zMx2CuO0yDwN6FSUmiiTeDsJ 1D6COafpoZQ5mGyZWjGXjiZn7LG+vDV4tSuKEPFq0iJRK8D3hG8MmuqSGo6qekW2 3l5W5A+EIQxa6KVNl0NelWeJSEe+U85enjxF1PSKFsd20enksxDXmyNOx2tzhEri vaOXfi54o3Da2vbVt8l8iRefi3n3G7OtljWJ1Fun+2vDOjphlSAFa+AGJDL/inuO vNFohB9+RNAxMg== -----END CERTIFICATE-----Generated at Tue Dec 16 04:26:41 2025 by rpki-client