This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft File: 8uOrazEY4L3g5kiOa-1slpQeDoQ.mft (raw, json) Hash identifier: DR1tNXq2p0L1RbW/eIbMPqFfEvGK0Dbil5wig0QwbXs= Subject key identifier: 89:45:79:34:E5:0A:99:5B:57:B0:57:C7:A6:71:C8:97:0C:3D:D3:2F Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84 Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84 Certificate serial: 019B378F11E3511AF78D94134476BB1EDB9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft Manifest number: 0C1B Signing time: Fri 19 Dec 2025 17:01:21 +0000 Manifest this update: Fri 19 Dec 2025 17:01:21 +0000 Manifest next update: Sat 20 Dec 2025 17:01:21 +0000 Files and hashes: 1: 8uOrazEY4L3g5kiOa-1slpQeDoQ.crl (hash: 1gQpp6aS8NqdYMKnLtfX1QvbwEuJSEvwd0S93HBBMlU=) 2: TwUAmEwQxO2jeeE0IG7nOUuBRU8.roa (hash: 5uZF7JHC6Cu/tuWa9kusO7lA0+dh5OGQEqs1E5VZ/5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8f:11:e3:51:1a:f7:8d:94:13:44:76:bb:1e:db:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84 Validity Not Before: Dec 19 17:01:21 2025 GMT Not After : Dec 20 17:01:21 2025 GMT Subject: CN=89457934e50a995b57b057c7a671c8970c3dd32f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7c:c5:07:42:61:1d:99:ae:b8:7c:6c:f2:c0: cf:3a:ae:e4:cf:37:ce:41:f5:78:9d:8e:53:34:07: 57:81:fa:9c:87:91:9d:7c:b3:de:77:a1:8c:7e:af: 61:44:4a:a7:2e:6f:82:1b:fe:98:93:ec:4b:c8:b1: 29:09:57:0f:00:5e:54:e7:96:0c:f1:f4:10:f0:a6: e9:7c:b7:cf:13:71:73:44:6c:e7:89:2b:44:42:ff: bd:38:db:9e:e6:7e:84:10:45:32:dd:0e:68:fd:7f: 31:52:9e:67:e9:26:cc:dd:2c:a1:b2:0c:f8:25:c4: 91:1e:7d:f6:34:42:b5:38:9a:f5:c0:cd:16:75:96: 08:e7:9d:b2:1e:fa:00:5f:b3:ba:59:c1:a0:eb:f5: f9:f2:e8:c3:f2:85:d2:bd:63:95:3b:93:90:7a:16: 3c:0f:58:b8:1c:93:13:5f:e8:a5:e6:7a:f6:29:82: ee:28:39:49:fe:2a:67:5d:12:51:5e:a4:53:7b:ee: 6a:17:13:65:cc:4f:16:69:b5:ee:56:d7:8d:16:5c: b0:0e:40:e1:c0:6d:38:11:93:75:65:c7:7a:10:e8: e4:48:05:f3:2d:c5:52:bd:0a:0c:88:0f:87:dc:6a: d7:b1:9f:57:ff:f5:4c:c3:7b:6c:ee:84:21:26:3e: 00:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:45:79:34:E5:0A:99:5B:57:B0:57:C7:A6:71:C8:97:0C:3D:D3:2F X509v3 Authority Key Identifier: keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:87:a7:e4:bc:b5:c1:a4:91:d9:34:b4:6d:5e:47:dc:ed:fd: ee:05:01:56:a9:61:47:fc:38:5c:56:28:c2:a2:ed:cc:53:46: a3:25:83:db:d1:d6:6b:ee:7d:b0:3c:eb:c7:77:f9:ab:1d:a7: 3d:f3:d4:0c:cf:ca:f7:81:3b:a2:d5:e7:34:75:b7:80:e4:49: 10:2c:87:26:80:f8:4c:e5:a5:d9:96:b4:10:78:16:8d:57:00: fb:56:ed:82:25:f5:62:99:de:cc:0d:64:1e:2b:c1:71:56:0d: 05:eb:42:54:23:45:6a:50:6a:35:a0:7e:3b:a1:39:2a:c8:e8: 51:5e:db:f9:a2:6e:3d:e9:fd:9c:6d:a3:7e:30:c7:95:83:79: 0e:4d:53:ae:33:ac:47:2e:53:13:3d:fb:b5:1a:a1:f3:8f:f4: 83:36:80:11:1a:96:ed:94:09:7c:01:4d:f9:d6:ce:b8:f1:c5: 8b:15:b1:d3:8d:2f:1f:e6:34:86:e5:55:59:64:6a:f4:f6:0a: 5f:f8:a1:08:14:42:81:0e:fe:b9:0b:e4:2d:9a:04:73:66:8f: 40:3f:c7:54:62:54:82:80:a6:46:ff:b4:53:52:ec:98:e3:84: 5a:dd:71:93:d1:a9:63:1c:e8:71:7f:94:db:4a:2b:90:ed:e5: 86:7e:d2:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jxHjURr3jZQTRHa7HtueMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTNhYjZiMzExOGUwYmRlMGU2NDg4ZTZiZWQ2Yzk2OTQx ZTBlODQwHhcNMjUxMjE5MTcwMTIxWhcNMjUxMjIwMTcwMTIxWjAzMTEwLwYDVQQD Eyg4OTQ1NzkzNGU1MGE5OTViNTdiMDU3YzdhNjcxYzg5NzBjM2RkMzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3zFB0JhHZmuuHxs8sDPOq7kzzfO QfV4nY5TNAdXgfqch5GdfLPed6GMfq9hREqnLm+CG/6Yk+xLyLEpCVcPAF5U55YM 8fQQ8KbpfLfPE3FzRGzniStEQv+9ONue5n6EEEUy3Q5o/X8xUp5n6SbM3Syhsgz4 JcSRHn32NEK1OJr1wM0WdZYI552yHvoAX7O6WcGg6/X58ujD8oXSvWOVO5OQehY8 D1i4HJMTX+il5nr2KYLuKDlJ/ipnXRJRXqRTe+5qFxNlzE8WabXuVteNFlywDkDh wG04EZN1Zcd6EOjkSAXzLcVSvQoMiA+H3GrXsZ9X//VMw3ts7oQhJj4ApwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlFeTTlCplbV7BXx6ZxyJcMPdMvMB8GA1UdIwQY MBaAFPLjq2sxGOC94OZIjmvtbJaUHg6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zNmM0YTMtNmUxZC00NjE0LThmOTAt ODNiMDM4NzAwOTRkLzEvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zNmM0YTMtNmUxZC00NjE0LThmOTAtODNiMDM4NzAwOTRk LzEvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYen5Ly1 waSR2TS0bV5H3O397gUBVqlhR/w4XFYowqLtzFNGoyWD29HWa+59sDzrx3f5qx2n PfPUDM/K94E7otXnNHW3gORJECyHJoD4TOWl2Za0EHgWjVcA+1btgiX1YpnezA1k HivBcVYNBetCVCNFalBqNaB+O6E5KsjoUV7b+aJuPen9nG2jfjDHlYN5Dk1TrjOs Ry5TEz37tRqh84/0gzaAERqW7ZQJfAFN+dbOuPHFixWx040vH+Y0huVVWWRq9PYK X/ihCBRCgQ7+uQvkLZoEc2aPQD/HVGJUgoCmRv+0U1LsmOOEWt1xk9GpYxzocX+U 20orkO3lhn7SKA== -----END CERTIFICATE-----Generated at Sat Dec 20 01:48:10 2025 by rpki-client