This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft File: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft (raw, json) Hash identifier: gdp0rRTwy7PemU4wLYhgyKy6g2T2sJVOjagLIkgD4Gs= Subject key identifier: DC:6D:2B:4D:B8:7B:40:05:AD:9E:2F:05:BF:37:74:24:0C:EC:07:A7 Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4 Certificate issuer: /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4 Certificate serial: 019AF540A411C98D57DFF209C45E2C72154D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft Manifest number: 0EE7 Signing time: Sat 06 Dec 2025 20:00:45 +0000 Manifest this update: Sat 06 Dec 2025 20:00:45 +0000 Manifest next update: Sun 07 Dec 2025 20:00:45 +0000 Files and hashes: 1: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl (hash: GnKhig+QM2MnPmKekPLBnMqaPciEjjgX8YS8sg7AlcQ=) 2: GGAjioujqBIqTrQAhNRgglPPRkE.roa (hash: 1FpErs46KltIuhJLiOWBLzSL1Xf0hQCI/1w1QmIm60Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:a4:11:c9:8d:57:df:f2:09:c4:5e:2c:72:15:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4 Validity Not Before: Dec 6 20:00:45 2025 GMT Not After : Dec 7 20:00:45 2025 GMT Subject: CN=dc6d2b4db87b4005ad9e2f05bf3774240cec07a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f9:f2:79:d7:08:87:6f:30:46:67:21:20:4a: f1:77:15:b7:fd:77:85:2b:c3:c6:13:77:5b:81:2d: ac:a8:f8:66:ee:73:d7:94:97:bd:50:a9:28:dd:36: 93:1d:5c:a4:87:14:72:78:f6:bb:67:9b:af:6e:9b: f3:01:44:cf:04:c9:87:e5:ca:e4:56:df:3e:ee:36: 46:82:ce:94:d6:b3:3c:81:c5:ed:99:bb:0a:69:52: 7f:d2:e2:96:40:52:34:2e:7b:9b:61:5b:e3:9a:10: 4f:96:bf:11:37:09:0b:48:9c:ab:f6:22:1f:d9:db: 51:d0:33:35:f6:60:fa:91:d3:75:46:37:09:bb:b5: 95:47:12:98:eb:ff:1c:d5:c0:59:40:27:77:1d:bf: da:97:43:e2:30:d7:ee:22:26:cc:b5:07:66:25:7c: 17:02:92:88:80:de:08:65:2c:4c:41:17:c5:52:33: a5:96:66:4d:1a:6a:0f:f3:35:83:ee:3c:06:fb:88: d1:18:1c:7e:b5:dc:a6:65:f5:16:82:b4:14:e1:ab: 3f:6a:7b:f6:51:94:7a:15:36:37:d4:be:77:c7:4e: de:38:7c:84:d3:7d:a5:05:b2:8e:62:63:2e:89:d4: 70:10:0c:e1:05:03:24:98:30:b9:79:e2:c3:ea:53: 66:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6D:2B:4D:B8:7B:40:05:AD:9E:2F:05:BF:37:74:24:0C:EC:07:A7 X509v3 Authority Key Identifier: keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:a2:b3:2a:63:11:95:f6:61:39:25:55:e2:58:30:ab:16:91: bf:78:a6:e1:9b:27:ec:01:38:df:24:54:b5:18:bc:94:1e:f1: 23:c2:c4:b0:c1:30:34:99:ea:3e:1d:d4:ea:03:ac:7f:71:82: f0:e9:56:cf:ba:a9:e5:3f:95:59:30:2d:6a:6a:9f:9c:b1:9d: f9:0a:a2:79:c5:e3:20:a1:ee:78:2f:89:92:ed:9a:1c:ab:ee: 3b:31:51:9a:da:69:22:21:cd:59:11:54:d5:84:68:6e:79:df: a9:76:22:8c:32:31:e6:19:6e:25:f2:30:9d:07:1c:86:e2:90: 8a:f8:1b:df:b1:99:da:e6:f0:29:55:25:84:08:8f:33:5b:ac: 4e:2c:44:26:00:9f:2b:e0:ef:e3:67:95:96:fb:da:7b:28:22: 21:32:06:6f:2d:61:b8:23:d6:39:0e:8b:b5:87:95:5c:79:15: 62:7c:52:9f:51:fa:d6:f3:37:98:f0:de:f8:1a:e6:6f:df:5d: 49:bb:12:6b:fe:85:98:d9:39:8b:49:b7:10:43:05:8d:1b:78: 80:d9:48:96:78:82:a0:03:0e:69:48:e2:8e:0a:95:00:2b:92: 87:f8:2c:1a:78:9d:24:ef:b0:47:fa:99:9f:09:e5:ad:3a:a1: f6:4c:80:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QKQRyY1X3/IJxF4schVNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYjk4ZjU4NGJjMTIzNDc4MGEyYzQ3ZmM4ODMyNGQ0OWVl MGU2ZjQwHhcNMjUxMjA2MjAwMDQ1WhcNMjUxMjA3MjAwMDQ1WjAzMTEwLwYDVQQD EyhkYzZkMmI0ZGI4N2I0MDA1YWQ5ZTJmMDViZjM3NzQyNDBjZWMwN2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/nyedcIh28wRmchIErxdxW3/XeF K8PGE3dbgS2sqPhm7nPXlJe9UKko3TaTHVykhxRyePa7Z5uvbpvzAUTPBMmH5crk Vt8+7jZGgs6U1rM8gcXtmbsKaVJ/0uKWQFI0LnubYVvjmhBPlr8RNwkLSJyr9iIf 2dtR0DM19mD6kdN1RjcJu7WVRxKY6/8c1cBZQCd3Hb/al0PiMNfuIibMtQdmJXwX ApKIgN4IZSxMQRfFUjOllmZNGmoP8zWD7jwG+4jRGBx+tdymZfUWgrQU4as/anv2 UZR6FTY31L53x07eOHyE032lBbKOYmMuidRwEAzhBQMkmDC5eeLD6lNmXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxtK024e0AFrZ4vBb83dCQM7AenMB8GA1UdIwQY MBaAFPK5j1hLwSNHgKLEf8iDJNSe4Ob0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYt NGVjMWFiZTA4NWVmLzEvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYtNGVjMWFiZTA4NWVm LzEvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6KzKmMR lfZhOSVV4lgwqxaRv3im4Zsn7AE43yRUtRi8lB7xI8LEsMEwNJnqPh3U6gOsf3GC 8OlWz7qp5T+VWTAtamqfnLGd+QqiecXjIKHueC+Jku2aHKvuOzFRmtppIiHNWRFU 1YRobnnfqXYijDIx5hluJfIwnQcchuKQivgb37GZ2ubwKVUlhAiPM1usTixEJgCf K+Dv42eVlvvaeygiITIGby1huCPWOQ6LtYeVXHkVYnxSn1H61vM3mPDe+Brmb99d SbsSa/6FmNk5i0m3EEMFjRt4gNlIlniCoAMOaUjijgqVACuSh/gsGnidJO+wR/qZ nwnlrTqh9kyA7g== -----END CERTIFICATE-----Generated at Sun Dec 7 06:03:37 2025 by rpki-client