This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft File: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft (raw, json) Hash identifier: a8EfpStSnoNbdVkEUGs/QvU4IRxC3S/bgH4GGSzsClQ= Subject key identifier: A1:54:59:5F:00:D6:74:3C:C1:DA:4C:23:D9:4F:2E:70:59:2A:64:9A Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4 Certificate issuer: /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4 Certificate serial: 019B465D24326C7FAA237B2084954336757E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft Manifest number: 0F11 Signing time: Mon 22 Dec 2025 14:01:07 +0000 Manifest this update: Mon 22 Dec 2025 14:01:07 +0000 Manifest next update: Tue 23 Dec 2025 14:01:07 +0000 Files and hashes: 1: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl (hash: oqTtCzsbZVDO4w/KQ1ngA76Ee1sK/7FQ7TTlZEdZj48=) 2: GGAjioujqBIqTrQAhNRgglPPRkE.roa (hash: 1FpErs46KltIuhJLiOWBLzSL1Xf0hQCI/1w1QmIm60Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5d:24:32:6c:7f:aa:23:7b:20:84:95:43:36:75:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4 Validity Not Before: Dec 22 14:01:07 2025 GMT Not After : Dec 23 14:01:07 2025 GMT Subject: CN=a154595f00d6743cc1da4c23d94f2e70592a649a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3b:13:6e:b0:95:9c:a6:df:13:58:11:e5:43: ad:9c:b5:6d:3c:e8:d2:62:59:39:05:e4:b7:8f:bf: 00:34:72:4b:1a:9d:e6:a2:3a:71:d4:78:e2:9e:f2: 80:bd:b3:6f:6f:21:bc:bb:55:2e:20:2b:f7:a3:2a: f6:5c:c7:b1:37:f3:ce:f2:ac:b2:53:86:49:db:b6: e6:91:85:1f:7b:8d:d4:0e:90:96:ae:e8:e8:6d:a5: f3:98:94:dd:29:b5:87:dc:6d:fd:bb:e5:58:13:4d: 9b:7e:db:71:31:31:b4:a8:e5:b0:c4:bd:48:5f:95: 9a:63:7c:86:fe:2b:25:8b:dd:2a:53:9e:90:0a:d0: 47:63:8c:ba:f3:1a:79:db:b3:fa:e9:1f:f7:18:04: 1f:f9:00:59:aa:83:27:97:f2:10:2f:87:fb:bf:e1: 8d:45:41:d9:bc:03:cc:ab:d9:9d:f3:8e:25:8a:5b: 7a:3b:eb:5e:f9:96:34:02:88:c4:aa:9c:14:23:44: 57:55:22:dc:f0:0e:29:71:82:d1:d7:71:44:df:e3: 5c:3c:a8:37:26:dc:82:bb:6f:3f:7a:02:3b:15:c1: fe:fc:32:69:7b:5f:f7:16:cf:1d:e7:e5:a4:a8:6a: 7c:2d:ca:ca:92:8d:88:9d:6b:4f:30:d3:12:be:24: 09:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:54:59:5F:00:D6:74:3C:C1:DA:4C:23:D9:4F:2E:70:59:2A:64:9A X509v3 Authority Key Identifier: keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:83:71:24:65:98:90:18:3c:d3:b2:2e:76:c7:cd:63:89:53: ef:be:3b:f9:da:76:f9:44:6e:96:d2:59:f0:63:f1:c5:87:9d: 53:47:28:63:cf:74:ca:3e:8e:13:e1:d6:13:40:83:c6:b4:df: d9:40:fd:40:83:99:89:c4:64:a9:88:db:8b:ec:bd:09:5d:b7: 51:42:9f:91:59:88:ba:6f:81:59:3a:cb:45:5c:c7:3d:9c:19: 17:0d:b3:e8:c9:3e:f3:78:a6:6f:5f:1c:c4:1e:dd:d4:39:6e: 3b:c2:ee:e5:b4:d8:6e:9b:92:32:06:10:d7:f2:14:39:44:a9: cc:2d:8e:10:f1:a1:e2:ac:0b:25:5a:7a:97:47:84:05:c1:0e: f5:37:35:ec:56:c8:4c:52:9b:84:d6:3a:75:9a:79:ac:13:9f: 9a:8d:45:d3:3e:4f:04:ab:b9:68:b6:c8:c2:c4:89:45:bf:35: 63:df:1d:59:79:d9:b7:4e:d3:9d:84:c6:07:0c:1f:d1:79:d3: 76:93:c4:a4:da:72:26:e1:c3:8c:3a:96:f2:64:1c:77:2d:d4: 6c:18:1e:0d:dd:02:86:87:8a:45:62:e1:56:19:61:6f:55:ba: a8:44:21:41:17:d0:52:c4:49:5d:14:bc:85:df:34:24:86:d0: 9c:df:c4:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXSQybH+qI3sghJVDNnV+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYjk4ZjU4NGJjMTIzNDc4MGEyYzQ3ZmM4ODMyNGQ0OWVl MGU2ZjQwHhcNMjUxMjIyMTQwMTA3WhcNMjUxMjIzMTQwMTA3WjAzMTEwLwYDVQQD EyhhMTU0NTk1ZjAwZDY3NDNjYzFkYTRjMjNkOTRmMmU3MDU5MmE2NDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTsTbrCVnKbfE1gR5UOtnLVtPOjS Ylk5BeS3j78ANHJLGp3mojpx1HjinvKAvbNvbyG8u1UuICv3oyr2XMexN/PO8qyy U4ZJ27bmkYUfe43UDpCWrujobaXzmJTdKbWH3G39u+VYE02bfttxMTG0qOWwxL1I X5WaY3yG/isli90qU56QCtBHY4y68xp527P66R/3GAQf+QBZqoMnl/IQL4f7v+GN RUHZvAPMq9md844lilt6O+te+ZY0AojEqpwUI0RXVSLc8A4pcYLR13FE3+NcPKg3 JtyCu28/egI7FcH+/DJpe1/3Fs8d5+WkqGp8LcrKko2InWtPMNMSviQJTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFUWV8A1nQ8wdpMI9lPLnBZKmSaMB8GA1UdIwQY MBaAFPK5j1hLwSNHgKLEf8iDJNSe4Ob0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYt NGVjMWFiZTA4NWVmLzEvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYtNGVjMWFiZTA4NWVm LzEvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvINxJGWY kBg807IudsfNY4lT7747+dp2+URultJZ8GPxxYedU0coY890yj6OE+HWE0CDxrTf 2UD9QIOZicRkqYjbi+y9CV23UUKfkVmIum+BWTrLRVzHPZwZFw2z6Mk+83imb18c xB7d1DluO8Lu5bTYbpuSMgYQ1/IUOUSpzC2OEPGh4qwLJVp6l0eEBcEO9Tc17FbI TFKbhNY6dZp5rBOfmo1F0z5PBKu5aLbIwsSJRb81Y98dWXnZt07TnYTGBwwf0XnT dpPEpNpyJuHDjDqW8mQcdy3UbBgeDd0ChoeKRWLhVhlhb1W6qEQhQRfQUsRJXRS8 hd80JIbQnN/EOQ== -----END CERTIFICATE-----Generated at Mon Dec 22 22:23:50 2025 by rpki-client