This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft File: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft (raw, json) Hash identifier: mvZy+Pl3yRWgy7H/73AzpSqvxAVkYEP8cZwa0PMo2Ww= Subject key identifier: AE:13:8A:C3:04:D0:2F:FA:59:15:47:AF:78:1C:E0:B9:3A:BA:CF:1D Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4 Certificate issuer: /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4 Certificate serial: 019B4A3A01F4105DDED5A58ED18C7A16D7FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft Manifest number: 0F13 Signing time: Tue 23 Dec 2025 08:01:13 +0000 Manifest this update: Tue 23 Dec 2025 08:01:13 +0000 Manifest next update: Wed 24 Dec 2025 08:01:13 +0000 Files and hashes: 1: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl (hash: Nb/e0/Ly/YDUNsyP/+PIiSWvhW9T6a1csQKYyVZeiL8=) 2: GGAjioujqBIqTrQAhNRgglPPRkE.roa (hash: 1FpErs46KltIuhJLiOWBLzSL1Xf0hQCI/1w1QmIm60Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:3a:01:f4:10:5d:de:d5:a5:8e:d1:8c:7a:16:d7:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4 Validity Not Before: Dec 23 08:01:13 2025 GMT Not After : Dec 24 08:01:13 2025 GMT Subject: CN=ae138ac304d02ffa591547af781ce0b93abacf1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d6:24:9e:32:b0:3e:f7:45:02:ef:65:48:83: 16:6d:37:01:40:21:26:dc:c1:0d:49:7f:16:1d:3f: 05:91:88:a2:22:cf:c8:c7:31:2b:f0:9c:f4:be:b5: fb:c2:16:83:83:28:00:b8:4d:b2:b2:51:ae:28:02: d9:c6:b1:b5:ef:f6:79:ed:c0:3e:47:1f:60:fe:29: 45:fb:6a:c5:f9:db:19:39:ad:ee:bd:1f:82:cd:11: 84:f2:9f:36:25:08:8d:cc:10:ed:41:60:41:55:d6: 00:89:b9:d9:9c:41:b1:11:45:e0:17:0a:29:f0:1d: 5a:fa:8e:b9:3c:36:da:5a:7b:ae:b3:c9:af:d9:c3: a1:be:ff:bf:11:19:31:83:fd:96:63:2a:fb:ab:29: 20:7a:f7:d4:b1:f1:98:15:eb:62:77:9a:01:62:4e: bf:ac:92:4f:2e:eb:0c:ad:bd:20:b9:2b:7c:4a:25: be:57:92:ce:a8:eb:5f:a6:8a:22:e7:f2:ac:92:b5: a2:5e:5d:8b:f4:b0:23:ff:0e:23:c6:c4:e0:6a:f3: 3b:bc:ab:9d:e6:b7:61:b8:55:97:83:17:f4:f6:8f: a5:ad:01:72:f4:f8:ee:6e:34:16:ea:42:e3:ce:3c: 4c:15:ea:98:ed:b8:e2:b8:50:e0:37:f9:eb:20:a3: e3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:13:8A:C3:04:D0:2F:FA:59:15:47:AF:78:1C:E0:B9:3A:BA:CF:1D X509v3 Authority Key Identifier: keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:66:62:7c:60:4d:b9:1e:12:34:6c:a8:cd:04:c7:2d:22:73: ad:b3:98:e6:f0:96:7a:15:bd:7a:58:1b:d2:cb:e7:78:55:4d: d5:f6:0c:7e:37:8d:b0:1e:1b:91:1c:88:ae:c5:82:03:e6:d5: f1:70:f0:14:ff:5e:8e:d4:7c:cc:c0:fe:3b:89:2b:09:a2:4e: 2c:ee:db:a6:74:38:2a:a0:64:ed:c8:a1:a8:0e:f2:0b:5b:ed: b2:3e:cb:b8:d5:bf:87:af:87:be:f7:09:d0:73:3e:ff:f5:b6: 0a:f1:5e:35:0d:89:84:fb:7b:8e:e0:94:69:10:0e:aa:e2:2c: 1f:90:49:37:31:56:c1:19:75:20:17:29:2c:37:55:83:92:ba: c2:3f:60:c8:ab:cb:c8:70:f8:20:9d:9f:8f:2e:aa:49:70:fe: 6b:c4:b2:5a:67:e8:8e:5a:ca:47:29:0a:11:47:8c:7f:51:12: da:ed:29:eb:c5:12:93:c9:ae:dd:00:4a:28:6f:e3:94:ff:3c: 0d:4d:4c:03:ea:20:ce:d5:4e:a8:e5:09:e7:c1:3b:b4:19:dc: 87:53:1e:5c:ad:31:24:ea:31:38:a6:24:cd:c1:dd:05:8d:0d: 81:3d:86:d3:b8:4d:72:09:f3:05:af:71:0e:98:fd:7b:44:28: 39:4e:cf:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOgH0EF3e1aWO0Yx6Ftf/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYjk4ZjU4NGJjMTIzNDc4MGEyYzQ3ZmM4ODMyNGQ0OWVl MGU2ZjQwHhcNMjUxMjIzMDgwMTEzWhcNMjUxMjI0MDgwMTEzWjAzMTEwLwYDVQQD EyhhZTEzOGFjMzA0ZDAyZmZhNTkxNTQ3YWY3ODFjZTBiOTNhYmFjZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNYknjKwPvdFAu9lSIMWbTcBQCEm 3MENSX8WHT8FkYiiIs/IxzEr8Jz0vrX7whaDgygAuE2yslGuKALZxrG17/Z57cA+ Rx9g/ilF+2rF+dsZOa3uvR+CzRGE8p82JQiNzBDtQWBBVdYAibnZnEGxEUXgFwop 8B1a+o65PDbaWnuus8mv2cOhvv+/ERkxg/2WYyr7qykgevfUsfGYFetid5oBYk6/ rJJPLusMrb0guSt8SiW+V5LOqOtfpooi5/KskrWiXl2L9LAj/w4jxsTgavM7vKud 5rdhuFWXgxf09o+lrQFy9PjubjQW6kLjzjxMFeqY7bjiuFDgN/nrIKPjXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4TisME0C/6WRVHr3gc4Lk6us8dMB8GA1UdIwQY MBaAFPK5j1hLwSNHgKLEf8iDJNSe4Ob0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYt NGVjMWFiZTA4NWVmLzEvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYtNGVjMWFiZTA4NWVm LzEvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3mZifGBN uR4SNGyozQTHLSJzrbOY5vCWehW9elgb0svneFVN1fYMfjeNsB4bkRyIrsWCA+bV 8XDwFP9ejtR8zMD+O4krCaJOLO7bpnQ4KqBk7cihqA7yC1vtsj7LuNW/h6+HvvcJ 0HM+//W2CvFeNQ2JhPt7juCUaRAOquIsH5BJNzFWwRl1IBcpLDdVg5K6wj9gyKvL yHD4IJ2fjy6qSXD+a8SyWmfojlrKRykKEUeMf1ES2u0p68USk8mu3QBKKG/jlP88 DU1MA+ogztVOqOUJ58E7tBnch1MeXK0xJOoxOKYkzcHdBY0NgT2G07hNcgnzBa9x Dpj9e0QoOU7PCQ== -----END CERTIFICATE-----Generated at Tue Dec 23 18:03:46 2025 by rpki-client