This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft File: 8Q057dsAjRuJ35dBlg2_IET2V_s.mft (raw, json) Hash identifier: /QHzQYARrZAGYpjoc2AfVX0r/Rra2bWrErVjV13h9sc= Subject key identifier: DB:D4:11:13:7D:D1:16:9B:83:A4:D7:98:D3:AB:1C:BF:5D:A8:69:BF Authority key identifier: F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB Certificate issuer: /CN=f10d39eddb008d1b89df9741960dbf2044f657fb Certificate serial: 019B10816065B2438F97195F843A2FA5C0E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft Manifest number: 1778 Signing time: Fri 12 Dec 2025 03:01:12 +0000 Manifest this update: Fri 12 Dec 2025 03:01:12 +0000 Manifest next update: Sat 13 Dec 2025 03:01:12 +0000 Files and hashes: 1: 8Q057dsAjRuJ35dBlg2_IET2V_s.crl (hash: 2OKlacRfWyWieRgRom+B8tm+0RyIz541U3HWxZbKLt4=) 2: jV20P4i0v4psPgGy6zXjkv_uoCc.roa (hash: LRoq6PhnzYAWBMT+zoK5/SNdijqn8yZf6GzBfp4aJ0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:60:65:b2:43:8f:97:19:5f:84:3a:2f:a5:c0:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f10d39eddb008d1b89df9741960dbf2044f657fb Validity Not Before: Dec 12 03:01:12 2025 GMT Not After : Dec 13 03:01:12 2025 GMT Subject: CN=dbd411137dd1169b83a4d798d3ab1cbf5da869bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5a:8c:b2:43:6f:ab:90:48:c7:50:e2:53:63: 4e:4b:f2:f2:9c:0b:07:5b:ff:43:ac:40:fd:bc:15: e7:3a:49:c3:9b:5b:df:7f:24:9f:b2:31:e9:b4:8b: e2:95:39:5d:ce:14:11:48:7a:61:2b:2a:e7:90:b8: ac:d8:c4:b1:e9:99:7d:74:39:c7:f0:e8:d1:3c:f8: 20:02:f9:67:4a:05:17:80:e9:77:34:2d:fd:30:e7: 12:78:0d:23:e0:1f:92:18:b6:a9:ab:e3:48:de:56: 84:ed:4a:b1:5e:fb:93:34:aa:df:6e:ab:53:7e:82: ca:8e:e7:f2:b8:b6:4d:b7:21:09:f0:b2:83:c9:a1: e4:38:44:d0:55:b5:4e:05:7d:df:f3:48:43:37:d8: 40:0c:e8:87:f1:c8:77:10:74:64:cb:78:9c:fa:16: c8:9b:12:f3:4a:e3:b8:ff:92:06:3d:6c:27:6b:b3: 4f:9e:87:00:e5:0e:14:1d:c2:da:c9:08:2f:f7:5f: ee:fd:67:3a:54:8f:44:27:6b:79:45:21:89:33:09: 20:36:5f:7c:97:29:3a:34:17:fe:90:3c:3f:b7:f8: c5:87:1c:b0:3a:c2:ef:3f:a7:05:fb:e0:0d:e8:1c: 29:8d:bb:1c:16:b9:6a:87:c5:30:d9:49:c5:db:aa: 6c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D4:11:13:7D:D1:16:9B:83:A4:D7:98:D3:AB:1C:BF:5D:A8:69:BF X509v3 Authority Key Identifier: keyid:F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:a2:a8:6d:8f:a3:b3:31:da:26:8f:2c:40:d2:46:64:db:d2: 00:68:a7:50:ae:d5:05:c9:9e:fe:25:19:c1:77:71:f6:a4:07: ec:10:8e:91:88:f2:43:b4:b0:5c:e9:5b:96:ed:02:72:b2:38: 11:4a:9a:03:de:da:df:91:7b:8d:32:c3:23:2e:50:cc:34:31: ee:b5:5e:10:97:25:7f:7e:23:96:e1:b8:ec:6d:6e:f4:36:fa: da:f7:74:26:72:1c:1e:1a:e5:e5:63:58:e1:24:45:ed:64:40: 1c:b7:cd:32:04:ea:0b:b9:69:87:d1:97:c6:ac:85:48:e7:e8: 72:f7:2c:a0:c1:43:c8:17:03:d5:eb:e9:95:8d:2f:a1:46:d1: cf:d6:0d:c5:4f:14:96:a2:a2:5b:40:3d:fd:16:57:1c:c6:16: 66:11:05:f8:e2:e2:13:ea:a7:8a:88:be:6f:33:fa:b9:1d:7e: 85:28:70:f5:d4:4b:71:c7:4f:2a:68:74:b6:b1:4a:63:f4:b9: 59:be:2d:f9:ab:ad:36:66:48:d5:49:18:03:2b:7a:4e:a2:c5: 3b:67:ff:86:5a:b3:72:ba:2c:d1:79:63:d7:b7:55:99:2f:86: 63:b5:13:2b:6e:35:c4:68:5c:81:1a:41:06:e7:14:5e:73:d9: e9:d1:21:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgWBlskOPlxlfhDovpcDkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMGQzOWVkZGIwMDhkMWI4OWRmOTc0MTk2MGRiZjIwNDRm NjU3ZmIwHhcNMjUxMjEyMDMwMTEyWhcNMjUxMjEzMDMwMTEyWjAzMTEwLwYDVQQD EyhkYmQ0MTExMzdkZDExNjliODNhNGQ3OThkM2FiMWNiZjVkYTg2OWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVqMskNvq5BIx1DiU2NOS/LynAsH W/9DrED9vBXnOknDm1vffySfsjHptIvilTldzhQRSHphKyrnkLis2MSx6Zl9dDnH 8OjRPPggAvlnSgUXgOl3NC39MOcSeA0j4B+SGLapq+NI3laE7UqxXvuTNKrfbqtT foLKjufyuLZNtyEJ8LKDyaHkOETQVbVOBX3f80hDN9hADOiH8ch3EHRky3ic+hbI mxLzSuO4/5IGPWwna7NPnocA5Q4UHcLayQgv91/u/Wc6VI9EJ2t5RSGJMwkgNl98 lyk6NBf+kDw/t/jFhxywOsLvP6cF++AN6BwpjbscFrlqh8Uw2UnF26psjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvUERN90Rabg6TXmNOrHL9dqGm/MB8GA1UdIwQY MBaAFPENOe3bAI0bid+XQZYNvyBE9lf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNzBlMWEtNzMyZS00ZTZiLWIzYjUt ZjU2MmI4OTc0ZDhiLzEvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mNzBlMWEtNzMyZS00ZTZiLWIzYjUtZjU2MmI4OTc0ZDhi LzEvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6KobY+j szHaJo8sQNJGZNvSAGinUK7VBcme/iUZwXdx9qQH7BCOkYjyQ7SwXOlblu0CcrI4 EUqaA97a35F7jTLDIy5QzDQx7rVeEJclf34jluG47G1u9Db62vd0JnIcHhrl5WNY 4SRF7WRAHLfNMgTqC7lph9GXxqyFSOfocvcsoMFDyBcD1evplY0voUbRz9YNxU8U lqKiW0A9/RZXHMYWZhEF+OLiE+qnioi+bzP6uR1+hShw9dRLccdPKmh0trFKY/S5 Wb4t+autNmZI1UkYAyt6TqLFO2f/hlqzcros0Xlj17dVmS+GY7UTK241xGhcgRpB BucUXnPZ6dEh4A== -----END CERTIFICATE-----Generated at Fri Dec 12 08:04:04 2025 by rpki-client