This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json) Hash identifier: EUCQkZmx/c7wbEJmSEx+0WaEjDMzLFNHl92RC7O6ox8= Subject key identifier: 3A:E9:90:4C:F6:55:EC:F1:38:ED:60:8F:64:34:5A:EE:E0:1C:E8:E8 Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50 Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150 Certificate serial: 019B08C82662DBFC9CF1DC81ACB8B3BE7809 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft Manifest number: 0EDB Signing time: Wed 10 Dec 2025 15:01:33 +0000 Manifest this update: Wed 10 Dec 2025 15:01:33 +0000 Manifest next update: Thu 11 Dec 2025 15:01:33 +0000 Files and hashes: 1: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: 23tQhxqem7IEwRsgy6w2M5veSA98HHWGgXHBPnv9V/U=) 2: YkEpFHQglRkkx7TW2iOd8M7ku-c.roa (hash: kIeQhyyEYB0FfxtFkPtqVvMk30nvPQUJg2CwKA7jeLY=) 3: uq0Ty9FTaErs0rzB7yOaaIcCy9E.roa (hash: cH522XBAhZQR4is+g9SDDOs+Uj5P/+RJANdH54+jdMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:c8:26:62:db:fc:9c:f1:dc:81:ac:b8:b3:be:78:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150 Validity Not Before: Dec 10 15:01:33 2025 GMT Not After : Dec 11 15:01:33 2025 GMT Subject: CN=3ae9904cf655ecf138ed608f64345aeee01ce8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:23:59:6e:61:eb:ad:c9:28:1c:7c:d1:e2:38: d9:bf:97:fe:7b:34:5c:24:ff:dc:d4:44:55:b0:c4: d3:65:d4:dc:89:1b:1a:0b:25:cd:95:4e:bc:de:79: f6:e1:ff:36:bd:55:49:48:e3:c5:ac:7b:20:ea:1f: 21:76:12:b5:3a:45:22:29:b8:d3:42:52:d9:e1:e9: 75:63:c0:4b:e0:de:16:1e:8b:49:7a:fd:aa:4d:62: 62:c7:4c:65:93:bc:ea:21:3c:a4:22:80:40:72:13: bb:c9:d9:59:8b:d6:8b:61:96:23:80:c9:c1:e5:3d: 73:47:28:f6:c9:00:28:a7:6e:ea:39:29:29:0b:f3: 6c:57:62:62:da:15:9e:34:7d:56:da:a0:29:2b:67: 97:8d:c1:34:0c:f1:e3:58:a0:c1:52:dd:a9:15:bf: 8f:58:d1:1c:52:da:86:4a:a7:06:5a:a2:67:84:a4: 98:e6:7a:8a:c0:3e:5b:c1:cd:77:e5:35:ad:8b:ec: 0b:13:c2:57:e1:3e:b0:c7:52:ee:0b:2b:ef:5a:bc: 32:7b:bb:f7:26:cd:ea:9a:5b:84:56:89:7d:f6:45: be:11:b0:5f:15:38:b8:cd:b1:cc:db:eb:be:b5:a8: ea:d6:c4:f3:5e:d1:4c:36:8c:97:07:07:62:d4:4c: 8c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E9:90:4C:F6:55:EC:F1:38:ED:60:8F:64:34:5A:EE:E0:1C:E8:E8 X509v3 Authority Key Identifier: keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:cb:fe:07:ad:58:c2:dc:a2:3a:98:a2:0a:7e:bb:89:fa:bb: 69:ad:ad:86:96:33:df:3f:10:47:17:0b:08:55:4c:e1:dc:db: 38:80:dc:40:72:e8:bb:45:4c:4d:c5:cb:67:43:c1:11:69:da: 5f:6e:cd:04:03:04:1f:ca:37:91:cd:90:31:f2:fc:29:ca:e0: f8:8c:06:44:cb:78:61:0c:08:0b:67:e1:f5:a9:1c:94:56:f7: ba:fd:c6:e0:9b:bb:16:ab:b6:de:d4:ec:15:fb:d8:41:a9:41: d8:be:7e:67:69:ce:17:7d:d8:b5:6f:01:c2:01:e3:c4:79:c7: 46:d0:95:18:53:05:b1:06:c9:32:d9:df:13:4a:dd:94:ec:5f: 5d:37:07:1e:6b:cb:67:0e:c0:6c:f2:ac:34:3f:8e:e0:87:ec: 28:44:cd:74:4e:09:90:66:08:98:4d:12:40:00:7d:0d:fb:6f: 86:a9:43:74:d9:82:fe:40:46:a5:e4:20:06:0d:4c:63:a8:9a: 79:bd:fe:19:ea:b9:e1:bd:80:d2:76:62:d4:56:fb:03:ea:6e: 7a:15:b3:64:b3:ca:21:02:f7:ea:91:2d:d0:21:b9:73:6a:64: f7:58:54:9a:26:5a:10:9b:a1:fe:c1:3f:96:f8:67:c0:15:f7: 1c:0a:bd:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIyCZi2/yc8dyBrLizvngJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjkzMDg1YjVmNzVjMGYxMGRlMDhlMjJjYmU0YjA2MjQ1 MWIxNTAwHhcNMjUxMjEwMTUwMTMzWhcNMjUxMjExMTUwMTMzWjAzMTEwLwYDVQQD EygzYWU5OTA0Y2Y2NTVlY2YxMzhlZDYwOGY2NDM0NWFlZWUwMWNlOGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyNZbmHrrckoHHzR4jjZv5f+ezRc JP/c1ERVsMTTZdTciRsaCyXNlU683nn24f82vVVJSOPFrHsg6h8hdhK1OkUiKbjT QlLZ4el1Y8BL4N4WHotJev2qTWJix0xlk7zqITykIoBAchO7ydlZi9aLYZYjgMnB 5T1zRyj2yQAop27qOSkpC/NsV2Ji2hWeNH1W2qApK2eXjcE0DPHjWKDBUt2pFb+P WNEcUtqGSqcGWqJnhKSY5nqKwD5bwc135TWti+wLE8JX4T6wx1LuCyvvWrwye7v3 Js3qmluEVol99kW+EbBfFTi4zbHM2+u+tajq1sTzXtFMNoyXBwdi1EyMfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrpkEz2VezxOO1gj2Q0Wu7gHOjoMB8GA1UdIwQY MBaAFPJpMIW191wPEN4I4iy+SwYkUbFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNzMzMjctOTc0Mi00MzViLTg2YzAt NTVlODVlYTA5ZGRlLzEvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xNzMzMjctOTc0Mi00MzViLTg2YzAtNTVlODVlYTA5ZGRl LzEvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMv+B61Y wtyiOpiiCn67ifq7aa2thpYz3z8QRxcLCFVM4dzbOIDcQHLou0VMTcXLZ0PBEWna X27NBAMEH8o3kc2QMfL8Kcrg+IwGRMt4YQwIC2fh9akclFb3uv3G4Ju7Fqu23tTs FfvYQalB2L5+Z2nOF33YtW8BwgHjxHnHRtCVGFMFsQbJMtnfE0rdlOxfXTcHHmvL Zw7AbPKsND+O4IfsKETNdE4JkGYImE0SQAB9DftvhqlDdNmC/kBGpeQgBg1MY6ia eb3+Geq54b2A0nZi1Fb7A+puehWzZLPKIQL36pEt0CG5c2pk91hUmiZaEJuh/sE/ lvhnwBX3HAq9fA== -----END CERTIFICATE-----Generated at Wed Dec 10 18:40:18 2025 by rpki-client