This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft File: 8FoX3TvrjchI--dikGHWCAFB59Q.mft (raw, json) Hash identifier: kXTLWcVpOkhWqQJEi0M90JzziCv6l1G4e0HzUIyvPFA= Subject key identifier: 1A:49:A7:45:0F:6B:F3:16:22:6E:F4:5D:1E:76:8F:52:E3:CC:31:A4 Authority key identifier: F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4 Certificate issuer: /CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4 Certificate serial: 019B292F91D73CF59DB54C7A4387CA300877 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft Manifest number: CF Signing time: Tue 16 Dec 2025 22:02:21 +0000 Manifest this update: Tue 16 Dec 2025 22:02:21 +0000 Manifest next update: Wed 17 Dec 2025 22:02:21 +0000 Files and hashes: 1: 8FoX3TvrjchI--dikGHWCAFB59Q.crl (hash: QHOjjCTkwhy82cX3jG3ZfzhLJFvPv7XHNDw6gZexoUc=) 2: XQvs_LeYh7n5lJNYbQ7IMsSxGfU.roa (hash: NEI+JeokcTnC/E33WRhCXxumi2TGWneCiQdh6c4jiDg=) 3: bglm7OBH7qMueWHwWp8x13IQumU.roa (hash: KuVFh8acpsLYsRfes4W/qZZMayuNHOlxpXdjCaCH3rE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 22:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2f:91:d7:3c:f5:9d:b5:4c:7a:43:87:ca:30:08:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4 Validity Not Before: Dec 16 22:02:21 2025 GMT Not After : Dec 17 22:02:21 2025 GMT Subject: CN=1a49a7450f6bf316226ef45d1e768f52e3cc31a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2b:34:b8:6b:8b:8c:46:e2:21:6e:3d:2f:f2: 74:69:60:78:8d:f7:04:81:33:ca:d2:37:c3:0a:06: e9:da:59:07:29:d1:7e:64:b2:eb:aa:5a:2e:67:2c: 0a:7d:22:47:a7:b7:53:f7:c5:b6:7c:30:ae:c9:96: ab:74:a4:a6:f3:ad:1e:60:fc:65:75:a2:d7:70:e9: 19:f6:b6:27:6d:08:8d:b7:f5:03:08:90:2d:fa:a9: 52:85:00:5f:44:65:51:11:43:dc:c1:13:5f:a2:80: dc:58:b2:cf:8c:b5:87:96:20:e3:18:ab:a7:df:e7: f0:35:d4:5a:e0:02:7e:41:14:75:05:37:a9:88:d2: a1:01:ab:7c:f9:b9:53:71:96:62:04:5d:af:11:dd: 84:79:98:80:b9:f1:98:dc:77:de:15:4b:61:82:a4: 9d:7c:c2:ac:c0:44:a9:2c:5b:07:f9:5e:de:3b:e7: 01:03:77:8a:b0:51:54:20:64:0f:cb:cd:14:37:90: 85:7d:cc:9d:88:da:44:28:29:ec:7b:c1:59:d7:46: ca:ed:3f:88:bc:a6:8f:9d:29:c9:48:22:a6:b0:df: 0c:cb:43:9d:36:20:a3:3b:0b:ba:71:2e:b1:7b:50: 78:35:46:98:af:ee:08:6c:6c:5a:df:bd:6b:d3:94: 05:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:49:A7:45:0F:6B:F3:16:22:6E:F4:5D:1E:76:8F:52:E3:CC:31:A4 X509v3 Authority Key Identifier: keyid:F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:87:b3:ea:fd:67:0b:d9:21:7d:4f:09:f3:0f:d6:22:79:e0: fc:26:4e:c5:9b:20:c6:21:a5:3d:f1:5f:f0:d9:3c:87:d3:a2: 73:73:35:33:62:78:28:29:27:08:69:9f:09:dd:0e:bf:c2:e2: 2e:41:82:95:bd:16:5c:c0:6f:f5:09:8b:e8:25:68:30:e9:d6: d0:c6:af:27:12:75:89:76:ba:11:85:30:61:a2:6c:ed:24:75: 0f:28:fc:62:85:ff:62:f6:53:4e:ae:39:d2:49:0a:d0:dd:c7: b9:11:e7:f0:7e:d8:05:08:6c:37:77:25:ca:64:f7:89:65:8b: cb:e2:68:9a:7a:6f:d3:e4:4c:73:99:78:f5:a8:20:03:a1:5f: 14:1a:15:f7:20:14:2e:fd:3d:96:f4:c1:6d:82:71:b3:e8:68: 3c:83:c3:8d:a6:20:24:a4:50:6f:d5:d2:96:b9:67:ed:69:a9: 14:54:ee:82:5b:51:e5:83:36:76:b2:e9:7d:6f:df:eb:0c:28: 50:2d:e3:cd:a1:a7:e6:bb:07:79:a6:94:73:07:94:ba:f3:cd: 48:d7:65:3a:7d:38:9f:b3:c4:83:26:03:88:78:0f:37:47:ac: 4a:e0:48:a0:53:44:e9:60:51:6c:3e:83:d3:e1:a5:e2:9a:74: c9:5e:90:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspL5HXPPWdtUx6Q4fKMAh3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNWExN2RkM2JlYjhkYzg0OGZiZTc2MjkwNjFkNjA4MDE0 MWU3ZDQwHhcNMjUxMjE2MjIwMjIxWhcNMjUxMjE3MjIwMjIxWjAzMTEwLwYDVQQD EygxYTQ5YTc0NTBmNmJmMzE2MjI2ZWY0NWQxZTc2OGY1MmUzY2MzMWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArys0uGuLjEbiIW49L/J0aWB4jfcE gTPK0jfDCgbp2lkHKdF+ZLLrqlouZywKfSJHp7dT98W2fDCuyZardKSm860eYPxl daLXcOkZ9rYnbQiNt/UDCJAt+qlShQBfRGVREUPcwRNfooDcWLLPjLWHliDjGKun 3+fwNdRa4AJ+QRR1BTepiNKhAat8+blTcZZiBF2vEd2EeZiAufGY3HfeFUthgqSd fMKswESpLFsH+V7eO+cBA3eKsFFUIGQPy80UN5CFfcydiNpEKCnse8FZ10bK7T+I vKaPnSnJSCKmsN8My0OdNiCjOwu6cS6xe1B4NUaYr+4IbGxa371r05QF7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpJp0UPa/MWIm70XR52j1LjzDGkMB8GA1UdIwQY MBaAFPBaF907643ISPvnYpBh1ggBQefUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZvWDNUdnJqY2hJLS1kaWtHSFdDQUZCNTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yYjJjZGYtMmVlNS00Njg5LTg2M2It M2QxM2U5Nzc2ZmY3LzEvOEZvWDNUdnJqY2hJLS1kaWtHSFdDQUZCNTlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yYjJjZGYtMmVlNS00Njg5LTg2M2ItM2QxM2U5Nzc2ZmY3 LzEvOEZvWDNUdnJqY2hJLS1kaWtHSFdDQUZCNTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIez6v1n C9khfU8J8w/WInng/CZOxZsgxiGlPfFf8Nk8h9Oic3M1M2J4KCknCGmfCd0Ov8Li LkGClb0WXMBv9QmL6CVoMOnW0MavJxJ1iXa6EYUwYaJs7SR1Dyj8YoX/YvZTTq45 0kkK0N3HuRHn8H7YBQhsN3clymT3iWWLy+Jomnpv0+RMc5l49aggA6FfFBoV9yAU Lv09lvTBbYJxs+hoPIPDjaYgJKRQb9XSlrln7WmpFFTugltR5YM2drLpfW/f6wwo UC3jzaGn5rsHeaaUcweUuvPNSNdlOn04n7PEgyYDiHgPN0esSuBIoFNE6WBRbD6D 0+Gl4pp0yV6QOg== -----END CERTIFICATE-----Generated at Wed Dec 17 06:29:00 2025 by rpki-client