This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft File: 8SEJSHr0AKY-PLARo9VJ51H9LBg.mft (raw, json) Hash identifier: eIhGVy0fhfkK/697hwM9tjqgvqsLDDgfDTCL6XN3qnI= Subject key identifier: B6:AA:45:4D:70:A5:B5:3C:0F:FC:E2:23:4F:E9:C5:9A:90:86:F1:3F Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18 Certificate issuer: /CN=f12109487af400a63e3cb011a3d549e751fd2c18 Certificate serial: 019B390F8A989F4DA5B3DEBC46DDEC6A471A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft Manifest number: 0E68 Signing time: Sat 20 Dec 2025 00:01:18 +0000 Manifest this update: Sat 20 Dec 2025 00:01:18 +0000 Manifest next update: Sun 21 Dec 2025 00:01:18 +0000 Files and hashes: 1: 8SEJSHr0AKY-PLARo9VJ51H9LBg.crl (hash: kUcqbFASvjj1nRasKcbPvHiSgjjP1v2GaDBA+R2zAOQ=) 2: r15VgfDzfklLUPcVx6y07YzgPWU.roa (hash: px8SZ3fdpiQxLHW7vHT/LHov8V1krmhAYBpslqeJkek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:8a:98:9f:4d:a5:b3:de:bc:46:dd:ec:6a:47:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18 Validity Not Before: Dec 20 00:01:18 2025 GMT Not After : Dec 21 00:01:18 2025 GMT Subject: CN=b6aa454d70a5b53c0ffce2234fe9c59a9086f13f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a2:cb:d7:bb:54:50:5d:68:f0:86:fe:24:1b: 01:6d:36:05:fa:dd:d6:ed:ea:63:5e:ba:5d:89:de: 2c:32:f9:95:91:31:1a:ee:5c:fb:bc:47:32:dc:12: a2:c1:cf:31:6f:0d:fa:d2:55:9c:da:38:e0:0d:86: 69:f9:94:1d:27:9a:df:30:14:10:fb:0e:8a:c2:3e: f3:4b:86:eb:5f:93:b5:6b:a0:c7:15:49:13:bb:5c: b9:08:95:2e:b6:c0:c1:43:11:8a:56:a2:ed:76:02: 16:c8:3f:dd:dc:3d:44:ce:e8:e4:d0:b6:93:00:8a: 6e:12:c3:44:52:c7:fa:9d:e2:54:3e:2f:f9:c5:f7: 36:12:80:78:52:8d:2f:ba:98:f5:28:67:1a:79:4d: b2:60:1a:0e:99:f5:13:b4:30:02:6f:6a:6d:9e:90: 1f:b6:71:01:c5:4e:96:88:5a:14:17:cc:3e:f7:ef: 6d:2a:3a:fb:96:21:56:a4:84:62:e2:a1:70:48:94: 07:ef:1a:d8:31:b9:8b:14:eb:16:8a:0a:7f:99:89: 13:07:16:6f:ec:62:dd:e0:8b:0c:3f:97:c4:6d:3a: 79:32:ff:eb:17:35:e3:ca:0e:cf:06:63:07:9e:26: 72:b9:14:e6:fe:8e:68:f0:55:47:42:3e:36:b0:71: fd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AA:45:4D:70:A5:B5:3C:0F:FC:E2:23:4F:E9:C5:9A:90:86:F1:3F X509v3 Authority Key Identifier: keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:da:4c:06:12:75:51:ce:1e:c5:8f:29:ef:27:e5:c3:5c:d5: 71:db:7d:74:16:80:16:69:d6:84:fc:88:cc:86:17:f3:75:13: 51:93:43:74:23:78:f2:01:7f:38:f7:04:71:68:80:21:26:59: f3:ad:11:62:19:8a:49:20:4f:be:8c:44:31:fd:81:05:89:fe: d6:b3:d3:47:3b:d0:85:ea:71:5d:dc:1a:31:ca:89:a5:7a:d2: d0:5c:4b:8a:39:9a:13:5a:b8:9a:5b:a4:44:f5:d4:25:a2:85: 52:d0:df:59:d7:85:d0:2c:d7:4c:8e:6f:31:25:56:93:6e:48: 21:a2:70:0f:55:59:ad:5f:9c:0f:84:88:72:e2:be:cc:ee:7a: 0b:c5:8d:ca:43:96:9a:4d:ba:fe:34:a4:9b:03:c6:98:57:a1: e4:39:b0:0e:c0:b2:d7:ab:e5:87:0e:59:da:11:42:fc:45:b0: e8:a7:f9:04:4a:39:fc:79:4d:f7:9a:f6:a2:f6:4c:fc:99:d7: ad:f7:cf:47:5c:29:8c:e1:f9:cf:cc:29:34:7e:a3:dc:e0:44: 03:24:6c:92:e1:e1:5c:0d:12:43:db:d0:23:9f:18:aa:6d:fa: 41:61:b1:b7:43:17:fc:55:f3:dc:68:74:90:cd:43:cc:c0:42: fb:51:4f:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D4qYn02ls968Rt3sakcaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMjEwOTQ4N2FmNDAwYTYzZTNjYjAxMWEzZDU0OWU3NTFm ZDJjMTgwHhcNMjUxMjIwMDAwMTE4WhcNMjUxMjIxMDAwMTE4WjAzMTEwLwYDVQQD EyhiNmFhNDU0ZDcwYTViNTNjMGZmY2UyMjM0ZmU5YzU5YTkwODZmMTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqLL17tUUF1o8Ib+JBsBbTYF+t3W 7epjXrpdid4sMvmVkTEa7lz7vEcy3BKiwc8xbw360lWc2jjgDYZp+ZQdJ5rfMBQQ +w6Kwj7zS4brX5O1a6DHFUkTu1y5CJUutsDBQxGKVqLtdgIWyD/d3D1Ezujk0LaT AIpuEsNEUsf6neJUPi/5xfc2EoB4Uo0vupj1KGcaeU2yYBoOmfUTtDACb2ptnpAf tnEBxU6WiFoUF8w+9+9tKjr7liFWpIRi4qFwSJQH7xrYMbmLFOsWigp/mYkTBxZv 7GLd4IsMP5fEbTp5Mv/rFzXjyg7PBmMHniZyuRTm/o5o8FVHQj42sHH98wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaqRU1wpbU8D/ziI0/pxZqQhvE/MB8GA1UdIwQY MBaAFPEhCUh69ACmPjywEaPVSedR/SwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFNFSlNIcjBBS1ktUExBUm85Vko1MUg5TEJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83NWNkMTctMDQ0MS00YTRhLWI3ZWUt ZjA1ZWZhYjc0ZjczLzEvOFNFSlNIcjBBS1ktUExBUm85Vko1MUg5TEJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy83NWNkMTctMDQ0MS00YTRhLWI3ZWUtZjA1ZWZhYjc0Zjcz LzEvOFNFSlNIcjBBS1ktUExBUm85Vko1MUg5TEJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtpMBhJ1 Uc4exY8p7yflw1zVcdt9dBaAFmnWhPyIzIYX83UTUZNDdCN48gF/OPcEcWiAISZZ 860RYhmKSSBPvoxEMf2BBYn+1rPTRzvQhepxXdwaMcqJpXrS0FxLijmaE1q4mluk RPXUJaKFUtDfWdeF0CzXTI5vMSVWk25IIaJwD1VZrV+cD4SIcuK+zO56C8WNykOW mk26/jSkmwPGmFeh5DmwDsCy16vlhw5Z2hFC/EWw6Kf5BEo5/HlN95r2ovZM/JnX rffPR1wpjOH5z8wpNH6j3OBEAyRskuHhXA0SQ9vQI58Yqm36QWGxt0MX/FXz3Gh0 kM1DzMBC+1FPQg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:35:55 2025 by rpki-client