This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json) Hash identifier: l2YCbb40Lfyz/8vHUAZ185a5TfnH02+UMlNP7gUNrnA= Subject key identifier: 8F:20:A7:A1:A2:FA:C4:7C:9B:3D:8E:39:20:73:1D:30:F8:41:05:EB Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5 Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5 Certificate serial: 019B2C66DF4659C2FADBA9FABAD003B262FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft Manifest number: 1011 Signing time: Wed 17 Dec 2025 13:01:37 +0000 Manifest this update: Wed 17 Dec 2025 13:01:37 +0000 Manifest next update: Thu 18 Dec 2025 13:01:37 +0000 Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: /ANRh/AquT+OSNHwEke4RONbBjZSwn0KoNh+232x4+8=) 2: FGmjTJ5BNIGcHTaYOHKezd1P2zY.roa (hash: Erq/bi/faVpdLd489gfJpnnRsTbaiEt6kPr4sQ09lTM=) 3: ZK76vlPS_FSysziBAdOIgNMogW0.roa (hash: xB77QsTFqqCgmtvQaPv1mOIqwZjp+Xnt/7UaUeOP1pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:df:46:59:c2:fa:db:a9:fa:ba:d0:03:b2:62:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5 Validity Not Before: Dec 17 13:01:37 2025 GMT Not After : Dec 18 13:01:37 2025 GMT Subject: CN=8f20a7a1a2fac47c9b3d8e3920731d30f84105eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2b:c1:d8:16:5e:62:d7:28:0d:63:12:8c:b3: c2:80:fa:a7:26:47:b3:6c:43:22:35:b0:08:61:26: 69:2a:65:c5:28:a5:74:7a:2b:8a:04:a1:68:f1:78: 10:9e:d6:e7:17:88:49:f3:3d:09:43:87:ce:e1:03: 7e:bb:da:48:5e:1a:fa:47:a2:ec:74:94:73:f7:d5: b3:22:f0:7a:7b:82:22:99:1d:47:4a:1a:e1:11:dd: 00:82:bc:c2:e3:16:8d:e9:71:a8:3d:68:49:26:40: b5:f0:6d:5a:d8:ad:a4:f5:31:18:f1:23:32:37:1a: d9:d3:0f:ba:48:26:22:03:c1:0b:f0:9d:6d:f7:6c: a7:e6:18:04:b9:4d:21:0b:ae:65:b1:09:61:02:2c: 78:c0:fd:67:98:d4:20:6b:b1:bb:85:ca:84:d7:9b: 95:ae:c4:9d:ac:d1:08:05:90:49:b0:70:4a:6d:38: d0:16:8b:48:91:f1:cd:0c:14:8c:d3:de:1d:64:2a: 3f:42:6d:68:e3:5f:e7:69:65:4a:1e:81:66:e8:22: e5:dd:13:41:61:fa:a7:a7:67:a3:fe:3e:21:60:fc: c8:17:9f:04:c5:38:b8:c2:36:e9:af:3c:bd:74:84: be:75:a8:71:4f:5d:40:c0:3a:c8:68:aa:0b:f4:26: f8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:20:A7:A1:A2:FA:C4:7C:9B:3D:8E:39:20:73:1D:30:F8:41:05:EB X509v3 Authority Key Identifier: keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:82:58:17:7f:02:6f:05:83:aa:ca:f6:ab:f8:3b:67:2e:23: 1f:c9:5d:e1:25:db:a0:86:d7:bd:68:07:ca:da:6f:bb:ec:7a: d8:e6:ab:eb:79:fb:c6:c4:45:36:62:7a:b7:72:1c:47:cf:db: 56:7b:ea:d8:02:f1:b3:88:29:6c:bb:c5:bf:69:57:dc:b3:23: 0e:68:c3:8f:ba:3a:80:80:59:3d:e1:88:ff:ed:82:df:4a:f0: 91:9c:c1:49:31:f7:0e:5d:e5:13:d6:70:70:c5:52:f5:b1:64: d8:8a:14:5b:7e:3a:5e:00:28:cc:b1:a6:d8:df:b6:2f:70:bd: 7a:e7:32:81:a9:dd:47:79:db:5e:c6:2a:a9:f6:3a:07:2e:ac: 55:d5:53:60:64:41:b9:54:97:f3:c8:00:1c:5f:01:cf:3f:b1: d9:83:e7:ff:16:bd:0e:09:f8:00:c0:57:36:83:21:db:3d:a4: 63:78:fb:fb:50:26:e2:ad:dd:fc:d3:36:d3:91:4d:5f:a4:ec: 32:02:da:e1:80:94:e3:66:80:c1:0e:56:a3:53:77:d4:b9:bb: 1f:4c:b4:91:a5:79:c7:dd:a3:4c:52:a3:f1:26:de:06:0c:53: ab:39:d9:8e:95:e0:6e:d6:be:80:b5:d6:3a:98:2a:da:53:b4: 35:b5:c9:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZt9GWcL626n6utADsmL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjkzMGUyM2IwOGExNWNjZDRkYzlhYjE4MjljNjA3ZmVk ZGU4YTUwHhcNMjUxMjE3MTMwMTM3WhcNMjUxMjE4MTMwMTM3WjAzMTEwLwYDVQQD Eyg4ZjIwYTdhMWEyZmFjNDdjOWIzZDhlMzkyMDczMWQzMGY4NDEwNWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSvB2BZeYtcoDWMSjLPCgPqnJkez bEMiNbAIYSZpKmXFKKV0eiuKBKFo8XgQntbnF4hJ8z0JQ4fO4QN+u9pIXhr6R6Ls dJRz99WzIvB6e4IimR1HShrhEd0AgrzC4xaN6XGoPWhJJkC18G1a2K2k9TEY8SMy NxrZ0w+6SCYiA8EL8J1t92yn5hgEuU0hC65lsQlhAix4wP1nmNQga7G7hcqE15uV rsSdrNEIBZBJsHBKbTjQFotIkfHNDBSM094dZCo/Qm1o41/naWVKHoFm6CLl3RNB Yfqnp2ej/j4hYPzIF58ExTi4wjbprzy9dIS+dahxT11AwDrIaKoL9Cb4/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8gp6Gi+sR8mz2OOSBzHTD4QQXrMB8GA1UdIwQY MBaAFPH5MOI7CKFczU3Jqxgpxgf+3eilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lYTEyOGMtYTA5ZC00MGU4LWJiMTEt YWVhNzE0ZWM1MTEzLzEvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lYTEyOGMtYTA5ZC00MGU4LWJiMTEtYWVhNzE0ZWM1MTEz LzEvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4JYF38C bwWDqsr2q/g7Zy4jH8ld4SXboIbXvWgHytpvu+x62Oar63n7xsRFNmJ6t3IcR8/b Vnvq2ALxs4gpbLvFv2lX3LMjDmjDj7o6gIBZPeGI/+2C30rwkZzBSTH3Dl3lE9Zw cMVS9bFk2IoUW346XgAozLGm2N+2L3C9eucygandR3nbXsYqqfY6By6sVdVTYGRB uVSX88gAHF8Bzz+x2YPn/xa9Dgn4AMBXNoMh2z2kY3j7+1Am4q3d/NM205FNX6Ts MgLa4YCU42aAwQ5Wo1N31Lm7H0y0kaV5x92jTFKj8SbeBgxTqznZjpXgbta+gLXW Opgq2lO0NbXJLw== -----END CERTIFICATE-----Generated at Wed Dec 17 19:12:54 2025 by rpki-client