This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json) Hash identifier: 8tkpyRsMF83hMbcHAFyUchGWTvo7Rfo7zolNCh4r7IU= Subject key identifier: 42:C3:49:DA:5E:9A:B4:43:B3:00:E5:83:F4:AE:A5:AA:9E:DB:17:DC Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5 Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5 Certificate serial: 019B07B5BF24EF30EC4018316A3B41A38022 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft Manifest number: 0FFE Signing time: Wed 10 Dec 2025 10:01:49 +0000 Manifest this update: Wed 10 Dec 2025 10:01:49 +0000 Manifest next update: Thu 11 Dec 2025 10:01:49 +0000 Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: TfZiVXBex/6T8mqNANYNsJsJoQVqCUHgPC/+8xR4NIw=) 2: FGmjTJ5BNIGcHTaYOHKezd1P2zY.roa (hash: Erq/bi/faVpdLd489gfJpnnRsTbaiEt6kPr4sQ09lTM=) 3: ZK76vlPS_FSysziBAdOIgNMogW0.roa (hash: xB77QsTFqqCgmtvQaPv1mOIqwZjp+Xnt/7UaUeOP1pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:bf:24:ef:30:ec:40:18:31:6a:3b:41:a3:80:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5 Validity Not Before: Dec 10 10:01:49 2025 GMT Not After : Dec 11 10:01:49 2025 GMT Subject: CN=42c349da5e9ab443b300e583f4aea5aa9edb17dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d8:45:1b:4a:fd:75:d8:52:dd:23:97:b2:27: 21:fc:32:02:35:ec:1e:f5:6c:2c:2a:98:9b:6d:24: 84:94:ec:00:b3:2a:48:1b:c8:77:e7:e6:b5:2e:5f: 0f:cb:2e:0f:d5:53:45:d5:6a:b4:b8:a3:03:98:ff: a3:16:56:c3:da:fb:da:ec:fd:77:7e:5e:97:63:49: 20:1f:e8:71:2f:9a:50:c3:2d:d0:38:a1:d9:ce:ae: ef:76:e5:0b:9c:ca:b9:83:24:4d:8e:9c:ae:19:27: 8f:59:bb:e3:74:9b:5b:51:42:7c:f8:aa:f7:5a:25: ff:c4:42:7d:5b:98:c6:c8:a4:51:76:04:4a:9b:23: b2:35:75:da:eb:e8:d4:d4:e0:3d:f9:6e:a1:55:52: f1:76:f2:09:a8:36:11:1e:3f:0d:49:ff:1a:10:48: 82:4e:32:60:52:83:11:a5:d4:49:fe:6c:85:e0:01: aa:aa:08:60:8f:36:08:b5:23:d5:6a:57:c0:c0:3b: 16:36:c5:48:30:e1:13:fa:2f:20:66:9c:d5:c3:b0: 16:3b:cf:1a:9d:46:a9:6a:cb:98:53:b3:83:db:69: 5a:f5:aa:e3:cb:47:3c:0f:6d:95:8c:21:dc:c6:cf: cf:98:eb:16:4b:d2:ea:9f:17:30:ac:a1:eb:b1:52: 18:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C3:49:DA:5E:9A:B4:43:B3:00:E5:83:F4:AE:A5:AA:9E:DB:17:DC X509v3 Authority Key Identifier: keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:d5:a2:19:b8:f7:e4:6e:e7:27:03:70:38:72:d3:0b:b9:3b: ba:81:c1:fa:a6:26:1e:d1:36:d7:f2:f8:48:6c:93:1a:3b:9c: 3a:d3:a6:d2:3d:a2:ee:e6:f9:ce:3f:48:ed:21:3d:ab:ff:2a: 48:e4:f0:55:a3:9a:da:2a:c2:91:4d:26:48:66:1a:99:92:07: 58:a4:b3:a2:38:f2:f8:6e:33:26:ed:79:5a:92:f2:cf:bc:68: 04:26:fd:79:4e:27:81:04:d1:37:d2:d2:84:93:0b:51:1d:cb: 98:3e:6b:ef:be:df:f0:0c:fb:f9:ea:98:15:35:c9:c0:11:e9: 8d:ef:db:61:52:7a:68:c5:fe:a4:75:7b:f4:20:ff:8c:f4:48: 73:02:a1:64:63:9e:e8:b4:d0:43:fe:9f:9d:ff:ff:18:73:80: 13:bd:99:bc:89:83:2c:b7:83:42:41:ff:8c:fd:2b:fc:ed:d9: b7:5f:6a:8c:a5:7b:67:2d:5d:c6:33:60:ad:63:75:04:8c:46: 2d:71:e4:02:f9:a7:00:30:2b:00:7a:68:95:b2:c3:24:85:5e: 52:22:b5:ca:f4:e4:d0:9f:40:1c:c7:6a:77:6b:cb:c3:24:c4: 06:09:c8:f8:3d:93:6d:70:b2:1b:b5:27:63:92:c1:ca:6c:fd: 5b:fd:5f:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtb8k7zDsQBgxajtBo4AiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjkzMGUyM2IwOGExNWNjZDRkYzlhYjE4MjljNjA3ZmVk ZGU4YTUwHhcNMjUxMjEwMTAwMTQ5WhcNMjUxMjExMTAwMTQ5WjAzMTEwLwYDVQQD Eyg0MmMzNDlkYTVlOWFiNDQzYjMwMGU1ODNmNGFlYTVhYTllZGIxN2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArthFG0r9ddhS3SOXsich/DICNewe 9WwsKpibbSSElOwAsypIG8h35+a1Ll8Pyy4P1VNF1Wq0uKMDmP+jFlbD2vva7P13 fl6XY0kgH+hxL5pQwy3QOKHZzq7vduULnMq5gyRNjpyuGSePWbvjdJtbUUJ8+Kr3 WiX/xEJ9W5jGyKRRdgRKmyOyNXXa6+jU1OA9+W6hVVLxdvIJqDYRHj8NSf8aEEiC TjJgUoMRpdRJ/myF4AGqqghgjzYItSPValfAwDsWNsVIMOET+i8gZpzVw7AWO88a nUapasuYU7OD22la9arjy0c8D22VjCHcxs/PmOsWS9LqnxcwrKHrsVIY7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELDSdpemrRDswDlg/Supaqe2xfcMB8GA1UdIwQY MBaAFPH5MOI7CKFczU3Jqxgpxgf+3eilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lYTEyOGMtYTA5ZC00MGU4LWJiMTEt YWVhNzE0ZWM1MTEzLzEvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lYTEyOGMtYTA5ZC00MGU4LWJiMTEtYWVhNzE0ZWM1MTEz LzEvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9WiGbj3 5G7nJwNwOHLTC7k7uoHB+qYmHtE21/L4SGyTGjucOtOm0j2i7ub5zj9I7SE9q/8q SOTwVaOa2irCkU0mSGYamZIHWKSzojjy+G4zJu15WpLyz7xoBCb9eU4ngQTRN9LS hJMLUR3LmD5r777f8Az7+eqYFTXJwBHpje/bYVJ6aMX+pHV79CD/jPRIcwKhZGOe 6LTQQ/6fnf//GHOAE72ZvImDLLeDQkH/jP0r/O3Zt19qjKV7Zy1dxjNgrWN1BIxG LXHkAvmnADArAHpolbLDJIVeUiK1yvTk0J9AHMdqd2vLwyTEBgnI+D2TbXCyG7Un Y5LBymz9W/1few== -----END CERTIFICATE-----Generated at Wed Dec 10 11:59:52 2025 by rpki-client