This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft File: T8muTFD6CwOCrdpfPH30GPeSWGQ.mft (raw, json) Hash identifier: zSilvqaWoZyKExzb4YJ1vL29weixsXo+C8JTRGcx80g= Subject key identifier: C6:BA:EB:74:EB:28:82:9D:20:30:06:FB:BC:13:3B:F2:AB:85:4A:E5 Authority key identifier: 4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64 Certificate issuer: /CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864 Certificate serial: 019AE7F282C6C9E31845407057879B74FAE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft Manifest number: E8 Signing time: Thu 04 Dec 2025 06:00:21 +0000 Manifest this update: Thu 04 Dec 2025 06:00:21 +0000 Manifest next update: Fri 05 Dec 2025 06:00:21 +0000 Files and hashes: 1: EfBLqsVRmS2V_zTPOhomf1PD6s8.roa (hash: animJghjOYq1IX/7qhA2FDGSZ8rTFFcjT97KQ/IiWvY=) 2: T8muTFD6CwOCrdpfPH30GPeSWGQ.crl (hash: I0btAAFOCz0ss7edAEBdzP6KsxlUzwhDRHmE5x9HRe0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e7:f2:82:c6:c9:e3:18:45:40:70:57:87:9b:74:fa:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc9ae4c50fa0b0382adda5f3c7df418f7925864 Validity Not Before: Dec 4 06:00:21 2025 GMT Not After : Dec 5 06:00:21 2025 GMT Subject: CN=c6baeb74eb28829d203006fbbc133bf2ab854ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d8:ef:96:52:17:cd:7b:bc:09:9d:fd:fa:11: fc:dd:b5:1a:97:35:3a:98:ad:87:96:1a:8f:80:9d: a3:26:27:2d:1e:a0:0d:5c:81:03:1f:9d:64:9d:15: 00:8a:e6:12:39:3f:56:ff:22:6c:51:00:5e:76:eb: 63:e4:ec:d6:da:9d:8f:85:9f:f5:9f:8b:7b:f1:b7: 35:c1:b1:1b:ee:31:b4:17:34:8b:b6:4d:9f:67:d3: 5a:09:f7:21:f4:f6:a4:7b:f5:62:cc:33:bf:ca:95: 8c:df:be:8d:c9:1d:77:3d:5b:6d:be:db:07:e0:5c: 45:59:c3:ff:a1:36:57:18:73:b7:17:f4:c4:e0:65: 84:70:bb:e9:b9:aa:17:17:92:6e:a7:de:a5:3c:f4: ae:eb:b4:1a:ae:41:74:05:9b:46:85:ab:0d:1b:20: a5:29:a0:c1:b2:62:ce:91:14:52:61:c8:47:a7:e8: 62:06:c7:77:98:64:3d:4c:8f:02:04:90:58:44:a8: fa:ba:cf:12:d4:5b:00:d1:ea:5b:2c:79:77:1b:4a: 25:fa:7b:23:a7:13:f9:66:19:69:b4:ba:a0:fb:72: 6e:92:69:5e:92:5f:8f:51:8f:b2:d4:ca:4c:d1:11: 47:9d:5c:b7:2e:08:cf:3e:d2:b2:16:83:1f:6c:c7: 7a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BA:EB:74:EB:28:82:9D:20:30:06:FB:BC:13:3B:F2:AB:85:4A:E5 X509v3 Authority Key Identifier: keyid:4F:C9:AE:4C:50:FA:0B:03:82:AD:DA:5F:3C:7D:F4:18:F7:92:58:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8muTFD6CwOCrdpfPH30GPeSWGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4445d7-ad2d-4445-8dde-2ebd6457ef1e/1/T8muTFD6CwOCrdpfPH30GPeSWGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:36:63:ed:2c:09:b5:38:0d:bc:3b:57:0c:ad:77:af:6b:62: d0:4d:65:26:6f:ca:ca:16:39:5f:81:85:2f:ce:ae:7f:d0:6e: 75:3f:a7:1e:6a:b9:7c:5e:98:9c:b0:77:92:b2:7f:c1:ee:f4: 32:4e:01:5f:44:0c:6f:14:3c:0a:1c:e4:79:15:72:53:42:d9: c0:74:54:7b:e4:2b:3c:65:b3:49:52:e4:fa:56:77:e2:5a:ed: ab:5b:51:fb:d2:ab:a5:87:9b:d1:7b:05:1b:e2:2d:f0:1a:ab: 7b:9d:e8:9d:68:1a:a9:1b:bd:d1:b6:71:d0:91:68:a3:90:39: fc:fe:cf:4c:95:5d:20:08:2a:1f:4c:18:71:a5:30:a0:eb:ac: 81:72:5f:61:2b:43:ea:4e:88:d7:d7:11:0f:12:df:58:cb:4e: f2:2b:f6:96:31:f8:f7:39:20:f0:2c:64:70:63:0c:87:fc:f3: 3b:19:c5:7f:37:67:8a:c7:39:81:73:53:ea:f0:af:f2:a9:6f: 69:c7:d8:0b:5c:74:6e:ac:28:23:82:40:e8:08:3a:da:a5:ab: a0:f0:0b:78:99:b0:bd:81:75:fd:63:c7:d9:c0:3b:34:06:55: 14:d1:6f:0b:c8:01:00:bb:02:88:8a:21:8f:5d:a4:be:45:15: 23:44:29:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrn8oLGyeMYRUBwV4ebdPrkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYzlhZTRjNTBmYTBiMDM4MmFkZGE1ZjNjN2RmNDE4Zjc5 MjU4NjQwHhcNMjUxMjA0MDYwMDIxWhcNMjUxMjA1MDYwMDIxWjAzMTEwLwYDVQQD EyhjNmJhZWI3NGViMjg4MjlkMjAzMDA2ZmJiYzEzM2JmMmFiODU0YWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9jvllIXzXu8CZ39+hH83bUalzU6 mK2HlhqPgJ2jJictHqANXIEDH51knRUAiuYSOT9W/yJsUQBedutj5OzW2p2PhZ/1 n4t78bc1wbEb7jG0FzSLtk2fZ9NaCfch9Pake/VizDO/ypWM376NyR13PVttvtsH 4FxFWcP/oTZXGHO3F/TE4GWEcLvpuaoXF5Jup96lPPSu67QarkF0BZtGhasNGyCl KaDBsmLOkRRSYchHp+hiBsd3mGQ9TI8CBJBYRKj6us8S1FsA0epbLHl3G0ol+nsj pxP5ZhlptLqg+3Jukmlekl+PUY+y1MpM0RFHnVy3LgjPPtKyFoMfbMd65wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMa663TrKIKdIDAG+7wTO/KrhUrlMB8GA1UdIwQY MBaAFE/JrkxQ+gsDgq3aXzx99Bj3klhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDhtdVRGRDZDd09DcmRwZlBIMzBHUGVTV0dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy80NDQ1ZDctYWQyZC00NDQ1LThkZGUt MmViZDY0NTdlZjFlLzEvVDhtdVRGRDZDd09DcmRwZlBIMzBHUGVTV0dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy80NDQ1ZDctYWQyZC00NDQ1LThkZGUtMmViZDY0NTdlZjFl LzEvVDhtdVRGRDZDd09DcmRwZlBIMzBHUGVTV0dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvzZj7SwJ tTgNvDtXDK13r2ti0E1lJm/KyhY5X4GFL86uf9BudT+nHmq5fF6YnLB3krJ/we70 Mk4BX0QMbxQ8ChzkeRVyU0LZwHRUe+QrPGWzSVLk+lZ34lrtq1tR+9KrpYeb0XsF G+It8Bqre53onWgaqRu90bZx0JFoo5A5/P7PTJVdIAgqH0wYcaUwoOusgXJfYStD 6k6I19cRDxLfWMtO8iv2ljH49zkg8CxkcGMMh/zzOxnFfzdnisc5gXNT6vCv8qlv acfYC1x0bqwoI4JA6Ag62qWroPALeJmwvYF1/WPH2cA7NAZVFNFvC8gBALsCiIoh j12kvkUVI0Qpeg== -----END CERTIFICATE-----Generated at Thu Dec 4 08:25:17 2025 by rpki-client