This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft File: 8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json) Hash identifier: JfK+5WLgr8Q79K/aM/wJUlDFU5g66ug6iI00hNCsqQo= Subject key identifier: A9:2A:F7:3F:F4:E3:A7:DA:42:B5:33:2E:1B:A6:83:B3:1B:62:46:BF Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6 Certificate issuer: /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6 Certificate serial: 019B3C1026CCD3CABF371DBA469B3B0FB711 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft Manifest number: 0708 Signing time: Sat 20 Dec 2025 14:00:50 +0000 Manifest this update: Sat 20 Dec 2025 14:00:50 +0000 Manifest next update: Sun 21 Dec 2025 14:00:50 +0000 Files and hashes: 1: 1-a6iBHASMUxMW7asjxbfE0QEd5w.roa (hash: m3RXlatEBF9cA7N2EEjPPwV4+LMKEGb0hrpMsfXqqsk=) 2: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: mLNi2UZrw07vhR8kNn6yK9wgOdbM0z4oI6eMhdMHHA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:26:cc:d3:ca:bf:37:1d:ba:46:9b:3b:0f:b7:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6 Validity Not Before: Dec 20 14:00:50 2025 GMT Not After : Dec 21 14:00:50 2025 GMT Subject: CN=a92af73ff4e3a7da42b5332e1ba683b31b6246bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:35:b3:65:29:c4:74:7e:07:b5:5f:be:27:a6: 99:7b:73:6c:29:20:e1:a0:39:e8:d5:f1:51:55:b5: a4:dd:b9:35:b5:09:c4:d5:4f:ba:3b:bc:56:fc:6e: 7c:bf:fd:28:1d:cd:4b:47:f7:84:55:ca:33:fa:e9: 1d:88:7d:e1:e1:84:61:97:cb:ac:f7:11:8e:b6:95: ba:79:70:96:87:4b:18:a4:5b:a7:43:72:ae:5f:d6: 98:29:8e:e3:ce:62:c4:e0:21:57:e4:8f:b9:ab:50: 95:0c:20:98:9d:80:14:cd:8f:bf:7e:15:bc:9c:5d: 6a:49:3b:4f:a1:13:c7:7f:c9:a8:4e:6d:ec:63:18: bc:86:e0:f4:fe:3e:60:c0:6f:a3:4a:d4:af:f8:c8: 6e:17:81:5f:ce:5f:31:99:b3:a6:e4:2d:69:e8:a2: c6:d4:62:6d:ee:d2:ed:92:03:6b:3b:75:a0:b6:57: e3:2d:91:e3:39:5e:73:81:af:8f:fc:b8:c1:fa:7a: 6b:aa:4e:56:2a:a0:ea:04:16:80:09:0a:3a:40:cc: 32:3a:b9:10:ff:63:ce:18:06:12:ef:64:00:69:2d: 3a:f4:cd:d4:52:8a:44:24:f8:ff:2d:a2:7b:a9:08: 47:5e:a3:1d:fe:b9:1c:b5:d4:9f:0d:f8:48:e6:10: 83:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2A:F7:3F:F4:E3:A7:DA:42:B5:33:2E:1B:A6:83:B3:1B:62:46:BF X509v3 Authority Key Identifier: keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:53:d3:48:87:59:70:0d:d6:7a:21:64:f8:32:38:95:73:16: ef:8a:b2:6c:bf:bc:67:93:5f:26:44:40:6a:aa:98:e1:5f:f7: a3:39:32:d3:bc:87:b0:72:fe:2f:9b:5f:7d:1e:b6:95:82:99: 66:53:bf:c6:00:81:5a:73:79:61:c9:6f:19:da:8d:42:0b:91: 3b:6b:63:a3:0a:6d:ad:a1:c4:26:98:73:ff:8c:b0:1c:f3:e7: 57:0a:2b:5f:09:6e:e7:10:64:76:2c:e3:ea:7f:86:65:07:64: e9:ee:a3:25:d9:10:e2:5d:b1:1b:f6:65:e0:75:00:15:bb:0f: 68:89:15:b8:c4:91:fe:97:d9:d9:4a:52:6e:6f:8b:76:ed:71: fd:14:03:98:7d:c0:8e:d9:79:6e:87:31:82:42:66:d1:0f:da: 91:9e:e0:1a:ad:cb:da:70:ad:18:d9:60:34:9b:3d:eb:67:d1: b9:9b:5b:e6:d1:d6:bf:88:2c:92:ee:0b:06:6d:ff:9c:f1:73: 13:15:25:4e:78:ba:e6:35:14:7c:53:23:66:08:3b:09:ff:14: 59:24:f2:29:b4:67:44:e2:82:c5:6e:27:68:b8:1c:86:85:89: 80:76:c4:e4:2f:41:06:8c:7b:aa:8d:dc:e1:78:31:08:4f:42: f5:c8:99:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ECbM08q/Nx26Rps7D7cRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDJiYThhMmE5NmEwN2I1YjY0Y2FmODczMjkwZTIwNzhk OTY0YTYwHhcNMjUxMjIwMTQwMDUwWhcNMjUxMjIxMTQwMDUwWjAzMTEwLwYDVQQD EyhhOTJhZjczZmY0ZTNhN2RhNDJiNTMzMmUxYmE2ODNiMzFiNjI0NmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTWzZSnEdH4HtV++J6aZe3NsKSDh oDno1fFRVbWk3bk1tQnE1U+6O7xW/G58v/0oHc1LR/eEVcoz+ukdiH3h4YRhl8us 9xGOtpW6eXCWh0sYpFunQ3KuX9aYKY7jzmLE4CFX5I+5q1CVDCCYnYAUzY+/fhW8 nF1qSTtPoRPHf8moTm3sYxi8huD0/j5gwG+jStSv+MhuF4Ffzl8xmbOm5C1p6KLG 1GJt7tLtkgNrO3WgtlfjLZHjOV5zga+P/LjB+nprqk5WKqDqBBaACQo6QMwyOrkQ /2POGAYS72QAaS069M3UUopEJPj/LaJ7qQhHXqMd/rkctdSfDfhI5hCD+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkq9z/046faQrUzLhumg7MbYka/MB8GA1UdIwQY MBaAFPHSuooqlqB7W2TK+HMpDiB42WSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84MDc1YTAtMGM1ZS00Yzc4LWJkYjEt ZDE2ODk4MDE2Y2ZlLzEvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84MDc1YTAtMGM1ZS00Yzc4LWJkYjEtZDE2ODk4MDE2Y2Zl LzEvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVPTSIdZ cA3WeiFk+DI4lXMW74qybL+8Z5NfJkRAaqqY4V/3ozky07yHsHL+L5tffR62lYKZ ZlO/xgCBWnN5YclvGdqNQguRO2tjowptraHEJphz/4ywHPPnVworXwlu5xBkdizj 6n+GZQdk6e6jJdkQ4l2xG/Zl4HUAFbsPaIkVuMSR/pfZ2UpSbm+Ldu1x/RQDmH3A jtl5bocxgkJm0Q/akZ7gGq3L2nCtGNlgNJs962fRuZtb5tHWv4gsku4LBm3/nPFz ExUlTni65jUUfFMjZgg7Cf8UWSTyKbRnROKCxW4naLgchoWJgHbE5C9BBox7qo3c 4XgxCE9C9ciZlg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:57:49 2025 by rpki-client