This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft File: 8KMtISmjhsmgr9u5FeDb8TC6cNU.mft (raw, json) Hash identifier: bSPCmaBA9hOvNN0jpHSeUfLHja1D6MKYKiDofoE2kiY= Subject key identifier: 4E:31:C8:58:67:01:C9:B4:C4:E9:32:32:8C:1F:DE:F3:2B:6A:25:B8 Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5 Certificate issuer: /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5 Certificate serial: 019B4581C1BD04C5FD9B657267EDF69B3B12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft Manifest number: 098C Signing time: Mon 22 Dec 2025 10:01:30 +0000 Manifest this update: Mon 22 Dec 2025 10:01:30 +0000 Manifest next update: Tue 23 Dec 2025 10:01:30 +0000 Files and hashes: 1: 8KMtISmjhsmgr9u5FeDb8TC6cNU.crl (hash: em7DJD7PAv1UdUJrGQirwPYsIzLzFUfbbtXVJdb4VP4=) 2: jB8O0EexbXRJ48aM1Kli0Ktl1vI.roa (hash: IcThWozF746RiVAe4jDaPPGv0zWnJg0lyhHJVcObykM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:c1:bd:04:c5:fd:9b:65:72:67:ed:f6:9b:3b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5 Validity Not Before: Dec 22 10:01:30 2025 GMT Not After : Dec 23 10:01:30 2025 GMT Subject: CN=4e31c8586701c9b4c4e932328c1fdef32b6a25b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8a:0b:6e:ca:e5:f1:9f:9c:ec:54:54:cc:00: 7a:52:5e:b4:4d:f2:c5:3a:4c:65:61:31:21:1b:bf: a7:27:31:d3:e4:cd:0a:46:cf:8b:e6:58:8f:a6:6d: 24:84:7b:5c:d2:4e:2f:95:91:f8:3e:be:bb:65:86: d1:8e:64:21:aa:5e:81:07:8f:8c:41:00:c5:97:dd: dc:28:0f:b1:e3:7d:2a:aa:c1:e3:82:d5:d7:20:23: c1:e7:97:56:34:c6:45:1a:34:ac:d4:27:5f:c8:cc: ce:87:ad:11:4d:b7:4f:72:62:7c:a0:80:10:5e:98: 82:81:00:63:00:e9:6f:40:33:2f:b1:62:23:ef:23: 80:fd:31:3e:d2:f0:1e:87:01:3f:1c:a4:4f:6b:17: 8b:ff:9a:65:ba:77:c6:21:a2:84:82:c7:81:b0:c1: 95:59:8f:b0:86:9f:b7:33:c2:ec:c1:e1:2c:07:5b: fb:50:32:fd:e7:78:11:b9:c8:f1:96:b7:9d:2e:37: e1:f1:f8:a3:d8:ea:17:2b:77:8c:99:3b:72:47:29: d1:1f:90:5d:f0:46:e2:af:79:67:26:f5:70:d0:5a: a4:dc:b0:13:68:55:16:f7:5c:32:74:3b:37:ae:ed: aa:85:c0:6a:fb:3d:ea:63:91:28:22:42:94:b6:45: fc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:31:C8:58:67:01:C9:B4:C4:E9:32:32:8C:1F:DE:F3:2B:6A:25:B8 X509v3 Authority Key Identifier: keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:55:3f:62:ac:95:6f:67:bb:78:1e:a3:13:6c:85:82:dc:b7: 44:fb:e8:40:15:f9:16:22:7f:e8:8c:ec:76:41:d0:6c:af:1a: 79:61:86:96:61:8d:0f:87:34:1b:ea:48:c3:49:15:17:f3:ea: bf:cd:3b:1d:89:20:aa:cf:e5:54:2a:23:f9:78:3d:c4:4e:e7: 2a:a3:b8:2c:26:c1:7c:f3:cd:6e:98:50:c7:1b:e4:b7:c5:0f: 2a:85:04:70:7a:9b:c3:13:2c:10:a3:a0:31:3d:73:a4:35:1e: 92:30:86:35:05:05:f7:8d:e4:58:12:58:c0:73:5b:d6:21:66: 85:1c:bd:ba:0b:89:1d:88:2d:a2:6c:6b:eb:d7:82:15:2b:98: 81:3a:fb:38:7d:79:34:b6:d2:36:6d:a2:06:d0:91:fb:27:c9: 46:53:29:bb:de:a7:73:6d:ab:08:e7:25:62:4e:55:60:ff:f3: cd:f6:ff:78:f7:27:6c:af:8e:5b:af:f4:23:1e:b1:94:1c:50: a4:3e:0e:4c:35:1b:cf:18:4e:a9:dc:f5:ba:14:21:ee:86:c0: 94:81:7c:4f:33:92:64:b4:7e:0e:30:ce:96:63:8e:bc:d3:e7: 9c:e8:de:04:a9:ed:ee:a3:e9:7c:40:cd:62:11:aa:ff:82:1b: c9:fb:61:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgcG9BMX9m2VyZ+32mzsSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYTMyZDIxMjlhMzg2YzlhMGFmZGJiOTE1ZTBkYmYxMzBi YTcwZDUwHhcNMjUxMjIyMTAwMTMwWhcNMjUxMjIzMTAwMTMwWjAzMTEwLwYDVQQD Eyg0ZTMxYzg1ODY3MDFjOWI0YzRlOTMyMzI4YzFmZGVmMzJiNmEyNWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4oLbsrl8Z+c7FRUzAB6Ul60TfLF OkxlYTEhG7+nJzHT5M0KRs+L5liPpm0khHtc0k4vlZH4Pr67ZYbRjmQhql6BB4+M QQDFl93cKA+x430qqsHjgtXXICPB55dWNMZFGjSs1CdfyMzOh60RTbdPcmJ8oIAQ XpiCgQBjAOlvQDMvsWIj7yOA/TE+0vAehwE/HKRPaxeL/5plunfGIaKEgseBsMGV WY+whp+3M8LsweEsB1v7UDL953gRucjxlredLjfh8fij2OoXK3eMmTtyRynRH5Bd 8Ebir3lnJvVw0Fqk3LATaFUW91wydDs3ru2qhcBq+z3qY5EoIkKUtkX8cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4xyFhnAcm0xOkyMowf3vMraiW4MB8GA1UdIwQY MBaAFPCjLSEpo4bJoK/buRXg2/EwunDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEtNdElTbWpoc21ncjl1NUZlRGI4VEM2Y05VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81OGI4ZTItMTIxNS00YmIwLTk2ZGYt MmYwODM4MGFlNmM3LzEvOEtNdElTbWpoc21ncjl1NUZlRGI4VEM2Y05VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy81OGI4ZTItMTIxNS00YmIwLTk2ZGYtMmYwODM4MGFlNmM3 LzEvOEtNdElTbWpoc21ncjl1NUZlRGI4VEM2Y05VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVU/YqyV b2e7eB6jE2yFgty3RPvoQBX5FiJ/6IzsdkHQbK8aeWGGlmGND4c0G+pIw0kVF/Pq v807HYkgqs/lVCoj+Xg9xE7nKqO4LCbBfPPNbphQxxvkt8UPKoUEcHqbwxMsEKOg MT1zpDUekjCGNQUF943kWBJYwHNb1iFmhRy9uguJHYgtomxr69eCFSuYgTr7OH15 NLbSNm2iBtCR+yfJRlMpu96nc22rCOclYk5VYP/zzfb/ePcnbK+OW6/0Ix6xlBxQ pD4OTDUbzxhOqdz1uhQh7obAlIF8TzOSZLR+DjDOlmOOvNPnnOjeBKnt7qPpfEDN YhGq/4Ibyfth1A== -----END CERTIFICATE-----Generated at Mon Dec 22 11:28:57 2025 by rpki-client