This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft File: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json) Hash identifier: +96KqlYEpmvMOHM3nUVeJ+cPdOYbBFNqeNHmIVvQWsQ= Subject key identifier: DA:3F:C6:2F:E1:22:51:10:24:8B:2B:72:73:A0:FF:92:3D:6F:4F:23 Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d Certificate serial: 019B533D290F51B8A9CB3A6877CF03E246DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft Manifest number: 11A7 Signing time: Thu 25 Dec 2025 02:01:15 +0000 Manifest this update: Thu 25 Dec 2025 02:01:15 +0000 Manifest next update: Fri 26 Dec 2025 02:01:15 +0000 Files and hashes: 1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: d/KgVh+cvg+3bqxRLDgbiPurKn1dc5fLYNJpUGMsVB0=) 2: rPbx58T-x5ORRRx0tEYr-rx7t3U.roa (hash: vSn+krLvdIPvrWL0ipO2XK8jiZxa1ds2oZDzxWzd7dE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 02:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3d:29:0f:51:b8:a9:cb:3a:68:77:cf:03:e2:46:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d Validity Not Before: Dec 25 02:01:15 2025 GMT Not After : Dec 26 02:01:15 2025 GMT Subject: CN=da3fc62fe1225110248b2b7273a0ff923d6f4f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:35:90:0c:20:54:eb:d5:1c:58:a2:d8:1a:82: 97:24:a3:78:10:4f:4d:66:9b:82:af:79:9a:c6:46: 00:96:f4:7e:ef:ba:c6:7e:05:7b:02:88:ec:94:ec: ea:f4:dd:b0:9d:a7:40:f2:93:8e:92:2d:af:86:46: 32:2a:99:3f:26:e3:cd:8e:37:19:0f:8e:20:18:a8: 8d:08:05:8b:1b:1d:7f:51:44:91:4d:5c:f7:a0:a2: d1:fb:09:41:9a:51:d7:6f:85:c0:1d:f4:ed:81:08: e1:60:f2:a4:f1:0d:21:ea:ca:3b:f4:20:53:97:8b: 5d:d1:17:49:60:df:e4:7b:5d:63:52:22:3a:ec:d0: f1:d4:55:01:b3:42:bb:06:56:67:b0:e3:af:3b:77: a6:20:f6:ba:06:69:d8:34:88:c9:26:dc:5b:4f:6e: 0a:68:78:97:ff:49:3a:3f:b2:f6:16:2c:77:4d:30: 46:de:76:13:c3:9c:c8:4a:d5:04:e4:aa:c3:a4:e6: 28:dd:b1:12:5c:56:e0:0f:c4:97:5c:9f:6d:d1:09: 0b:c0:93:55:e7:58:13:a0:02:70:f5:45:39:59:81: 0d:16:e4:a6:cb:db:27:45:55:82:bd:b0:f8:8d:2b: 6c:78:8a:9b:01:7f:6f:cc:8e:cf:ae:3e:ce:2a:5d: 94:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3F:C6:2F:E1:22:51:10:24:8B:2B:72:73:A0:FF:92:3D:6F:4F:23 X509v3 Authority Key Identifier: keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:3e:2c:69:2b:43:e1:6c:22:85:86:43:a7:d1:91:9e:0f:1a: d5:a1:7e:7a:2f:f4:27:10:0d:c9:9c:6c:f2:79:ff:d2:3e:f5: 82:42:b1:16:7b:5f:64:f5:10:05:0a:9f:3a:d4:25:20:d8:48: 74:42:49:a1:46:bf:35:b8:49:5b:96:d1:1a:cd:87:6d:ae:e6: d0:ea:9d:e7:43:5d:13:51:14:ce:b4:c1:32:2b:0e:9c:f9:d4: af:6f:f6:7a:c3:a3:c8:fa:3a:1c:f6:e0:2b:88:c0:91:6d:b2: c0:a0:55:29:08:9c:f9:d7:00:0d:4d:0d:61:ce:2c:3d:f0:1d: 6e:f8:5e:e2:5f:24:7d:21:4d:e1:0a:c3:29:6e:fc:0f:a6:b6: 64:67:3b:5e:58:32:78:ae:74:6b:c6:59:40:28:c3:a8:51:be: 71:33:05:08:7d:d5:28:70:5c:44:67:a7:c7:4b:a5:57:53:e7: aa:73:55:08:04:cc:3f:50:e4:1d:cc:d6:ad:e5:42:3e:6b:b0: ce:d6:cd:5c:c0:27:dc:c8:a4:17:e1:6d:11:06:09:35:a2:c1: e4:4b:e4:f6:37:d6:67:38:a9:29:b5:3f:cd:87:bd:42:cc:6b: a2:49:49:2d:57:a3:9f:6e:78:58:1a:ba:2e:3c:cb:61:a7:54: fc:1e:af:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPSkPUbipyzpod88D4kbfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNWM2YWYzZDAyMjYyMGY3MmM1M2I3NzBlODJlNWM3M2Fl NTUwNmQwHhcNMjUxMjI1MDIwMTE1WhcNMjUxMjI2MDIwMTE1WjAzMTEwLwYDVQQD EyhkYTNmYzYyZmUxMjI1MTEwMjQ4YjJiNzI3M2EwZmY5MjNkNmY0ZjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDWQDCBU69UcWKLYGoKXJKN4EE9N ZpuCr3maxkYAlvR+77rGfgV7AojslOzq9N2wnadA8pOOki2vhkYyKpk/JuPNjjcZ D44gGKiNCAWLGx1/UUSRTVz3oKLR+wlBmlHXb4XAHfTtgQjhYPKk8Q0h6so79CBT l4td0RdJYN/ke11jUiI67NDx1FUBs0K7BlZnsOOvO3emIPa6BmnYNIjJJtxbT24K aHiX/0k6P7L2Fix3TTBG3nYTw5zIStUE5KrDpOYo3bESXFbgD8SXXJ9t0QkLwJNV 51gToAJw9UU5WYENFuSmy9snRVWCvbD4jStseIqbAX9vzI7Prj7OKl2U1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNo/xi/hIlEQJIsrcnOg/5I9b08jMB8GA1UdIwQY MBaAFPBcavPQImIPcsU7dw6C5cc65VBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9mN2I3YzItNWQ4ZC00ZTg4LTg0NTQt MGE1MzIxNTZiMmE2LzEvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9mN2I3YzItNWQ4ZC00ZTg4LTg0NTQtMGE1MzIxNTZiMmE2 LzEvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYD4saStD 4WwihYZDp9GRng8a1aF+ei/0JxANyZxs8nn/0j71gkKxFntfZPUQBQqfOtQlINhI dEJJoUa/NbhJW5bRGs2Hba7m0Oqd50NdE1EUzrTBMisOnPnUr2/2esOjyPo6HPbg K4jAkW2ywKBVKQic+dcADU0NYc4sPfAdbvhe4l8kfSFN4QrDKW78D6a2ZGc7Xlgy eK50a8ZZQCjDqFG+cTMFCH3VKHBcRGenx0ulV1PnqnNVCATMP1DkHczWreVCPmuw ztbNXMAn3MikF+FtEQYJNaLB5Evk9jfWZzipKbU/zYe9QsxroklJLVejn254WBq6 LjzLYadU/B6v5Q== -----END CERTIFICATE-----Generated at Thu Dec 25 09:16:02 2025 by rpki-client