This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft File: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft (raw, json) Hash identifier: cRwoNtjy0CeJCQLMZqnzsFasB34Gv1luXkAs0p/mt2k= Subject key identifier: 33:0D:A4:06:7E:6D:7C:F4:D0:7F:3D:7E:69:C6:97:74:B2:D1:2B:84 Authority key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94 Certificate issuer: /CN=f0d03098b8356fffc5a597e9c45b84edf87cf994 Certificate serial: 019B680CF691BFD71232500D16308A22F3E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft Manifest number: 1552 Signing time: Mon 29 Dec 2025 03:00:38 +0000 Manifest this update: Mon 29 Dec 2025 03:00:38 +0000 Manifest next update: Tue 30 Dec 2025 03:00:38 +0000 Files and hashes: 1: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl (hash: mB3VqK7PeOjB7IjGIQCHcoQUrm2UWK9C2j38vMmX5Yk=) 2: OkXBNJnUgokPx0Xxs8AUPN40aT4.roa (hash: E/UomHj5ST+3/lio4VV13yWumaIvNp+hYEYFZLaJR7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 03:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:0c:f6:91:bf:d7:12:32:50:0d:16:30:8a:22:f3:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994 Validity Not Before: Dec 29 03:00:38 2025 GMT Not After : Dec 30 03:00:38 2025 GMT Subject: CN=330da4067e6d7cf4d07f3d7e69c69774b2d12b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1d:95:e1:87:ed:31:bc:ea:47:bd:c5:3b:6d: c2:34:fe:22:64:92:10:ce:27:c5:b9:60:d0:58:3b: 4d:b2:19:9f:54:9c:a3:26:af:f4:4c:93:57:99:2d: ae:27:e6:d6:16:7d:19:ef:93:24:09:44:45:7e:a3: 38:0c:6f:67:93:5f:4f:8c:74:09:64:91:5d:2c:f7: 2b:d7:21:a0:bf:22:f5:04:29:8e:59:95:59:3f:51: 87:93:49:c2:6e:1c:22:aa:ce:bc:94:16:6d:e6:fc: 7e:e6:88:04:71:6d:4d:4b:5b:be:0a:a9:60:70:3b: 0f:3c:85:09:c0:56:9d:af:79:cb:cf:1e:0e:98:38: 4b:89:e9:37:5b:b9:ec:0a:06:30:9e:dd:60:90:9a: a2:b6:08:f8:2c:2a:12:b3:47:19:2d:d0:dc:25:53: d5:20:4f:7e:fa:24:19:37:33:c2:fd:22:13:84:ef: ce:db:13:b1:a2:e5:48:82:9a:ed:3e:ab:1d:f0:72: 46:d2:2f:ef:ad:f4:fb:72:f2:43:6b:26:63:5d:1b: c1:98:24:0e:14:17:4b:9d:c8:3d:9f:1d:4d:a5:64: e5:e5:4c:0e:52:bd:4b:96:2f:c3:ca:36:c6:f9:f3: f4:1e:1c:34:08:11:be:36:14:17:37:4f:78:ec:1c: 4d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0D:A4:06:7E:6D:7C:F4:D0:7F:3D:7E:69:C6:97:74:B2:D1:2B:84 X509v3 Authority Key Identifier: keyid:F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:7f:d2:8a:8f:a4:21:38:e5:f4:84:32:d2:e9:e0:40:b4:52: 54:d4:bf:e1:6e:b8:ce:47:15:04:a7:54:90:5a:d0:bb:be:bc: 71:bb:c8:93:66:d0:d1:12:98:be:a6:09:7a:af:1e:bf:61:39: b6:a3:80:9d:ad:ed:58:e3:75:76:8f:34:07:04:03:f1:61:52: b8:63:2b:84:85:ba:4b:1e:ec:32:77:f5:9e:ad:77:a1:85:4b: 38:76:6b:f1:7b:16:ab:01:56:f6:c0:51:9d:5c:63:4c:32:9c: 31:8d:94:36:57:d3:0b:43:43:20:fd:51:6d:57:94:d9:73:3a: 14:aa:85:42:07:2d:c7:52:ae:ce:b0:5f:61:55:6e:d0:61:59: 8c:53:a5:20:ec:1f:fe:4b:57:a8:cc:fc:9b:9c:45:00:1c:21: ab:3e:a5:30:2d:96:c9:85:27:01:51:62:75:c3:74:d0:85:8f: 3b:40:0a:60:eb:b9:d5:4b:3f:33:7c:39:b4:02:27:8e:fd:22: 8d:c2:0c:c3:c7:29:22:ac:76:e6:4c:7d:10:ee:07:21:d2:0d: b1:10:55:74:f8:e5:fe:e1:cd:01:b8:8e:36:d0:f2:30:71:13: 88:77:17:08:f2:b0:9d:75:9a:47:fe:d2:da:10:26:99:0e:89: 8d:61:ea:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoDPaRv9cSMlANFjCKIvPiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZDAzMDk4YjgzNTZmZmZjNWE1OTdlOWM0NWI4NGVkZjg3 Y2Y5OTQwHhcNMjUxMjI5MDMwMDM4WhcNMjUxMjMwMDMwMDM4WjAzMTEwLwYDVQQD EygzMzBkYTQwNjdlNmQ3Y2Y0ZDA3ZjNkN2U2OWM2OTc3NGIyZDEyYjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7h2V4YftMbzqR73FO23CNP4iZJIQ zifFuWDQWDtNshmfVJyjJq/0TJNXmS2uJ+bWFn0Z75MkCURFfqM4DG9nk19PjHQJ ZJFdLPcr1yGgvyL1BCmOWZVZP1GHk0nCbhwiqs68lBZt5vx+5ogEcW1NS1u+Cqlg cDsPPIUJwFadr3nLzx4OmDhLiek3W7nsCgYwnt1gkJqitgj4LCoSs0cZLdDcJVPV IE9++iQZNzPC/SIThO/O2xOxouVIgprtPqsd8HJG0i/vrfT7cvJDayZjXRvBmCQO FBdLncg9nx1NpWTl5UwOUr1Lli/DyjbG+fP0Hhw0CBG+NhQXN0947BxNRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMNpAZ+bXz00H89fmnGl3Sy0SuEMB8GA1UdIwQY MBaAFPDQMJi4NW//xaWX6cRbhO34fPmUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE5Bd21MZzFiX19GcFpmcHhGdUU3Zmg4LVpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kZjU2ZWUtZGQ3MS00Y2E3LTk4ZWQt MzI3ZjgzMTk0NWZkLzEvOE5Bd21MZzFiX19GcFpmcHhGdUU3Zmg4LVpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kZjU2ZWUtZGQ3MS00Y2E3LTk4ZWQtMzI3ZjgzMTk0NWZk LzEvOE5Bd21MZzFiX19GcFpmcHhGdUU3Zmg4LVpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAan/Sio+k ITjl9IQy0ungQLRSVNS/4W64zkcVBKdUkFrQu768cbvIk2bQ0RKYvqYJeq8ev2E5 tqOAna3tWON1do80BwQD8WFSuGMrhIW6Sx7sMnf1nq13oYVLOHZr8XsWqwFW9sBR nVxjTDKcMY2UNlfTC0NDIP1RbVeU2XM6FKqFQgctx1KuzrBfYVVu0GFZjFOlIOwf /ktXqMz8m5xFABwhqz6lMC2WyYUnAVFidcN00IWPO0AKYOu51Us/M3w5tAInjv0i jcIMw8cpIqx25kx9EO4HIdINsRBVdPjl/uHNAbiONtDyMHETiHcXCPKwnXWaR/7S 2hAmmQ6JjWHqcA== -----END CERTIFICATE-----Generated at Mon Dec 29 10:01:21 2025 by rpki-client