This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft File: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft (raw, json) Hash identifier: Z7FohFGmyeVvPu2BN4eXjEBDrd7rub9W/7v9sBUlZY8= Subject key identifier: EA:C3:AD:89:3A:70:80:B8:9D:C1:C6:59:FF:26:BD:1C:FE:CE:F1:29 Authority key identifier: F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C Certificate issuer: /CN=f2a959dc16715c8a54c8094267b8e491fe321d2c Certificate serial: 019B3FECF6D615D107B1261F791B439C39BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft Manifest number: 168A Signing time: Sun 21 Dec 2025 08:00:52 +0000 Manifest this update: Sun 21 Dec 2025 08:00:52 +0000 Manifest next update: Mon 22 Dec 2025 08:00:52 +0000 Files and hashes: 1: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl (hash: yz6yOWZkqsPJuUa+uP3Rbidxpqn6P+vqA//jC3+91l4=) 2: d2hoUpvor7BPW8nmpz4xnZjE2u4.roa (hash: hIY/GtYHLCsuos0GvnTm5ot49GmbZ9W7yYzcGZgrlOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:f6:d6:15:d1:07:b1:26:1f:79:1b:43:9c:39:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2a959dc16715c8a54c8094267b8e491fe321d2c Validity Not Before: Dec 21 08:00:52 2025 GMT Not After : Dec 22 08:00:52 2025 GMT Subject: CN=eac3ad893a7080b89dc1c659ff26bd1cfecef129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:85:31:c7:e0:a2:f7:aa:bc:a5:01:03:0e:66: 95:d2:eb:62:fa:e8:30:45:f9:a8:a9:1a:11:d2:aa: 5b:3a:75:5a:4f:c8:dd:06:2d:8f:32:a2:01:ca:c4: 1c:73:dc:00:08:54:b0:60:80:e9:dd:fc:d0:7e:6b: 2e:2e:58:72:cb:2d:21:b4:59:71:0b:ee:fd:d0:4e: a1:d6:f5:99:35:eb:ee:d8:d2:14:10:13:d1:af:e8: 25:30:2e:d7:bc:e2:9f:c4:2a:de:f2:a9:8f:75:c1: 20:2a:d3:4f:52:24:0a:b2:4b:fc:9f:4d:29:f2:80: da:21:4d:4f:12:a0:9f:ac:19:d1:89:b1:aa:94:bd: 3b:ae:41:d3:4d:dc:5a:82:5e:00:63:9e:2a:93:d5: 0c:5f:e6:78:10:78:77:d2:bf:14:46:75:7e:b4:60: 7f:a2:83:e5:05:d4:ef:23:4a:e2:4d:83:3c:84:46: 43:0a:f7:01:5f:02:f3:7d:00:7d:f0:a7:c3:4f:60: 30:83:43:83:8b:b7:04:76:0f:76:c6:0a:38:c6:38: 3f:c0:90:a5:12:7f:0b:15:da:c0:92:5f:e1:67:3d: 77:71:8a:da:8f:b1:89:8d:05:26:4e:f9:b8:5f:dd: 63:a4:5b:dc:5a:7e:7e:6d:f0:d5:b5:50:2a:5f:6e: 4a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C3:AD:89:3A:70:80:B8:9D:C1:C6:59:FF:26:BD:1C:FE:CE:F1:29 X509v3 Authority Key Identifier: keyid:F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7c:91:f0:24:97:55:fd:99:85:cb:d3:ac:94:48:0a:19:f7: a3:76:d7:e5:4f:b9:86:a2:fe:41:4b:bd:ac:da:91:1e:c9:20: 0b:cc:ae:9d:fb:0f:41:58:16:ca:fc:02:17:b6:f6:7a:de:4e: 2d:b0:74:c3:17:c5:fc:df:0a:e6:5f:d6:ae:b6:43:b8:b6:c4: 86:56:42:34:b4:67:49:c8:8c:41:56:be:4c:8f:04:9d:8b:dc: d1:3e:a0:98:9d:bd:c2:fa:2d:7c:58:5a:4f:e4:c0:a0:ac:f0: a9:11:fa:ce:db:19:a9:a4:67:fb:77:fd:14:d7:c3:f5:5a:04: b5:d4:a6:91:8a:62:ec:ab:22:dd:98:25:12:64:a1:20:8e:64: ee:ad:45:91:32:b7:5e:cb:c7:06:ad:db:37:5a:cb:a6:f1:70: c0:c9:93:40:58:b1:a4:6f:56:2e:14:a5:ba:42:29:4d:4a:ef: 82:90:af:cd:a9:13:c5:e1:2f:d6:40:76:a7:6d:9b:92:6c:15: 71:45:9b:f1:0d:39:b9:30:1c:ff:f1:e5:2c:38:62:c2:bd:0a: 4c:8d:19:25:73:36:3c:0e:2b:0a:2a:90:de:9c:23:8a:25:16: 77:26:27:43:9e:fc:0c:76:05:12:d5:4e:fc:59:37:a3:18:16: 5f:46:0f:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7PbWFdEHsSYfeRtDnDm9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYTk1OWRjMTY3MTVjOGE1NGM4MDk0MjY3YjhlNDkxZmUz MjFkMmMwHhcNMjUxMjIxMDgwMDUyWhcNMjUxMjIyMDgwMDUyWjAzMTEwLwYDVQQD EyhlYWMzYWQ4OTNhNzA4MGI4OWRjMWM2NTlmZjI2YmQxY2ZlY2VmMTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoUxx+Ci96q8pQEDDmaV0uti+ugw RfmoqRoR0qpbOnVaT8jdBi2PMqIBysQcc9wACFSwYIDp3fzQfmsuLlhyyy0htFlx C+790E6h1vWZNevu2NIUEBPRr+glMC7XvOKfxCre8qmPdcEgKtNPUiQKskv8n00p 8oDaIU1PEqCfrBnRibGqlL07rkHTTdxagl4AY54qk9UMX+Z4EHh30r8URnV+tGB/ ooPlBdTvI0riTYM8hEZDCvcBXwLzfQB98KfDT2Awg0ODi7cEdg92xgo4xjg/wJCl En8LFdrAkl/hZz13cYraj7GJjQUmTvm4X91jpFvcWn5+bfDVtVAqX25KZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOrDrYk6cIC4ncHGWf8mvRz+zvEpMB8GA1UdIwQY MBaAFPKpWdwWcVyKVMgJQme45JH+Mh0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHFsWjNCWnhYSXBVeUFsQ1o3amtrZjR5SFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84OGEzODMtMDMwYy00NTQ1LTllOWMt NGViZWVjN2U4Mjc1LzEvOHFsWjNCWnhYSXBVeUFsQ1o3amtrZjR5SFN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi84OGEzODMtMDMwYy00NTQ1LTllOWMtNGViZWVjN2U4Mjc1 LzEvOHFsWjNCWnhYSXBVeUFsQ1o3amtrZjR5SFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnyR8CSX Vf2ZhcvTrJRIChn3o3bX5U+5hqL+QUu9rNqRHskgC8yunfsPQVgWyvwCF7b2et5O LbB0wxfF/N8K5l/WrrZDuLbEhlZCNLRnSciMQVa+TI8EnYvc0T6gmJ29wvotfFha T+TAoKzwqRH6ztsZqaRn+3f9FNfD9VoEtdSmkYpi7Ksi3ZglEmShII5k7q1FkTK3 XsvHBq3bN1rLpvFwwMmTQFixpG9WLhSlukIpTUrvgpCvzakTxeEv1kB2p22bkmwV cUWb8Q05uTAc//HlLDhiwr0KTI0ZJXM2PA4rCiqQ3pwjiiUWdyYnQ578DHYFEtVO /Fk3oxgWX0YPHw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:04:36 2025 by rpki-client