This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft File: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft (raw, json) Hash identifier: hGtIUh3mynWYKBsqUiNIivfOKbJGmtOT1KH6ROGzRcM= Subject key identifier: 56:EA:06:B4:23:23:35:C7:29:F1:AC:96:30:C4:5F:CA:6F:84:1B:B0 Authority key identifier: F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC Certificate issuer: /CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc Certificate serial: 019B631E01185AAA24C25D35F7B4467F475B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft Manifest number: 040C Signing time: Sun 28 Dec 2025 04:01:09 +0000 Manifest this update: Sun 28 Dec 2025 04:01:09 +0000 Manifest next update: Mon 29 Dec 2025 04:01:09 +0000 Files and hashes: 1: 5706RB7xeG9S4d5Ob5hAT-sWDQM.roa (hash: 3YUiY2PHwBycE1YPX5AAcbWdNPxFb9hnL/xR1TAUp9s=) 2: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl (hash: pToG9lbmUQN7TxUhh1Jf9rKzjlogzfhL5KbjPHM1FI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:01:18:5a:aa:24:c2:5d:35:f7:b4:46:7f:47:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc Validity Not Before: Dec 28 04:01:09 2025 GMT Not After : Dec 29 04:01:09 2025 GMT Subject: CN=56ea06b4232335c729f1ac9630c45fca6f841bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:82:e1:d1:00:fe:a4:58:15:d1:02:3a:50:86: c4:36:22:e9:5a:c6:c7:64:36:cc:62:e4:2e:48:79: 97:7f:9a:a2:44:2b:e7:70:a2:d6:ad:e0:09:bf:7c: e7:f5:10:d4:1e:ed:c2:c8:50:3a:d8:71:a9:9b:a4: e8:75:e6:83:75:ea:34:ea:af:60:ff:74:30:9f:3f: 8b:87:b3:3c:24:8c:72:72:a3:2c:88:cf:d4:e8:11: c8:f5:66:3a:2c:0a:3a:ab:cc:68:cd:04:14:71:e7: 48:bb:cd:ed:ad:3d:69:08:f3:15:90:5d:0e:1d:cb: ca:04:63:2d:e1:cd:8d:ab:b4:4b:cc:58:9a:5b:74: 29:a4:33:20:24:82:84:b7:23:e3:55:c3:10:0b:b1: 56:f8:57:f0:45:9e:35:1a:1c:5a:b8:c5:11:70:b3: aa:ed:e5:97:08:39:bf:0b:14:75:0c:6f:75:8f:e2: 63:6c:48:cb:d4:b5:62:be:58:44:ba:94:96:8b:36: f1:38:51:33:54:36:35:6d:d0:4f:e5:2a:43:f8:ad: c4:d4:46:0e:cd:a6:a2:52:7a:63:0d:38:7f:2c:81: 2e:23:ad:fc:85:f7:a6:6a:84:b9:d7:84:c8:e9:f6: c0:bc:a0:53:61:46:95:f3:95:7e:6c:f9:45:56:c5: 0a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:EA:06:B4:23:23:35:C7:29:F1:AC:96:30:C4:5F:CA:6F:84:1B:B0 X509v3 Authority Key Identifier: keyid:F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:9b:af:cb:35:2b:22:46:d3:63:c6:16:e1:ea:0c:30:74:a8: 8c:af:6a:60:ce:8e:24:76:1c:7e:47:1f:d5:86:b0:04:f8:c9: 09:23:05:79:47:d9:75:46:52:6d:7b:04:e0:84:d0:4e:1e:f2: 48:2b:f8:d2:0d:99:dc:5d:7a:8c:56:c2:05:9d:3b:dc:37:44: 37:2d:09:4a:3c:d6:24:87:96:10:1f:26:33:24:3d:5a:9b:75: bd:95:cd:a8:88:5f:70:02:92:5d:a5:29:c3:60:55:8d:02:07: 59:27:83:ba:61:31:6f:67:73:33:bd:b5:e4:e4:15:c4:13:7a: 01:ba:32:23:59:9c:91:55:29:b7:d1:d1:f6:20:12:87:8a:c1: 46:c2:1d:e1:9f:0c:4e:f8:31:8b:6a:b1:15:c0:d0:4e:ae:e0: 57:61:be:6d:5c:86:bd:d6:34:18:27:de:96:5f:78:3e:d3:f2: da:1b:b3:bc:1f:13:50:5a:4b:06:42:f4:41:d1:7e:0d:d5:2b: 21:e9:4d:60:73:d0:df:4a:62:23:5a:cb:ff:19:12:53:95:51: 14:73:56:57:b4:48:0e:0a:49:a5:2c:df:d2:d4:29:0e:35:29: cf:4b:e9:c6:ae:46:51:a9:d8:11:b4:bc:f8:ca:27:5f:a7:b3: 54:40:cf:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHgEYWqokwl0197RGf0dbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMWZmYjU0Y2FjN2Y1YjU3Njg1NjllNDE5N2Q0MWQ3NDQ2 YmYxZmMwHhcNMjUxMjI4MDQwMTA5WhcNMjUxMjI5MDQwMTA5WjAzMTEwLwYDVQQD Eyg1NmVhMDZiNDIzMjMzNWM3MjlmMWFjOTYzMGM0NWZjYTZmODQxYmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYLh0QD+pFgV0QI6UIbENiLpWsbH ZDbMYuQuSHmXf5qiRCvncKLWreAJv3zn9RDUHu3CyFA62HGpm6TodeaDdeo06q9g /3Qwnz+Lh7M8JIxycqMsiM/U6BHI9WY6LAo6q8xozQQUcedIu83trT1pCPMVkF0O HcvKBGMt4c2Nq7RLzFiaW3QppDMgJIKEtyPjVcMQC7FW+FfwRZ41GhxauMURcLOq 7eWXCDm/CxR1DG91j+JjbEjL1LVivlhEupSWizbxOFEzVDY1bdBP5SpD+K3E1EYO zaaiUnpjDTh/LIEuI638hfemaoS514TI6fbAvKBTYUaV85V+bPlFVsUKmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbqBrQjIzXHKfGsljDEX8pvhBuwMB8GA1UdIwQY MBaAFPMf+1TKx/W1doVp5Bl9QddEa/H8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHhfN1ZNckg5YlYyaFdua0dYMUIxMFJyOGZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS82YzM3MDItMTE3OC00Y2JkLThlYmEt YzAzODRmZTFiMDA3LzEvOHhfN1ZNckg5YlYyaFdua0dYMUIxMFJyOGZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS82YzM3MDItMTE3OC00Y2JkLThlYmEtYzAzODRmZTFiMDA3 LzEvOHhfN1ZNckg5YlYyaFdua0dYMUIxMFJyOGZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJuvyzUr IkbTY8YW4eoMMHSojK9qYM6OJHYcfkcf1YawBPjJCSMFeUfZdUZSbXsE4ITQTh7y SCv40g2Z3F16jFbCBZ073DdENy0JSjzWJIeWEB8mMyQ9Wpt1vZXNqIhfcAKSXaUp w2BVjQIHWSeDumExb2dzM7215OQVxBN6AboyI1mckVUpt9HR9iASh4rBRsId4Z8M Tvgxi2qxFcDQTq7gV2G+bVyGvdY0GCfell94PtPy2huzvB8TUFpLBkL0QdF+DdUr IelNYHPQ30piI1rL/xkSU5VRFHNWV7RIDgpJpSzf0tQpDjUpz0vpxq5GUanYEbS8 +MonX6ezVEDPGA== -----END CERTIFICATE-----Generated at Sun Dec 28 06:40:13 2025 by rpki-client