This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft File: 8q7r5B0FGChKujpPXl2gXPq9b3Y.mft (raw, json) Hash identifier: H7NVJh7BBBRGX7kLUrkK24lgFvz4nMNQp/6bY5iVqe8= Subject key identifier: CF:86:86:91:9D:EA:BF:8F:B0:F1:68:EC:9A:D0:7E:B5:93:B8:C6:59 Authority key identifier: F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76 Certificate issuer: /CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76 Certificate serial: 019B405C0410704D7FD898C2FB5042B9154A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 10:02:10 +0000 Manifest this update: Sun 21 Dec 2025 10:02:10 +0000 Manifest next update: Mon 22 Dec 2025 10:02:10 +0000 Files and hashes: 1: 8q7r5B0FGChKujpPXl2gXPq9b3Y.crl (hash: 6ElI0lxDDBo02O8pLI2Yd0hmd58sOdHhx3li0Fm6Eno=) 2: M0x4P-eqDOpLCOY_5rdYfIPAYXc.roa (hash: Hz1NV4C1yE6vehHnBgkxV2TE2v53JgdybplNGjL2XYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:04:10:70:4d:7f:d8:98:c2:fb:50:42:b9:15:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76 Validity Not Before: Dec 21 10:02:10 2025 GMT Not After : Dec 22 10:02:10 2025 GMT Subject: CN=cf8686919deabf8fb0f168ec9ad07eb593b8c659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5f:14:04:22:a0:a0:d5:f2:fe:75:c8:f9:64: 2f:92:de:2d:09:6f:e0:c3:75:37:07:82:0b:a4:06: 37:c1:2b:7b:b5:a5:ce:63:a9:c8:ca:67:d7:2c:1a: f7:af:87:a3:fa:a1:f9:92:09:e8:14:c1:e1:f8:7b: ff:9e:41:4e:57:d6:54:8f:68:06:06:de:b1:f2:2f: 6e:fc:12:31:a4:8d:3f:fa:36:e1:35:d0:c9:86:19: 70:07:a4:cd:1f:c5:88:48:a8:9b:33:b1:22:9c:c1: 78:53:87:de:f5:4d:67:d3:52:bb:6d:6d:08:3e:53: 79:87:9c:ce:d7:4a:e3:e5:3f:e9:11:e7:e7:b6:4b: 81:f5:f3:f1:b8:7a:34:83:0f:e2:a1:bf:62:30:59: 54:9d:33:b2:f7:93:98:e0:5f:81:0c:56:93:30:86: 4d:e2:a6:f6:61:2c:7d:be:67:5f:eb:f6:c3:c2:66: 97:26:03:5d:9d:03:de:0c:71:9b:53:47:c7:9f:c7: bc:ac:63:9b:e8:61:d8:ab:cb:77:43:37:03:cc:fb: b7:27:8d:b5:fa:9c:ed:75:0c:ad:70:64:8c:aa:11: c2:45:30:46:87:2d:34:7a:fa:68:d4:dc:11:cc:8e: d0:e5:ec:80:3e:87:ed:e6:f8:14:1e:bb:6d:7d:0b: 20:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:86:86:91:9D:EA:BF:8F:B0:F1:68:EC:9A:D0:7E:B5:93:B8:C6:59 X509v3 Authority Key Identifier: keyid:F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a7:00:8f:1f:df:9d:e5:30:1b:ee:55:fe:f3:08:81:05:87: 7f:cf:71:b5:05:c6:69:13:87:1f:ec:1c:cf:6d:2e:6c:e6:8b: 6f:c7:7e:e0:58:d6:10:24:64:11:67:d0:cd:36:bf:84:c2:3a: 24:08:47:8d:43:b4:5b:a8:01:85:8f:9f:a2:49:ed:71:07:42: df:14:15:98:01:4e:91:78:dd:20:a4:41:88:84:63:09:f8:b9: d7:df:88:97:16:de:79:dd:14:07:d6:7f:be:1c:53:35:ea:af: b8:1f:e3:55:f0:95:5b:b9:c7:07:f2:53:1e:52:58:41:4a:3e: 3e:77:db:27:f1:7f:cf:a1:e6:c0:37:d9:90:b2:0a:23:42:31: ee:ff:7f:16:6d:2b:ea:00:94:24:64:5a:c9:92:bd:d7:01:54: 87:62:8a:5c:51:bb:cd:70:a8:77:fa:2b:7d:2e:0b:5b:56:5d: c8:b3:2a:53:23:75:de:2a:b1:6d:8c:ba:97:17:3e:11:17:ff: 20:d5:0b:5b:30:fb:56:ab:8f:65:2c:ed:54:1c:9d:19:43:5d: 82:36:9b:84:f7:00:e9:89:8f:4e:b2:cd:9c:80:17:8f:18:83: 7c:6d:9e:c2:5e:41:d1:83:ca:85:29:2f:8f:11:5d:d9:b8:58: 05:71:51:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXAQQcE1/2JjC+1BCuRVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYWVlYmU0MWQwNTE4Mjg0YWJhM2E0ZjVlNWRhMDVjZmFi ZDZmNzYwHhcNMjUxMjIxMTAwMjEwWhcNMjUxMjIyMTAwMjEwWjAzMTEwLwYDVQQD EyhjZjg2ODY5MTlkZWFiZjhmYjBmMTY4ZWM5YWQwN2ViNTkzYjhjNjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn18UBCKgoNXy/nXI+WQvkt4tCW/g w3U3B4ILpAY3wSt7taXOY6nIymfXLBr3r4ej+qH5kgnoFMHh+Hv/nkFOV9ZUj2gG Bt6x8i9u/BIxpI0/+jbhNdDJhhlwB6TNH8WISKibM7EinMF4U4fe9U1n01K7bW0I PlN5h5zO10rj5T/pEefntkuB9fPxuHo0gw/iob9iMFlUnTOy95OY4F+BDFaTMIZN 4qb2YSx9vmdf6/bDwmaXJgNdnQPeDHGbU0fHn8e8rGOb6GHYq8t3QzcDzPu3J421 +pztdQytcGSMqhHCRTBGhy00evpo1NwRzI7Q5eyAPoft5vgUHrttfQsg/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+GhpGd6r+PsPFo7JrQfrWTuMZZMB8GA1UdIwQY MBaAFPKu6+QdBRgoSro6T15doFz6vW92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jZmMxYmEtOWM3OC00YzNkLThlYzMt YzBhZDc0Y2E1ZDliLzEvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jZmMxYmEtOWM3OC00YzNkLThlYzMtYzBhZDc0Y2E1ZDli LzEvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKcAjx/f neUwG+5V/vMIgQWHf89xtQXGaROHH+wcz20ubOaLb8d+4FjWECRkEWfQzTa/hMI6 JAhHjUO0W6gBhY+fokntcQdC3xQVmAFOkXjdIKRBiIRjCfi519+Ilxbeed0UB9Z/ vhxTNeqvuB/jVfCVW7nHB/JTHlJYQUo+PnfbJ/F/z6HmwDfZkLIKI0Ix7v9/Fm0r 6gCUJGRayZK91wFUh2KKXFG7zXCod/orfS4LW1ZdyLMqUyN13iqxbYy6lxc+ERf/ INULWzD7VquPZSztVBydGUNdgjabhPcA6YmPTrLNnIAXjxiDfG2ewl5B0YPKhSkv jxFd2bhYBXFRhw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:14:21 2025 by rpki-client