This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft File: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft (raw, json) Hash identifier: 2TmXKKowX4SMM+JhKZkFcB6GyKfaeDKHP6eOWIqBOwM= Subject key identifier: C2:8A:E0:65:C7:A6:81:80:6C:17:C5:71:83:1B:9D:28:77:A3:F7:0B Authority key identifier: F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9 Certificate issuer: /CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9 Certificate serial: 019B3D23707FAFD7D1178EBC50D170407A25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft Manifest number: 0672 Signing time: Sat 20 Dec 2025 19:01:31 +0000 Manifest this update: Sat 20 Dec 2025 19:01:31 +0000 Manifest next update: Sun 21 Dec 2025 19:01:31 +0000 Files and hashes: 1: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl (hash: aFxt8PKHxrdkRB31tJOsoL2MiNK+Oor3rBJiuhZTAAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:70:7f:af:d7:d1:17:8e:bc:50:d1:70:40:7a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9 Validity Not Before: Dec 20 19:01:31 2025 GMT Not After : Dec 21 19:01:31 2025 GMT Subject: CN=c28ae065c7a681806c17c571831b9d2877a3f70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5e:2e:59:90:d0:05:07:48:7c:37:8d:64:1e: cc:3e:ce:08:c8:d2:2d:ff:f1:2c:71:b8:98:76:78: 45:3e:a4:d1:31:07:62:87:e8:73:77:7c:0d:e1:7a: 89:84:6a:e2:08:a0:f6:93:33:02:3a:35:07:18:92: 87:8f:4f:37:f8:8f:44:26:34:c9:2a:48:05:57:ec: ab:5f:90:d0:8a:3d:d5:85:3b:6d:82:80:c7:74:1a: a0:12:c6:b8:39:e0:cf:3b:9b:67:36:31:08:8a:5b: 93:43:b2:23:1c:30:9f:b9:29:2e:f5:a4:59:f7:65: 55:eb:0a:94:a3:22:30:d0:61:4a:98:26:82:fc:4d: aa:0b:fb:7d:4e:01:21:58:71:2a:da:32:20:77:4a: 9e:3f:fd:59:ef:52:72:b1:92:e6:40:7e:36:8b:59: 87:a8:aa:51:da:55:a2:05:a2:f2:38:16:a8:04:af: f3:46:c1:4c:1b:d3:ce:cc:b8:b4:69:84:c6:74:3c: b0:d0:f7:aa:9d:8f:79:e3:fa:93:52:14:1b:ae:f6: 9a:c6:70:c6:70:96:86:82:f6:73:51:87:a5:1b:17: c0:b7:41:96:de:ae:c8:76:27:cf:ea:94:e7:f3:61: 25:3d:24:dc:27:64:b1:3d:f5:48:47:4c:20:cd:09: 82:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:8A:E0:65:C7:A6:81:80:6C:17:C5:71:83:1B:9D:28:77:A3:F7:0B X509v3 Authority Key Identifier: keyid:F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:41:bb:6c:b2:b1:95:f6:c2:49:3d:64:32:ab:0a:60:70:64: 67:f1:d0:7f:69:75:4c:fe:60:0a:c7:ce:98:16:2f:f3:a2:1c: e3:2b:1e:79:92:f1:16:3a:7c:c1:dc:b7:26:a7:16:00:e0:5b: c2:7a:cb:02:7e:f1:52:d5:ea:58:6b:b2:05:2e:19:92:32:69: 8f:e1:fa:61:5f:75:8a:34:c9:37:57:88:f6:58:bd:2a:20:9c: b5:42:17:33:76:af:2f:12:6e:d3:72:73:8f:bc:54:a1:86:b9: 7c:f8:06:7d:65:e4:5d:57:5e:db:2d:17:c7:9e:30:34:ea:90: 56:fb:bd:47:4c:03:37:d5:55:12:33:1e:a7:cb:3e:83:55:35: 2d:16:bb:f6:c7:94:7d:3c:02:93:ef:bb:a4:ea:36:c9:20:5b: eb:4e:c5:3f:cb:99:1c:36:e6:6b:35:ca:97:d9:d4:54:ef:67: bc:11:26:27:81:7b:f7:ff:38:01:ef:10:79:23:98:19:ca:b7: 1c:8c:28:11:fe:5a:9b:ad:7d:68:d0:c0:de:83:02:cf:8a:73: 32:7b:06:4d:bc:dd:c5:36:27:0e:b2:53:09:e7:da:58:c6:91: 96:2a:3c:11:59:9e:ae:1a:ed:bf:98:5f:a7:4a:c6:94:34:cf: df:cc:e5:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I3B/r9fRF468UNFwQHolMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwM2YxZjMzNWM3ZDA0YjM2MDhmZDE5MTRhOWMwNTNiMDRh N2ZjYjkwHhcNMjUxMjIwMTkwMTMxWhcNMjUxMjIxMTkwMTMxWjAzMTEwLwYDVQQD EyhjMjhhZTA2NWM3YTY4MTgwNmMxN2M1NzE4MzFiOWQyODc3YTNmNzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV4uWZDQBQdIfDeNZB7MPs4IyNIt //EscbiYdnhFPqTRMQdih+hzd3wN4XqJhGriCKD2kzMCOjUHGJKHj083+I9EJjTJ KkgFV+yrX5DQij3VhTttgoDHdBqgEsa4OeDPO5tnNjEIiluTQ7IjHDCfuSku9aRZ 92VV6wqUoyIw0GFKmCaC/E2qC/t9TgEhWHEq2jIgd0qeP/1Z71JysZLmQH42i1mH qKpR2lWiBaLyOBaoBK/zRsFMG9POzLi0aYTGdDyw0PeqnY954/qTUhQbrvaaxnDG cJaGgvZzUYelGxfAt0GW3q7IdifP6pTn82ElPSTcJ2SxPfVIR0wgzQmCcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKK4GXHpoGAbBfFcYMbnSh3o/cLMB8GA1UdIwQY MBaAFPA/HzNcfQSzYI/RkUqcBTsEp/y5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTdjZjctYjM4Ni00Yzg3LTg0MWYt MzM4YTA3ZThlYmQ2LzEvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84OTdjZjctYjM4Ni00Yzg3LTg0MWYtMzM4YTA3ZThlYmQ2 LzEvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUG7bLKx lfbCST1kMqsKYHBkZ/HQf2l1TP5gCsfOmBYv86Ic4yseeZLxFjp8wdy3JqcWAOBb wnrLAn7xUtXqWGuyBS4ZkjJpj+H6YV91ijTJN1eI9li9KiCctUIXM3avLxJu03Jz j7xUoYa5fPgGfWXkXVde2y0Xx54wNOqQVvu9R0wDN9VVEjMep8s+g1U1LRa79seU fTwCk++7pOo2ySBb607FP8uZHDbmazXKl9nUVO9nvBEmJ4F79/84Ae8QeSOYGcq3 HIwoEf5am619aNDA3oMCz4pzMnsGTbzdxTYnDrJTCefaWMaRlio8EVmerhrtv5hf p0rGlDTP38zlXQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:30:01 2025 by rpki-client