This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft File: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft (raw, json) Hash identifier: Wi8YGFbgEliFknWwz+eh1jHXNXNYvMccrIdl+gmjp7g= Subject key identifier: 02:23:30:69:08:EC:4C:B5:38:1E:3E:FA:ED:C5:0A:6E:4D:6B:9B:53 Authority key identifier: F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9 Certificate issuer: /CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9 Certificate serial: 019B42EE15A0A75A573336D9A106EEFEE19D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft Manifest number: 0675 Signing time: Sun 21 Dec 2025 22:00:57 +0000 Manifest this update: Sun 21 Dec 2025 22:00:57 +0000 Manifest next update: Mon 22 Dec 2025 22:00:57 +0000 Files and hashes: 1: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl (hash: Yh4x0072XXYPtZOCnL9UyeZpCZp0QViU3V/DP3+oD8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:15:a0:a7:5a:57:33:36:d9:a1:06:ee:fe:e1:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9 Validity Not Before: Dec 21 22:00:57 2025 GMT Not After : Dec 22 22:00:57 2025 GMT Subject: CN=0223306908ec4cb5381e3efaedc50a6e4d6b9b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1d:14:83:80:da:80:0e:cb:ae:1e:55:96:46: 77:22:59:ea:e6:ba:c4:67:dc:ee:e9:2c:9e:31:31: 67:60:58:05:69:00:d9:69:35:2a:f7:0d:51:68:9d: 5a:71:2c:fb:fd:bd:33:4a:41:f2:2b:7e:10:9c:72: 73:f3:d8:3e:de:2c:5c:a3:96:61:89:1f:42:5f:cf: 87:dc:f8:82:12:b9:19:b2:24:2b:5f:5f:50:c9:d3: 60:e3:cc:eb:26:56:3f:b4:21:79:d5:f2:12:2b:90: 9f:3b:4d:4b:f1:60:52:33:cc:b8:12:42:22:f4:6d: 05:67:d7:ac:b7:a3:d1:df:7c:31:b7:0e:40:67:84: 86:53:4c:04:6f:c4:d3:9c:0c:98:bf:80:12:44:68: a2:d6:28:8f:80:46:fd:55:f0:30:40:8e:de:05:fc: dc:67:a9:8a:c7:07:56:c8:7d:1a:3f:5e:3c:65:eb: b3:35:ec:06:4a:89:75:3a:df:cd:21:e5:02:39:6b: 47:07:53:26:e3:6e:5f:f3:01:fc:93:09:9c:1f:c8: f3:03:66:37:85:28:29:da:00:f0:7f:f8:8d:f8:c8: e7:98:59:c7:f3:b1:10:28:15:e1:4e:25:6c:12:88: e2:43:5d:a6:19:ce:4b:fb:7c:e7:fe:be:06:d2:b7: f0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:23:30:69:08:EC:4C:B5:38:1E:3E:FA:ED:C5:0A:6E:4D:6B:9B:53 X509v3 Authority Key Identifier: keyid:F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:fb:4f:a6:01:aa:b8:49:de:fb:95:6f:5f:93:57:45:69:01: 9d:86:5f:4b:fb:4b:3e:bd:3e:75:9a:07:eb:71:8d:f7:2a:36: e6:ad:b1:34:28:55:2b:42:32:8b:8a:bc:f7:dc:a0:ba:67:44: c7:a6:c5:e6:ed:c4:51:c1:f6:f5:b2:5c:28:4a:c3:81:62:d8: 32:3f:06:3d:4e:85:e1:6b:70:b0:f4:87:b4:af:15:01:bc:0b: 0b:5b:f1:78:8d:2b:fc:ac:c7:cc:72:ec:d9:4a:8e:4d:33:22: 70:e5:9c:ba:bc:a6:99:f3:d4:18:38:1b:10:5d:40:b8:a8:ac: 0a:3d:68:0b:c8:4d:86:a3:6c:d5:db:a3:cf:f1:f2:5c:99:db: 3e:fc:82:93:44:1e:13:5c:d7:ca:fb:f4:da:21:94:2c:3a:92: 70:ab:9c:10:1d:c0:95:ab:ba:95:2c:be:05:ba:45:fd:a2:a4: 5f:3a:a1:bd:88:3c:9a:af:cc:69:ee:5d:ef:e1:81:7d:a6:45: 27:9f:6f:2c:3e:4a:d1:7a:7b:02:a2:d3:72:6f:a4:da:1b:bf: 84:23:39:be:07:a6:d7:52:cb:c7:b0:80:8d:80:67:c5:06:af: 8a:8c:09:ff:72:f2:3a:b5:d1:5a:0e:ec:a8:36:bf:b9:58:28: e1:80:5b:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7hWgp1pXMzbZoQbu/uGdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwM2YxZjMzNWM3ZDA0YjM2MDhmZDE5MTRhOWMwNTNiMDRh N2ZjYjkwHhcNMjUxMjIxMjIwMDU3WhcNMjUxMjIyMjIwMDU3WjAzMTEwLwYDVQQD EygwMjIzMzA2OTA4ZWM0Y2I1MzgxZTNlZmFlZGM1MGE2ZTRkNmI5YjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB0Ug4DagA7Lrh5VlkZ3Ilnq5rrE Z9zu6SyeMTFnYFgFaQDZaTUq9w1RaJ1acSz7/b0zSkHyK34QnHJz89g+3ixco5Zh iR9CX8+H3PiCErkZsiQrX19QydNg48zrJlY/tCF51fISK5CfO01L8WBSM8y4EkIi 9G0FZ9est6PR33wxtw5AZ4SGU0wEb8TTnAyYv4ASRGii1iiPgEb9VfAwQI7eBfzc Z6mKxwdWyH0aP148ZeuzNewGSol1Ot/NIeUCOWtHB1Mm425f8wH8kwmcH8jzA2Y3 hSgp2gDwf/iN+MjnmFnH87EQKBXhTiVsEojiQ12mGc5L+3zn/r4G0rfwvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIjMGkI7Ey1OB4++u3FCm5Na5tTMB8GA1UdIwQY MBaAFPA/HzNcfQSzYI/RkUqcBTsEp/y5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTdjZjctYjM4Ni00Yzg3LTg0MWYt MzM4YTA3ZThlYmQ2LzEvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84OTdjZjctYjM4Ni00Yzg3LTg0MWYtMzM4YTA3ZThlYmQ2 LzEvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtftPpgGq uEne+5VvX5NXRWkBnYZfS/tLPr0+dZoH63GN9yo25q2xNChVK0Iyi4q899ygumdE x6bF5u3EUcH29bJcKErDgWLYMj8GPU6F4WtwsPSHtK8VAbwLC1vxeI0r/KzHzHLs 2UqOTTMicOWcurymmfPUGDgbEF1AuKisCj1oC8hNhqNs1dujz/HyXJnbPvyCk0Qe E1zXyvv02iGULDqScKucEB3Alau6lSy+BbpF/aKkXzqhvYg8mq/Mae5d7+GBfaZF J59vLD5K0Xp7AqLTcm+k2hu/hCM5vgem11LLx7CAjYBnxQaviowJ/3LyOrXRWg7s qDa/uVgo4YBbfw== -----END CERTIFICATE-----Generated at Mon Dec 22 06:25:49 2025 by rpki-client