This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft File: 8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json) Hash identifier: OCmov5VwDOg8i7tc+rsxsridJHqQx3XOmSvR2tgX1oQ= Subject key identifier: FA:C3:AA:F7:E1:C2:76:1B:3E:B1:69:17:36:1D:45:E9:D0:E9:E9:66 Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B Certificate issuer: /CN=f3eee69f89f2452dcae8982947b2d1469537967b Certificate serial: 019B32D7F5C82ADF6482C60E4E4CC95ACCBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 19:02:52 +0000 Manifest this update: Thu 18 Dec 2025 19:02:52 +0000 Manifest next update: Fri 19 Dec 2025 19:02:52 +0000 Files and hashes: 1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: Xz5USt/jUOOaLz0DP3IdITuVdSF1Qd7I2ogjBBznoko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:f5:c8:2a:df:64:82:c6:0e:4e:4c:c9:5a:cc:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b Validity Not Before: Dec 18 19:02:52 2025 GMT Not After : Dec 19 19:02:52 2025 GMT Subject: CN=fac3aaf7e1c2761b3eb16917361d45e9d0e9e966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d1:16:1c:00:3b:65:a8:8b:89:de:e1:7c:7c: 7d:e9:8c:ad:02:84:d2:03:01:a5:da:43:26:4b:ee: 16:84:d8:e2:5d:cb:55:e3:62:d7:d0:5e:44:f5:5c: c4:26:58:82:94:8f:da:97:de:09:79:96:88:7c:79: a2:f7:f0:59:94:e0:0e:e0:eb:e4:34:75:a3:c6:93: af:39:8f:e8:89:28:85:a8:64:fc:d9:42:a9:8c:3c: 9b:55:3f:90:5d:89:b7:73:12:5e:ac:7e:56:1b:29: e6:7c:58:4a:ba:6a:c5:ae:ac:37:06:9a:9d:08:fc: ed:29:ae:34:ce:64:a2:e3:b3:48:78:ba:5d:dc:73: d4:40:4a:86:6f:43:cc:51:33:8d:24:11:8a:2d:cb: ce:ec:18:3f:c1:a2:34:83:12:a6:9a:7b:c3:dd:56: cc:51:c6:fc:8c:ad:73:97:d0:e7:35:d3:89:9b:8c: 45:e3:fa:20:34:cb:2f:b4:89:73:19:f9:3b:94:14: 2d:d0:b3:0e:bb:63:ef:07:35:59:85:9f:57:4d:30: b7:65:5d:f9:73:52:00:20:99:cb:ab:57:e9:81:57: 78:8d:8d:87:2c:58:37:68:73:f9:ce:89:f8:11:36: 42:e7:43:03:45:be:00:b0:4a:ce:64:ed:dc:14:98: 5e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C3:AA:F7:E1:C2:76:1B:3E:B1:69:17:36:1D:45:E9:D0:E9:E9:66 X509v3 Authority Key Identifier: keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:27:91:8e:a8:d5:c9:92:51:72:39:15:a4:35:4c:75:81:f8: 9d:9a:a2:cc:cd:03:f2:a6:4f:67:25:2a:92:e3:83:8a:c6:36: c7:d5:c7:a5:83:f1:95:c5:dc:6d:aa:f5:12:97:17:4d:da:d2: 0b:1a:3a:9f:74:24:18:65:3b:b9:e2:fb:85:25:85:bc:5c:11: 2e:9c:c5:ac:8b:70:7f:50:d2:50:0f:c5:73:6d:31:02:45:fd: b0:ed:9a:7e:e8:bf:18:03:81:94:4b:ed:58:34:64:69:80:23: 5c:a1:f8:2f:56:17:2e:0b:57:ff:e8:53:ce:7d:57:0f:f1:b4: 8a:5e:e8:ca:61:49:5d:e7:f3:55:8b:97:65:46:8b:c6:5d:0a: d9:65:20:79:18:dc:ea:1c:5c:1b:7a:d1:65:30:01:eb:80:d2: e4:e6:1b:05:b1:01:19:cf:de:b7:86:76:de:e8:56:4b:57:93: b8:e3:53:ed:ea:bb:85:cb:32:d5:7f:c5:4c:82:84:37:7b:76: 53:aa:ee:d2:84:f6:12:9c:ce:09:88:2b:52:7e:2c:4a:0d:9a: 6a:e9:66:9e:2c:dc:55:c1:00:77:8c:3e:7e:1c:64:5b:73:f1: 9e:8b:e8:48:92:f0:0f:08:34:49:be:57:ee:4a:e9:b7:8d:07: 40:01:82:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1/XIKt9kgsYOTkzJWsy7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZWVlNjlmODlmMjQ1MmRjYWU4OTgyOTQ3YjJkMTQ2OTUz Nzk2N2IwHhcNMjUxMjE4MTkwMjUyWhcNMjUxMjE5MTkwMjUyWjAzMTEwLwYDVQQD EyhmYWMzYWFmN2UxYzI3NjFiM2ViMTY5MTczNjFkNDVlOWQwZTllOTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdEWHAA7ZaiLid7hfHx96YytAoTS AwGl2kMmS+4WhNjiXctV42LX0F5E9VzEJliClI/al94JeZaIfHmi9/BZlOAO4Ovk NHWjxpOvOY/oiSiFqGT82UKpjDybVT+QXYm3cxJerH5WGynmfFhKumrFrqw3Bpqd CPztKa40zmSi47NIeLpd3HPUQEqGb0PMUTONJBGKLcvO7Bg/waI0gxKmmnvD3VbM Ucb8jK1zl9DnNdOJm4xF4/ogNMsvtIlzGfk7lBQt0LMOu2PvBzVZhZ9XTTC3ZV35 c1IAIJnLq1fpgVd4jY2HLFg3aHP5zon4ETZC50MDRb4AsErOZO3cFJhehQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrDqvfhwnYbPrFpFzYdRenQ6elmMB8GA1UdIwQY MBaAFPPu5p+J8kUtyuiYKUey0UaVN5Z7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOC03bW40bnlSUzNLNkpncFI3TFJScFUzbG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lODYwNzQtZTZkMC00OWJlLTk1OTIt N2M0MjcyMzRkNWZmLzEvOC03bW40bnlSUzNLNkpncFI3TFJScFUzbG5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9lODYwNzQtZTZkMC00OWJlLTk1OTItN2M0MjcyMzRkNWZm LzEvOC03bW40bnlSUzNLNkpncFI3TFJScFUzbG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSeRjqjV yZJRcjkVpDVMdYH4nZqizM0D8qZPZyUqkuODisY2x9XHpYPxlcXcbar1EpcXTdrS Cxo6n3QkGGU7ueL7hSWFvFwRLpzFrItwf1DSUA/Fc20xAkX9sO2afui/GAOBlEvt WDRkaYAjXKH4L1YXLgtX/+hTzn1XD/G0il7oymFJXefzVYuXZUaLxl0K2WUgeRjc 6hxcG3rRZTAB64DS5OYbBbEBGc/et4Z23uhWS1eTuONT7eq7hcsy1X/FTIKEN3t2 U6ru0oT2EpzOCYgrUn4sSg2aaulmnizcVcEAd4w+fhxkW3PxnovoSJLwDwg0Sb5X 7krpt40HQAGCBQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:16:43 2025 by rpki-client