This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft File: r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft (raw, json) Hash identifier: 6g3z/YwKT3HjyswxWwDv43NpONd4tNRqNIKgGPYWxIs= Subject key identifier: 3E:64:83:78:81:CF:F5:AC:1B:F6:F4:02:E1:78:E8:B1:7B:4B:07:EF Authority key identifier: AF:FF:13:A6:7F:22:5C:3C:2A:60:66:58:C2:39:65:B8:19:1D:40:08 Certificate issuer: /CN=afff13a67f225c3c2a606658c23965b8191d4008 Certificate serial: 019B36B39EC53C00AB4667E48EF015536A02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft Manifest number: 0DAA Signing time: Fri 19 Dec 2025 13:01:39 +0000 Manifest this update: Fri 19 Dec 2025 13:01:39 +0000 Manifest next update: Sat 20 Dec 2025 13:01:39 +0000 Files and hashes: 1: r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl (hash: nIQmRjnWcz1ZuOq+3nHiUDSTAYHhVFF03RCXsajHfkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:9e:c5:3c:00:ab:46:67:e4:8e:f0:15:53:6a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afff13a67f225c3c2a606658c23965b8191d4008 Validity Not Before: Dec 19 13:01:39 2025 GMT Not After : Dec 20 13:01:39 2025 GMT Subject: CN=3e64837881cff5ac1bf6f402e178e8b17b4b07ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fe:f1:0d:29:03:37:46:51:4d:8e:03:7c:d4: b2:3f:24:33:6e:24:ae:95:0f:19:99:e5:86:db:39: a6:46:38:37:e1:80:33:bd:cd:95:d4:68:65:f9:7c: 35:1c:2f:13:13:f0:4a:2e:4a:7e:3c:8d:7b:9d:a2: 95:77:7c:84:85:26:79:d9:0e:70:92:47:43:c9:ea: 5c:3a:78:5c:22:5e:be:2b:b6:68:6e:3c:38:08:69: b0:d3:37:6c:3b:ce:56:09:c5:08:7a:4b:01:bc:cb: 41:ff:6a:55:d3:f3:9d:24:e5:15:7d:6e:59:a2:fd: f7:0b:91:c9:28:16:e3:ae:ef:72:69:ac:d1:fc:b5: 79:c2:a8:58:71:7f:a1:1a:d9:a1:de:50:70:60:bb: 48:d8:14:37:15:4c:dc:fd:38:39:ea:80:95:d0:6c: d8:02:02:6b:4a:4f:c4:68:55:73:6a:44:b0:c9:bc: 31:8e:7a:54:56:21:30:db:42:c3:68:ef:cc:e0:75: fe:e6:86:b8:bc:40:ce:4d:2d:50:ef:09:9d:6b:7f: f8:e2:41:e0:7d:4b:a7:7a:62:00:31:40:67:f4:2e: 32:5d:19:98:5b:ca:0a:88:af:df:4c:22:69:8d:d7: 44:97:9c:e9:68:e3:0f:a6:9a:f3:c2:02:12:2e:d3: ae:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:64:83:78:81:CF:F5:AC:1B:F6:F4:02:E1:78:E8:B1:7B:4B:07:EF X509v3 Authority Key Identifier: keyid:AF:FF:13:A6:7F:22:5C:3C:2A:60:66:58:C2:39:65:B8:19:1D:40:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d8:e1:b5:bd:5a:00:3a:ba:ae:89:e0:f5:31:d4:7b:f3:c0: e6:7e:8f:6e:ef:95:a0:37:2f:09:84:d9:2c:51:0e:d4:41:f3: d8:c2:aa:6e:3c:03:b8:72:4f:2c:1f:c4:e9:2e:b1:5f:f8:c8: 05:12:71:cf:be:f3:06:0d:14:8e:67:51:df:58:07:89:c5:3d: 82:d5:49:2a:4e:ac:78:a1:6c:48:d3:f5:78:5f:8a:da:64:fd: e2:8e:6d:d8:9a:13:52:d7:a8:07:9e:1f:c3:98:32:74:a2:0a: dc:d3:a5:59:d1:41:67:9c:32:1c:9d:4f:31:fb:e4:67:45:0e: ea:40:c5:ad:69:2c:4c:a2:5b:89:26:dd:df:c9:bf:c7:33:ff: ea:f0:e2:3c:9e:19:3b:f9:ba:49:b7:57:32:50:a7:d5:48:24: b9:b1:11:b3:9b:3e:b0:0d:f3:89:ee:64:07:aa:2c:54:cb:b4: 16:30:15:66:77:06:2d:64:f5:da:3d:7a:18:17:a2:29:da:3f: fb:54:b9:ad:36:82:f9:42:c7:79:ef:be:4c:6b:8a:05:23:9b: 8f:58:b4:66:41:4e:d5:bb:52:30:65:76:ae:33:11:8e:3c:4f: af:1c:43:7a:98:f7:f3:37:d8:98:1e:2b:b5:91:ea:c8:f1:9c: b6:c2:ff:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s57FPACrRmfkjvAVU2oCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZmYxM2E2N2YyMjVjM2MyYTYwNjY1OGMyMzk2NWI4MTkx ZDQwMDgwHhcNMjUxMjE5MTMwMTM5WhcNMjUxMjIwMTMwMTM5WjAzMTEwLwYDVQQD EygzZTY0ODM3ODgxY2ZmNWFjMWJmNmY0MDJlMTc4ZThiMTdiNGIwN2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/7xDSkDN0ZRTY4DfNSyPyQzbiSu lQ8ZmeWG2zmmRjg34YAzvc2V1Ghl+Xw1HC8TE/BKLkp+PI17naKVd3yEhSZ52Q5w kkdDyepcOnhcIl6+K7Zobjw4CGmw0zdsO85WCcUIeksBvMtB/2pV0/OdJOUVfW5Z ov33C5HJKBbjru9yaazR/LV5wqhYcX+hGtmh3lBwYLtI2BQ3FUzc/Tg56oCV0GzY AgJrSk/EaFVzakSwybwxjnpUViEw20LDaO/M4HX+5oa4vEDOTS1Q7wmda3/44kHg fUunemIAMUBn9C4yXRmYW8oKiK/fTCJpjddEl5zpaOMPpprzwgISLtOuzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5kg3iBz/WsG/b0AuF46LF7SwfvMB8GA1UdIwQY MBaAFK//E6Z/Ilw8KmBmWMI5ZbgZHUAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl84VHBuOGlYRHdxWUdaWXdqbGx1QmtkUUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84ZjA2M2MtMTE5YS00N2EwLThiMGQt NmQyYjJiYTJhODhhLzEvcl84VHBuOGlYRHdxWUdaWXdqbGx1QmtkUUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84ZjA2M2MtMTE5YS00N2EwLThiMGQtNmQyYjJiYTJhODhh LzEvcl84VHBuOGlYRHdxWUdaWXdqbGx1QmtkUUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNjhtb1a ADq6rong9THUe/PA5n6Pbu+VoDcvCYTZLFEO1EHz2MKqbjwDuHJPLB/E6S6xX/jI BRJxz77zBg0UjmdR31gHicU9gtVJKk6seKFsSNP1eF+K2mT94o5t2JoTUteoB54f w5gydKIK3NOlWdFBZ5wyHJ1PMfvkZ0UO6kDFrWksTKJbiSbd38m/xzP/6vDiPJ4Z O/m6SbdXMlCn1UgkubERs5s+sA3zie5kB6osVMu0FjAVZncGLWT12j16GBeiKdo/ +1S5rTaC+ULHee++TGuKBSObj1i0ZkFO1btSMGV2rjMRjjxPrxxDepj38zfYmB4r tZHqyPGctsL/HA== -----END CERTIFICATE-----Generated at Fri Dec 19 15:58:35 2025 by rpki-client