This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft File: 8spAIO_uYcMQasn-znnHpo9xqcs.mft (raw, json) Hash identifier: k1Znlkd0KdHYSPdidCyznrZbeHHGJsUtDTAg0tcXexI= Subject key identifier: 3D:54:E9:71:1B:1A:D5:9F:4E:31:53:23:4D:58:41:85:AE:9E:51:BF Authority key identifier: F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB Certificate issuer: /CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb Certificate serial: 019B3A588686C90ECAFC6BFE87F455FF66AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft Manifest number: 0B63 Signing time: Sat 20 Dec 2025 06:00:38 +0000 Manifest this update: Sat 20 Dec 2025 06:00:38 +0000 Manifest next update: Sun 21 Dec 2025 06:00:38 +0000 Files and hashes: 1: 8spAIO_uYcMQasn-znnHpo9xqcs.crl (hash: 0uyMzAg+zkDG3HeQZzLm9Pl/dtPGQNt99Lz0pfcA/xg=) 2: qQhJwJzvyO7AKVxT0Cih5AUrQns.roa (hash: BItfqfpG3F7hqQ1NJHEpQWVKKNNg5IgOl83auOyNXFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:86:86:c9:0e:ca:fc:6b:fe:87:f4:55:ff:66:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb Validity Not Before: Dec 20 06:00:38 2025 GMT Not After : Dec 21 06:00:38 2025 GMT Subject: CN=3d54e9711b1ad59f4e3153234d584185ae9e51bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:db:f6:92:9b:99:1d:5a:63:a5:06:4c:18:c7: 68:18:ca:0e:90:ec:83:37:d7:74:6d:f0:9d:5e:d1: 83:99:f5:3d:0d:9e:18:08:8f:87:8c:e7:66:1e:de: bc:f2:5a:9b:de:a1:76:c5:1a:b0:19:7b:bf:71:2a: 46:cd:4b:63:92:71:3e:81:57:13:27:cb:7c:7d:5d: a4:f2:ac:9a:f6:4a:75:9f:0c:3b:32:c8:c8:df:93: 29:9f:69:6a:48:b6:24:88:89:4f:a7:d7:e4:a2:b8: b9:f2:5b:13:0e:1a:30:fe:46:36:84:6c:f2:4c:4a: 24:18:98:cf:85:03:59:54:2e:51:dc:d2:80:f4:93: fa:72:c7:cb:51:70:3a:a5:ce:4c:15:70:b6:f6:dd: ec:b6:54:b2:9c:40:e4:3e:4e:8b:d5:00:48:06:30: a9:d2:30:dc:19:87:94:c5:42:ca:c1:19:12:b2:48: 51:ca:4c:e6:86:be:52:c1:14:49:08:b4:28:d3:c8: 94:e5:b4:21:dc:f5:3d:17:10:cb:2a:24:e2:e0:d3: a5:d6:94:6c:63:0e:77:55:45:3b:f9:f0:a2:76:1e: 72:44:c3:f9:91:70:24:31:c8:49:8e:80:53:97:35: bd:d0:fd:ab:c9:9e:a8:4e:ab:cc:c3:d4:96:2d:f7: 5a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:54:E9:71:1B:1A:D5:9F:4E:31:53:23:4D:58:41:85:AE:9E:51:BF X509v3 Authority Key Identifier: keyid:F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:f9:8b:e5:0f:93:53:8d:17:20:32:32:a6:52:e7:ad:85:9b: 03:25:ca:26:3d:31:87:fa:f5:33:a1:d3:d8:42:03:e5:87:82: dc:89:6a:85:7e:fb:26:20:c5:35:af:08:66:91:20:fd:ae:07: cd:ed:ab:f0:28:5d:81:aa:6b:2c:00:d7:1c:84:a4:26:77:82: b9:f7:b1:5b:8e:7b:d0:fe:1b:92:92:d9:e3:6c:79:54:4a:d4: 9b:44:98:90:28:2c:bb:e3:19:ee:44:08:cf:f5:c7:db:ae:7c: 27:08:ce:3e:a9:fa:86:3f:72:4b:70:f4:27:4a:f7:ce:cd:92: 22:74:7a:0c:6d:6e:b2:2f:6e:03:a7:17:5b:ad:93:de:06:3d: 10:b1:1c:1e:74:fe:51:0f:62:1f:ab:a9:bf:ce:2b:b7:ab:77: 10:1b:da:15:fe:2f:b5:d9:9f:d1:b5:ed:84:09:c6:cc:be:65: bd:74:3a:6b:30:b2:da:70:3e:b3:50:4b:5a:2e:a6:b7:31:22: dd:88:1c:47:01:2d:67:6a:ff:88:d2:7c:9a:d7:7c:95:da:7d: 5d:61:8d:f8:1f:7b:3a:c5:ae:f9:a3:1f:fa:58:20:b6:38:10: cb:2f:ef:cc:82:00:88:fc:59:5e:32:f6:85:be:75:2a:b9:99: a3:9e:db:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WIaGyQ7K/Gv+h/RV/2auMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyY2E0MDIwZWZlZTYxYzMxMDZhYzlmZWNlNzljN2E2OGY3 MWE5Y2IwHhcNMjUxMjIwMDYwMDM4WhcNMjUxMjIxMDYwMDM4WjAzMTEwLwYDVQQD EygzZDU0ZTk3MTFiMWFkNTlmNGUzMTUzMjM0ZDU4NDE4NWFlOWU1MWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9v2kpuZHVpjpQZMGMdoGMoOkOyD N9d0bfCdXtGDmfU9DZ4YCI+HjOdmHt688lqb3qF2xRqwGXu/cSpGzUtjknE+gVcT J8t8fV2k8qya9kp1nww7MsjI35Mpn2lqSLYkiIlPp9fkori58lsTDhow/kY2hGzy TEokGJjPhQNZVC5R3NKA9JP6csfLUXA6pc5MFXC29t3stlSynEDkPk6L1QBIBjCp 0jDcGYeUxULKwRkSskhRykzmhr5SwRRJCLQo08iU5bQh3PU9FxDLKiTi4NOl1pRs Yw53VUU7+fCidh5yRMP5kXAkMchJjoBTlzW90P2ryZ6oTqvMw9SWLfdatQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1U6XEbGtWfTjFTI01YQYWunlG/MB8GA1UdIwQY MBaAFPLKQCDv7mHDEGrJ/s55x6aPcanLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHNwQUlPX3VZY01RYXNuLXpubkhwbzl4cWNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS82OGQzNDgtYWI2NS00MTVmLTk3NTEt Y2ExZmJmN2JiOGM4LzEvOHNwQUlPX3VZY01RYXNuLXpubkhwbzl4cWNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS82OGQzNDgtYWI2NS00MTVmLTk3NTEtY2ExZmJmN2JiOGM4 LzEvOHNwQUlPX3VZY01RYXNuLXpubkhwbzl4cWNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/mL5Q+T U40XIDIyplLnrYWbAyXKJj0xh/r1M6HT2EID5YeC3IlqhX77JiDFNa8IZpEg/a4H ze2r8ChdgaprLADXHISkJneCufexW4570P4bkpLZ42x5VErUm0SYkCgsu+MZ7kQI z/XH2658JwjOPqn6hj9yS3D0J0r3zs2SInR6DG1usi9uA6cXW62T3gY9ELEcHnT+ UQ9iH6upv84rt6t3EBvaFf4vtdmf0bXthAnGzL5lvXQ6azCy2nA+s1BLWi6mtzEi 3YgcRwEtZ2r/iNJ8mtd8ldp9XWGN+B97OsWu+aMf+lggtjgQyy/vzIIAiPxZXjL2 hb51KrmZo57bvg== -----END CERTIFICATE-----Generated at Sat Dec 20 11:45:24 2025 by rpki-client