This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft File: 8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft (raw, json) Hash identifier: PYLK1YPzLAchcjLf88f86F2XBdQgSoSew6wo0m4UAdA= Subject key identifier: 5A:B0:F1:AD:6C:0A:87:61:5C:1F:11:CC:11:76:34:0E:7B:52:D1:4A Authority key identifier: F0:59:4E:7A:31:DB:79:37:FA:B5:2F:CC:38:90:59:D3:45:1F:23:66 Certificate issuer: /CN=f0594e7a31db7937fab52fcc389059d3451f2366 Certificate serial: 019B5D897DA49DC8C7B20F1A42771BDE5251 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft Manifest number: D1 Signing time: Sat 27 Dec 2025 02:00:50 +0000 Manifest this update: Sat 27 Dec 2025 02:00:50 +0000 Manifest next update: Sun 28 Dec 2025 02:00:50 +0000 Files and hashes: 1: 1725gUGQIpKhUhC6TOahnEdES40.roa (hash: gz+cyjfpqWkO2//cF11n4nopLq+bPFaAXZONiWW+enE=) 2: 8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl (hash: F/iPhRyp3pYdcPCkD21IBjDYb6ba6ONOr2vBazaNfhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 02:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:7d:a4:9d:c8:c7:b2:0f:1a:42:77:1b:de:52:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0594e7a31db7937fab52fcc389059d3451f2366 Validity Not Before: Dec 27 02:00:50 2025 GMT Not After : Dec 28 02:00:50 2025 GMT Subject: CN=5ab0f1ad6c0a87615c1f11cc1176340e7b52d14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:79:e4:3f:89:1d:6b:d8:2a:ad:3d:18:45:b7: 41:68:47:a2:b6:60:db:e2:11:5d:e5:bb:43:19:7b: 6e:ab:c5:82:72:e6:00:51:90:87:a5:39:5c:76:2d: c2:80:6c:7e:de:5a:9e:03:fa:b7:bd:70:e2:9b:89: 3f:19:ba:03:1e:54:1b:57:77:19:db:e3:e0:cf:02: 14:96:89:ef:ec:d1:d7:0c:62:86:49:23:b5:92:8f: 3b:e1:13:e8:2d:e7:d0:39:73:2b:99:1c:20:c2:bc: 51:fc:6b:a4:2c:22:53:e6:f1:78:45:f0:7a:ba:3e: 09:9c:37:1e:94:f5:10:51:56:cb:e0:e2:93:c8:03: 48:0c:b5:1e:22:c5:29:53:dc:e4:45:66:44:9e:46: 43:87:ca:77:ee:a4:00:2f:74:f0:09:5b:f2:69:9a: 71:bf:a6:39:13:75:5b:3f:64:43:c0:53:13:9a:7b: 81:21:f6:24:27:aa:1f:0e:89:34:7c:d1:4c:cb:9b: cb:32:bb:0e:25:4e:b3:e8:ae:69:d8:97:9d:a1:31: 12:63:91:fe:48:01:31:ea:5b:e8:00:16:d0:73:ac: 83:03:57:09:36:17:51:87:52:92:e6:d0:e6:5b:8c: fb:87:84:43:49:90:a0:38:a3:95:b1:0b:bd:27:f0: 50:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B0:F1:AD:6C:0A:87:61:5C:1F:11:CC:11:76:34:0E:7B:52:D1:4A X509v3 Authority Key Identifier: keyid:F0:59:4E:7A:31:DB:79:37:FA:B5:2F:CC:38:90:59:D3:45:1F:23:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:b4:cf:8d:af:76:54:11:95:30:89:fe:94:ea:4c:27:1c:30: aa:2b:2b:64:99:f2:d1:5a:b9:28:ab:23:ba:50:d2:c5:0d:73: be:27:64:5c:05:6e:09:4c:b5:fe:2b:a1:32:0b:89:9f:d7:6d: 0b:03:6e:25:c0:3e:d1:cb:7f:6b:c9:14:b9:69:27:8e:45:6d: 67:3d:6c:8b:ab:2c:82:e0:a0:26:c8:d9:33:39:b5:18:10:21: 48:a5:ce:22:dc:3c:d9:ea:c6:71:1c:34:76:70:45:5e:78:f4: 0a:50:d4:12:3a:12:bb:e3:90:d6:bc:32:e3:fa:e6:8e:69:be: 31:54:76:3a:e8:16:6d:c2:47:82:e4:c0:bf:27:1c:5d:22:51: 64:3a:6d:42:02:0e:19:4e:6e:78:bb:6f:d4:5b:f9:3f:f8:d4: f2:cc:d6:ad:ab:cf:2a:eb:5d:36:38:2b:40:b6:c7:4f:2c:49: 20:93:bc:5d:69:06:47:18:2f:f8:ba:e7:bd:84:ad:f3:fa:5d: 47:c1:85:ea:d1:d9:82:3e:e5:9c:07:d4:4f:7d:8f:7b:d5:6b: aa:e4:53:c4:0b:8d:8d:5e:36:a8:10:b5:86:14:d6:7e:be:db: e4:fc:61:a4:62:4f:88:08:9f:d2:d7:50:ed:8b:a5:d1:a6:bb: 80:d4:15:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdiX2kncjHsg8aQncb3lJRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTk0ZTdhMzFkYjc5MzdmYWI1MmZjYzM4OTA1OWQzNDUx ZjIzNjYwHhcNMjUxMjI3MDIwMDUwWhcNMjUxMjI4MDIwMDUwWjAzMTEwLwYDVQQD Eyg1YWIwZjFhZDZjMGE4NzYxNWMxZjExY2MxMTc2MzQwZTdiNTJkMTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXnkP4kda9gqrT0YRbdBaEeitmDb 4hFd5btDGXtuq8WCcuYAUZCHpTlcdi3CgGx+3lqeA/q3vXDim4k/GboDHlQbV3cZ 2+PgzwIUlonv7NHXDGKGSSO1ko874RPoLefQOXMrmRwgwrxR/GukLCJT5vF4RfB6 uj4JnDcelPUQUVbL4OKTyANIDLUeIsUpU9zkRWZEnkZDh8p37qQAL3TwCVvyaZpx v6Y5E3VbP2RDwFMTmnuBIfYkJ6ofDok0fNFMy5vLMrsOJU6z6K5p2JedoTESY5H+ SAEx6lvoABbQc6yDA1cJNhdRh1KS5tDmW4z7h4RDSZCgOKOVsQu9J/BQzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqw8a1sCodhXB8RzBF2NA57UtFKMB8GA1UdIwQY MBaAFPBZTnox23k3+rUvzDiQWdNFHyNmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZsT2VqSGJlVGY2dFNfTU9KQlowMFVmSTJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xZDUxMzUtYjcxMi00MzFhLWEyOGIt YjU3ZjUwZjAwODA0LzEvOEZsT2VqSGJlVGY2dFNfTU9KQlowMFVmSTJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xZDUxMzUtYjcxMi00MzFhLWEyOGItYjU3ZjUwZjAwODA0 LzEvOEZsT2VqSGJlVGY2dFNfTU9KQlowMFVmSTJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7TPja92 VBGVMIn+lOpMJxwwqisrZJny0Vq5KKsjulDSxQ1zvidkXAVuCUy1/iuhMguJn9dt CwNuJcA+0ct/a8kUuWknjkVtZz1si6ssguCgJsjZMzm1GBAhSKXOItw82erGcRw0 dnBFXnj0ClDUEjoSu+OQ1rwy4/rmjmm+MVR2OugWbcJHguTAvyccXSJRZDptQgIO GU5ueLtv1Fv5P/jU8szWravPKutdNjgrQLbHTyxJIJO8XWkGRxgv+LrnvYSt8/pd R8GF6tHZgj7lnAfUT32Pe9VrquRTxAuNjV42qBC1hhTWfr7b5PxhpGJPiAif0tdQ 7Yul0aa7gNQVMg== -----END CERTIFICATE-----Generated at Sat Dec 27 11:42:46 2025 by rpki-client