This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft File: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft (raw, json) Hash identifier: bMqK9K6T31YNFtmFJEZlhnP5PibjQBK8Crxib8gGAps= Subject key identifier: A5:5E:44:37:6C:69:9D:C9:4F:C5:B2:C6:F1:62:9D:14:A6:95:FC:63 Authority key identifier: F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78 Certificate issuer: /CN=f1f5e0181c4bbae5c090ab159d06562f1322e278 Certificate serial: 019B4926DFEAB3909BA6EEA9251FBADA0AF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft Manifest number: 0A47 Signing time: Tue 23 Dec 2025 03:00:42 +0000 Manifest this update: Tue 23 Dec 2025 03:00:42 +0000 Manifest next update: Wed 24 Dec 2025 03:00:42 +0000 Files and hashes: 1: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl (hash: 9Tn5rJlHGPa+m44iS5x4f0wFGQXSHI5lCp0ogOG+Jkw=) 2: UroSMBJ-dWGGRFh5Y1mFEYghmuA.roa (hash: m8pCii9ZrFUBgw1JUoFjV1fAPuVi2H0sk6feFoafD2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:26:df:ea:b3:90:9b:a6:ee:a9:25:1f:ba:da:0a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f5e0181c4bbae5c090ab159d06562f1322e278 Validity Not Before: Dec 23 03:00:42 2025 GMT Not After : Dec 24 03:00:42 2025 GMT Subject: CN=a55e44376c699dc94fc5b2c6f1629d14a695fc63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:66:7d:cd:90:b3:47:03:57:e2:cf:30:49:8d: d5:c6:a6:96:1a:0e:74:56:9d:19:fc:88:b2:29:41: e8:c2:e6:57:91:79:48:0d:2c:12:c2:df:2d:5f:78: 5a:f8:26:e4:22:45:2b:63:b9:90:f5:cd:e2:c6:87: 9c:a9:c8:be:2d:9b:d3:13:fa:93:f8:e0:35:60:c4: 0d:df:24:98:75:31:44:e9:4b:bf:45:b5:95:07:ae: 96:a4:44:d3:a3:22:04:32:c7:98:ce:13:cc:d6:2a: 4e:3c:91:05:aa:25:e9:bf:19:fc:d3:d4:cf:ab:00: c3:a9:19:d5:21:f9:38:d9:25:2f:a5:ec:da:2e:f6: 44:20:e7:a7:2d:1d:bd:51:08:ca:7c:09:c4:f7:35: 3c:2b:8a:39:26:fb:52:be:74:8b:4b:1b:cb:f1:a5: 38:40:e6:86:b2:4b:d4:bf:5f:e9:45:78:17:3e:25: df:3e:10:b7:d6:08:b6:d1:cb:42:93:3d:84:bd:90: 3f:b2:62:f4:c2:8f:34:57:e1:eb:3f:a8:0b:8b:a6: 14:2a:23:89:68:01:6b:6c:11:38:95:d9:c8:f6:97: 53:53:7d:24:d0:4a:9a:46:24:5a:15:97:d5:a3:32: 73:cb:10:94:cb:f7:98:66:45:cd:af:5e:e3:a7:c1: cf:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5E:44:37:6C:69:9D:C9:4F:C5:B2:C6:F1:62:9D:14:A6:95:FC:63 X509v3 Authority Key Identifier: keyid:F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f1:bc:ce:0f:0e:17:53:6b:c7:1d:12:75:e5:34:a7:6c:56: a5:da:46:65:29:76:3a:13:32:14:c2:24:84:09:af:7d:39:bd: fb:30:cc:97:f3:0f:bc:fe:fa:c2:3f:44:85:ac:dd:a2:3e:fb: c9:ce:78:17:47:2c:e7:f1:45:05:01:49:cd:f8:59:f4:2f:8d: 4e:ab:47:96:6a:76:8c:34:28:ae:01:1d:63:a9:5d:39:60:68: 15:0b:de:c9:95:f8:31:03:93:f7:92:c7:78:6a:9a:9a:24:e0: 83:36:ec:a7:00:b1:ae:7d:27:3e:51:89:1d:bc:2a:85:b3:3d: c4:7b:ad:79:a1:74:ff:45:cd:99:62:d2:be:45:52:f7:a5:ed: 92:9d:40:66:fa:8f:3e:4e:61:f7:46:91:32:4f:30:07:3b:61: ee:ec:a4:6b:ac:8c:f8:de:f7:27:34:3e:02:ae:16:a9:47:28: ed:28:1b:18:f6:03:5d:02:b9:30:72:9a:e7:cc:d7:e3:c3:61: 34:6b:3a:e4:8b:19:b2:94:ad:65:de:5c:3f:d0:4f:5b:4b:4e: a8:58:97:51:08:22:5d:21:58:92:21:ed:e0:87:6e:39:66:55: d1:a4:32:67:dc:bc:bd:14:9d:f8:81:8a:67:ce:2c:31:9a:bd: 16:0e:23:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJt/qs5Cbpu6pJR+62gr4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjVlMDE4MWM0YmJhZTVjMDkwYWIxNTlkMDY1NjJmMTMy MmUyNzgwHhcNMjUxMjIzMDMwMDQyWhcNMjUxMjI0MDMwMDQyWjAzMTEwLwYDVQQD EyhhNTVlNDQzNzZjNjk5ZGM5NGZjNWIyYzZmMTYyOWQxNGE2OTVmYzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWZ9zZCzRwNX4s8wSY3VxqaWGg50 Vp0Z/IiyKUHowuZXkXlIDSwSwt8tX3ha+CbkIkUrY7mQ9c3ixoecqci+LZvTE/qT +OA1YMQN3ySYdTFE6Uu/RbWVB66WpETToyIEMseYzhPM1ipOPJEFqiXpvxn809TP qwDDqRnVIfk42SUvpezaLvZEIOenLR29UQjKfAnE9zU8K4o5JvtSvnSLSxvL8aU4 QOaGskvUv1/pRXgXPiXfPhC31gi20ctCkz2EvZA/smL0wo80V+HrP6gLi6YUKiOJ aAFrbBE4ldnI9pdTU30k0EqaRiRaFZfVozJzyxCUy/eYZkXNr17jp8HP4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVeRDdsaZ3JT8WyxvFinRSmlfxjMB8GA1UdIwQY MBaAFPH14BgcS7rlwJCrFZ0GVi8TIuJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yOTQ2ODMtNTc0Ny00ZWExLWI3N2Mt OWJlYmY3ZGNjMWE2LzEvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yOTQ2ODMtNTc0Ny00ZWExLWI3N2MtOWJlYmY3ZGNjMWE2 LzEvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPG8zg8O F1Nrxx0SdeU0p2xWpdpGZSl2OhMyFMIkhAmvfTm9+zDMl/MPvP76wj9Ehazdoj77 yc54F0cs5/FFBQFJzfhZ9C+NTqtHlmp2jDQorgEdY6ldOWBoFQveyZX4MQOT95LH eGqamiTggzbspwCxrn0nPlGJHbwqhbM9xHuteaF0/0XNmWLSvkVS96Xtkp1AZvqP Pk5h90aRMk8wBzth7uyka6yM+N73JzQ+Aq4WqUco7SgbGPYDXQK5MHKa58zX48Nh NGs65IsZspStZd5cP9BPW0tOqFiXUQgiXSFYkiHt4IduOWZV0aQyZ9y8vRSd+IGK Z84sMZq9Fg4j5A== -----END CERTIFICATE-----Generated at Tue Dec 23 09:20:06 2025 by rpki-client