This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft File: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft (raw, json) Hash identifier: tJf1dmUY3ZBVzEOg80ZpCimEGU/yT3BNEJbiyp3wY9g= Subject key identifier: D0:2D:6F:13:19:8E:BB:DA:68:2A:9C:84:6A:17:7A:9C:19:4A:E8:2D Authority key identifier: F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78 Certificate issuer: /CN=f1f5e0181c4bbae5c090ab159d06562f1322e278 Certificate serial: 019B50E06FD6991BE7610A2BE1E859E1C08D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft Manifest number: 0A4B Signing time: Wed 24 Dec 2025 15:00:44 +0000 Manifest this update: Wed 24 Dec 2025 15:00:44 +0000 Manifest next update: Thu 25 Dec 2025 15:00:44 +0000 Files and hashes: 1: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl (hash: rsoEXXSuM9u/z6rQH1NZRUsNwo04BYQKjYjYFM1WeZ8=) 2: UroSMBJ-dWGGRFh5Y1mFEYghmuA.roa (hash: m8pCii9ZrFUBgw1JUoFjV1fAPuVi2H0sk6feFoafD2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:6f:d6:99:1b:e7:61:0a:2b:e1:e8:59:e1:c0:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f5e0181c4bbae5c090ab159d06562f1322e278 Validity Not Before: Dec 24 15:00:44 2025 GMT Not After : Dec 25 15:00:44 2025 GMT Subject: CN=d02d6f13198ebbda682a9c846a177a9c194ae82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c3:0a:22:16:ff:9b:04:91:de:a6:3a:07:aa: 57:da:ac:e2:92:fb:85:83:78:0e:0f:49:87:1b:40: 79:cd:1f:14:ba:45:70:18:a0:e3:93:d3:41:4e:fc: e3:f0:da:f5:5b:58:f9:43:fe:98:1b:77:95:4b:6c: 10:f9:0c:a5:d5:b9:f0:ad:8f:ff:4c:54:52:8d:52: 41:05:5b:8f:c6:97:0f:d3:07:5c:0a:8c:bc:fc:06: 38:c8:65:cd:9b:84:0e:be:0e:c1:2b:88:d9:b9:a2: 73:08:b5:c2:63:0e:fa:9e:38:73:ba:d2:8c:42:7b: 2f:b1:93:a6:c5:9a:8c:47:46:9f:bb:77:10:e1:f5: de:ed:b1:48:be:0c:4b:76:a2:8d:c9:bb:e5:f1:e5: e2:03:cc:58:3e:5f:f6:b3:b7:91:c4:ea:fb:cc:98: bc:8b:83:60:ad:41:66:52:9d:c5:c6:38:b8:c0:99: 49:9b:f8:1c:aa:95:d7:53:5b:b4:40:ae:c4:b6:d6: ad:d2:64:96:d2:1e:bc:19:53:f7:44:3d:15:57:8b: 92:5e:0c:ef:0b:c4:26:fe:3c:49:2b:34:3b:87:23: 74:5e:e0:f0:d2:41:8a:7b:27:2c:15:ec:90:30:22: 33:bf:ce:5b:a3:37:01:ae:28:3c:92:ba:b3:72:69: 65:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2D:6F:13:19:8E:BB:DA:68:2A:9C:84:6A:17:7A:9C:19:4A:E8:2D X509v3 Authority Key Identifier: keyid:F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:4b:7f:b7:50:20:4a:fc:37:b0:91:bb:5b:a7:e9:ec:27:50: 93:74:92:c4:22:55:b8:42:1b:3c:9e:86:68:42:85:8e:d4:80: 1d:63:ee:2c:03:b4:94:6f:99:32:d5:5e:f5:44:ba:27:28:6e: 6e:38:30:b6:b9:a8:e7:ed:b1:89:18:db:55:26:bf:45:ef:6c: 35:6b:22:51:4b:f2:47:59:11:ee:47:1c:1d:92:23:81:81:1e: df:a4:db:2a:b6:39:c9:dd:53:25:84:e3:fc:fc:a4:32:57:6e: 32:05:f0:65:74:43:1c:c8:f2:87:5e:67:b6:e6:4e:bc:f1:c9: e4:8a:8e:b1:4b:ad:f0:be:d6:18:8e:41:a3:2a:87:a1:6b:12: 8d:ff:83:bf:9f:71:d0:1c:c2:3c:78:82:fc:cd:66:e2:1b:5f: 91:4d:87:f2:ae:c0:da:fa:b8:3a:d2:ac:bd:8a:b2:5c:9c:a6: 70:54:b7:01:c2:b0:b3:ad:31:41:cd:d2:b1:61:fc:94:e6:22: 7f:b1:2e:41:ab:fd:cc:65:0b:3f:9d:24:2d:9e:31:2c:ca:71: 37:18:2b:44:1e:11:1d:b9:c7:60:f3:72:13:c4:fd:ba:99:89: 6e:05:b3:d4:8f:03:6e:6f:06:6a:5f:ff:f6:04:75:b1:31:1e: b6:a0:52:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4G/WmRvnYQor4ehZ4cCNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjVlMDE4MWM0YmJhZTVjMDkwYWIxNTlkMDY1NjJmMTMy MmUyNzgwHhcNMjUxMjI0MTUwMDQ0WhcNMjUxMjI1MTUwMDQ0WjAzMTEwLwYDVQQD EyhkMDJkNmYxMzE5OGViYmRhNjgyYTljODQ2YTE3N2E5YzE5NGFlODJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8MKIhb/mwSR3qY6B6pX2qzikvuF g3gOD0mHG0B5zR8UukVwGKDjk9NBTvzj8Nr1W1j5Q/6YG3eVS2wQ+Qyl1bnwrY// TFRSjVJBBVuPxpcP0wdcCoy8/AY4yGXNm4QOvg7BK4jZuaJzCLXCYw76njhzutKM QnsvsZOmxZqMR0afu3cQ4fXe7bFIvgxLdqKNybvl8eXiA8xYPl/2s7eRxOr7zJi8 i4NgrUFmUp3Fxji4wJlJm/gcqpXXU1u0QK7Ettat0mSW0h68GVP3RD0VV4uSXgzv C8Qm/jxJKzQ7hyN0XuDw0kGKeycsFeyQMCIzv85bozcBrig8krqzcmll5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAtbxMZjrvaaCqchGoXepwZSugtMB8GA1UdIwQY MBaAFPH14BgcS7rlwJCrFZ0GVi8TIuJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yOTQ2ODMtNTc0Ny00ZWExLWI3N2Mt OWJlYmY3ZGNjMWE2LzEvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yOTQ2ODMtNTc0Ny00ZWExLWI3N2MtOWJlYmY3ZGNjMWE2 LzEvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEt/t1Ag Svw3sJG7W6fp7CdQk3SSxCJVuEIbPJ6GaEKFjtSAHWPuLAO0lG+ZMtVe9US6Jyhu bjgwtrmo5+2xiRjbVSa/Re9sNWsiUUvyR1kR7kccHZIjgYEe36TbKrY5yd1TJYTj /PykMlduMgXwZXRDHMjyh15ntuZOvPHJ5IqOsUut8L7WGI5BoyqHoWsSjf+Dv59x 0BzCPHiC/M1m4htfkU2H8q7A2vq4OtKsvYqyXJymcFS3AcKws60xQc3SsWH8lOYi f7EuQav9zGULP50kLZ4xLMpxNxgrRB4RHbnHYPNyE8T9upmJbgWz1I8Dbm8Gal// 9gR1sTEetqBShQ== -----END CERTIFICATE-----Generated at Thu Dec 25 01:23:10 2025 by rpki-client