This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft File: 8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json) Hash identifier: JHvULO5Y0jl2B0jh3p0e0kZHp2E0UuxYBsFD2bt8CZE= Subject key identifier: 8D:C0:B5:F1:C4:18:9F:AD:9C:4D:07:93:D3:D3:39:27:62:B6:1C:F8 Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7 Certificate issuer: /CN=f1359ff10c1564421e974573ace1ba62333b82a7 Certificate serial: 019B53AABC131240C3487D5070389DD72643 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft Manifest number: 1429 Signing time: Thu 25 Dec 2025 04:00:56 +0000 Manifest this update: Thu 25 Dec 2025 04:00:56 +0000 Manifest next update: Fri 26 Dec 2025 04:00:56 +0000 Files and hashes: 1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: ieybiMO1WY3bDmfeOS1RHST+FOxmLsPllD/GpBa8DJo=) 2: xcycZms0_ZHCVQVtErEWcPT6uzM.roa (hash: LGvEW3RDqUd1ArWiz/8ADiBje4yqqRUes0HgBtn3AOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:bc:13:12:40:c3:48:7d:50:70:38:9d:d7:26:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7 Validity Not Before: Dec 25 04:00:56 2025 GMT Not After : Dec 26 04:00:56 2025 GMT Subject: CN=8dc0b5f1c4189fad9c4d0793d3d3392762b61cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:88:56:ad:f8:85:ea:56:fd:28:e4:5a:35:2e: e9:48:94:dc:64:fb:c5:71:61:ec:70:b2:08:b6:6a: 68:a6:3e:20:d7:6c:8c:d2:d5:61:73:21:76:d5:e5: 88:0e:ec:91:40:60:12:ce:91:e3:4b:40:34:de:72: 14:0f:de:aa:50:5b:01:f5:b0:89:39:14:15:a9:36: 5b:fb:01:74:87:2e:aa:56:38:57:d1:58:25:52:d1: 75:37:da:5d:cb:3e:36:f9:41:05:6c:19:a2:2b:95: d1:93:50:db:37:a5:49:71:64:ca:01:50:5a:06:01: ee:1d:9f:b7:bc:0b:fd:98:a1:67:e5:03:92:b8:9b: 20:ab:e3:2d:bc:ad:e1:13:6d:35:81:78:2c:fb:96: 82:ae:8d:19:ae:34:ca:c6:88:0c:40:64:60:af:6f: 2b:dc:cb:e4:0e:34:83:08:81:26:cf:07:8b:88:36: 68:b8:f3:f2:24:6e:d4:99:09:20:c9:4f:1c:ae:d4: c4:51:82:9d:93:1b:58:07:33:49:9e:fb:63:ce:e3: 80:7e:29:49:52:86:b6:e8:64:3c:f5:fe:ad:57:3d: 71:b7:c9:df:78:ec:f5:22:e0:fb:fd:20:d3:f8:84: 40:07:05:fe:03:a4:16:9d:92:57:e8:8b:7f:ee:af: a0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C0:B5:F1:C4:18:9F:AD:9C:4D:07:93:D3:D3:39:27:62:B6:1C:F8 X509v3 Authority Key Identifier: keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f0:44:a3:4c:c9:7d:51:11:00:02:1b:0d:a0:94:0d:6b:bf: be:82:da:27:0b:66:43:78:da:d9:20:57:b3:ff:64:38:ea:58: 7c:9f:f9:90:f7:5e:8f:d3:2a:39:9a:17:26:25:de:3d:a2:9a: 24:cf:48:5b:e5:6a:0c:ff:c8:30:a6:a3:ba:84:a2:b1:5c:e4: 6b:08:dc:a0:33:32:ca:1f:61:ec:ed:fa:12:cb:82:28:f2:b5: c5:d9:b2:b9:fc:3f:56:55:f4:9a:50:c6:87:c1:33:4f:1f:20: 17:24:01:22:7a:e2:07:36:dc:a0:90:58:3d:27:fb:0c:4e:5f: f8:7c:dd:65:10:b3:5f:d6:27:79:fa:c5:a9:66:05:3d:ac:0f: 90:98:a2:f3:a3:b2:f2:ca:41:0f:4b:c5:b7:7d:a9:6e:b5:cb: 61:ba:b1:50:f3:6c:fa:57:55:61:bd:ad:e9:be:25:51:71:14: 11:73:ec:eb:2e:93:bb:c4:31:13:f6:1f:8b:bd:2d:f7:4e:8d: 76:07:e2:47:a8:1f:2a:f7:62:65:d4:00:18:de:1f:13:44:3f: 13:1d:3b:a5:41:02:3d:50:54:89:58:2d:7b:c1:a9:8a:2f:32: 2f:97:cc:ea:56:c1:2b:d8:88:fd:93:96:30:79:a9:b3:f8:b7: e7:8d:08:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqrwTEkDDSH1QcDid1yZDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzU5ZmYxMGMxNTY0NDIxZTk3NDU3M2FjZTFiYTYyMzMz YjgyYTcwHhcNMjUxMjI1MDQwMDU2WhcNMjUxMjI2MDQwMDU2WjAzMTEwLwYDVQQD Eyg4ZGMwYjVmMWM0MTg5ZmFkOWM0ZDA3OTNkM2QzMzkyNzYyYjYxY2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYhWrfiF6lb9KORaNS7pSJTcZPvF cWHscLIItmpopj4g12yM0tVhcyF21eWIDuyRQGASzpHjS0A03nIUD96qUFsB9bCJ ORQVqTZb+wF0hy6qVjhX0VglUtF1N9pdyz42+UEFbBmiK5XRk1DbN6VJcWTKAVBa BgHuHZ+3vAv9mKFn5QOSuJsgq+MtvK3hE201gXgs+5aCro0ZrjTKxogMQGRgr28r 3MvkDjSDCIEmzweLiDZouPPyJG7UmQkgyU8crtTEUYKdkxtYBzNJnvtjzuOAfilJ Uoa26GQ89f6tVz1xt8nfeOz1IuD7/SDT+IRABwX+A6QWnZJX6It/7q+g6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3AtfHEGJ+tnE0Hk9PTOSdithz4MB8GA1UdIwQY MBaAFPE1n/EMFWRCHpdFc6zhumIzO4KnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mOGRmZjktNmRhYy00MzEzLTk5ODAt YWI0YmEzMzJmZTE1LzEvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9mOGRmZjktNmRhYy00MzEzLTk5ODAtYWI0YmEzMzJmZTE1 LzEvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/BEo0zJ fVERAAIbDaCUDWu/voLaJwtmQ3ja2SBXs/9kOOpYfJ/5kPdej9MqOZoXJiXePaKa JM9IW+VqDP/IMKajuoSisVzkawjcoDMyyh9h7O36EsuCKPK1xdmyufw/VlX0mlDG h8EzTx8gFyQBInriBzbcoJBYPSf7DE5f+HzdZRCzX9YnefrFqWYFPawPkJii86Oy 8spBD0vFt32pbrXLYbqxUPNs+ldVYb2t6b4lUXEUEXPs6y6Tu8QxE/Yfi70t906N dgfiR6gfKvdiZdQAGN4fE0Q/Ex07pUECPVBUiVgte8Gpii8yL5fM6lbBK9iI/ZOW MHmps/i3540Ijw== -----END CERTIFICATE-----Generated at Thu Dec 25 05:34:18 2025 by rpki-client