This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft File: 8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json) Hash identifier: v2kLbwLB28esbasD90AOT1P/yGJPycC8U+UDTQWjcLM= Subject key identifier: 18:86:CA:C4:A1:C8:D2:8D:E3:93:11:38:EC:F9:16:45:9B:D6:44:87 Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7 Certificate issuer: /CN=f1359ff10c1564421e974573ace1ba62333b82a7 Certificate serial: 019B3C7E9859AD2F392A159BE82E761C8DB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft Manifest number: 141D Signing time: Sat 20 Dec 2025 16:01:27 +0000 Manifest this update: Sat 20 Dec 2025 16:01:27 +0000 Manifest next update: Sun 21 Dec 2025 16:01:27 +0000 Files and hashes: 1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: vTX2SrD2UgkSAqaj/FBGccFs04bWIuvf5s7wXRZv65s=) 2: xcycZms0_ZHCVQVtErEWcPT6uzM.roa (hash: LGvEW3RDqUd1ArWiz/8ADiBje4yqqRUes0HgBtn3AOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:98:59:ad:2f:39:2a:15:9b:e8:2e:76:1c:8d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7 Validity Not Before: Dec 20 16:01:27 2025 GMT Not After : Dec 21 16:01:27 2025 GMT Subject: CN=1886cac4a1c8d28de3931138ecf916459bd64487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:06:a2:69:b3:e5:99:8c:16:f0:a1:0a:0a:52: 87:67:1b:17:fa:4f:de:31:a1:62:f0:46:bc:b1:85: 13:a1:52:ca:01:02:a4:1a:70:15:2c:5a:58:93:22: 78:e6:75:8f:ac:0e:57:d0:39:d4:83:77:27:d3:e0: 0f:52:bb:2f:ed:b0:4d:77:9c:0c:3d:c3:c8:d5:48: 2f:c3:74:ef:6b:6e:71:a2:8d:e4:90:52:fd:bc:e1: a0:af:85:09:f7:39:4f:67:1f:54:11:5f:35:3a:82: 27:f2:bf:ba:6f:b2:d9:15:93:69:fa:64:1d:b9:bf: c9:cc:fc:fa:ba:5c:f5:4d:97:3d:66:c3:df:de:ef: fd:38:0f:f3:75:23:fc:be:02:ca:92:9d:57:91:ec: 8b:33:8c:71:e6:1a:8d:fb:5e:8e:26:0f:b8:bb:9c: 7d:08:92:d0:88:b8:e3:7a:84:cd:96:18:ab:ce:7c: 34:88:41:a5:61:a6:76:60:d8:e7:f4:81:99:d4:59: 24:e6:ee:5a:b1:06:85:b3:de:3c:98:47:15:28:7d: fc:07:1e:2a:f8:5e:38:ce:b4:59:91:8c:01:b0:16: 54:61:0a:c1:a0:55:1d:9e:80:d0:36:8f:50:10:bc: 82:30:b7:6c:e3:bd:86:89:8e:bc:cd:4c:17:2b:01: f2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:86:CA:C4:A1:C8:D2:8D:E3:93:11:38:EC:F9:16:45:9B:D6:44:87 X509v3 Authority Key Identifier: keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:94:74:eb:b6:a5:cd:bc:12:ef:ff:d8:28:10:53:20:eb:ff: 1f:f3:5d:a3:32:62:28:63:31:8b:36:b9:e2:9b:40:c8:cf:eb: 42:a7:6c:c6:da:3e:71:d8:67:a4:c1:a1:3d:80:ce:be:47:23: 41:85:e5:74:96:d0:a4:14:2f:e9:ce:53:43:bb:c5:55:9f:0b: 5b:03:34:49:24:3e:db:ff:7c:d1:06:31:57:16:15:0b:5b:42: 2d:86:c6:44:4c:b0:37:ac:46:18:d7:36:ee:43:5e:af:c5:3e: c3:30:55:f1:f0:c4:77:be:19:bc:58:c9:a5:36:dd:9f:53:c9: f6:6e:5b:4e:26:f3:53:85:e3:e1:bb:e7:4e:a5:77:3f:2e:ec: ee:9e:78:5b:8d:be:54:b2:ad:af:59:42:d0:bb:be:4d:b2:c5: f0:a7:19:9b:7a:12:69:11:3d:f6:7b:98:21:cd:94:20:1f:1a: f1:ab:56:db:7d:49:2a:60:fc:63:37:e8:f8:21:95:2d:85:6b: 4f:55:55:ca:97:38:e3:a3:3a:0f:7e:c8:68:db:03:cb:0a:b6: e5:18:00:c6:e5:f0:11:54:c4:18:4a:02:1b:7d:61:30:72:41: 68:f2:cb:2b:3a:16:35:09:94:69:e7:da:1c:8e:17:a2:10:54: 7f:dd:db:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fphZrS85KhWb6C52HI2xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzU5ZmYxMGMxNTY0NDIxZTk3NDU3M2FjZTFiYTYyMzMz YjgyYTcwHhcNMjUxMjIwMTYwMTI3WhcNMjUxMjIxMTYwMTI3WjAzMTEwLwYDVQQD EygxODg2Y2FjNGExYzhkMjhkZTM5MzExMzhlY2Y5MTY0NTliZDY0NDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogaiabPlmYwW8KEKClKHZxsX+k/e MaFi8Ea8sYUToVLKAQKkGnAVLFpYkyJ45nWPrA5X0DnUg3cn0+APUrsv7bBNd5wM PcPI1Ugvw3Tva25xoo3kkFL9vOGgr4UJ9zlPZx9UEV81OoIn8r+6b7LZFZNp+mQd ub/JzPz6ulz1TZc9ZsPf3u/9OA/zdSP8vgLKkp1XkeyLM4xx5hqN+16OJg+4u5x9 CJLQiLjjeoTNlhirznw0iEGlYaZ2YNjn9IGZ1Fkk5u5asQaFs948mEcVKH38Bx4q +F44zrRZkYwBsBZUYQrBoFUdnoDQNo9QELyCMLds472GiY68zUwXKwHyHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiGysShyNKN45MROOz5FkWb1kSHMB8GA1UdIwQY MBaAFPE1n/EMFWRCHpdFc6zhumIzO4KnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mOGRmZjktNmRhYy00MzEzLTk5ODAt YWI0YmEzMzJmZTE1LzEvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9mOGRmZjktNmRhYy00MzEzLTk5ODAtYWI0YmEzMzJmZTE1 LzEvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpR067al zbwS7//YKBBTIOv/H/NdozJiKGMxiza54ptAyM/rQqdsxto+cdhnpMGhPYDOvkcj QYXldJbQpBQv6c5TQ7vFVZ8LWwM0SSQ+2/980QYxVxYVC1tCLYbGREywN6xGGNc2 7kNer8U+wzBV8fDEd74ZvFjJpTbdn1PJ9m5bTibzU4Xj4bvnTqV3Py7s7p54W42+ VLKtr1lC0Lu+TbLF8KcZm3oSaRE99nuYIc2UIB8a8atW231JKmD8Yzfo+CGVLYVr T1VVypc446M6D37IaNsDywq25RgAxuXwEVTEGEoCG31hMHJBaPLLKzoWNQmUaefa HI4XohBUf93blQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:11:12 2025 by rpki-client