This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft File: 8lxlPGBUhmBCpwb3F7JLIf35gag.mft (raw, json) Hash identifier: krP4Z1zDNAbQKBPhqCECkISNU/Bi4KA6A0pAIbZSlyQ= Subject key identifier: F6:BC:E9:2E:92:68:05:A9:36:3D:3C:FB:0D:0D:3B:1B:88:50:29:20 Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8 Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8 Certificate serial: 019B5C3FE71EF50221774E0ED5D7E9AB57B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft Manifest number: 0799 Signing time: Fri 26 Dec 2025 20:00:50 +0000 Manifest this update: Fri 26 Dec 2025 20:00:50 +0000 Manifest next update: Sat 27 Dec 2025 20:00:50 +0000 Files and hashes: 1: 8lxlPGBUhmBCpwb3F7JLIf35gag.crl (hash: tbOQNM9dWHqaq3LDEXGAN3MKyVpE7Ce1YiUBrQFtVA0=) 2: SAkp88S54aJN6C-GCtNeqgpkjzs.roa (hash: xdHHAbJE3WiWjdXV3cBquprUR130i7lr4362iYiFT8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:3f:e7:1e:f5:02:21:77:4e:0e:d5:d7:e9:ab:57:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8 Validity Not Before: Dec 26 20:00:50 2025 GMT Not After : Dec 27 20:00:50 2025 GMT Subject: CN=f6bce92e926805a9363d3cfb0d0d3b1b88502920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:53:f7:0d:59:27:5b:d6:da:d2:15:09:a1:58: 42:6d:78:3c:5b:00:f4:28:6c:6d:a6:b3:a3:da:25: 39:ee:9c:d8:9d:e4:fd:a5:66:9c:d4:7d:87:cb:ac: e2:75:16:1e:38:ca:c2:d8:28:74:ff:48:15:62:b7: 88:80:2f:8b:4d:be:e8:c3:47:39:e8:0c:b5:7b:b1: 96:c0:d1:5c:99:15:59:84:8e:c1:02:7e:7e:70:65: 7b:f8:4f:19:c3:c2:cb:fe:22:50:07:69:1b:85:87: 24:94:5c:b6:5e:34:e0:ba:27:1c:93:3f:87:08:a6: bb:dc:59:5a:cc:ca:4b:a2:03:5c:e1:b9:ad:e3:60: 39:5d:b4:e7:c9:9f:76:a6:e8:2e:9a:ee:63:31:fb: 77:1f:bc:a7:78:60:87:7f:e7:17:d1:7d:53:e7:c4: 3a:83:22:60:cf:df:61:b4:b2:af:a0:6b:eb:b6:fd: 02:0e:df:5e:9b:33:ff:ab:a9:29:0c:d6:46:6b:3f: 3c:c1:a6:a9:3e:8d:54:65:46:52:59:c5:1d:28:5f: 14:af:72:d1:cf:71:a2:d3:8a:56:57:95:fd:04:1e: 0b:72:ae:72:5c:a1:38:7d:d9:ab:ad:94:53:ac:51: 1f:9b:7d:17:74:6e:f2:45:05:62:4e:80:91:ed:8e: 97:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BC:E9:2E:92:68:05:A9:36:3D:3C:FB:0D:0D:3B:1B:88:50:29:20 X509v3 Authority Key Identifier: keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:0e:f0:3b:aa:2d:43:bd:7f:c0:19:53:4e:82:59:cc:4e:ce: 33:56:8b:76:39:77:1c:85:6b:c4:c5:70:1f:fb:aa:77:7b:46: 76:35:10:68:c2:e3:88:92:83:87:05:bb:07:15:73:5b:0c:76: 0e:91:85:48:40:2d:80:5e:8e:98:78:6b:8a:c0:68:4c:e6:b7: 7c:a8:42:d4:e6:cb:ef:5c:2d:a2:a7:fc:71:a5:ee:7a:9e:8c: bf:cc:ce:54:1f:e4:4a:fa:59:bc:e4:d0:a0:83:30:3c:0f:81: a9:90:9e:03:e9:c7:05:b7:60:ac:d9:28:74:d6:d7:08:92:16: ca:6d:3d:c6:a1:9a:fd:42:dd:01:4a:3c:bb:d9:fa:a7:15:e7: 47:6c:f7:7b:ac:2c:91:55:80:12:f6:35:f6:64:84:67:48:ae: 81:11:26:1b:63:08:e9:f3:8e:2b:93:23:de:7c:9c:f5:57:67: 3a:c9:96:48:3c:6d:7c:6c:0e:a7:38:ec:23:a8:87:b3:90:df: 1d:de:44:97:04:26:da:4f:a4:cb:bc:b8:a0:78:1d:84:e4:47: 07:d2:20:60:d0:51:15:0e:e4:73:4b:bd:2b:24:fa:00:ba:5e: 5b:77:4d:f3:e0:f3:8b:fd:0c:f4:f8:35:30:01:2c:c0:95:ec: 43:36:a6:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcP+ce9QIhd04O1dfpq1e4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNWM2NTNjNjA1NDg2NjA0MmE3MDZmNzE3YjI0YjIxZmRm OTgxYTgwHhcNMjUxMjI2MjAwMDUwWhcNMjUxMjI3MjAwMDUwWjAzMTEwLwYDVQQD EyhmNmJjZTkyZTkyNjgwNWE5MzYzZDNjZmIwZDBkM2IxYjg4NTAyOTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1P3DVknW9ba0hUJoVhCbXg8WwD0 KGxtprOj2iU57pzYneT9pWac1H2Hy6zidRYeOMrC2Ch0/0gVYreIgC+LTb7ow0c5 6Ay1e7GWwNFcmRVZhI7BAn5+cGV7+E8Zw8LL/iJQB2kbhYcklFy2XjTguicckz+H CKa73FlazMpLogNc4bmt42A5XbTnyZ92pugumu5jMft3H7yneGCHf+cX0X1T58Q6 gyJgz99htLKvoGvrtv0CDt9emzP/q6kpDNZGaz88waapPo1UZUZSWcUdKF8Ur3LR z3Gi04pWV5X9BB4Lcq5yXKE4fdmrrZRTrFEfm30XdG7yRQViToCR7Y6XkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPa86S6SaAWpNj08+w0NOxuIUCkgMB8GA1UdIwQY MBaAFPJcZTxgVIZgQqcG9xeySyH9+YGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGx4bFBHQlVobUJDcHdiM0Y3SkxJZjM1Z2FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mYjI5OTgtNTFmOS00YWRiLWEzMjMt ZjA3YTIxOGUxY2M3LzEvOGx4bFBHQlVobUJDcHdiM0Y3SkxJZjM1Z2FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9mYjI5OTgtNTFmOS00YWRiLWEzMjMtZjA3YTIxOGUxY2M3 LzEvOGx4bFBHQlVobUJDcHdiM0Y3SkxJZjM1Z2FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQg7wO6ot Q71/wBlTToJZzE7OM1aLdjl3HIVrxMVwH/uqd3tGdjUQaMLjiJKDhwW7BxVzWwx2 DpGFSEAtgF6OmHhrisBoTOa3fKhC1ObL71wtoqf8caXuep6Mv8zOVB/kSvpZvOTQ oIMwPA+BqZCeA+nHBbdgrNkodNbXCJIWym09xqGa/ULdAUo8u9n6pxXnR2z3e6ws kVWAEvY19mSEZ0iugREmG2MI6fOOK5Mj3nyc9VdnOsmWSDxtfGwOpzjsI6iHs5Df Hd5ElwQm2k+ky7y4oHgdhORHB9IgYNBRFQ7kc0u9KyT6ALpeW3dN8+Dzi/0M9Pg1 MAEswJXsQzamyA== -----END CERTIFICATE-----Generated at Sat Dec 27 02:50:27 2025 by rpki-client