This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft File: 8QtzTfT6au4S6pkGV7A1oWK0qeY.mft (raw, json) Hash identifier: f6wmxTYGp4UkoZ6bjtXA/eXtvPtfmIP+eCB+FhxBu/o= Subject key identifier: A4:15:43:3A:47:9A:E4:B7:09:8B:64:9A:B1:CE:31:88:59:73:2F:1D Authority key identifier: F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6 Certificate issuer: /CN=f10b734df4fa6aee12ea990657b035a162b4a9e6 Certificate serial: 019B3B34916F33A71E8A43E0306DDD9B886F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft Manifest number: 0283 Signing time: Sat 20 Dec 2025 10:00:59 +0000 Manifest this update: Sat 20 Dec 2025 10:00:59 +0000 Manifest next update: Sun 21 Dec 2025 10:00:59 +0000 Files and hashes: 1: 8QtzTfT6au4S6pkGV7A1oWK0qeY.crl (hash: 1glJeDd/jACzlv7KZx7q43wkyTq0FuarYf1JwoS2rTw=) 2: g827ucs3EThsAfzbTT2FMhBdWaY.roa (hash: PzIDENEz83QkajYAOtSf7pvZj1/xEbuYaZgcwQILtJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:91:6f:33:a7:1e:8a:43:e0:30:6d:dd:9b:88:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f10b734df4fa6aee12ea990657b035a162b4a9e6 Validity Not Before: Dec 20 10:00:59 2025 GMT Not After : Dec 21 10:00:59 2025 GMT Subject: CN=a415433a479ae4b7098b649ab1ce318859732f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5d:e2:bc:e0:73:db:04:1c:5a:bd:8e:20:bb: e8:0d:60:0d:a1:5f:38:e4:f6:ea:79:1d:0b:af:7a: 63:18:8c:9c:59:a9:a8:95:95:bf:1b:00:39:31:d4: 5a:8e:fa:f0:f3:67:f3:0c:39:da:df:a3:5c:db:ea: fe:2a:30:c1:c9:3c:d1:32:52:41:9b:ef:ee:ea:0f: be:f8:72:dd:71:cc:8b:f0:07:ce:18:fe:b1:94:6c: 73:15:19:e8:da:a5:a4:da:8b:f4:06:1d:44:f7:bc: 85:67:fe:a9:29:be:bc:bf:26:17:82:60:95:63:ff: 66:4f:42:30:cd:9a:18:8f:8b:27:92:19:f9:43:3a: 4d:1b:5a:3d:a3:cb:02:a5:de:50:3f:26:6a:eb:d9: fe:8e:57:a5:8c:d3:72:b9:7b:be:cd:59:7a:1b:de: 74:1a:75:cf:6f:dd:08:dc:84:9d:21:73:d1:de:52: 12:84:e1:3c:32:90:30:ce:50:a2:83:9b:bc:40:e1: 2a:fe:3d:46:58:0f:99:c7:dc:4c:7a:7e:a5:bc:b2: 54:3d:44:12:25:f7:78:1e:62:ea:d5:be:ab:38:83: 3f:02:13:2d:42:73:29:39:b8:e6:a3:7f:ab:01:e9: 32:a3:98:de:65:e6:93:1a:5e:44:ab:61:b6:d4:59: a2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:15:43:3A:47:9A:E4:B7:09:8B:64:9A:B1:CE:31:88:59:73:2F:1D X509v3 Authority Key Identifier: keyid:F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:25:e6:73:26:48:1b:d9:0d:3a:0e:7b:db:ac:88:7b:bf:01: 71:7d:26:92:b5:96:57:3b:33:dd:0f:c7:4d:2e:78:1d:25:b3: 3f:01:0c:91:fa:33:1a:7f:13:65:a9:74:6a:fa:2b:0a:a0:d7: 2a:5b:78:46:01:98:65:71:9e:69:62:65:93:8d:f1:fa:be:d4: 2d:38:2f:33:51:87:53:16:78:e6:6e:1d:da:21:ea:4a:6e:ee: 63:39:a0:bc:b6:99:ac:25:1a:4b:10:35:ee:c5:35:35:c0:e3: 00:d2:ff:2c:3a:fb:a2:cc:a4:64:75:42:9c:51:54:e6:19:86: 62:01:5b:d6:5f:9c:88:04:9b:9c:45:d8:f1:1d:03:10:93:94: 72:ac:36:6e:68:cc:87:f9:a6:4a:97:2a:e1:e5:64:ec:43:a9: 90:44:b4:6f:46:41:34:69:3a:d6:7f:d4:d8:91:72:7c:6e:08: 8a:ef:32:49:e8:bd:a5:7a:fd:66:9b:76:ae:70:c6:91:9a:c2: 62:c3:16:16:3c:80:b5:6f:9e:bd:f2:82:4a:24:88:15:3e:8c: a1:df:bc:a9:be:ea:1f:c7:2e:e9:f1:5c:70:ab:22:64:7b:bb: e7:2a:9b:1f:c3:f5:f1:c6:f3:ee:e5:7c:07:e9:e4:c0:06:10: 22:a0:88:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NJFvM6ceikPgMG3dm4hvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMGI3MzRkZjRmYTZhZWUxMmVhOTkwNjU3YjAzNWExNjJi NGE5ZTYwHhcNMjUxMjIwMTAwMDU5WhcNMjUxMjIxMTAwMDU5WjAzMTEwLwYDVQQD EyhhNDE1NDMzYTQ3OWFlNGI3MDk4YjY0OWFiMWNlMzE4ODU5NzMyZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV3ivOBz2wQcWr2OILvoDWANoV84 5PbqeR0Lr3pjGIycWamolZW/GwA5MdRajvrw82fzDDna36Nc2+r+KjDByTzRMlJB m+/u6g+++HLdccyL8AfOGP6xlGxzFRno2qWk2ov0Bh1E97yFZ/6pKb68vyYXgmCV Y/9mT0IwzZoYj4snkhn5QzpNG1o9o8sCpd5QPyZq69n+jleljNNyuXu+zVl6G950 GnXPb90I3ISdIXPR3lIShOE8MpAwzlCig5u8QOEq/j1GWA+Zx9xMen6lvLJUPUQS Jfd4HmLq1b6rOIM/AhMtQnMpObjmo3+rAekyo5jeZeaTGl5Eq2G21FmiXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQVQzpHmuS3CYtkmrHOMYhZcy8dMB8GA1UdIwQY MBaAFPELc030+mruEuqZBlewNaFitKnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMmJkOGUtMmViOC00NTE1LTk1NmIt ZTE1MjUwMzkyODg3LzEvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMmJkOGUtMmViOC00NTE1LTk1NmItZTE1MjUwMzkyODg3 LzEvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoiXmcyZI G9kNOg5726yIe78BcX0mkrWWVzsz3Q/HTS54HSWzPwEMkfozGn8TZal0avorCqDX Klt4RgGYZXGeaWJlk43x+r7ULTgvM1GHUxZ45m4d2iHqSm7uYzmgvLaZrCUaSxA1 7sU1NcDjANL/LDr7osykZHVCnFFU5hmGYgFb1l+ciASbnEXY8R0DEJOUcqw2bmjM h/mmSpcq4eVk7EOpkES0b0ZBNGk61n/U2JFyfG4Iiu8ySei9pXr9Zpt2rnDGkZrC YsMWFjyAtW+evfKCSiSIFT6Mod+8qb7qH8cu6fFccKsiZHu75yqbH8P18cbz7uV8 B+nkwAYQIqCIeg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:04:38 2025 by rpki-client