This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft File: 8PPwSfPyhFHj4b9ouXT_28jEFMc.mft (raw, json) Hash identifier: Ti6kUgL1RaPk/G1CDTWNAvjTzGxmmjtSnPPQHXCsTrU= Subject key identifier: C3:3A:E1:60:CA:C3:30:D3:2E:31:86:D1:F7:69:2B:57:C3:98:EA:E4 Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7 Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7 Certificate serial: 019B435BEEA4D01DC41EC64A37147C241C5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft Manifest number: 130D Signing time: Mon 22 Dec 2025 00:00:56 +0000 Manifest this update: Mon 22 Dec 2025 00:00:56 +0000 Manifest next update: Tue 23 Dec 2025 00:00:56 +0000 Files and hashes: 1: 8PPwSfPyhFHj4b9ouXT_28jEFMc.crl (hash: ive1ZJU23zEFVisptTa5Lbudgbx14SNLZlgSDWUnsiU=) 2: q-Co2Fge0yCMSGAUZ61yCAp-agg.roa (hash: Kkd9tz/x2Ysb/9fgNXffDi1aqzj4oQgrCbFcbQdhMNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:ee:a4:d0:1d:c4:1e:c6:4a:37:14:7c:24:1c:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7 Validity Not Before: Dec 22 00:00:56 2025 GMT Not After : Dec 23 00:00:56 2025 GMT Subject: CN=c33ae160cac330d32e3186d1f7692b57c398eae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6f:cb:83:46:a9:dc:72:78:b4:cf:69:f9:cd: a3:8f:63:cd:54:ea:8f:bb:1c:1c:f1:68:c2:fe:d9: da:a4:59:ba:a6:b9:34:9e:96:cb:ce:01:ff:10:df: a8:1d:90:34:41:02:45:d6:81:32:50:07:a9:5c:83: 19:10:87:75:54:b3:d6:33:0a:1d:9f:a7:56:91:15: bf:fc:d3:4a:e9:e8:55:b9:90:05:a4:01:04:7f:9e: c4:18:54:0c:1e:45:d4:dc:4c:b8:60:05:5f:8d:bd: 02:0a:40:9b:d8:a4:f5:f3:11:a9:51:5b:c3:cc:b0: b0:48:63:55:7e:b2:2d:90:c7:25:f7:f7:51:a2:c8: 6c:b3:4b:23:15:28:1c:f7:51:33:48:2e:2c:5f:17: 4f:a6:b0:58:38:62:f6:39:d3:72:ad:34:8d:e6:ff: 06:bc:4a:b9:b2:35:15:15:9d:ee:10:f8:f7:6c:63: df:d8:81:49:50:81:9d:01:b3:ca:47:b0:d1:7e:2f: fc:80:15:53:33:4b:14:6f:7c:0d:5a:3b:4b:fc:5f: f5:e6:8a:4c:ce:92:54:53:44:55:90:c7:ca:b9:d0: 72:2b:c5:cc:f6:ea:b4:2c:41:a9:af:c7:05:a6:65: dc:97:11:42:dd:38:de:71:8b:46:31:de:72:d9:f7: f1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3A:E1:60:CA:C3:30:D3:2E:31:86:D1:F7:69:2B:57:C3:98:EA:E4 X509v3 Authority Key Identifier: keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:8f:37:77:26:83:bc:d1:f3:46:49:f4:01:a4:30:91:d3:13: c9:ff:05:ba:cf:4f:11:c8:80:d1:10:60:39:8e:9a:78:28:25: 3b:a7:a2:6c:f5:72:f4:d8:7b:5d:69:47:4c:fe:ab:ce:86:cd: 5c:82:1b:e4:8c:bd:0e:b3:bd:34:02:67:0e:a1:08:1e:41:24: 9e:16:e6:66:42:84:a4:8f:dc:46:11:c9:66:43:a8:e8:f1:5e: 7f:a4:57:73:08:59:ba:6d:a2:68:c6:6d:1a:74:b1:ee:cd:03: 1d:fd:a5:b0:38:aa:77:27:a9:7c:00:8f:3d:0b:cf:5b:40:0a: 70:73:61:5f:54:04:80:02:5f:22:34:e0:c2:a0:06:3d:87:35: e6:6a:9c:4c:db:cc:61:99:5d:bd:8c:9b:89:59:21:dd:27:50: 95:b4:ab:3d:a8:ce:b1:5e:ed:e0:59:24:32:89:82:87:c4:2f: 2c:f4:a1:e5:d0:ba:ca:d4:ba:60:65:e5:3e:cb:01:3e:4b:ea: 1d:99:6c:8b:bd:2a:ef:8a:73:a6:53:68:df:ce:5a:69:02:3f: c0:c3:37:f3:14:6c:e1:8f:db:3c:b8:54:dc:b4:bb:58:d5:36: c7:f1:69:5b:bc:3a:6e:02:17:c7:99:7e:25:04:b6:e4:72:54: 5a:71:33:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW+6k0B3EHsZKNxR8JBxeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZjNmMDQ5ZjNmMjg0NTFlM2UxYmY2OGI5NzRmZmRiYzhj NDE0YzcwHhcNMjUxMjIyMDAwMDU2WhcNMjUxMjIzMDAwMDU2WjAzMTEwLwYDVQQD EyhjMzNhZTE2MGNhYzMzMGQzMmUzMTg2ZDFmNzY5MmI1N2MzOThlYWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6m/Lg0ap3HJ4tM9p+c2jj2PNVOqP uxwc8WjC/tnapFm6prk0npbLzgH/EN+oHZA0QQJF1oEyUAepXIMZEId1VLPWMwod n6dWkRW//NNK6ehVuZAFpAEEf57EGFQMHkXU3Ey4YAVfjb0CCkCb2KT18xGpUVvD zLCwSGNVfrItkMcl9/dRoshss0sjFSgc91EzSC4sXxdPprBYOGL2OdNyrTSN5v8G vEq5sjUVFZ3uEPj3bGPf2IFJUIGdAbPKR7DRfi/8gBVTM0sUb3wNWjtL/F/15opM zpJUU0RVkMfKudByK8XM9uq0LEGpr8cFpmXclxFC3TjecYtGMd5y2ffxMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMM64WDKwzDTLjGG0fdpK1fDmOrkMB8GA1UdIwQY MBaAFPDz8Enz8oRR4+G/aLl0/9vIxBTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgt NWU1MjNiYThjOWQ3LzEvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgtNWU1MjNiYThjOWQ3 LzEvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALI83dyaD vNHzRkn0AaQwkdMTyf8Fus9PEciA0RBgOY6aeCglO6eibPVy9Nh7XWlHTP6rzobN XIIb5Iy9DrO9NAJnDqEIHkEknhbmZkKEpI/cRhHJZkOo6PFef6RXcwhZum2iaMZt GnSx7s0DHf2lsDiqdyepfACPPQvPW0AKcHNhX1QEgAJfIjTgwqAGPYc15mqcTNvM YZldvYybiVkh3SdQlbSrPajOsV7t4FkkMomCh8QvLPSh5dC6ytS6YGXlPssBPkvq HZlsi70q74pzplNo385aaQI/wMM38xRs4Y/bPLhU3LS7WNU2x/FpW7w6bgIXx5l+ JQS25HJUWnEzGQ== -----END CERTIFICATE-----Generated at Mon Dec 22 01:06:27 2025 by rpki-client