This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft File: 8PPwSfPyhFHj4b9ouXT_28jEFMc.mft (raw, json) Hash identifier: P+08OHhAM0BCoNSB/xSnlXLSh5TOa5QRKASRJ0GRVtU= Subject key identifier: 7C:A3:10:26:0E:E3:56:9F:8E:CE:D8:65:42:42:87:4E:A1:8B:38:3E Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7 Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7 Certificate serial: 019B3BA275333513733D8A336A0EA6A3301E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft Manifest number: 1309 Signing time: Sat 20 Dec 2025 12:01:01 +0000 Manifest this update: Sat 20 Dec 2025 12:01:01 +0000 Manifest next update: Sun 21 Dec 2025 12:01:01 +0000 Files and hashes: 1: 8PPwSfPyhFHj4b9ouXT_28jEFMc.crl (hash: LfQjtyx6YsZnkFHm8ygt7ipMw58lZkNed1BoTWKL7/4=) 2: q-Co2Fge0yCMSGAUZ61yCAp-agg.roa (hash: Kkd9tz/x2Ysb/9fgNXffDi1aqzj4oQgrCbFcbQdhMNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:75:33:35:13:73:3d:8a:33:6a:0e:a6:a3:30:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7 Validity Not Before: Dec 20 12:01:01 2025 GMT Not After : Dec 21 12:01:01 2025 GMT Subject: CN=7ca310260ee3569f8eced8654242874ea18b383e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:67:3f:93:58:75:55:22:07:dd:d3:8e:f2:e6: 07:04:b2:4b:43:0a:3e:b9:c3:28:55:03:da:68:42: 6c:21:a0:98:f6:b2:c1:69:ab:c7:77:24:67:d2:db: ad:e0:ec:65:be:11:96:16:c7:90:e1:b9:26:f2:10: f9:a0:c3:7c:48:f4:33:5b:d0:95:49:be:18:7f:5e: af:04:3e:38:49:44:04:2c:a8:0d:75:26:da:d4:b8: 3e:48:2d:39:65:56:5d:71:7e:8c:55:a4:2a:0b:d1: 5c:e5:2a:96:db:a9:41:d6:26:45:c1:55:39:4b:e7: 33:cd:63:81:bc:7a:65:9f:08:3b:00:c8:d7:d2:c4: c2:54:27:c4:ea:58:af:7c:cc:bc:25:44:32:29:ea: 25:c4:c0:04:d0:26:73:15:ab:2e:8a:f0:d0:4b:c9: e8:46:c9:f5:bb:a6:d0:21:36:c4:94:c9:49:9b:30: 21:03:12:8b:1b:c6:2f:70:7c:88:35:4a:43:1f:25: c3:a1:a9:93:9f:c5:26:f0:63:67:14:a3:26:93:42: c0:40:0b:22:82:c0:ec:2c:85:91:29:de:94:3a:88: de:27:c9:08:70:92:d1:eb:79:22:9d:a3:b6:ce:98: 90:d3:5f:4d:a0:52:25:28:98:9b:2f:84:5e:66:a6: 0a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A3:10:26:0E:E3:56:9F:8E:CE:D8:65:42:42:87:4E:A1:8B:38:3E X509v3 Authority Key Identifier: keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:d6:80:03:93:8b:32:3a:c1:4b:45:9c:92:6f:51:c4:ec:fd: 92:01:7e:76:03:d3:93:0e:a7:7d:8f:e2:70:14:65:7d:22:be: dc:fb:43:f7:ee:45:e0:b8:95:95:c2:a8:09:be:1e:78:68:1f: 7e:b5:ac:d4:5c:61:84:c7:bd:60:b7:2c:c3:04:54:8a:a3:08: 9b:cf:5f:b2:3e:35:c4:df:e1:71:bf:32:87:eb:cc:49:b6:30: dd:ba:6a:66:45:da:79:74:ad:96:ea:af:f5:c5:8d:0e:c3:a6: 96:a8:80:0d:2f:ba:73:28:6e:d3:2e:63:fb:29:26:25:0a:f6: 78:44:c4:f0:05:47:97:68:09:99:66:8b:40:0d:28:99:24:47: eb:d7:48:56:99:9e:f8:72:7a:99:4f:84:1b:6f:c2:41:32:4d: 1d:03:1d:f6:b1:b0:8d:7a:a5:73:d4:91:e0:8f:15:1f:5a:7f: d7:5b:a3:d5:69:b5:d1:c2:1b:51:7d:cd:89:50:a0:3e:a8:da: b6:c6:3c:e3:48:3e:09:ee:d6:4e:1c:76:67:41:b6:71:ca:e6: 44:56:6b:1e:08:d3:ff:6c:43:02:59:9b:b4:56:a4:cd:71:db: 62:43:1b:e2:ec:a5:a2:45:84:17:3f:06:f0:10:25:13:5e:92: 5d:6e:cc:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7onUzNRNzPYozag6mozAeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZjNmMDQ5ZjNmMjg0NTFlM2UxYmY2OGI5NzRmZmRiYzhj NDE0YzcwHhcNMjUxMjIwMTIwMTAxWhcNMjUxMjIxMTIwMTAxWjAzMTEwLwYDVQQD Eyg3Y2EzMTAyNjBlZTM1NjlmOGVjZWQ4NjU0MjQyODc0ZWExOGIzODNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2c/k1h1VSIH3dOO8uYHBLJLQwo+ ucMoVQPaaEJsIaCY9rLBaavHdyRn0tut4OxlvhGWFseQ4bkm8hD5oMN8SPQzW9CV Sb4Yf16vBD44SUQELKgNdSba1Lg+SC05ZVZdcX6MVaQqC9Fc5SqW26lB1iZFwVU5 S+czzWOBvHplnwg7AMjX0sTCVCfE6livfMy8JUQyKeolxMAE0CZzFasuivDQS8no Rsn1u6bQITbElMlJmzAhAxKLG8YvcHyINUpDHyXDoamTn8Um8GNnFKMmk0LAQAsi gsDsLIWRKd6UOojeJ8kIcJLR63kinaO2zpiQ019NoFIlKJibL4ReZqYK5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHyjECYO41afjs7YZUJCh06hizg+MB8GA1UdIwQY MBaAFPDz8Enz8oRR4+G/aLl0/9vIxBTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgt NWU1MjNiYThjOWQ3LzEvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgtNWU1MjNiYThjOWQ3 LzEvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNaAA5OL MjrBS0Wckm9RxOz9kgF+dgPTkw6nfY/icBRlfSK+3PtD9+5F4LiVlcKoCb4eeGgf frWs1FxhhMe9YLcswwRUiqMIm89fsj41xN/hcb8yh+vMSbYw3bpqZkXaeXStluqv 9cWNDsOmlqiADS+6cyhu0y5j+ykmJQr2eETE8AVHl2gJmWaLQA0omSRH69dIVpme +HJ6mU+EG2/CQTJNHQMd9rGwjXqlc9SR4I8VH1p/11uj1Wm10cIbUX3NiVCgPqja tsY840g+Ce7WThx2Z0G2ccrmRFZrHgjT/2xDAlmbtFakzXHbYkMb4uylokWEFz8G 8BAlE16SXW7MRw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:16:38 2025 by rpki-client