This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft File: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft (raw, json) Hash identifier: ylhsBzGyV3p4as26RTN5YrveayQ+q3wesnSFYxWiEDA= Subject key identifier: 07:73:CF:75:22:82:9F:23:32:E8:07:7F:25:50:51:64:5E:DA:6B:F9 Authority key identifier: F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58 Certificate issuer: /CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58 Certificate serial: 019B69573C2A4FE26C49C38C7BA149C088A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft Manifest number: 0EAD Signing time: Mon 29 Dec 2025 09:01:23 +0000 Manifest this update: Mon 29 Dec 2025 09:01:23 +0000 Manifest next update: Tue 30 Dec 2025 09:01:23 +0000 Files and hashes: 1: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl (hash: OWMXvGjmZ/gpIRR9uOAX0u5tt4gkSF++YAMrhMPrVYU=) 2: otWydKJIblYoFDAZjlf3bz3XaMM.roa (hash: xwlrdUyrXAa6g8e84xQqVsN9ku3EVyiSX1A/Nu5VNrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 09:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:57:3c:2a:4f:e2:6c:49:c3:8c:7b:a1:49:c0:88:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58 Validity Not Before: Dec 29 09:01:23 2025 GMT Not After : Dec 30 09:01:23 2025 GMT Subject: CN=0773cf7522829f2332e8077f255051645eda6bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:38:d3:5b:26:21:fb:50:33:d3:4b:d3:81:86: a9:9f:91:65:3e:81:1b:75:15:d4:0b:60:6c:19:fc: 14:59:da:dd:12:0a:79:bf:d5:c8:f2:03:88:1b:ed: c9:88:85:95:36:fb:70:18:bb:34:08:b1:02:69:b0: 40:95:fb:79:57:ee:08:4a:7e:7d:ef:aa:38:7d:9b: c2:a9:18:07:9e:ba:4a:bd:87:2a:fd:2c:c3:79:01: 05:3d:2b:08:00:5d:92:a4:58:49:8b:ea:82:c9:a5: 57:5f:7e:32:d3:bc:d3:18:61:32:19:3a:15:07:da: f0:78:26:42:a9:b7:49:cd:6d:fa:eb:6d:bb:8f:ae: d5:c8:6a:92:50:bf:63:20:b3:70:af:3e:f0:37:5a: 0b:13:22:c1:13:60:33:5f:bd:86:05:eb:de:3e:be: d9:f0:22:84:19:08:96:dc:1c:f5:2a:fb:b2:4d:ac: 04:cd:7f:57:e0:05:85:35:50:c9:75:fd:84:6f:ce: e9:84:b5:a4:31:e9:34:44:c3:cf:85:3f:c5:2c:b5: 97:b8:c1:69:6d:76:02:b6:7b:e3:83:4c:00:88:09: 93:1f:8e:0d:af:6e:95:db:6e:56:eb:34:51:33:65: cc:60:98:fc:13:52:e9:08:e8:c9:61:06:69:5b:30: 99:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:73:CF:75:22:82:9F:23:32:E8:07:7F:25:50:51:64:5E:DA:6B:F9 X509v3 Authority Key Identifier: keyid:F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ba:cc:05:43:78:66:09:61:55:88:ca:33:91:9f:ad:51:69: 0c:e9:ea:32:99:9c:66:52:c8:a5:f0:72:09:df:a4:c5:44:e2: 61:88:09:00:17:e7:94:f6:64:2e:2d:7c:75:4a:86:73:b0:98: 4c:f2:ba:50:1e:e1:ea:73:c0:5a:8c:dd:96:95:b7:9f:21:d6: 72:86:d1:09:ed:e5:1d:e9:59:23:03:11:2d:54:dd:c1:3d:9c: 64:b5:9b:6d:bb:93:8b:d4:7d:26:f6:1d:7c:f9:4c:90:6e:08: a6:52:bd:37:23:e2:8b:9e:52:b4:27:75:df:e4:90:e3:3a:03: 7f:4d:52:c2:cf:69:11:61:3d:c0:9a:73:18:88:82:8b:ad:1b: 91:ba:07:41:66:b2:a2:26:32:ff:6d:40:de:5d:e6:70:3b:c5: 02:9c:7f:c5:0a:15:b8:76:32:99:00:01:77:9b:cc:e8:53:50: 44:fe:38:ed:c3:45:c9:cb:16:ff:f6:f0:41:09:4a:7d:64:12: 28:f9:0b:c1:1f:16:69:58:5f:6c:e8:e8:93:c2:2d:6b:33:b7: b2:ef:1b:43:1e:8c:4a:be:53:7e:96:14:f7:39:ea:75:d2:ea: f4:19:2c:c6:09:ae:eb:6f:b2:b2:a7:12:63:89:a5:ca:ff:cc: e2:d1:62:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpVzwqT+JsScOMe6FJwIijMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMTUwYjNhOTQxOTYyN2ZkYmNkYjY1ODBlODc4YTFjOWZh MGNjNTgwHhcNMjUxMjI5MDkwMTIzWhcNMjUxMjMwMDkwMTIzWjAzMTEwLwYDVQQD EygwNzczY2Y3NTIyODI5ZjIzMzJlODA3N2YyNTUwNTE2NDVlZGE2YmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzjTWyYh+1Az00vTgYapn5FlPoEb dRXUC2BsGfwUWdrdEgp5v9XI8gOIG+3JiIWVNvtwGLs0CLECabBAlft5V+4ISn59 76o4fZvCqRgHnrpKvYcq/SzDeQEFPSsIAF2SpFhJi+qCyaVXX34y07zTGGEyGToV B9rweCZCqbdJzW366227j67VyGqSUL9jILNwrz7wN1oLEyLBE2AzX72GBevePr7Z 8CKEGQiW3Bz1KvuyTawEzX9X4AWFNVDJdf2Eb87phLWkMek0RMPPhT/FLLWXuMFp bXYCtnvjg0wAiAmTH44Nr26V225W6zRRM2XMYJj8E1LpCOjJYQZpWzCZXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdzz3Uigp8jMugHfyVQUWRe2mv5MB8GA1UdIwQY MBaAFPAVCzqUGWJ/2822WA6HihyfoMxYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEJVTE9wUVpZbl9iemJaWURvZUtISi1nekZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81NzUxNzItZjdhMi00ZTQzLTk2MmMt ZWRjNWFiOTk1ZGJmLzEvOEJVTE9wUVpZbl9iemJaWURvZUtISi1nekZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC81NzUxNzItZjdhMi00ZTQzLTk2MmMtZWRjNWFiOTk1ZGJm LzEvOEJVTE9wUVpZbl9iemJaWURvZUtISi1nekZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirrMBUN4 ZglhVYjKM5GfrVFpDOnqMpmcZlLIpfByCd+kxUTiYYgJABfnlPZkLi18dUqGc7CY TPK6UB7h6nPAWozdlpW3nyHWcobRCe3lHelZIwMRLVTdwT2cZLWbbbuTi9R9JvYd fPlMkG4IplK9NyPii55StCd13+SQ4zoDf01Sws9pEWE9wJpzGIiCi60bkboHQWay oiYy/21A3l3mcDvFApx/xQoVuHYymQABd5vM6FNQRP447cNFycsW//bwQQlKfWQS KPkLwR8WaVhfbOjok8ItazO3su8bQx6MSr5TfpYU9znqddLq9Bksxgmu62+ysqcS Y4mlyv/M4tFimQ== -----END CERTIFICATE-----Generated at Mon Dec 29 13:41:08 2025 by rpki-client