This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft File: 8Q057dsAjRuJ35dBlg2_IET2V_s.mft (raw, json) Hash identifier: xzBlnVG2sxnubzPqZ+1TdTpRxV3uW0d+O0eB25S5JSw= Subject key identifier: 81:A1:03:5E:E6:18:28:75:D4:24:EA:FA:D0:A4:72:E4:0C:FA:8F:D3 Authority key identifier: F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB Certificate issuer: /CN=f10d39eddb008d1b89df9741960dbf2044f657fb Certificate serial: 019B3EDAD61FE5B7C959A32028FAA47F5B87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft Manifest number: 1790 Signing time: Sun 21 Dec 2025 03:01:27 +0000 Manifest this update: Sun 21 Dec 2025 03:01:27 +0000 Manifest next update: Mon 22 Dec 2025 03:01:27 +0000 Files and hashes: 1: 8Q057dsAjRuJ35dBlg2_IET2V_s.crl (hash: w4UVH723UQi4Fc9Yix3MmIwBgIXMCtdbu71vGWvUhxw=) 2: jV20P4i0v4psPgGy6zXjkv_uoCc.roa (hash: LRoq6PhnzYAWBMT+zoK5/SNdijqn8yZf6GzBfp4aJ0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:d6:1f:e5:b7:c9:59:a3:20:28:fa:a4:7f:5b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f10d39eddb008d1b89df9741960dbf2044f657fb Validity Not Before: Dec 21 03:01:27 2025 GMT Not After : Dec 22 03:01:27 2025 GMT Subject: CN=81a1035ee6182875d424eafad0a472e40cfa8fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d9:06:13:e5:7e:1c:6e:82:88:5d:e9:a7:93: 78:2f:07:2e:0c:99:23:9e:af:20:86:d9:34:18:4b: e2:f2:60:c0:52:be:70:00:29:4e:3a:3d:9d:27:0c: 77:b9:c8:99:ce:ed:cc:ea:47:b8:92:35:65:2e:a5: ae:ca:5f:ba:59:68:d0:76:84:3d:f2:68:4a:84:24: 41:df:aa:38:0e:34:ce:7c:d7:a5:06:1d:71:5f:d2: 7c:a0:f4:78:10:11:63:35:29:c3:32:ea:6e:2d:e8: 82:9e:54:de:4f:52:df:d0:1e:6e:d9:e8:6e:8b:e6: d4:15:1f:20:66:e6:2c:b4:97:66:d1:bd:df:1a:b4: 4c:5d:f5:d9:83:cb:f6:c7:37:a1:bb:26:87:90:25: 1b:e0:93:77:0b:6a:da:2a:96:61:76:5e:5a:46:34: dd:a8:dc:4f:92:b5:bb:99:3b:44:f9:25:da:80:63: 8c:81:e7:b0:da:e3:a5:29:16:58:db:1c:74:69:b2: c1:80:ce:f7:f9:16:ca:73:89:e2:72:9e:33:db:75: 91:db:b3:90:19:aa:22:ba:ca:0b:b1:e3:78:d1:61: a6:a1:ad:70:76:eb:6c:fc:99:70:2b:48:bf:b0:6f: 1f:b3:1d:f0:5d:e4:e3:f3:b1:91:4a:3e:76:15:b4: 96:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A1:03:5E:E6:18:28:75:D4:24:EA:FA:D0:A4:72:E4:0C:FA:8F:D3 X509v3 Authority Key Identifier: keyid:F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:73:f1:bf:36:bc:7f:ef:c3:82:8a:b5:9f:64:f1:47:2f:79: ee:d5:ae:14:77:b1:66:68:fc:5f:9b:ca:23:f1:e4:ef:f6:d0: 7f:66:5a:58:83:ac:11:5c:7d:96:74:3a:28:55:d7:47:51:8e: 8d:1f:bd:b3:8a:48:ea:b4:31:60:89:1a:ee:81:50:d5:2e:e2: 86:73:82:4c:a7:73:cc:c8:88:f1:c1:11:06:59:c7:48:60:77: f8:43:7a:be:3e:d7:b3:e0:f0:de:a3:78:62:9f:5a:72:3e:2c: 95:a5:05:5c:eb:20:62:1d:6a:6a:9b:a1:16:76:88:f8:76:36: 92:8b:6c:0b:98:bd:5d:a7:f8:76:35:fc:b7:0d:0a:cc:48:b4: 29:00:0e:49:4d:c1:c5:ff:f8:33:d5:fb:76:af:d9:68:aa:ec: e8:38:3d:a9:f8:d8:b6:e0:39:dd:82:3c:31:9d:0b:ab:c3:6b: 07:13:0b:3f:93:b5:6a:6a:45:93:60:8b:eb:92:52:f5:b5:96: 07:b8:1e:cb:fc:5e:30:e3:d2:69:ce:7a:db:5b:3b:78:50:72: 2c:f1:da:60:bd:8e:ee:bc:b6:c3:80:90:02:9d:1b:f5:12:79: b0:41:03:7d:6c:d5:6b:20:c1:62:d0:ac:3c:fc:b0:7f:bf:ff: d4:5a:e9:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2tYf5bfJWaMgKPqkf1uHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMGQzOWVkZGIwMDhkMWI4OWRmOTc0MTk2MGRiZjIwNDRm NjU3ZmIwHhcNMjUxMjIxMDMwMTI3WhcNMjUxMjIyMDMwMTI3WjAzMTEwLwYDVQQD Eyg4MWExMDM1ZWU2MTgyODc1ZDQyNGVhZmFkMGE0NzJlNDBjZmE4ZmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9kGE+V+HG6CiF3pp5N4LwcuDJkj nq8ghtk0GEvi8mDAUr5wAClOOj2dJwx3uciZzu3M6ke4kjVlLqWuyl+6WWjQdoQ9 8mhKhCRB36o4DjTOfNelBh1xX9J8oPR4EBFjNSnDMupuLeiCnlTeT1Lf0B5u2ehu i+bUFR8gZuYstJdm0b3fGrRMXfXZg8v2xzehuyaHkCUb4JN3C2raKpZhdl5aRjTd qNxPkrW7mTtE+SXagGOMgeew2uOlKRZY2xx0abLBgM73+RbKc4nicp4z23WR27OQ GaoiusoLseN40WGmoa1wduts/JlwK0i/sG8fsx3wXeTj87GRSj52FbSWLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGhA17mGCh11CTq+tCkcuQM+o/TMB8GA1UdIwQY MBaAFPENOe3bAI0bid+XQZYNvyBE9lf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNzBlMWEtNzMyZS00ZTZiLWIzYjUt ZjU2MmI4OTc0ZDhiLzEvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mNzBlMWEtNzMyZS00ZTZiLWIzYjUtZjU2MmI4OTc0ZDhi LzEvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3Pxvza8 f+/Dgoq1n2TxRy957tWuFHexZmj8X5vKI/Hk7/bQf2ZaWIOsEVx9lnQ6KFXXR1GO jR+9s4pI6rQxYIka7oFQ1S7ihnOCTKdzzMiI8cERBlnHSGB3+EN6vj7Xs+Dw3qN4 Yp9acj4slaUFXOsgYh1qapuhFnaI+HY2kotsC5i9Xaf4djX8tw0KzEi0KQAOSU3B xf/4M9X7dq/ZaKrs6Dg9qfjYtuA53YI8MZ0Lq8NrBxMLP5O1ampFk2CL65JS9bWW B7gey/xeMOPSac5621s7eFByLPHaYL2O7ry2w4CQAp0b9RJ5sEEDfWzVayDBYtCs PPywf7//1Frpjg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:18:09 2025 by rpki-client