This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft File: 8qsLWFucOWKI0g6c9mWuHeOfeDM.mft (raw, json) Hash identifier: LXinIblkzzKdh5XZb07RYUkXhYBAhLVsfWEHSd7jsPI= Subject key identifier: 4F:47:1E:82:F3:77:8C:12:50:30:95:E8:9F:4A:EC:3C:EE:D9:33:0D Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33 Certificate issuer: /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833 Certificate serial: 019B3757F86BFA51C0126FA790535D782F11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 16:01:10 +0000 Manifest this update: Fri 19 Dec 2025 16:01:10 +0000 Manifest next update: Sat 20 Dec 2025 16:01:10 +0000 Files and hashes: 1: 8qsLWFucOWKI0g6c9mWuHeOfeDM.crl (hash: cPNCH1N2asG49PyU9UIKUb1GvB2/2q0ESwxQS5Q0oXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:f8:6b:fa:51:c0:12:6f:a7:90:53:5d:78:2f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833 Validity Not Before: Dec 19 16:01:10 2025 GMT Not After : Dec 20 16:01:10 2025 GMT Subject: CN=4f471e82f3778c12503095e89f4aec3ceed9330d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dd:f4:7f:ab:c6:32:70:b9:c3:0f:d7:99:fc: af:54:f6:0e:8e:b7:7a:af:34:0d:c2:19:5b:53:11: b8:7a:c8:ad:11:f8:01:e3:4f:41:e4:9f:a5:11:e0: c9:72:a6:d5:c3:e2:62:03:5e:d9:44:27:c0:b7:3b: a9:ec:9d:b7:38:c7:43:28:45:6b:f4:b6:63:06:af: 51:c9:7a:b7:b3:c8:05:d3:fb:a0:a3:4f:f5:9d:75: 3c:e7:08:26:ed:93:65:29:fc:d3:62:b5:31:7d:6a: 02:44:89:0b:4f:06:2a:54:71:f4:57:0f:e3:79:d4: e5:51:15:cb:4a:f1:13:08:f5:71:79:6c:37:a6:35: c0:de:bc:b5:01:0d:ad:51:87:c2:26:b0:ab:0a:0d: d6:b3:2d:52:8a:f3:b0:b2:97:b7:5c:09:1b:cf:fe: 82:48:d8:bd:6e:bd:89:90:df:bf:9f:64:db:5e:49: 52:9b:a9:50:e7:f6:e5:44:f8:af:65:c4:83:5d:6d: 85:ea:a4:b5:b3:b8:f9:42:1d:72:99:a2:72:b6:d4: 34:5a:56:dc:be:62:20:71:27:aa:de:78:ac:2c:6f: ed:c0:a6:a3:c0:f1:4e:a9:21:1e:48:82:da:4f:cc: 09:60:3f:9e:60:81:0a:68:44:c2:8d:de:5d:e6:bd: 81:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:47:1E:82:F3:77:8C:12:50:30:95:E8:9F:4A:EC:3C:EE:D9:33:0D X509v3 Authority Key Identifier: keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:db:5b:f6:10:52:82:44:40:8c:ef:14:22:5b:da:0c:81:29: 2d:7e:12:29:4a:34:01:db:5a:bc:52:56:30:41:6c:a2:67:96: 60:8f:e3:1a:ed:a9:82:68:a4:f5:9b:6f:40:65:ff:18:9f:2b: c1:be:a6:93:c0:e2:4e:15:1d:f8:0a:b1:12:07:97:80:d7:3e: d1:29:57:39:59:d4:fe:24:49:be:c5:02:56:8e:54:8e:e0:3c: 6d:fa:da:62:c9:c5:07:1c:56:2a:89:19:3b:cd:5e:9b:3e:f9: fd:8b:22:e0:ff:8f:7f:78:9a:aa:9a:78:2b:7c:d7:a1:40:12: 20:76:73:fc:2e:f6:b7:e8:15:0a:cd:5a:fe:9d:fc:0e:51:f7: eb:f9:6a:95:9b:66:a5:25:e0:e0:63:51:a0:a7:c1:26:40:c7: af:9a:e9:fb:22:f3:0b:da:bd:bb:b6:ab:cf:79:f9:aa:94:bb: 6c:ba:cf:88:ed:5e:ee:1b:5a:10:46:3a:58:50:6a:4e:47:53: fb:af:f6:a3:21:bd:e9:3f:e1:ec:52:45:e4:73:21:d0:60:47: 45:0d:22:e1:94:9c:55:43:bc:c2:82:dd:6e:8c:eb:f7:d9:9e: 3c:64:10:40:f5:cc:09:41:16:72:f0:26:fd:08:2d:51:0f:79: 0f:a9:be:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V/hr+lHAEm+nkFNdeC8RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYWIwYjU4NWI5YzM5NjI4OGQyMGU5Y2Y2NjVhZTFkZTM5 Zjc4MzMwHhcNMjUxMjE5MTYwMTEwWhcNMjUxMjIwMTYwMTEwWjAzMTEwLwYDVQQD Eyg0ZjQ3MWU4MmYzNzc4YzEyNTAzMDk1ZTg5ZjRhZWMzY2VlZDkzMzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd30f6vGMnC5ww/XmfyvVPYOjrd6 rzQNwhlbUxG4esitEfgB409B5J+lEeDJcqbVw+JiA17ZRCfAtzup7J23OMdDKEVr 9LZjBq9RyXq3s8gF0/ugo0/1nXU85wgm7ZNlKfzTYrUxfWoCRIkLTwYqVHH0Vw/j edTlURXLSvETCPVxeWw3pjXA3ry1AQ2tUYfCJrCrCg3Wsy1SivOwspe3XAkbz/6C SNi9br2JkN+/n2TbXklSm6lQ5/blRPivZcSDXW2F6qS1s7j5Qh1ymaJyttQ0Wlbc vmIgcSeq3nisLG/twKajwPFOqSEeSILaT8wJYD+eYIEKaETCjd5d5r2BpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9HHoLzd4wSUDCV6J9K7Dzu2TMNMB8GA1UdIwQY MBaAFPKrC1hbnDliiNIOnPZlrh3jn3gzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iYmZhMTktZGViYy00Yzc3LThkNjMt OTA4YjI1MGNiYTc5LzEvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9iYmZhMTktZGViYy00Yzc3LThkNjMtOTA4YjI1MGNiYTc5 LzEvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNtb9hBS gkRAjO8UIlvaDIEpLX4SKUo0AdtavFJWMEFsomeWYI/jGu2pgmik9ZtvQGX/GJ8r wb6mk8DiThUd+AqxEgeXgNc+0SlXOVnU/iRJvsUCVo5UjuA8bfraYsnFBxxWKokZ O81emz75/Ysi4P+Pf3iaqpp4K3zXoUASIHZz/C72t+gVCs1a/p38DlH36/lqlZtm pSXg4GNRoKfBJkDHr5rp+yLzC9q9u7arz3n5qpS7bLrPiO1e7htaEEY6WFBqTkdT +6/2oyG96T/h7FJF5HMh0GBHRQ0i4ZScVUO8woLdbozr99mePGQQQPXMCUEWcvAm /QgtUQ95D6m+cg== -----END CERTIFICATE-----Generated at Fri Dec 19 18:44:32 2025 by rpki-client