This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft File: 8n7hjEY57qoWphkIzLRcepjV3Ws.mft (raw, json) Hash identifier: GkNz7IduOd73Sdiv6JijcRhDHPqzAhjuxx+fle1qP3E= Subject key identifier: F1:36:B6:5B:CB:EE:69:AB:AE:6C:CD:BB:95:71:CE:E3:6A:13:CB:62 Authority key identifier: F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B Certificate issuer: /CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b Certificate serial: 019B736C06BAB6BF1D3F18D31AED7969D569 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft Manifest number: 17A5 Signing time: Wed 31 Dec 2025 08:00:17 +0000 Manifest this update: Wed 31 Dec 2025 08:00:17 +0000 Manifest next update: Thu 01 Jan 2026 08:00:17 +0000 Files and hashes: 1: 8n7hjEY57qoWphkIzLRcepjV3Ws.crl (hash: ifbv1vmgtxTeQaPZfkv75H4DiaSN1QA9MxMpXGnKOxU=) 2: nqRXNoUiyTb4TmIe2_b86I-CG4w.roa (hash: uh5jetKJYfrnWeF7nxGsrvO4F6Y6S/Ud8IP3anKzhdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 08:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:6c:06:ba:b6:bf:1d:3f:18:d3:1a:ed:79:69:d5:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b Validity Not Before: Dec 31 08:00:17 2025 GMT Not After : Jan 1 08:00:17 2026 GMT Subject: CN=f136b65bcbee69abae6ccdbb9571cee36a13cb62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f3:a7:26:8e:d5:bf:62:84:07:a0:35:9a:f7: e3:c5:9a:98:73:5c:8f:11:4b:ea:64:e0:b5:e0:81: 43:37:65:58:33:cd:ef:fa:2a:d4:08:ec:99:f5:9b: 4c:13:7e:cf:f0:68:f6:80:0e:c8:7e:4b:7d:f1:46: dd:64:d1:11:94:bc:69:c6:e1:e0:8c:b0:44:e9:20: 62:2a:43:e5:22:25:35:ed:aa:3d:c7:96:e1:b0:81: b8:65:40:a9:e2:3f:23:0a:8e:10:dd:e2:c0:6a:b4: e9:5e:27:17:13:68:c9:b2:67:fa:1b:01:b1:55:76: f8:55:7b:e8:0c:b7:ba:ca:4f:ae:49:ad:38:47:6d: 3b:2f:74:2f:6f:da:78:5b:00:8d:aa:3c:d0:cc:d5: 47:8e:98:8d:90:8d:58:85:43:07:bd:1a:57:ab:92: d2:f9:6b:18:dc:0a:3d:f7:88:75:6d:e0:75:6e:0a: 2a:c7:ae:b5:7f:48:0e:14:fa:3c:34:d6:5a:8c:3a: 59:ba:62:81:1c:f3:02:86:d0:a7:8c:ac:08:31:f8: 29:bf:f7:57:93:07:1b:a5:4c:bc:fa:ef:0d:ee:29: 9d:54:41:b8:e8:bf:14:50:c2:ca:34:e9:94:d2:2c: 1f:4a:7f:12:96:ea:eb:69:ef:a5:27:3a:f8:3d:cc: 12:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:36:B6:5B:CB:EE:69:AB:AE:6C:CD:BB:95:71:CE:E3:6A:13:CB:62 X509v3 Authority Key Identifier: keyid:F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:32:6d:63:cf:d7:db:04:18:5e:9e:1c:1a:89:85:20:08:e0: 95:19:b2:0e:20:ce:55:b1:1c:e2:15:48:07:c2:d2:1a:d3:96: ac:39:b2:72:f3:7a:dd:01:e9:08:56:fb:69:c9:75:85:07:31: bb:83:d3:e5:d3:8f:ce:73:12:ff:e5:3f:b7:0c:d4:42:8b:db: ec:77:61:4e:4f:e6:93:5e:7b:be:c3:e0:ad:b3:80:30:99:1f: 97:eb:03:ea:37:86:43:95:24:2d:a8:c8:c6:2a:c1:ea:5a:50: ac:cf:ba:d1:4b:2b:e2:f1:40:29:b8:e6:19:69:57:4b:0b:f7: 17:8b:e8:bc:7a:66:ca:40:63:fa:de:08:84:17:92:cf:8c:31: b8:1b:ee:be:e0:bb:1b:f7:66:5d:7d:22:0a:91:32:0c:e5:f1: e3:d9:7c:c3:82:27:77:d4:e2:fe:f8:fa:97:66:ca:7a:84:2b: c0:6f:8f:48:c9:22:72:fb:62:de:cb:0a:2d:ea:37:c2:b2:02: 97:88:d2:9f:5b:cf:7a:01:24:d5:b0:34:97:2b:15:65:16:a9: 3d:2d:90:63:0d:8e:22:51:86:20:ec:a6:b9:16:04:c2:8a:50: 8c:41:9b:78:b3:f7:0e:f0:1f:4e:12:09:fe:98:c0:1d:b2:22: 3c:de:b7:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzbAa6tr8dPxjTGu15adVpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyN2VlMThjNDYzOWVlYWExNmE2MTkwOGNjYjQ1YzdhOThk NWRkNmIwHhcNMjUxMjMxMDgwMDE3WhcNMjYwMTAxMDgwMDE3WjAzMTEwLwYDVQQD EyhmMTM2YjY1YmNiZWU2OWFiYWU2Y2NkYmI5NTcxY2VlMzZhMTNjYjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovOnJo7Vv2KEB6A1mvfjxZqYc1yP EUvqZOC14IFDN2VYM83v+irUCOyZ9ZtME37P8Gj2gA7Ifkt98UbdZNERlLxpxuHg jLBE6SBiKkPlIiU17ao9x5bhsIG4ZUCp4j8jCo4Q3eLAarTpXicXE2jJsmf6GwGx VXb4VXvoDLe6yk+uSa04R207L3Qvb9p4WwCNqjzQzNVHjpiNkI1YhUMHvRpXq5LS +WsY3Ao994h1beB1bgoqx661f0gOFPo8NNZajDpZumKBHPMChtCnjKwIMfgpv/dX kwcbpUy8+u8N7imdVEG46L8UUMLKNOmU0iwfSn8Slurrae+lJzr4PcwSdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPE2tlvL7mmrrmzNu5VxzuNqE8tiMB8GA1UdIwQY MBaAFPJ+4YxGOe6qFqYZCMy0XHqY1d1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG43aGpFWTU3cW9XcGhrSXpMUmNlcGpWM1dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNThhMmEtMGYyNS00ODMxLWJiMDkt YTBkZDNiNWYxNWY4LzEvOG43aGpFWTU3cW9XcGhrSXpMUmNlcGpWM1dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9mNThhMmEtMGYyNS00ODMxLWJiMDktYTBkZDNiNWYxNWY4 LzEvOG43aGpFWTU3cW9XcGhrSXpMUmNlcGpWM1dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzJtY8/X 2wQYXp4cGomFIAjglRmyDiDOVbEc4hVIB8LSGtOWrDmycvN63QHpCFb7acl1hQcx u4PT5dOPznMS/+U/twzUQovb7HdhTk/mk157vsPgrbOAMJkfl+sD6jeGQ5UkLajI xirB6lpQrM+60Usr4vFAKbjmGWlXSwv3F4vovHpmykBj+t4IhBeSz4wxuBvuvuC7 G/dmXX0iCpEyDOXx49l8w4Ind9Ti/vj6l2bKeoQrwG+PSMkicvti3ssKLeo3wrIC l4jSn1vPegEk1bA0lysVZRapPS2QYw2OIlGGIOymuRYEwopQjEGbeLP3DvAfThIJ /pjAHbIiPN633w== -----END CERTIFICATE-----Generated at Wed Dec 31 10:46:44 2025 by rpki-client