This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft File: 8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json) Hash identifier: 8L3zkY29iPfCY04A7z3aHtraZi9Hu+Va7Rp3v7v7Sv0= Subject key identifier: A4:5A:82:0A:19:A7:A8:F0:F7:D9:B8:5A:DD:64:AB:2D:58:05:8C:91 Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37 Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137 Certificate serial: 019B3AC6D445B073ACE318D7F3F281220917 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft Manifest number: 12C8 Signing time: Sat 20 Dec 2025 08:01:07 +0000 Manifest this update: Sat 20 Dec 2025 08:01:07 +0000 Manifest next update: Sun 21 Dec 2025 08:01:07 +0000 Files and hashes: 1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: DbXLiM2n4cSMHcuCUecPRTezXlDw2bTknvsdE7qnW1A=) 2: egJez3AEE17hCNzFwTYyy-yFWOk.roa (hash: tusTlSSqSFD7zKHlwWaKcKWcJ80R+Gl9wxxF6SdsjMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:d4:45:b0:73:ac:e3:18:d7:f3:f2:81:22:09:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137 Validity Not Before: Dec 20 08:01:07 2025 GMT Not After : Dec 21 08:01:07 2025 GMT Subject: CN=a45a820a19a7a8f0f7d9b85add64ab2d58058c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:5d:72:b8:b2:4d:78:76:19:3b:00:34:bf:92: 8a:26:77:bf:0f:cd:61:37:14:92:01:7a:5d:d9:ff: 7a:48:50:a5:0f:c4:9c:32:5e:fa:f8:f9:04:4b:8d: bc:06:dd:c5:eb:6b:8a:1e:52:e9:35:a4:35:a6:3f: 47:91:38:8f:c8:0e:9b:da:35:20:3d:7b:db:19:da: df:49:6b:30:32:82:e0:03:76:8e:e1:48:98:d7:78: 04:5c:a3:11:3b:fa:15:12:93:19:1d:2c:fb:dc:56: 34:f6:a7:bd:a1:3b:79:fc:76:df:ad:41:ec:51:1e: e6:50:53:bc:c7:e1:1d:37:69:e8:0f:0c:aa:7a:83: 68:bb:cd:d0:9f:56:0e:47:b2:c8:7e:81:98:6f:59: 58:fd:e3:da:45:eb:48:c1:8c:35:cd:0e:40:b9:ce: ac:32:55:a7:c6:3b:24:ce:c8:20:4c:07:99:79:58: b8:93:89:1d:51:ff:61:86:e3:ea:4d:c2:0b:0f:91: 69:d0:f9:9b:3a:70:fe:eb:db:9b:02:f2:4e:d7:c1: d5:ca:32:09:d5:bf:fc:27:32:15:15:6e:2b:aa:55: d2:e9:3e:7c:75:b3:49:b8:49:64:97:5d:6c:55:09: 39:ad:31:63:07:80:b8:44:3d:c2:51:77:98:0a:19: 9f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5A:82:0A:19:A7:A8:F0:F7:D9:B8:5A:DD:64:AB:2D:58:05:8C:91 X509v3 Authority Key Identifier: keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:8e:19:5f:03:39:f1:f9:77:7d:93:c2:22:88:82:e5:92:5a: f9:16:f6:e3:ba:24:5a:d0:3e:4a:2b:b3:6b:a4:05:a5:f3:8c: 22:24:05:e9:72:5c:1c:8c:2b:e3:ed:70:d8:c0:0f:86:9f:b2: 5c:f0:6f:8a:5f:d4:d6:09:62:47:63:ed:7b:25:d8:cc:b0:f9: b3:c2:3d:b8:60:24:a9:ff:0b:41:b5:38:d3:dc:08:d7:f4:82: 7e:a0:94:8e:04:cb:e4:2f:23:65:13:7d:83:b1:3b:25:76:f3: c2:a4:79:8c:27:bc:23:19:b5:5a:48:a0:88:4c:30:02:f2:db: b0:81:3b:c6:60:91:cb:b3:39:27:84:ec:21:55:00:4f:fe:1f: 9d:de:7c:0a:2d:86:c4:c0:82:52:dc:b6:4c:36:37:90:3a:8f: 80:39:86:2c:09:4d:4f:d6:3d:e2:ef:58:34:13:56:3b:3f:0e: 9c:7b:a0:49:b9:45:bd:64:64:e6:f4:87:4d:fc:2d:1b:97:39: e9:e1:ab:c9:b1:30:3a:e0:a7:98:26:c7:aa:5b:0a:6b:8e:15: 08:bf:c4:6d:57:d4:3e:e6:59:31:05:78:59:cc:56:d6:67:89: 8a:6a:5e:f0:ba:e3:47:bc:a0:20:45:47:38:c0:08:de:4d:82: 94:66:e8:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xtRFsHOs4xjX8/KBIgkXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYjI4ZDZhYzZlYzQwZGZiMjJmOTZmN2I1NTYxNjljMDQ5 OTAxMzcwHhcNMjUxMjIwMDgwMTA3WhcNMjUxMjIxMDgwMTA3WjAzMTEwLwYDVQQD EyhhNDVhODIwYTE5YTdhOGYwZjdkOWI4NWFkZDY0YWIyZDU4MDU4YzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA911yuLJNeHYZOwA0v5KKJne/D81h NxSSAXpd2f96SFClD8ScMl76+PkES428Bt3F62uKHlLpNaQ1pj9HkTiPyA6b2jUg PXvbGdrfSWswMoLgA3aO4UiY13gEXKMRO/oVEpMZHSz73FY09qe9oTt5/HbfrUHs UR7mUFO8x+EdN2noDwyqeoNou83Qn1YOR7LIfoGYb1lY/ePaRetIwYw1zQ5Auc6s MlWnxjskzsggTAeZeVi4k4kdUf9hhuPqTcILD5Fp0PmbOnD+69ubAvJO18HVyjIJ 1b/8JzIVFW4rqlXS6T58dbNJuElkl11sVQk5rTFjB4C4RD3CUXeYChmfkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRaggoZp6jw99m4Wt1kqy1YBYyRMB8GA1UdIwQY MBaAFPCyjWrG7EDfsi+W97VWFpwEmQE3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOExLTmFzYnNRTi15TDViM3RWWVduQVNaQVRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81Y2U3ZjctZTBmZS00MzYxLTgyYzIt NDc0NjU5ZWRiMzYxLzEvOExLTmFzYnNRTi15TDViM3RWWVduQVNaQVRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81Y2U3ZjctZTBmZS00MzYxLTgyYzItNDc0NjU5ZWRiMzYx LzEvOExLTmFzYnNRTi15TDViM3RWWVduQVNaQVRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5I4ZXwM5 8fl3fZPCIoiC5ZJa+Rb247okWtA+Siuza6QFpfOMIiQF6XJcHIwr4+1w2MAPhp+y XPBvil/U1gliR2PteyXYzLD5s8I9uGAkqf8LQbU409wI1/SCfqCUjgTL5C8jZRN9 g7E7JXbzwqR5jCe8Ixm1WkigiEwwAvLbsIE7xmCRy7M5J4TsIVUAT/4fnd58Ci2G xMCCUty2TDY3kDqPgDmGLAlNT9Y94u9YNBNWOz8OnHugSblFvWRk5vSHTfwtG5c5 6eGrybEwOuCnmCbHqlsKa44VCL/EbVfUPuZZMQV4WcxW1meJimpe8LrjR7ygIEVH OMAI3k2ClGbooA== -----END CERTIFICATE-----Generated at Sat Dec 20 13:15:45 2025 by rpki-client