This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft File: 8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json) Hash identifier: nce//lfSEXuUIUfgH9sTtaePBjaB56mOvV7w+xnRJek= Subject key identifier: 2D:4A:1F:E4:4D:51:77:AD:5B:74:38:4B:DB:7E:EF:52:4A:1A:08:2E Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03 Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103 Certificate serial: 019B2C2F5078BC70B3811C1632DA0E2C4144 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft Manifest number: 0F0D Signing time: Wed 17 Dec 2025 12:00:56 +0000 Manifest this update: Wed 17 Dec 2025 12:00:56 +0000 Manifest next update: Thu 18 Dec 2025 12:00:56 +0000 Files and hashes: 1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: YTlLUAureGfrQBWXRaC/R4Bz8O5eLSzauioB56h7/HM=) 2: Nh04CLMcck1XHS9AATe9hyD29NE.roa (hash: KRd9oxirDVyH2M186/c3VQHXMTtIMq/vRs5kMb4jBs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:50:78:bc:70:b3:81:1c:16:32:da:0e:2c:41:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103 Validity Not Before: Dec 17 12:00:56 2025 GMT Not After : Dec 18 12:00:56 2025 GMT Subject: CN=2d4a1fe44d5177ad5b74384bdb7eef524a1a082e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:97:18:a7:39:64:6e:b0:0a:21:f6:b9:47:cc: 9e:68:90:e4:9c:0e:69:1d:fd:94:10:8e:b0:8b:01: 88:64:98:f2:b2:f9:ba:db:98:25:57:1a:7d:d3:c3: fc:a2:73:49:48:ee:82:c4:d6:dd:ee:c8:c4:a0:6e: 01:6e:0d:08:5e:9e:d7:d7:ec:a4:ae:7a:c7:f3:3e: a2:e6:b4:7b:9e:f9:a9:09:a6:07:55:23:d0:d3:47: 0a:a1:75:ee:88:1a:d5:9b:6d:dc:0a:78:0f:c1:53: 1b:1a:85:90:16:09:e2:eb:4b:09:10:e4:1d:fa:ac: cc:1b:db:2a:bc:b3:12:ff:4e:b5:5b:a7:9b:6c:99: 6d:dd:88:4f:cb:2a:b5:0d:48:3f:ac:e8:bb:bf:11: 83:b0:ba:bf:f7:bf:e1:23:34:35:6b:38:76:43:95: 09:80:05:ba:b8:15:f1:d5:90:52:7a:29:a3:e8:6c: e3:cc:5e:c6:ec:3f:36:d7:d4:47:4a:71:3f:12:70: 3c:be:bc:ad:b2:57:48:63:1b:b6:46:ca:48:6c:13: a3:00:11:ab:6f:30:01:20:a1:8e:c4:2f:bf:e0:83: 6b:a8:14:26:b6:3c:15:0f:15:97:73:6e:2f:60:ae: 62:70:9b:f0:ba:61:eb:04:a3:58:5a:36:79:0d:f4: 39:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4A:1F:E4:4D:51:77:AD:5B:74:38:4B:DB:7E:EF:52:4A:1A:08:2E X509v3 Authority Key Identifier: keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ba:52:b5:48:03:a1:9b:a5:36:d2:30:a2:23:46:47:5f:28: de:9d:a5:1f:33:b4:78:bc:1f:11:de:4e:00:00:e7:cb:33:63: 9d:42:7e:75:4c:d5:66:69:90:2b:bb:64:6b:a6:bb:20:66:b8: 35:e7:63:73:a2:d1:62:9b:99:e2:5d:26:1b:15:70:4c:09:16: d4:90:cf:30:20:57:09:83:3c:ac:19:00:e5:f6:11:46:ba:4c: 6f:a4:17:04:7d:dd:ee:2d:ad:b0:59:cd:78:ce:0b:6a:7c:84: 7d:d1:1a:5b:be:94:47:67:5f:a5:b6:a4:29:81:7a:ba:13:01: 85:f5:56:3c:cd:53:4d:9c:1d:c4:a6:c1:bd:99:cb:df:23:0c: 0f:65:b4:4c:4d:04:98:1a:e2:84:65:75:77:d8:21:94:0d:ba: 8b:be:4d:2a:45:59:59:c1:70:7c:9f:4d:24:cc:a6:c2:04:3d: 31:48:1d:48:36:df:a8:87:83:f0:a2:07:b6:6d:05:c4:c0:86: 87:d6:e8:b0:d0:de:cc:d4:79:73:82:3e:12:59:03:d4:f3:63: 8c:87:80:8f:7f:ae:93:54:87:3d:f6:f4:bb:50:53:a5:41:a3: 3a:88:f7:28:9e:d4:45:7e:99:a7:6c:05:70:69:35:d5:33:a9: 74:c9:72:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL1B4vHCzgRwWMtoOLEFEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZDVkZmRkZTRkNjc5YzcxMWNjZTA2ZWRmNDAzNmNhNGU1 Y2MxMDMwHhcNMjUxMjE3MTIwMDU2WhcNMjUxMjE4MTIwMDU2WjAzMTEwLwYDVQQD EygyZDRhMWZlNDRkNTE3N2FkNWI3NDM4NGJkYjdlZWY1MjRhMWEwODJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpcYpzlkbrAKIfa5R8yeaJDknA5p Hf2UEI6wiwGIZJjysvm625glVxp908P8onNJSO6CxNbd7sjEoG4Bbg0IXp7X1+yk rnrH8z6i5rR7nvmpCaYHVSPQ00cKoXXuiBrVm23cCngPwVMbGoWQFgni60sJEOQd +qzMG9sqvLMS/061W6ebbJlt3YhPyyq1DUg/rOi7vxGDsLq/97/hIzQ1azh2Q5UJ gAW6uBXx1ZBSeimj6GzjzF7G7D8219RHSnE/EnA8vrytsldIYxu2RspIbBOjABGr bzABIKGOxC+/4INrqBQmtjwVDxWXc24vYK5icJvwumHrBKNYWjZ5DfQ5IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1KH+RNUXetW3Q4S9t+71JKGgguMB8GA1UdIwQY MBaAFPDV393k1nnHEczgbt9ANspOXMEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mMmVjZjgtN2M1Yy00NWFiLTgzZjct ZTc0ZDQ0OTBhZjZjLzEvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9mMmVjZjgtN2M1Yy00NWFiLTgzZjctZTc0ZDQ0OTBhZjZj LzEvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7pStUgD oZulNtIwoiNGR18o3p2lHzO0eLwfEd5OAADnyzNjnUJ+dUzVZmmQK7tka6a7IGa4 Nedjc6LRYpuZ4l0mGxVwTAkW1JDPMCBXCYM8rBkA5fYRRrpMb6QXBH3d7i2tsFnN eM4LanyEfdEaW76UR2dfpbakKYF6uhMBhfVWPM1TTZwdxKbBvZnL3yMMD2W0TE0E mBrihGV1d9ghlA26i75NKkVZWcFwfJ9NJMymwgQ9MUgdSDbfqIeD8KIHtm0FxMCG h9bosNDezNR5c4I+ElkD1PNjjIeAj3+uk1SHPfb0u1BTpUGjOoj3KJ7URX6Zp2wF cGk11TOpdMlypA== -----END CERTIFICATE-----Generated at Wed Dec 17 20:46:14 2025 by rpki-client