This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft File: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft (raw, json) Hash identifier: h2KBDtcn5YPCyp8UcGZVS97GrCEVmRYn9b1rfBqkqTA= Subject key identifier: 67:B7:EA:90:A5:17:69:5F:F8:51:57:57:5A:43:EF:A1:AF:9B:89:D0 Authority key identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32 Certificate issuer: /CN=f1af38ad44069be654d2e787f96c4e8fd26a5132 Certificate serial: 019B4ADF09501A509E22D026421EFFEF4D8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft Manifest number: 089E Signing time: Tue 23 Dec 2025 11:01:29 +0000 Manifest this update: Tue 23 Dec 2025 11:01:29 +0000 Manifest next update: Wed 24 Dec 2025 11:01:29 +0000 Files and hashes: 1: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl (hash: Q5jS8364wr35krz5B/syIxVwndWavhYidRwME+KzCbM=) 2: zFKwxmaeEautk9glZTACNxiJuHI.roa (hash: SSRDLDzbM3kxops586eTzqegDVIiP8cLLFUXY14RKCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:df:09:50:1a:50:9e:22:d0:26:42:1e:ff:ef:4d:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1af38ad44069be654d2e787f96c4e8fd26a5132 Validity Not Before: Dec 23 11:01:29 2025 GMT Not After : Dec 24 11:01:29 2025 GMT Subject: CN=67b7ea90a517695ff85157575a43efa1af9b89d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0b:5b:eb:9e:74:25:b0:06:fa:28:71:05:0a: ba:34:c2:46:b8:93:7d:60:9a:9a:e9:38:7b:31:e2: 7b:91:70:21:7f:7a:24:30:81:4e:eb:6e:db:f0:04: ce:67:79:ef:93:79:f2:45:0b:b7:1c:e2:b8:19:2b: e6:4a:9e:95:4d:04:31:6f:93:5d:0f:75:03:a9:f2: aa:a5:16:12:f9:9d:e7:23:8a:b8:22:31:9e:ac:fc: 36:a4:d1:09:8e:14:dd:4e:b6:e7:cf:e0:9a:2a:05: 23:f0:bc:93:9a:aa:d2:c7:c1:b8:82:4b:13:a2:25: fd:00:13:f5:cb:ec:1d:2c:09:82:98:15:24:1c:b8: 17:8e:e5:f0:95:c5:89:a6:d8:d1:c0:39:a4:c0:e3: 3b:9f:da:4c:73:2f:b3:97:69:fa:33:9a:13:44:7e: 82:4b:25:54:cc:10:b0:b0:5a:41:52:db:af:56:a6: 9f:3b:32:f2:2b:68:c3:86:e9:8f:06:b3:bc:a5:40: 91:a0:7f:c0:b7:64:6a:44:35:52:f8:65:45:6e:e1: b5:1e:8a:8d:81:f3:a8:fa:dc:20:30:91:0f:7a:13: 53:41:3a:d5:0e:92:85:0e:10:c1:57:90:b6:c8:da: db:9c:0c:c3:41:e7:a0:78:a0:b1:dd:61:37:2d:84: 98:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B7:EA:90:A5:17:69:5F:F8:51:57:57:5A:43:EF:A1:AF:9B:89:D0 X509v3 Authority Key Identifier: keyid:F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:5d:0a:ab:8c:9e:0e:45:f8:ef:2d:e6:2d:5c:53:86:bc:51: a3:ff:30:57:be:d2:83:e9:ae:0f:9e:61:bb:10:6d:dc:0c:a5: 3b:94:38:cb:b9:f9:5e:f3:10:7c:72:60:05:a7:ee:49:76:28: cb:93:99:ca:53:10:78:79:67:93:f0:27:ba:e3:9f:cd:69:ae: c4:2c:09:33:76:a3:a7:d6:4e:6b:dd:fd:24:74:02:62:9d:a8: e4:02:83:b5:c3:5d:b4:9d:fc:93:37:50:cc:1d:12:90:56:a8: 60:e9:b9:7d:fb:0f:42:e5:db:38:1f:eb:ac:95:91:c4:01:8d: 03:f7:d7:c0:b0:12:4f:f1:41:03:f2:59:61:e6:eb:9e:91:61: 9e:1e:93:13:3d:1e:7b:bd:62:ff:9e:3a:47:f4:28:79:ac:f6: 33:f8:ab:e9:d8:90:13:76:28:f2:1c:49:44:fa:c3:e3:db:d4: e2:ac:b9:c1:1b:cd:7d:1d:1e:44:05:b1:a2:c4:4b:cc:13:47: 0a:dd:ef:37:f3:4f:44:95:02:a3:d6:a0:c4:86:82:4a:db:ea: 67:cc:09:57:ac:d4:ff:3e:78:c3:00:0f:c4:36:6b:97:f8:45: a8:c4:57:7a:2e:b3:af:b5:04:28:08:44:a5:13:7a:7d:a8:70: fe:3d:ab:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3wlQGlCeItAmQh7/702LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYWYzOGFkNDQwNjliZTY1NGQyZTc4N2Y5NmM0ZThmZDI2 YTUxMzIwHhcNMjUxMjIzMTEwMTI5WhcNMjUxMjI0MTEwMTI5WjAzMTEwLwYDVQQD Eyg2N2I3ZWE5MGE1MTc2OTVmZjg1MTU3NTc1YTQzZWZhMWFmOWI4OWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAtb6550JbAG+ihxBQq6NMJGuJN9 YJqa6Th7MeJ7kXAhf3okMIFO627b8ATOZ3nvk3nyRQu3HOK4GSvmSp6VTQQxb5Nd D3UDqfKqpRYS+Z3nI4q4IjGerPw2pNEJjhTdTrbnz+CaKgUj8LyTmqrSx8G4gksT oiX9ABP1y+wdLAmCmBUkHLgXjuXwlcWJptjRwDmkwOM7n9pMcy+zl2n6M5oTRH6C SyVUzBCwsFpBUtuvVqafOzLyK2jDhumPBrO8pUCRoH/At2RqRDVS+GVFbuG1HoqN gfOo+twgMJEPehNTQTrVDpKFDhDBV5C2yNrbnAzDQeegeKCx3WE3LYSYCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGe36pClF2lf+FFXV1pD76Gvm4nQMB8GA1UdIwQY MBaAFPGvOK1EBpvmVNLnh/lsTo/SalEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGE4NHJVUUdtLVpVMHVlSC1XeE9qOUpxVVRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wZmMzYTgtMGNmMS00ZTA1LThlNmMt ZDdhMWIzZGY5YTAzLzEvOGE4NHJVUUdtLVpVMHVlSC1XeE9qOUpxVVRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wZmMzYTgtMGNmMS00ZTA1LThlNmMtZDdhMWIzZGY5YTAz LzEvOGE4NHJVUUdtLVpVMHVlSC1XeE9qOUpxVVRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAF0Kq4ye DkX47y3mLVxThrxRo/8wV77Sg+muD55huxBt3AylO5Q4y7n5XvMQfHJgBafuSXYo y5OZylMQeHlnk/AnuuOfzWmuxCwJM3ajp9ZOa939JHQCYp2o5AKDtcNdtJ38kzdQ zB0SkFaoYOm5ffsPQuXbOB/rrJWRxAGNA/fXwLAST/FBA/JZYebrnpFhnh6TEz0e e71i/546R/Qoeaz2M/ir6diQE3Yo8hxJRPrD49vU4qy5wRvNfR0eRAWxosRLzBNH Ct3vN/NPRJUCo9agxIaCStvqZ8wJV6zU/z54wwAPxDZrl/hFqMRXei6zr7UEKAhE pRN6fahw/j2r3g== -----END CERTIFICATE-----Generated at Tue Dec 23 12:51:20 2025 by rpki-client