This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft File: 8fGG6XCXyEF9lDfXDP38UnMxtag.mft (raw, json) Hash identifier: wRNWcYIj6J/zmdzpWjCe0c3KveoaFvg+MNPtpjLZgCI= Subject key identifier: 68:D5:50:30:BF:7A:C0:4F:DB:1B:9D:C1:6C:E5:40:79:2B:36:F0:A2 Authority key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8 Certificate issuer: /CN=f1f186e97097c8417d9437d70cfdfc527331b5a8 Certificate serial: 019B62429026F32BF8BADF4B9E40740469EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft Manifest number: 0C20 Signing time: Sun 28 Dec 2025 00:01:28 +0000 Manifest this update: Sun 28 Dec 2025 00:01:28 +0000 Manifest next update: Mon 29 Dec 2025 00:01:28 +0000 Files and hashes: 1: 8fGG6XCXyEF9lDfXDP38UnMxtag.crl (hash: lfbm5f3J7xpWVxE3xlBlYBwA/2OIYZIi/ly6747TOdw=) 2: Bb-dCG0MYANSL8Bk5tQCjYBHu7I.roa (hash: 0dT55FR6gYNAR7wtBsJy+EY1xVBw/famE9UI3Od2H8A=) 3: K5Oof9CYQW5Wc9ghK1PUdN-aFTY.roa (hash: 2dlcOZzL+Eim7W+NTEiKqnv/Tt9OOEdX1RMt+wWQD9U=) 4: hwiO597jiOerCy1jD6kKNf_z4mE.roa (hash: At2Ig8rywEMbpAnMXYd8IjR4QLHdmR+nptBnEkQohjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:42:90:26:f3:2b:f8:ba:df:4b:9e:40:74:04:69:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8 Validity Not Before: Dec 28 00:01:28 2025 GMT Not After : Dec 29 00:01:28 2025 GMT Subject: CN=68d55030bf7ac04fdb1b9dc16ce540792b36f0a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8f:6a:18:c9:de:dc:0c:a7:59:7e:88:03:01: 49:80:ed:c8:26:3e:55:0e:5c:38:ab:ca:61:69:ff: e9:b8:c4:56:8e:c9:a3:5e:4d:b7:ad:ad:7c:6c:8f: 79:48:47:dd:34:c6:79:b1:91:0e:c6:d2:be:2b:a6: 40:a9:22:ec:1c:4a:9a:0c:1e:9d:85:b3:17:3b:c3: 7f:31:43:63:e0:56:69:08:03:87:05:58:d3:b6:ad: d3:ab:9e:3b:db:d9:26:de:88:a6:98:91:49:92:44: bd:89:2e:a2:cf:05:49:33:6a:4e:f5:64:fb:e9:72: 40:dc:d7:5c:11:1e:c6:b8:d8:49:4f:cb:a6:fb:7d: 3c:86:03:13:7e:23:50:00:fc:4f:b6:b2:6d:60:3f: 15:27:f7:dd:fc:08:23:f8:8f:08:93:24:56:d8:8c: 9d:91:52:f1:89:24:52:f3:eb:b5:3a:66:d0:63:c9: 57:c3:dd:dc:3d:9c:92:5a:07:45:fd:79:f8:2e:ae: 85:27:74:b3:56:23:5c:a1:05:91:11:13:74:94:b7: 88:5c:25:fd:19:51:bb:f6:29:71:36:7b:8b:5a:a8: f4:37:38:b5:0d:12:40:8f:44:aa:a5:f1:07:64:6d: a5:3a:65:b0:8a:05:2b:d3:16:52:1b:00:71:7a:30: 33:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D5:50:30:BF:7A:C0:4F:DB:1B:9D:C1:6C:E5:40:79:2B:36:F0:A2 X509v3 Authority Key Identifier: keyid:F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:47:4b:e6:d5:5f:52:76:2d:ca:11:e8:56:0d:47:5c:6f:75: 45:74:16:ff:db:f7:a8:cb:b6:ba:7d:e6:b0:1d:de:1a:e9:4e: c5:15:37:b3:ea:83:b1:7f:dc:fa:23:92:1e:1a:a5:fa:d7:84: bf:f5:c7:8e:07:20:14:50:97:5c:fd:48:a0:cf:f8:87:52:70: 18:b1:e8:68:08:01:5c:47:70:c2:f3:5e:0f:ad:a9:e9:b6:b0: e6:6f:cc:2e:25:c1:c4:12:ff:4a:59:c1:ab:8a:1a:aa:d4:d2: d9:8b:ff:eb:c0:58:52:63:2d:e9:1b:0b:20:dd:08:08:8a:47: 0f:5f:39:42:df:ce:b8:d3:51:4d:06:b4:5f:ff:9f:42:26:15: 6a:43:95:9f:4f:9d:3c:e5:74:9b:3c:f0:6e:8f:90:4a:d7:40: 16:42:24:f3:33:48:28:cc:6d:e3:8e:a3:5c:e1:7b:da:7f:b3: a1:06:b3:41:a9:06:ab:62:1d:53:19:d7:20:2f:3b:53:13:a7: 73:e8:42:b6:66:f8:82:b1:f7:c4:a2:73:6d:d1:98:78:8b:c8: 55:52:74:be:45:ea:8e:e2:24:8f:1d:b6:ca:ad:35:06:d9:61: 3f:a4:f8:af:5d:54:51:18:59:d7:e1:4f:03:2e:1b:0a:42:bf: 8f:57:f6:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiQpAm8yv4ut9LnkB0BGnuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjE4NmU5NzA5N2M4NDE3ZDk0MzdkNzBjZmRmYzUyNzMz MWI1YTgwHhcNMjUxMjI4MDAwMTI4WhcNMjUxMjI5MDAwMTI4WjAzMTEwLwYDVQQD Eyg2OGQ1NTAzMGJmN2FjMDRmZGIxYjlkYzE2Y2U1NDA3OTJiMzZmMGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I9qGMne3AynWX6IAwFJgO3IJj5V Dlw4q8phaf/puMRWjsmjXk23ra18bI95SEfdNMZ5sZEOxtK+K6ZAqSLsHEqaDB6d hbMXO8N/MUNj4FZpCAOHBVjTtq3Tq54729km3oimmJFJkkS9iS6izwVJM2pO9WT7 6XJA3NdcER7GuNhJT8um+308hgMTfiNQAPxPtrJtYD8VJ/fd/Agj+I8IkyRW2Iyd kVLxiSRS8+u1OmbQY8lXw93cPZySWgdF/Xn4Lq6FJ3SzViNcoQWRERN0lLeIXCX9 GVG79ilxNnuLWqj0Nzi1DRJAj0SqpfEHZG2lOmWwigUr0xZSGwBxejAzqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjVUDC/esBP2xudwWzlQHkrNvCiMB8GA1UdIwQY MBaAFPHxhulwl8hBfZQ31wz9/FJzMbWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZHRzZYQ1h5RUY5bERmWERQMzhVbk14dGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81YzNiOTktYjhlZi00ZWQxLTg1N2Mt YjY1Y2QxMzYyNjJlLzEvOGZHRzZYQ1h5RUY5bERmWERQMzhVbk14dGFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi81YzNiOTktYjhlZi00ZWQxLTg1N2MtYjY1Y2QxMzYyNjJl LzEvOGZHRzZYQ1h5RUY5bERmWERQMzhVbk14dGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkdL5tVf UnYtyhHoVg1HXG91RXQW/9v3qMu2un3msB3eGulOxRU3s+qDsX/c+iOSHhql+teE v/XHjgcgFFCXXP1IoM/4h1JwGLHoaAgBXEdwwvNeD62p6baw5m/MLiXBxBL/SlnB q4oaqtTS2Yv/68BYUmMt6RsLIN0ICIpHD185Qt/OuNNRTQa0X/+fQiYVakOVn0+d POV0mzzwbo+QStdAFkIk8zNIKMxt446jXOF72n+zoQazQakGq2IdUxnXIC87UxOn c+hCtmb4grH3xKJzbdGYeIvIVVJ0vkXqjuIkjx22yq01BtlhP6T4r11UURhZ1+FP Ay4bCkK/j1f2ag== -----END CERTIFICATE-----Generated at Sun Dec 28 08:01:42 2025 by rpki-client