This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft File: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft (raw, json) Hash identifier: 7XEBn8zuDw/cyCyRqZS6kIhZnMWY7jrvdc5dfAw3FA8= Subject key identifier: 23:3F:B3:0E:18:C2:C0:95:9F:06:79:34:31:BD:FE:80:20:63:C1:06 Authority key identifier: F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA Certificate issuer: /CN=f210bac96aff25b2aa931c4297446be37ffe2ada Certificate serial: 019B39EACA2B14D67B8AFE62F725F4E02AB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 04:00:46 +0000 Manifest this update: Sat 20 Dec 2025 04:00:46 +0000 Manifest next update: Sun 21 Dec 2025 04:00:46 +0000 Files and hashes: 1: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl (hash: yK0nyoqVtTp2vYTl2hUxWC3MIzuB604Lt3itlck+KqQ=) 2: 9iL04rGDZoryywio-gmg9h9zCvU.roa (hash: gqClxkuVstSkbo5JxbBFKE2JBuMbwOG9F1HTwbBvxv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:ca:2b:14:d6:7b:8a:fe:62:f7:25:f4:e0:2a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f210bac96aff25b2aa931c4297446be37ffe2ada Validity Not Before: Dec 20 04:00:46 2025 GMT Not After : Dec 21 04:00:46 2025 GMT Subject: CN=233fb30e18c2c0959f06793431bdfe802063c106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:54:af:2b:dc:59:f3:5c:35:c4:30:94:af: 60:3f:b0:82:a8:56:0f:43:db:a3:2b:35:ed:d5:11: d2:19:ac:10:5b:0f:05:06:0c:20:62:a0:11:c7:b1: 03:47:97:80:79:90:a3:d0:65:cf:6f:34:5e:67:8c: d4:6e:01:6c:b0:cc:d1:24:7a:ad:07:8f:5b:09:54: 52:05:73:00:dc:5d:5b:59:c7:76:f9:d8:5d:ea:b5: 65:d8:2f:c9:56:11:f2:68:42:81:4a:89:11:e4:93: bd:ff:91:44:9d:33:77:a9:01:8c:49:93:05:e1:a2: 1a:d0:17:21:1b:ad:a4:74:05:93:f8:65:a2:6a:b0: 6b:02:c2:eb:be:07:12:af:51:c1:3d:30:85:88:b0: d4:92:f2:2d:da:c5:01:8c:20:fd:66:48:b2:74:ac: 52:10:4b:86:4a:5a:6e:e0:80:d1:51:89:a9:98:e8: 81:b6:dc:2d:91:0e:8e:36:86:04:58:93:32:64:85: 7d:03:af:68:a9:ef:db:2c:dd:30:83:14:05:b1:7b: c7:3e:67:2f:04:a1:b4:cb:e9:c6:6f:85:aa:23:9a: 4d:8d:eb:1e:bb:02:02:e4:81:c1:a3:1a:14:f7:0c: b6:b4:37:e9:9e:8d:22:2a:5d:06:39:b1:6b:31:91: b2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3F:B3:0E:18:C2:C0:95:9F:06:79:34:31:BD:FE:80:20:63:C1:06 X509v3 Authority Key Identifier: keyid:F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:92:a2:df:2e:26:5a:04:a8:07:3d:78:db:4a:cb:39:3f:45: 07:39:5c:03:39:f9:7b:25:a7:4b:24:7b:b7:3e:c3:20:33:db: a2:26:29:16:79:31:63:7b:01:53:67:ad:8e:d0:56:19:a5:84: 74:e3:6e:5c:3e:1f:b8:55:d2:1c:f8:e4:d2:30:5c:c8:9a:56: 5a:00:58:3b:eb:dc:0e:33:b8:d2:55:d6:4d:d9:5f:f6:57:6a: 77:2b:ab:58:61:98:05:25:8b:6d:3c:c5:40:0e:11:dd:f9:27: 73:ea:d4:8d:64:9a:90:bb:9f:00:54:6c:64:8c:d7:0d:65:ca: be:21:c7:9e:ef:48:cc:cb:f1:88:b8:db:2f:73:03:ee:65:93: 9b:53:3f:72:3a:19:f2:51:ec:05:eb:00:eb:84:21:81:34:e6: 55:f7:2e:32:0e:f4:6c:29:73:f7:26:19:e7:6e:22:5e:1c:8f: 2c:a4:6d:7f:38:04:c2:4b:a8:a8:86:8e:62:45:6a:66:95:51: 15:dd:1c:06:72:6a:8e:c7:c8:d4:c2:98:c0:54:ce:95:5b:29: 77:38:e9:d7:aa:eb:57:e3:49:76:af:e1:58:57:95:88:aa:69: 78:68:60:df:b1:69:2a:de:94:6c:14:64:6e:19:53:04:9d:06: 0d:50:5e:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56sorFNZ7iv5i9yX04Cq2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMTBiYWM5NmFmZjI1YjJhYTkzMWM0Mjk3NDQ2YmUzN2Zm ZTJhZGEwHhcNMjUxMjIwMDQwMDQ2WhcNMjUxMjIxMDQwMDQ2WjAzMTEwLwYDVQQD EygyMzNmYjMwZTE4YzJjMDk1OWYwNjc5MzQzMWJkZmU4MDIwNjNjMTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF1UryvcWfNcNcQwlK9gP7CCqFYP Q9ujKzXt1RHSGawQWw8FBgwgYqARx7EDR5eAeZCj0GXPbzReZ4zUbgFssMzRJHqt B49bCVRSBXMA3F1bWcd2+dhd6rVl2C/JVhHyaEKBSokR5JO9/5FEnTN3qQGMSZMF 4aIa0BchG62kdAWT+GWiarBrAsLrvgcSr1HBPTCFiLDUkvIt2sUBjCD9ZkiydKxS EEuGSlpu4IDRUYmpmOiBttwtkQ6ONoYEWJMyZIV9A69oqe/bLN0wgxQFsXvHPmcv BKG0y+nGb4WqI5pNjeseuwIC5IHBoxoU9wy2tDfpno0iKl0GObFrMZGyKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCM/sw4YwsCVnwZ5NDG9/oAgY8EGMB8GA1UdIwQY MBaAFPIQuslq/yWyqpMcQpdEa+N//iraMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGhDNnlXcl9KYktxa3h4Q2wwUnI0M18tS3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTI0MjEtMWEzZC00OGY1LTk0OWYt YTMyOTM5NDY5OGQyLzEvOGhDNnlXcl9KYktxa3h4Q2wwUnI0M18tS3RvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iNTI0MjEtMWEzZC00OGY1LTk0OWYtYTMyOTM5NDY5OGQy LzEvOGhDNnlXcl9KYktxa3h4Q2wwUnI0M18tS3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJKi3y4m WgSoBz1420rLOT9FBzlcAzn5eyWnSyR7tz7DIDPboiYpFnkxY3sBU2etjtBWGaWE dONuXD4fuFXSHPjk0jBcyJpWWgBYO+vcDjO40lXWTdlf9ldqdyurWGGYBSWLbTzF QA4R3fknc+rUjWSakLufAFRsZIzXDWXKviHHnu9IzMvxiLjbL3MD7mWTm1M/cjoZ 8lHsBesA64QhgTTmVfcuMg70bClz9yYZ524iXhyPLKRtfzgEwkuoqIaOYkVqZpVR Fd0cBnJqjsfI1MKYwFTOlVspdzjp16rrV+NJdq/hWFeViKppeGhg37FpKt6UbBRk bhlTBJ0GDVBenQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:35:42 2025 by rpki-client