This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft File: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft (raw, json) Hash identifier: pRlBj7pFZWc47+VrOUD2Ly3CH1n6q6poC3xm2eeE0kM= Subject key identifier: E6:6B:81:18:55:13:7B:E1:AC:C6:A1:98:15:12:D1:93:EB:09:FA:00 Authority key identifier: F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA Certificate issuer: /CN=f210bac96aff25b2aa931c4297446be37ffe2ada Certificate serial: 019B6655A3DEC11F171263F96A03F43AEAD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft Manifest number: 1731 Signing time: Sun 28 Dec 2025 19:00:47 +0000 Manifest this update: Sun 28 Dec 2025 19:00:47 +0000 Manifest next update: Mon 29 Dec 2025 19:00:47 +0000 Files and hashes: 1: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl (hash: Ndsp/VHapUJ4tMh68l1rjCH6534EJ3RQL3w7tMuGIm8=) 2: 9iL04rGDZoryywio-gmg9h9zCvU.roa (hash: gqClxkuVstSkbo5JxbBFKE2JBuMbwOG9F1HTwbBvxv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 19:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:55:a3:de:c1:1f:17:12:63:f9:6a:03:f4:3a:ea:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f210bac96aff25b2aa931c4297446be37ffe2ada Validity Not Before: Dec 28 19:00:47 2025 GMT Not After : Dec 29 19:00:47 2025 GMT Subject: CN=e66b811855137be1acc6a1981512d193eb09fa00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:27:e6:c7:dc:34:f5:74:ba:33:89:78:7d:07: c5:18:86:d0:85:05:28:6f:10:b1:0f:32:4b:27:57: d0:67:42:03:e8:fe:fe:73:af:e1:45:87:53:d9:ca: 22:b4:b6:7e:a7:1e:0c:00:0b:4f:58:9b:4b:92:71: ce:19:f4:0d:f5:1d:97:c5:9b:2c:2b:25:e6:d7:5e: 2f:b2:4c:9d:5b:13:a4:3d:2e:33:cc:42:a3:76:4d: 27:d7:7e:48:89:8d:7e:04:ee:e2:86:de:64:fd:f0: 2c:83:fb:70:f3:46:0c:c9:09:21:58:38:45:a2:b1: b9:40:71:ca:fa:2e:70:6e:25:df:71:c3:03:97:2c: 41:8f:6e:3c:6b:e0:e1:68:43:27:98:ba:ba:12:aa: af:2c:ec:21:2e:11:0f:12:d4:29:d4:e2:62:e1:a4: 73:68:c6:8d:a6:72:c6:7f:d0:2e:f3:38:b3:99:e1: 94:f5:0d:20:2a:f7:e3:90:0e:94:c6:7e:84:cc:69: b0:32:12:2e:18:16:af:35:54:d0:db:4a:5d:a5:6a: 4a:24:7e:99:9a:2a:e0:f9:d6:b1:b6:83:c2:26:a6: 07:a3:e8:0b:e3:cf:4a:57:bc:bf:6a:ec:9b:ae:35: a3:a1:70:a1:36:7e:f8:35:1c:d3:dc:6a:e7:c5:1a: 20:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:6B:81:18:55:13:7B:E1:AC:C6:A1:98:15:12:D1:93:EB:09:FA:00 X509v3 Authority Key Identifier: keyid:F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ba:b0:c1:b6:b3:4c:60:2e:a1:71:8b:aa:25:be:ef:23:d2: 25:ed:cf:c8:38:cf:ec:66:f8:a6:32:2b:9b:c0:b5:7e:78:e7: ef:7b:2a:74:d5:42:fa:4e:43:ee:e0:b9:aa:6a:12:02:53:ec: e7:1b:b2:a5:89:ac:1e:7b:fe:93:f9:f4:d6:bb:aa:2e:d0:66: 15:38:f8:9c:2f:0c:01:d1:1f:74:9c:ec:15:00:63:35:8b:55: eb:8b:9b:62:c0:5d:cd:51:28:e6:18:a7:ba:67:87:50:18:e4: 96:a0:ca:6b:e1:72:64:c7:74:2c:46:fd:6d:58:93:5a:9f:07: 85:1a:c5:4b:4d:86:0c:42:76:54:c8:aa:52:1d:37:b3:ce:9b: 1f:77:17:28:e3:be:ae:8c:8c:16:0d:fe:1b:da:81:7a:cc:ce: 40:e9:2e:94:ca:c7:6f:11:6e:7b:39:6c:ee:86:d4:56:7d:19: 12:c4:71:bf:fa:f2:b1:6c:0d:56:90:10:63:a5:f3:00:c2:aa: 4a:26:f8:f4:38:2a:1e:d7:b4:64:48:a4:af:0f:a0:b7:fb:b6: 8f:5a:fe:e8:fd:cc:8a:3a:bc:73:8c:0d:32:6a:c3:f2:9d:61: 8d:8a:18:f2:7d:e0:bc:8e:19:48:10:c5:0f:8a:4b:cf:83:8b: 4f:b6:92:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmVaPewR8XEmP5agP0OurQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMTBiYWM5NmFmZjI1YjJhYTkzMWM0Mjk3NDQ2YmUzN2Zm ZTJhZGEwHhcNMjUxMjI4MTkwMDQ3WhcNMjUxMjI5MTkwMDQ3WjAzMTEwLwYDVQQD EyhlNjZiODExODU1MTM3YmUxYWNjNmExOTgxNTEyZDE5M2ViMDlmYTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyfmx9w09XS6M4l4fQfFGIbQhQUo bxCxDzJLJ1fQZ0ID6P7+c6/hRYdT2coitLZ+px4MAAtPWJtLknHOGfQN9R2XxZss KyXm114vskydWxOkPS4zzEKjdk0n135IiY1+BO7iht5k/fAsg/tw80YMyQkhWDhF orG5QHHK+i5wbiXfccMDlyxBj248a+DhaEMnmLq6EqqvLOwhLhEPEtQp1OJi4aRz aMaNpnLGf9Au8zizmeGU9Q0gKvfjkA6Uxn6EzGmwMhIuGBavNVTQ20pdpWpKJH6Z mirg+daxtoPCJqYHo+gL489KV7y/auybrjWjoXChNn74NRzT3GrnxRogrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZrgRhVE3vhrMahmBUS0ZPrCfoAMB8GA1UdIwQY MBaAFPIQuslq/yWyqpMcQpdEa+N//iraMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGhDNnlXcl9KYktxa3h4Q2wwUnI0M18tS3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTI0MjEtMWEzZC00OGY1LTk0OWYt YTMyOTM5NDY5OGQyLzEvOGhDNnlXcl9KYktxa3h4Q2wwUnI0M18tS3RvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iNTI0MjEtMWEzZC00OGY1LTk0OWYtYTMyOTM5NDY5OGQy LzEvOGhDNnlXcl9KYktxa3h4Q2wwUnI0M18tS3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbqwwbaz TGAuoXGLqiW+7yPSJe3PyDjP7Gb4pjIrm8C1fnjn73sqdNVC+k5D7uC5qmoSAlPs 5xuypYmsHnv+k/n01ruqLtBmFTj4nC8MAdEfdJzsFQBjNYtV64ubYsBdzVEo5hin umeHUBjklqDKa+FyZMd0LEb9bViTWp8HhRrFS02GDEJ2VMiqUh03s86bH3cXKOO+ royMFg3+G9qBeszOQOkulMrHbxFuezls7obUVn0ZEsRxv/rysWwNVpAQY6XzAMKq Sib49DgqHte0ZEikrw+gt/u2j1r+6P3Mijq8c4wNMmrD8p1hjYoY8n3gvI4ZSBDF D4pLz4OLT7aS9g== -----END CERTIFICATE-----Generated at Sun Dec 28 23:25:50 2025 by rpki-client