This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft File: 8VzG8-5-0llTHW0Izp4JNztxYGI.mft (raw, json) Hash identifier: LO9FRng6V54Zxyri40bpj5u9sam4Q9ixjhBFPMaU26w= Subject key identifier: BD:44:67:99:9C:50:66:59:E8:28:B8:C9:B0:C1:4D:9D:3D:64:9B:E3 Authority key identifier: F1:5C:C6:F3:EE:7E:D2:59:53:1D:6D:08:CE:9E:09:37:3B:71:60:62 Certificate issuer: /CN=f15cc6f3ee7ed259531d6d08ce9e09373b716062 Certificate serial: 019B80BA59E9AFDA71F5924AE54DF631EE85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft Manifest number: 0548 Signing time: Fri 02 Jan 2026 22:00:54 +0000 Manifest this update: Fri 02 Jan 2026 22:00:54 +0000 Manifest next update: Sat 03 Jan 2026 22:00:54 +0000 Files and hashes: 1: 8VzG8-5-0llTHW0Izp4JNztxYGI.crl (hash: I5YN1TgrusgZzPIDGUMc44Bj+LvfW7YOQXFlvB0P1WQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:ba:59:e9:af:da:71:f5:92:4a:e5:4d:f6:31:ee:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f15cc6f3ee7ed259531d6d08ce9e09373b716062 Validity Not Before: Jan 2 22:00:54 2026 GMT Not After : Jan 3 22:00:54 2026 GMT Subject: CN=bd4467999c506659e828b8c9b0c14d9d3d649be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9e:46:cf:eb:c4:ac:19:c2:05:94:0d:1f:5c: d9:3b:0f:30:ef:7c:d8:9f:19:58:47:a4:7f:fb:f4: b3:b9:6f:38:54:11:46:f6:1a:4f:bb:3b:f4:8c:63: b4:7d:36:7c:fb:dd:60:6f:15:af:a9:89:90:b1:21: 56:13:6b:28:98:ee:27:63:fe:95:22:9c:56:99:89: 53:7e:bb:22:a4:81:a5:e2:c5:45:50:8b:a0:5a:0b: f9:ee:fb:e7:76:c1:82:01:d1:0d:3f:79:13:ae:d7: c2:ab:a1:f9:68:e1:88:31:e5:89:03:cb:33:67:80: 81:f6:ae:b8:e2:fd:87:6d:39:e5:ec:0f:d3:6a:be: 05:9a:8f:72:e0:c3:22:b5:16:39:b2:8c:97:ab:ea: 55:97:f4:c9:a1:15:b1:14:46:98:bb:c2:65:b0:36: 87:6a:08:ae:81:0b:97:3b:90:0b:b7:c9:d9:3b:4e: 0c:3f:07:7f:a3:d7:50:bd:63:1a:0a:e9:97:ba:39: 70:b9:da:b6:09:fb:b3:51:6f:87:2b:ea:38:51:2e: 8a:ad:cd:c3:5c:38:4a:f2:f4:da:5a:72:83:f9:c4: 57:ba:9f:fc:10:24:69:0c:87:b4:13:94:9d:35:27: c4:f8:37:90:e5:a3:e4:53:1c:98:12:8c:ac:e1:0d: 46:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:44:67:99:9C:50:66:59:E8:28:B8:C9:B0:C1:4D:9D:3D:64:9B:E3 X509v3 Authority Key Identifier: keyid:F1:5C:C6:F3:EE:7E:D2:59:53:1D:6D:08:CE:9E:09:37:3B:71:60:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:15:84:f9:47:69:d7:0f:4c:70:bf:37:2a:a1:ba:73:f8:fd: 57:12:07:e6:6c:e2:6b:b8:a8:39:00:f3:63:47:6e:03:ec:80: 7d:a8:09:77:11:47:7b:39:4f:6c:cf:59:52:2a:34:79:58:8c: 17:bf:99:2e:c2:99:c0:2b:22:24:9a:3b:10:3d:dc:c1:4b:df: 04:db:2e:33:67:62:28:2f:28:60:c4:d9:b7:eb:8a:39:16:df: e0:ef:c0:c7:d1:50:08:cd:a0:e8:4c:fe:eb:45:53:5c:60:d5: 1b:3b:84:39:00:40:e8:7d:4b:25:2f:b4:4e:f6:5a:74:70:77: 80:b9:fa:f9:f2:34:18:be:2d:ba:d7:b9:6d:a7:1d:54:73:73: 8b:d5:12:ca:fd:c7:ea:e1:c1:56:c9:11:07:c2:c5:c8:f6:6f: 05:40:87:02:07:d1:66:d5:e5:2a:2e:61:1a:52:ac:c6:3a:84: 4c:23:61:dd:7e:80:6f:66:7e:b9:06:cd:b5:9c:ad:c7:da:08: d9:3a:3e:44:b2:f3:24:c8:a7:52:82:bf:43:ea:2d:e5:3d:01: da:41:f9:2d:44:77:61:b1:4c:f3:b5:9d:3f:ca:0e:90:95:b8: b8:1c:bf:3d:16:0a:27:16:5c:0c:95:40:c3:f5:ca:2c:ce:03: bb:97:b1:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuAulnpr9px9ZJK5U32Me6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNWNjNmYzZWU3ZWQyNTk1MzFkNmQwOGNlOWUwOTM3M2I3 MTYwNjIwHhcNMjYwMTAyMjIwMDU0WhcNMjYwMTAzMjIwMDU0WjAzMTEwLwYDVQQD EyhiZDQ0Njc5OTljNTA2NjU5ZTgyOGI4YzliMGMxNGQ5ZDNkNjQ5YmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Z5Gz+vErBnCBZQNH1zZOw8w73zY nxlYR6R/+/SzuW84VBFG9hpPuzv0jGO0fTZ8+91gbxWvqYmQsSFWE2somO4nY/6V IpxWmYlTfrsipIGl4sVFUIugWgv57vvndsGCAdENP3kTrtfCq6H5aOGIMeWJA8sz Z4CB9q644v2HbTnl7A/Tar4Fmo9y4MMitRY5soyXq+pVl/TJoRWxFEaYu8JlsDaH agiugQuXO5ALt8nZO04MPwd/o9dQvWMaCumXujlwudq2CfuzUW+HK+o4US6Krc3D XDhK8vTaWnKD+cRXup/8ECRpDIe0E5SdNSfE+DeQ5aPkUxyYEoys4Q1GawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1EZ5mcUGZZ6Ci4ybDBTZ09ZJvjMB8GA1UdIwQY MBaAFPFcxvPuftJZUx1tCM6eCTc7cWBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFZ6RzgtNS0wbGxUSFcwSXpwNEpOenR4WUdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84N2U5YjctZWFkNC00YjViLWJjODgt NjkxZWU0MWE2MDE0LzEvOFZ6RzgtNS0wbGxUSFcwSXpwNEpOenR4WUdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi84N2U5YjctZWFkNC00YjViLWJjODgtNjkxZWU0MWE2MDE0 LzEvOFZ6RzgtNS0wbGxUSFcwSXpwNEpOenR4WUdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRWE+Udp 1w9McL83KqG6c/j9VxIH5mzia7ioOQDzY0duA+yAfagJdxFHezlPbM9ZUio0eViM F7+ZLsKZwCsiJJo7ED3cwUvfBNsuM2diKC8oYMTZt+uKORbf4O/Ax9FQCM2g6Ez+ 60VTXGDVGzuEOQBA6H1LJS+0TvZadHB3gLn6+fI0GL4tute5bacdVHNzi9USyv3H 6uHBVskRB8LFyPZvBUCHAgfRZtXlKi5hGlKsxjqETCNh3X6Ab2Z+uQbNtZytx9oI 2To+RLLzJMinUoK/Q+ot5T0B2kH5LUR3YbFM87WdP8oOkJW4uBy/PRYKJxZcDJVA w/XKLM4Du5exfg== -----END CERTIFICATE-----Generated at Fri Jan 2 23:25:29 2026 by rpki-client