This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft File: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft (raw, json) Hash identifier: 9qFOw4nQa7NUnv5vCQ0L+MAKuwznNVgRjzHZMP3SLOs= Subject key identifier: 53:41:B1:4D:38:94:F9:71:A1:EB:36:E9:4B:5B:65:68:AD:57:9D:BB Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b Certificate serial: 019B397D0A33515EFC5ED6C0A15099D281C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft Manifest number: 037C Signing time: Sat 20 Dec 2025 02:00:54 +0000 Manifest this update: Sat 20 Dec 2025 02:00:54 +0000 Manifest next update: Sun 21 Dec 2025 02:00:54 +0000 Files and hashes: 1: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl (hash: 0P5+YkrnKafTyMNngEY9628IZXfz2EtvZDkqOOzKERk=) 2: J84DjEhi_gEyD8-a87brecsYsNM.roa (hash: A66a3xMstZT0T3ni5nfFwwrP4QVYA3zVnvHKSfI3TDI=) 3: yitip1-kJD5dQRdS53t4KfkARHM.roa (hash: cgy9OckdIOJNSQ5+HtqFQg4ACHdIPiP47DMcF7GV8yY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:0a:33:51:5e:fc:5e:d6:c0:a1:50:99:d2:81:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b Validity Not Before: Dec 20 02:00:54 2025 GMT Not After : Dec 21 02:00:54 2025 GMT Subject: CN=5341b14d3894f971a1eb36e94b5b6568ad579dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f4:99:0a:a7:0c:c7:15:d7:aa:2e:f4:ea:6b: c8:29:21:69:f8:92:f9:52:2a:1f:e7:be:7f:98:ff: cd:2e:c2:99:df:c3:84:d2:70:b0:e4:cf:cc:64:99: 8b:2c:96:cd:f4:76:09:e4:90:7e:72:ce:e8:f5:b8: 09:99:ae:be:d2:85:07:12:0e:3b:37:51:49:19:e0: f1:3a:cc:05:0c:80:8b:4c:4e:75:df:25:89:e7:35: 0c:5e:48:17:28:d7:a0:88:9b:f0:47:75:66:5a:06: 52:15:98:4c:96:be:c9:a9:84:d8:9d:f3:c6:ea:21: 3a:b7:73:fd:93:5a:48:5c:83:e6:45:32:86:8f:98: fe:92:d3:46:9e:1b:78:c2:e1:98:73:67:7f:96:52: e7:f5:00:89:84:e2:c9:79:44:72:f4:e1:98:4c:94: 59:d8:78:f3:94:b2:d0:33:53:59:7a:3c:3e:98:37: 67:78:0c:a9:57:fd:97:bd:fb:7e:7f:47:92:00:35: 29:3c:47:1f:c0:ca:58:b7:0d:3f:8b:d4:cd:b6:86: 63:9e:f2:f4:b2:bf:7f:83:6e:19:a7:13:39:57:e1: 9a:2c:0b:1c:d9:e5:81:50:cb:86:1b:f6:0b:f2:33: d9:12:47:3d:94:31:e3:6d:c1:7d:4d:05:36:b3:9f: 59:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:41:B1:4D:38:94:F9:71:A1:EB:36:E9:4B:5B:65:68:AD:57:9D:BB X509v3 Authority Key Identifier: keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:b1:09:27:8d:b7:3b:a6:87:44:11:8d:bb:26:ad:35:1c:62: 32:04:48:84:8f:ac:6f:5a:0b:04:20:51:4e:fb:a0:9f:59:c3: 3f:35:a7:da:4e:fc:af:6f:de:40:90:79:6e:7f:8c:a7:ec:1f: b1:5b:cd:11:94:7a:69:3e:19:aa:2d:7d:78:d2:16:39:a7:e4: f3:58:18:00:bb:a2:89:6b:c6:bf:56:2f:b3:70:cf:52:84:08: 12:ba:32:0e:f8:a8:db:02:07:61:68:0b:d5:b9:72:52:2d:7d: 5c:f7:b0:4f:80:5c:dd:f8:95:cf:9a:a4:e3:f6:7d:b9:41:8e: e7:69:f2:04:d1:73:62:a7:a0:bf:35:a3:2f:34:e3:e2:a4:b7: 02:33:09:5d:37:f2:1a:a6:03:84:13:34:43:bd:5c:14:aa:b4: d8:e5:f9:86:ba:41:57:ad:c5:52:09:c4:35:41:13:bf:4c:bc: 23:14:5b:23:bb:45:a4:8b:7f:19:93:e2:ba:d8:14:0f:92:52: ac:76:9d:d9:6d:e3:9d:b3:0b:48:97:94:25:4f:0d:63:42:59: 0a:7a:93:0e:e2:80:8d:40:4f:1d:83:47:57:4f:0b:52:3d:1a: 9e:e1:93:5e:c0:37:b5:f4:c5:5f:38:8f:af:71:f0:72:2e:2a: 04:9c:b8:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fQozUV78XtbAoVCZ0oHCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjExZDJlY2Q2MDkyNGVmMjI3NmY4NjkzOWIwNzBjMDA4 MTU3NGIwHhcNMjUxMjIwMDIwMDU0WhcNMjUxMjIxMDIwMDU0WjAzMTEwLwYDVQQD Eyg1MzQxYjE0ZDM4OTRmOTcxYTFlYjM2ZTk0YjViNjU2OGFkNTc5ZGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfSZCqcMxxXXqi706mvIKSFp+JL5 Uiof575/mP/NLsKZ38OE0nCw5M/MZJmLLJbN9HYJ5JB+cs7o9bgJma6+0oUHEg47 N1FJGeDxOswFDICLTE513yWJ5zUMXkgXKNegiJvwR3VmWgZSFZhMlr7JqYTYnfPG 6iE6t3P9k1pIXIPmRTKGj5j+ktNGnht4wuGYc2d/llLn9QCJhOLJeURy9OGYTJRZ 2HjzlLLQM1NZejw+mDdneAypV/2Xvft+f0eSADUpPEcfwMpYtw0/i9TNtoZjnvL0 sr9/g24ZpxM5V+GaLAsc2eWBUMuGG/YL8jPZEkc9lDHjbcF9TQU2s59ZcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNBsU04lPlxoes26UtbZWitV527MB8GA1UdIwQY MBaAFPMhHS7NYJJO8idvhpObBwwAgVdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlFZExzMWdrazd5SjItR2s1c0hEQUNCVjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8wMzQ5NjAtOWZlMy00Zjc0LWI5Y2Qt YzVjZjA4ZWVkYjljLzEvOHlFZExzMWdrazd5SjItR2s1c0hEQUNCVjBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8wMzQ5NjAtOWZlMy00Zjc0LWI5Y2QtYzVjZjA4ZWVkYjlj LzEvOHlFZExzMWdrazd5SjItR2s1c0hEQUNCVjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyLEJJ423 O6aHRBGNuyatNRxiMgRIhI+sb1oLBCBRTvugn1nDPzWn2k78r2/eQJB5bn+Mp+wf sVvNEZR6aT4Zqi19eNIWOafk81gYALuiiWvGv1Yvs3DPUoQIEroyDvio2wIHYWgL 1blyUi19XPewT4Bc3fiVz5qk4/Z9uUGO52nyBNFzYqegvzWjLzTj4qS3AjMJXTfy GqYDhBM0Q71cFKq02OX5hrpBV63FUgnENUETv0y8IxRbI7tFpIt/GZPiutgUD5JS rHad2W3jnbMLSJeUJU8NY0JZCnqTDuKAjUBPHYNHV08LUj0anuGTXsA3tfTFXziP r3Hwci4qBJy4hw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:42:47 2025 by rpki-client