This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft File: 8GGl-jflzRAVCFJj7AKeGv95ONc.mft (raw, json) Hash identifier: 5xXRcBeBmcjLYgOgsKQ0t6UYLOrgtnl8m8b8smapSIE= Subject key identifier: 1B:52:7F:BB:90:2F:FF:E2:24:EB:A1:91:7D:DF:8A:A8:4B:CD:03:5A Authority key identifier: F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7 Certificate issuer: /CN=f061a5fa37e5cd1015085263ec029e1aff7938d7 Certificate serial: 019B3DC784F524CE01565680B0F2E40B24C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft Manifest number: 0720 Signing time: Sat 20 Dec 2025 22:00:44 +0000 Manifest this update: Sat 20 Dec 2025 22:00:44 +0000 Manifest next update: Sun 21 Dec 2025 22:00:44 +0000 Files and hashes: 1: 8GGl-jflzRAVCFJj7AKeGv95ONc.crl (hash: 3GtGXeXH0i4muCniUO90lL+6/r2TjjNBZ7Osqex/rdc=) 2: ZD2S6baBTMbxPOLjQxmOZb9ReoU.roa (hash: iIrhMwDo93l/J/AT32VhLXHCXDQvEKjJ60z+mXLZ3rc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:84:f5:24:ce:01:56:56:80:b0:f2:e4:0b:24:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f061a5fa37e5cd1015085263ec029e1aff7938d7 Validity Not Before: Dec 20 22:00:44 2025 GMT Not After : Dec 21 22:00:44 2025 GMT Subject: CN=1b527fbb902fffe224eba1917ddf8aa84bcd035a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ed:f1:1d:f3:f1:ef:24:91:fc:aa:29:4d:3a: 85:34:24:ec:cd:46:0d:91:a9:95:d0:ee:fc:5b:16: 20:88:bc:9f:f1:22:1d:82:89:7a:46:cb:52:fb:3c: 3b:28:5d:71:dd:0f:32:81:ac:ed:d2:c8:2c:ee:64: 3f:e1:e6:97:bd:47:e7:3f:e1:cc:87:b0:b0:57:f7: a4:d6:d8:42:c2:be:72:ae:26:bc:65:89:ec:14:a8: e3:08:b7:e9:a0:36:22:ff:13:e6:d9:11:b8:bb:ff: 86:68:03:67:c1:ac:f0:93:a3:9d:59:0f:d6:88:c8: d3:8e:d4:01:8e:f6:da:81:65:17:02:b3:d4:65:17: 4f:9f:9f:46:7f:ab:52:cc:f7:7e:14:7c:e1:29:7c: 80:25:2b:1c:a7:cd:9b:b9:65:dd:52:60:62:ca:85: cf:2e:44:30:75:37:00:34:7d:b0:cd:b4:a7:9b:52: 66:ef:d5:d7:2f:09:9d:3c:39:bb:53:19:be:ff:ab: c9:ed:0d:fc:9e:9e:77:b2:1c:56:74:77:a7:4c:33: 44:dc:bf:dd:23:45:8d:3c:79:45:7c:52:8c:0f:bf: bd:33:53:33:84:5e:38:3d:76:9b:14:52:ed:80:e6: bb:67:bd:d6:9c:15:dc:99:18:8f:8f:d0:c5:de:57: a9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:52:7F:BB:90:2F:FF:E2:24:EB:A1:91:7D:DF:8A:A8:4B:CD:03:5A X509v3 Authority Key Identifier: keyid:F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b1:fb:84:a7:91:8c:72:b5:46:da:d9:14:fb:24:f2:32:e6: 17:45:83:ce:52:e4:3e:0e:d9:bd:e2:c8:5b:01:37:ad:83:16: 12:23:d5:67:4a:57:67:ca:ee:71:23:31:6d:5f:df:e1:9f:d8: 94:34:07:21:a2:0b:35:d9:92:f7:6e:70:b4:fb:58:fc:2a:c5: f5:fa:dc:1f:94:ce:0b:84:81:77:25:6c:2c:05:07:ef:8d:b6: 95:8b:ae:ad:46:b1:41:02:63:8a:3f:80:e9:f4:bf:b5:51:3b: ed:36:9c:c2:4a:1c:bf:47:60:96:00:6c:93:98:eb:3c:ef:f9: e0:a7:5c:ab:01:5b:ac:08:0c:fd:5c:97:7d:a2:e1:31:fc:f1: aa:57:3f:5a:6e:1d:d5:fa:f8:4c:23:64:7f:37:0e:c8:24:98: 9b:e5:8b:34:20:4b:bc:d2:31:f5:dd:f5:fb:87:a7:d8:ba:fd: d6:5a:cd:aa:5d:e0:07:03:d1:00:f2:fa:18:f3:f4:ee:58:4d: cb:e4:13:ae:ec:66:3b:bc:c5:cd:ab:2d:c1:e8:44:87:3d:b0: 6f:85:50:35:c3:6c:e0:ea:81:20:e1:b8:45:7e:1e:8c:ab:f7: d4:69:6e:d4:60:0b:c4:11:f5:ff:d3:83:aa:3e:2c:95:dc:cd: 88:1b:58:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x4T1JM4BVlaAsPLkCyTBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNjFhNWZhMzdlNWNkMTAxNTA4NTI2M2VjMDI5ZTFhZmY3 OTM4ZDcwHhcNMjUxMjIwMjIwMDQ0WhcNMjUxMjIxMjIwMDQ0WjAzMTEwLwYDVQQD EygxYjUyN2ZiYjkwMmZmZmUyMjRlYmExOTE3ZGRmOGFhODRiY2QwMzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse3xHfPx7ySR/KopTTqFNCTszUYN kamV0O78WxYgiLyf8SIdgol6RstS+zw7KF1x3Q8ygazt0sgs7mQ/4eaXvUfnP+HM h7CwV/ek1thCwr5yria8ZYnsFKjjCLfpoDYi/xPm2RG4u/+GaANnwazwk6OdWQ/W iMjTjtQBjvbagWUXArPUZRdPn59Gf6tSzPd+FHzhKXyAJSscp82buWXdUmBiyoXP LkQwdTcANH2wzbSnm1Jm79XXLwmdPDm7Uxm+/6vJ7Q38np53shxWdHenTDNE3L/d I0WNPHlFfFKMD7+9M1MzhF44PXabFFLtgOa7Z73WnBXcmRiPj9DF3lepHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtSf7uQL//iJOuhkX3fiqhLzQNaMB8GA1UdIwQY MBaAFPBhpfo35c0QFQhSY+wCnhr/eTjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEdHbC1qZmx6UkFWQ0ZKajdBS2VHdjk1T05jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jNzkwOTUtOGMyYi00MmEzLTk0NmYt MThiMTI4YzhiNDg2LzEvOEdHbC1qZmx6UkFWQ0ZKajdBS2VHdjk1T05jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9jNzkwOTUtOGMyYi00MmEzLTk0NmYtMThiMTI4YzhiNDg2 LzEvOEdHbC1qZmx6UkFWQ0ZKajdBS2VHdjk1T05jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLH7hKeR jHK1RtrZFPsk8jLmF0WDzlLkPg7ZveLIWwE3rYMWEiPVZ0pXZ8rucSMxbV/f4Z/Y lDQHIaILNdmS925wtPtY/CrF9frcH5TOC4SBdyVsLAUH7422lYuurUaxQQJjij+A 6fS/tVE77Tacwkocv0dglgBsk5jrPO/54KdcqwFbrAgM/VyXfaLhMfzxqlc/Wm4d 1fr4TCNkfzcOyCSYm+WLNCBLvNIx9d31+4en2Lr91lrNql3gBwPRAPL6GPP07lhN y+QTruxmO7zFzastwehEhz2wb4VQNcNs4OqBIOG4RX4ejKv31Glu1GALxBH1/9OD qj4sldzNiBtYKg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:03:57 2025 by rpki-client