This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json) Hash identifier: xcBo4uni6BKWJiIMwwlbJvq6RGXp2TYKDvdsoJ/XBQ8= Subject key identifier: BF:FF:C6:4B:1A:3E:64:BB:8A:A0:8F:A7:87:0A:2D:B8:5A:6B:96:D2 Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb Certificate serial: 019B465D26C87785C00C7BC187BA6DBFC179 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 14:01:08 +0000 Manifest this update: Mon 22 Dec 2025 14:01:08 +0000 Manifest next update: Tue 23 Dec 2025 14:01:08 +0000 Files and hashes: 1: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: WKQEF9kg1xPocUdsOhipyioMxIguA04W8NOgr/8uGcY=) 2: tZdMpKDB98hJ9pZj681_6AcpB6s.roa (hash: i6o9Pghma18l7gMu2eMNZU5hQVcsb4HmVOsk/64sqkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5d:26:c8:77:85:c0:0c:7b:c1:87:ba:6d:bf:c1:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb Validity Not Before: Dec 22 14:01:08 2025 GMT Not After : Dec 23 14:01:08 2025 GMT Subject: CN=bfffc64b1a3e64bb8aa08fa7870a2db85a6b96d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:01:79:5f:b6:38:7d:1f:3f:d9:e3:f6:6b:dc: 50:23:bd:af:07:02:74:4a:07:88:94:36:7e:c2:3b: 04:1a:5c:bb:6f:ae:a4:fa:0a:8a:7f:dd:29:0d:46: 8e:ec:82:95:d0:93:e0:2b:f5:d9:77:cf:dd:7b:53: c4:59:f7:9f:42:3a:33:53:44:69:1a:48:09:64:e1: 8a:5c:95:62:be:2a:15:ac:0f:c3:45:d3:86:ae:7f: 4d:85:27:f8:94:d4:e0:e7:ab:5c:98:5d:b3:69:ac: 74:5e:f4:08:4f:23:e0:eb:ae:65:33:62:04:7b:b9: 78:d5:9d:b6:4e:15:1f:ee:c2:39:8e:bc:b2:e3:95: 89:a0:fa:6d:ce:49:cf:8d:4f:6c:09:48:14:30:c0: c1:87:79:70:dd:d0:5f:6a:45:ca:57:e9:ca:10:c4: 3d:81:51:7f:23:fe:b8:58:34:0a:2e:ce:90:38:ed: a9:d2:84:c1:b6:03:8d:a8:ab:39:48:35:cf:87:7c: 76:ac:17:de:37:f6:8a:cc:6e:82:d2:a2:b6:04:05: f0:4c:00:2c:ff:9e:dc:30:b9:75:18:60:3c:8d:d6: e1:02:95:1e:79:93:3c:7f:20:53:0e:18:fd:0c:5e: 08:09:05:73:be:bf:1f:4f:e4:62:0c:ee:40:1d:bb: 3f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FF:C6:4B:1A:3E:64:BB:8A:A0:8F:A7:87:0A:2D:B8:5A:6B:96:D2 X509v3 Authority Key Identifier: keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:8f:48:c0:42:ab:f2:12:61:34:8e:76:08:24:9e:06:fb:58: ba:b1:94:5e:da:2d:b4:16:65:c5:16:87:0d:37:fd:50:7a:d6: 82:35:35:c4:c2:36:8d:12:73:8a:d3:f6:27:cf:a6:e2:b8:9e: 78:c9:e7:5a:97:01:59:1e:e6:b6:cc:17:25:90:3d:e9:e0:7c: e7:94:3f:e5:07:a5:0e:04:89:1a:b0:d1:c9:a9:26:5e:9a:53: 5d:26:f2:88:d4:6a:da:4a:27:cb:29:6d:c8:39:52:7c:64:4a: bf:73:b5:fc:a7:19:40:d5:b0:9a:b4:06:79:94:3a:b6:92:2d: 91:b7:26:43:c7:e5:ef:ac:b1:14:94:30:90:43:c0:77:b4:66: 08:0f:34:5a:b9:43:e0:86:07:67:67:4a:50:ae:fc:43:0f:2b: 80:7f:80:60:a1:1e:ad:58:a2:28:6a:3e:24:a1:70:31:9c:41: bb:5d:32:a8:2c:1c:6b:ec:89:7d:aa:25:ff:a5:6e:d0:01:4c: 92:08:07:94:c3:93:82:4e:01:07:af:0f:41:f0:94:37:ec:fc: e9:74:4e:1f:74:5e:9c:b1:f6:1e:92:a5:be:fc:e9:90:fa:7c: fb:f2:e0:10:3f:69:a9:75:6f:10:8a:8b:1c:fc:bd:7d:18:6c: 7c:c4:fb:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXSbId4XADHvBh7ptv8F5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNDNmOGVhYWQ4NGVjMDkxZTg3MDZhN2M5ODY2YzFhZGU1 NjVlZGIwHhcNMjUxMjIyMTQwMTA4WhcNMjUxMjIzMTQwMTA4WjAzMTEwLwYDVQQD EyhiZmZmYzY0YjFhM2U2NGJiOGFhMDhmYTc4NzBhMmRiODVhNmI5NmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQF5X7Y4fR8/2eP2a9xQI72vBwJ0 SgeIlDZ+wjsEGly7b66k+gqKf90pDUaO7IKV0JPgK/XZd8/de1PEWfefQjozU0Rp GkgJZOGKXJVivioVrA/DRdOGrn9NhSf4lNTg56tcmF2zaax0XvQITyPg665lM2IE e7l41Z22ThUf7sI5jryy45WJoPptzknPjU9sCUgUMMDBh3lw3dBfakXKV+nKEMQ9 gVF/I/64WDQKLs6QOO2p0oTBtgONqKs5SDXPh3x2rBfeN/aKzG6C0qK2BAXwTAAs /57cMLl1GGA8jdbhApUeeZM8fyBTDhj9DF4ICQVzvr8fT+RiDO5AHbs/xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL//xksaPmS7iqCPp4cKLbhaa5bSMB8GA1UdIwQY MBaAFPJD+OqthOwJHocGp8mGbBreVl7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGtQNDZxMkU3QWtlaHdhbnlZWnNHdDVXWHRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zZjliN2QtYWI1Yi00ZTk5LWFmNDct ZWY2MWE2MTQxNDJkLzEvOGtQNDZxMkU3QWtlaHdhbnlZWnNHdDVXWHRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zZjliN2QtYWI1Yi00ZTk5LWFmNDctZWY2MWE2MTQxNDJk LzEvOGtQNDZxMkU3QWtlaHdhbnlZWnNHdDVXWHRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHY9IwEKr 8hJhNI52CCSeBvtYurGUXtottBZlxRaHDTf9UHrWgjU1xMI2jRJzitP2J8+m4rie eMnnWpcBWR7mtswXJZA96eB855Q/5QelDgSJGrDRyakmXppTXSbyiNRq2konyylt yDlSfGRKv3O1/KcZQNWwmrQGeZQ6tpItkbcmQ8fl76yxFJQwkEPAd7RmCA80WrlD 4IYHZ2dKUK78Qw8rgH+AYKEerViiKGo+JKFwMZxBu10yqCwca+yJfaol/6Vu0AFM kggHlMOTgk4BB68PQfCUN+z86XROH3RenLH2HpKlvvzpkPp8+/LgED9pqXVvEIqL HPy9fRhsfMT7vg== -----END CERTIFICATE-----Generated at Mon Dec 22 15:43:39 2025 by rpki-client