This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft File: _8P1ykeS2U0ao2616jqhtAQ80BQ.mft (raw, json) Hash identifier: pCkdlClCqpMpbyoNM9UxyIIoCiDlJAPNIjyNPwe1QPE= Subject key identifier: 54:0C:D0:8D:BF:9C:29:4E:45:50:DA:AD:E2:D8:09:9C:5D:2D:B0:2A Authority key identifier: FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14 Certificate issuer: /CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014 Certificate serial: 019B3DC814B535CF701A34DBF9F6913BDAB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft Manifest number: 1F Signing time: Sat 20 Dec 2025 22:01:21 +0000 Manifest this update: Sat 20 Dec 2025 22:01:21 +0000 Manifest next update: Sun 21 Dec 2025 22:01:21 +0000 Files and hashes: 1: _8P1ykeS2U0ao2616jqhtAQ80BQ.crl (hash: KyURVSAACUvvtrzbtpygh/hbSlGZlJNGhpmJJO2eSdo=) 2: tWk8_qiddKPFwvBChXygjosFxfs.roa (hash: l9/b6N+haDaG/tVx4P4Y2DzGqshnTNzH3azJieIxhfU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:14:b5:35:cf:70:1a:34:db:f9:f6:91:3b:da:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014 Validity Not Before: Dec 20 22:01:21 2025 GMT Not After : Dec 21 22:01:21 2025 GMT Subject: CN=540cd08dbf9c294e4550daade2d8099c5d2db02a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e5:0e:95:1e:96:5c:ad:27:b6:66:4c:f2:e5: 9e:c7:e4:37:24:e1:ba:73:b4:a6:9d:bd:d9:ae:dd: 36:c3:12:f9:c1:2e:ef:76:a3:b6:0c:11:87:c8:c1: 3b:30:e5:70:c0:12:6e:a9:c0:f0:64:7b:fc:ee:3a: 75:45:13:52:ea:8c:e3:f7:c4:1b:2c:4d:b2:59:b5: 06:76:4b:70:2e:1e:76:40:3e:55:5d:8c:39:25:f3: d3:52:94:32:48:fd:82:8b:6a:0b:c8:8f:a5:13:3d: f6:10:91:62:e4:c5:15:86:22:0f:5a:87:2b:86:34: dd:2e:3d:41:42:7d:9b:9a:f8:65:ec:1d:11:12:97: 54:2a:89:0d:e4:af:8c:ee:99:2b:ce:e4:9d:c0:6a: 3b:15:bb:6a:0e:07:c8:89:b0:16:3c:fa:72:fc:91: d5:55:2d:40:3c:23:e5:6f:9f:ea:68:9d:8f:d5:31: 0d:1b:85:b8:72:b5:83:81:9d:2b:89:3d:aa:6f:5d: b2:08:2b:51:23:ae:77:bd:49:ee:93:81:b6:f8:a4: 69:da:a2:58:b3:e7:2e:bc:6d:0a:45:14:eb:10:2f: 16:5c:b8:95:97:77:69:6f:44:27:1f:9b:3e:9c:2b: 08:60:1e:42:26:e0:6a:3a:ba:ca:1b:14:a0:d6:bf: da:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0C:D0:8D:BF:9C:29:4E:45:50:DA:AD:E2:D8:09:9C:5D:2D:B0:2A X509v3 Authority Key Identifier: keyid:FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:a8:6d:e0:75:08:85:2f:6b:c5:34:18:60:ef:65:e6:56:c4: ea:07:3f:e4:9a:ef:99:e2:7f:5f:65:b0:3e:e3:86:9c:49:48: bf:56:1e:4d:ca:9d:2d:a6:c2:7d:b6:ad:9d:85:9c:ec:9c:04: 41:70:e0:38:31:a0:c2:14:9d:cf:67:56:f4:7a:c2:8d:c3:f4: e2:ae:b9:d2:33:b8:08:30:2c:8d:cd:74:c9:da:b9:6d:46:84: 4d:e9:de:f3:6f:25:84:d6:e7:89:e3:98:dc:6b:af:b2:69:b5: c9:74:5c:93:50:74:40:ec:82:73:60:42:1d:3a:80:08:d2:43: fb:8f:9a:a9:d3:99:e5:dd:52:b3:fe:43:e6:5a:93:5c:23:53: f2:6f:ff:04:7e:7d:0d:98:2d:37:b8:2b:52:aa:19:40:56:48: 0e:b9:1b:d5:26:8f:31:25:10:ca:35:45:09:f8:44:4c:0c:1a: 64:2e:60:6e:da:71:20:a2:df:0b:96:1b:b0:35:1e:b2:7a:55: e8:35:98:df:59:da:52:f4:ab:89:e4:00:54:4f:37:90:fb:b7: b9:e5:0d:4a:dd:e5:31:3d:97:cb:df:26:7d:c7:d6:bd:95:33: 2c:f9:84:bf:66:69:f1:17:9c:3e:cc:38:80:41:ec:84:8c:0c: 44:36:f8:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yBS1Nc9wGjTb+faRO9qzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYzNmNWNhNDc5MmQ5NGQxYWEzNmViNWVhM2FhMWI0MDQz Y2QwMTQwHhcNMjUxMjIwMjIwMTIxWhcNMjUxMjIxMjIwMTIxWjAzMTEwLwYDVQQD Eyg1NDBjZDA4ZGJmOWMyOTRlNDU1MGRhYWRlMmQ4MDk5YzVkMmRiMDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuUOlR6WXK0ntmZM8uWex+Q3JOG6 c7Smnb3Zrt02wxL5wS7vdqO2DBGHyME7MOVwwBJuqcDwZHv87jp1RRNS6ozj98Qb LE2yWbUGdktwLh52QD5VXYw5JfPTUpQySP2Ci2oLyI+lEz32EJFi5MUVhiIPWocr hjTdLj1BQn2bmvhl7B0REpdUKokN5K+M7pkrzuSdwGo7FbtqDgfIibAWPPpy/JHV VS1APCPlb5/qaJ2P1TENG4W4crWDgZ0riT2qb12yCCtRI653vUnuk4G2+KRp2qJY s+cuvG0KRRTrEC8WXLiVl3dpb0QnH5s+nCsIYB5CJuBqOrrKGxSg1r/aoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQM0I2/nClORVDareLYCZxdLbAqMB8GA1UdIwQY MBaAFP/D9cpHktlNGqNuteo6obQEPNAUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzhQMXlrZVMyVTBhbzI2MTZqcWh0QVE4MEJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mZDY5NjMtZDI1Yy00MDJmLTllYTEt MjhlZDBmOTI4MTMzLzEvXzhQMXlrZVMyVTBhbzI2MTZqcWh0QVE4MEJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mZDY5NjMtZDI1Yy00MDJmLTllYTEtMjhlZDBmOTI4MTMz LzEvXzhQMXlrZVMyVTBhbzI2MTZqcWh0QVE4MEJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKht4HUI hS9rxTQYYO9l5lbE6gc/5JrvmeJ/X2WwPuOGnElIv1YeTcqdLabCfbatnYWc7JwE QXDgODGgwhSdz2dW9HrCjcP04q650jO4CDAsjc10ydq5bUaETene828lhNbnieOY 3Guvsmm1yXRck1B0QOyCc2BCHTqACNJD+4+aqdOZ5d1Ss/5D5lqTXCNT8m//BH59 DZgtN7grUqoZQFZIDrkb1SaPMSUQyjVFCfhETAwaZC5gbtpxIKLfC5YbsDUesnpV 6DWY31naUvSrieQAVE83kPu3ueUNSt3lMT2Xy98mfcfWvZUzLPmEv2Zp8RecPsw4 gEHshIwMRDb4uQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:39:39 2025 by rpki-client