This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft File: 8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json) Hash identifier: Qcxceu8tL+anICXJ5UI4r834/pmVfZhIjk5QA/IxS4U= Subject key identifier: 27:91:63:12:DD:6C:DC:2F:3A:56:43:31:62:1E:74:A3:75:54:60:31 Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c Certificate serial: 019B3BA2804E1F1BB9991DC2A6B20045D21A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft Manifest number: 171B Signing time: Sat 20 Dec 2025 12:01:03 +0000 Manifest this update: Sat 20 Dec 2025 12:01:03 +0000 Manifest next update: Sun 21 Dec 2025 12:01:03 +0000 Files and hashes: 1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: EfAAyPLel1ISU8FhDnYEMSPqCuvRaapjeL5e9S3092w=) 2: yT1Jx8Ou-jYtMpuKi40cHf-H83c.roa (hash: Lx4YPLeLSMnJ3NGAZ4PST+Ci/ylYMYy1Z+vRgBl8ZqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:80:4e:1f:1b:b9:99:1d:c2:a6:b2:00:45:d2:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f26144c824959711b652d78c18702bf432f2195c Validity Not Before: Dec 20 12:01:03 2025 GMT Not After : Dec 21 12:01:03 2025 GMT Subject: CN=27916312dd6cdc2f3a564331621e74a375546031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:69:e3:17:10:30:1c:67:c8:99:02:5a:e1:9b: e8:a7:2a:7c:49:2a:50:91:bc:75:66:c2:6b:91:82: ca:6c:d6:55:19:10:86:42:d3:ec:28:a7:b9:42:97: 2c:2b:0a:f7:7d:0a:99:f9:d1:7a:2e:92:74:12:2d: 48:09:ba:fd:37:8b:7a:c1:46:e0:f0:9c:42:9d:9c: 85:d3:b4:99:d2:4c:0a:f4:d9:8b:52:0f:cf:40:ce: a8:96:87:55:6b:04:df:2a:43:96:25:76:fb:d2:18: 8f:d2:37:17:5c:f7:51:00:b3:a9:cd:44:95:31:e6: c7:25:5b:5c:b1:34:41:79:80:aa:66:6c:6b:19:9e: 68:fe:7e:bb:30:42:5f:af:c3:d9:5f:eb:40:ed:a0: 6f:fe:e2:69:64:7d:7b:27:ae:49:6b:4e:33:db:54: 7f:18:d0:b7:6c:10:c6:e0:4d:82:6f:69:66:e2:65: 46:03:60:30:f6:83:0a:65:da:4d:9d:ab:20:c3:31: 69:89:7b:05:f6:b9:cf:61:fb:ec:b6:05:e9:ba:29: 16:91:4f:8e:a4:fc:9c:b4:dc:e2:89:5f:46:be:b9: 25:58:bb:ab:c1:19:03:10:6c:9d:57:66:6b:d1:c9: 63:fc:86:a2:94:37:90:c0:23:a2:af:85:68:c2:0b: 0f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:91:63:12:DD:6C:DC:2F:3A:56:43:31:62:1E:74:A3:75:54:60:31 X509v3 Authority Key Identifier: keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:6b:4f:fc:ee:5f:d2:54:31:35:05:93:50:a7:b4:e3:b6:3b: 60:d5:e1:8a:20:24:ca:e3:e7:b5:04:8c:4e:3f:2d:ee:16:99: 5a:ee:fb:33:cd:62:4c:3b:44:87:a9:72:ca:69:85:62:fd:6f: b6:69:c6:a4:23:9d:2c:d3:de:a2:2c:2b:2a:7e:49:e3:50:67: 3e:7a:81:2e:a5:5e:ab:44:63:16:f1:16:2f:05:8d:ae:d5:7c: ed:29:f5:ad:79:ca:14:e4:59:c3:7e:05:06:17:86:82:f1:3b: fa:34:1e:ed:db:54:e9:06:b9:95:32:ee:d3:72:1d:4d:77:02: c3:4e:0a:e3:6f:39:1a:e3:18:59:3f:76:d9:5e:94:02:d6:53: 53:a2:52:2d:0d:e3:f1:60:e6:de:10:7a:61:72:00:b5:35:40: dc:f0:c0:8a:a8:39:e8:54:f5:bb:aa:46:04:85:0d:6e:da:3a: 63:87:42:d2:64:55:65:9d:52:50:9c:6d:ec:1a:52:71:0e:eb: 8f:45:c4:9b:38:54:40:24:d2:3d:f8:df:cb:26:bd:d3:f3:99: e7:5d:8d:08:b1:9f:ff:0f:48:89:7e:3c:30:0a:9d:04:b4:89: e4:e3:e1:a6:fc:b4:ba:30:e3:55:6e:4a:7a:7a:46:a0:4c:97: 84:28:e9:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ooBOHxu5mR3CprIARdIaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjE0NGM4MjQ5NTk3MTFiNjUyZDc4YzE4NzAyYmY0MzJm MjE5NWMwHhcNMjUxMjIwMTIwMTAzWhcNMjUxMjIxMTIwMTAzWjAzMTEwLwYDVQQD EygyNzkxNjMxMmRkNmNkYzJmM2E1NjQzMzE2MjFlNzRhMzc1NTQ2MDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmnjFxAwHGfImQJa4Zvopyp8SSpQ kbx1ZsJrkYLKbNZVGRCGQtPsKKe5QpcsKwr3fQqZ+dF6LpJ0Ei1ICbr9N4t6wUbg 8JxCnZyF07SZ0kwK9NmLUg/PQM6olodVawTfKkOWJXb70hiP0jcXXPdRALOpzUSV MebHJVtcsTRBeYCqZmxrGZ5o/n67MEJfr8PZX+tA7aBv/uJpZH17J65Ja04z21R/ GNC3bBDG4E2Cb2lm4mVGA2Aw9oMKZdpNnasgwzFpiXsF9rnPYfvstgXpuikWkU+O pPyctNziiV9GvrklWLurwRkDEGydV2Zr0clj/IailDeQwCOir4VowgsPuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCeRYxLdbNwvOlZDMWIedKN1VGAxMB8GA1UdIwQY MBaAFPJhRMgklZcRtlLXjBhwK/Qy8hlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1GRXlDU1ZseEcyVXRlTUdIQXI5REx5R1Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hNjZjMjUtMjcxMS00NjU5LWIxNjIt MzViNDgzYmI0Yzg0LzEvOG1GRXlDU1ZseEcyVXRlTUdIQXI5REx5R1Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hNjZjMjUtMjcxMS00NjU5LWIxNjItMzViNDgzYmI0Yzg0 LzEvOG1GRXlDU1ZseEcyVXRlTUdIQXI5REx5R1Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimtP/O5f 0lQxNQWTUKe047Y7YNXhiiAkyuPntQSMTj8t7haZWu77M81iTDtEh6lyymmFYv1v tmnGpCOdLNPeoiwrKn5J41BnPnqBLqVeq0RjFvEWLwWNrtV87Sn1rXnKFORZw34F BheGgvE7+jQe7dtU6Qa5lTLu03IdTXcCw04K4285GuMYWT922V6UAtZTU6JSLQ3j 8WDm3hB6YXIAtTVA3PDAiqg56FT1u6pGBIUNbto6Y4dC0mRVZZ1SUJxt7BpScQ7r j0XEmzhUQCTSPfjfyya90/OZ512NCLGf/w9IiX48MAqdBLSJ5OPhpvy0ujDjVW5K enpGoEyXhCjpZg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:45:27 2025 by rpki-client