This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft File: 8yvpggYKQ3NNCtEmrUbaLzlcne8.mft (raw, json) Hash identifier: Ake0kd5tfevaZsF8Hfin8P6Ac1D3gRoxfHYk5SYEQks= Subject key identifier: CD:D8:5D:A9:22:79:1F:F9:70:4A:FF:48:35:09:BD:90:8F:27:BE:AA Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def Certificate serial: 019B3F47EC039F4E854EC4770611573086F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft Manifest number: 1790 Signing time: Sun 21 Dec 2025 05:00:36 +0000 Manifest this update: Sun 21 Dec 2025 05:00:36 +0000 Manifest next update: Mon 22 Dec 2025 05:00:36 +0000 Files and hashes: 1: 8yvpggYKQ3NNCtEmrUbaLzlcne8.crl (hash: 9YjISHM/E+AytRwgGHn+tLe15Nj6vh6Y5mtvRpE3ELM=) 2: _ez--C0KRSwSRmH4lyGu5zUk1HU.roa (hash: KFrEJZmjOcmfSBpY7GDcoqxz0mSObldiNHL67FlKf8w=) 3: bHl4gP55LgKhhE_L1xho4xppPEo.roa (hash: rqcbN4+Al2DH9m3ppJi1E488vxtH8t3M86sJsdVuXgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:47:ec:03:9f:4e:85:4e:c4:77:06:11:57:30:86:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def Validity Not Before: Dec 21 05:00:36 2025 GMT Not After : Dec 22 05:00:36 2025 GMT Subject: CN=cdd85da922791ff9704aff483509bd908f27beaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:39:8c:4a:77:40:5a:bd:9b:f1:7f:7d:9b:d4: ed:be:49:9e:32:b7:7d:37:4d:9c:f3:9c:04:a0:cd: e3:c9:67:a3:ab:46:b9:86:10:3f:ae:19:b7:ef:a3: 2e:eb:5d:61:95:d1:54:bf:3d:a2:ec:45:85:b3:3d: 03:d4:e9:a0:40:1f:92:98:84:31:36:74:c6:ae:37: 7e:93:54:de:b5:93:d6:8d:42:3f:d4:37:54:5c:d3: 9c:a6:fa:c9:f7:db:92:05:5a:61:c1:17:15:7a:a4: 0a:1d:6d:0f:75:44:5b:f0:aa:f6:80:b6:9c:64:d2: a2:e7:31:9b:91:29:10:d6:e4:31:2c:e5:eb:f4:08: 2f:32:2d:06:14:ad:cf:aa:80:6e:0d:35:fb:e7:c2: 00:67:a9:13:e2:93:3d:a7:ce:e8:11:37:f5:1e:15: 63:37:23:3b:07:0b:8a:f5:26:be:6f:c2:b5:b8:9e: 78:b6:58:c9:90:a5:da:d5:4c:03:24:5b:57:c2:37: ac:0f:4b:a5:3b:e2:5b:df:f8:dd:32:85:b2:9e:51: 9c:b6:4c:31:49:d3:f8:5d:f0:38:d2:55:e4:18:79: 9d:9d:c4:2c:9f:dd:a6:95:48:04:cc:a8:7c:68:98: 99:99:31:a7:a0:f4:e7:78:7f:67:f2:48:ff:22:61: c9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D8:5D:A9:22:79:1F:F9:70:4A:FF:48:35:09:BD:90:8F:27:BE:AA X509v3 Authority Key Identifier: keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ac:48:5d:b4:1b:3b:47:01:52:a6:71:8c:2f:bf:16:9c:7e: cd:06:86:b7:b0:da:95:c1:e4:20:ba:e7:c6:9f:e4:10:04:b3: b4:a0:59:be:e2:eb:5f:d0:76:e1:fd:bb:7f:90:a2:23:b1:64: 3f:e1:74:37:0c:3c:70:54:27:54:ba:60:a9:4e:b1:4e:00:01: 1d:79:ce:8b:18:34:94:80:a0:c5:32:ab:09:54:91:ab:46:37: a2:c7:97:4e:d7:fe:90:b3:88:b6:46:6d:c7:1c:b0:40:59:26: 20:48:e3:cf:7d:54:c8:08:ce:59:49:a6:89:52:b1:11:da:6c: 6f:70:6e:e8:ba:95:36:5c:de:ac:15:0c:23:8a:3a:23:35:21: 37:20:05:f0:2b:ee:9b:5d:89:81:8a:26:f5:57:93:da:80:8c: 08:9e:7b:b0:12:bf:f1:d0:1d:77:a3:97:45:fb:b0:e7:1a:7c: 90:f6:74:62:8e:64:aa:07:81:9d:2e:1e:fc:f6:9e:56:23:2e: 9b:bd:71:d7:d8:dd:54:71:71:93:84:20:5a:a2:87:c7:77:78: 30:b7:85:c1:bb:21:8b:7f:e8:9b:67:b7:4d:a3:00:db:7d:0e: a8:e6:ad:6b:77:1b:76:5f:23:c2:4a:db:34:d0:0f:0a:9f:0c: da:2d:5a:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/R+wDn06FTsR3BhFXMIbzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMmJlOTgyMDYwYTQzNzM0ZDBhZDEyNmFkNDZkYTJmMzk1 YzlkZWYwHhcNMjUxMjIxMDUwMDM2WhcNMjUxMjIyMDUwMDM2WjAzMTEwLwYDVQQD EyhjZGQ4NWRhOTIyNzkxZmY5NzA0YWZmNDgzNTA5YmQ5MDhmMjdiZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DmMSndAWr2b8X99m9TtvkmeMrd9 N02c85wEoM3jyWejq0a5hhA/rhm376Mu611hldFUvz2i7EWFsz0D1OmgQB+SmIQx NnTGrjd+k1TetZPWjUI/1DdUXNOcpvrJ99uSBVphwRcVeqQKHW0PdURb8Kr2gLac ZNKi5zGbkSkQ1uQxLOXr9AgvMi0GFK3PqoBuDTX758IAZ6kT4pM9p87oETf1HhVj NyM7BwuK9Sa+b8K1uJ54tljJkKXa1UwDJFtXwjesD0ulO+Jb3/jdMoWynlGctkwx SdP4XfA40lXkGHmdncQsn92mlUgEzKh8aJiZmTGnoPTneH9n8kj/ImHJCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3YXakieR/5cEr/SDUJvZCPJ76qMB8GA1UdIwQY MBaAFPMr6YIGCkNzTQrRJq1G2i85XJ3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kYTNiMWQtN2FjZi00NTFmLWI2OGIt OTliY2JlNmQ3ZjYzLzEvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9kYTNiMWQtN2FjZi00NTFmLWI2OGItOTliY2JlNmQ3ZjYz LzEvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVaxIXbQb O0cBUqZxjC+/Fpx+zQaGt7DalcHkILrnxp/kEASztKBZvuLrX9B24f27f5CiI7Fk P+F0Nww8cFQnVLpgqU6xTgABHXnOixg0lICgxTKrCVSRq0Y3oseXTtf+kLOItkZt xxywQFkmIEjjz31UyAjOWUmmiVKxEdpsb3Bu6LqVNlzerBUMI4o6IzUhNyAF8Cvu m12JgYom9VeT2oCMCJ57sBK/8dAdd6OXRfuw5xp8kPZ0Yo5kqgeBnS4e/PaeViMu m71x19jdVHFxk4QgWqKHx3d4MLeFwbshi3/om2e3TaMA230OqOata3cbdl8jwkrb NNAPCp8M2i1akg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:46:37 2025 by rpki-client