This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json) Hash identifier: FlJRbFCHn5qgk0mgBTCgEWyLtid1A/ttWg3ALxJv48A= Subject key identifier: B0:9B:46:60:EC:96:BC:B8:A5:50:60:25:15:EE:BD:B3:BC:5A:AC:60 Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b Certificate serial: 019B533CD5AED1EA5CF7A75CFAA53BA11F28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft Manifest number: 0C13 Signing time: Thu 25 Dec 2025 02:00:54 +0000 Manifest this update: Thu 25 Dec 2025 02:00:54 +0000 Manifest next update: Fri 26 Dec 2025 02:00:54 +0000 Files and hashes: 1: 2Utz6EvNmTYHORm-GQMKm69p8WI.roa (hash: j7FVQ06WFgxEJj//G5Co8Dizh+fdctkzSaSmR5/2mVM=) 2: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: u18Zh962Gc3AIEvYykx2ApYoDA1jhSfPOa8n5WmqA3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3c:d5:ae:d1:ea:5c:f7:a7:5c:fa:a5:3b:a1:1f:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b Validity Not Before: Dec 25 02:00:54 2025 GMT Not After : Dec 26 02:00:54 2025 GMT Subject: CN=b09b4660ec96bcb8a550602515eebdb3bc5aac60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:61:58:c6:19:6e:34:b8:36:0d:35:27:b2:c1: f6:00:bb:7f:3f:83:aa:d9:81:41:4a:d8:ba:e3:48: f5:50:95:d1:ce:99:59:5e:a5:e3:2f:76:4d:a1:2e: 45:6c:82:f5:7a:5b:96:74:c4:70:a1:d2:3e:29:88: b1:ad:6f:82:61:7f:21:ce:ef:78:28:78:80:25:83: 2f:7d:64:14:41:a6:ec:b7:b7:46:99:1c:28:20:8e: 6d:09:30:ec:6e:b7:02:30:3b:74:2d:6c:07:68:14: f9:8a:de:61:e1:d8:bf:93:22:5b:e5:3b:30:03:cf: b7:6d:ff:e2:ab:24:5e:eb:5b:ff:39:28:8d:39:b4: a9:ab:be:16:cd:76:d8:ea:83:33:56:bb:a0:66:86: e5:74:30:39:a0:27:7d:4a:35:ad:f0:3f:41:e4:e1: dd:46:9a:e4:47:d8:88:3b:53:0b:f0:0c:ee:9a:d7: 3a:93:6d:5f:b9:01:b5:77:89:96:df:9f:68:a0:bc: 67:a2:c0:fe:7a:e0:1c:70:c0:cb:e4:47:25:23:19: b4:51:0c:80:b3:ab:fb:4b:21:d5:1d:c5:3e:e0:ed: f0:65:52:0e:c3:03:00:87:bb:9f:b5:a3:ea:34:6b: ce:bd:6e:44:63:19:c8:0b:c9:fe:f1:46:d4:b4:aa: 7f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9B:46:60:EC:96:BC:B8:A5:50:60:25:15:EE:BD:B3:BC:5A:AC:60 X509v3 Authority Key Identifier: keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:d9:ec:69:dc:1a:22:ee:d6:0c:f6:7b:de:d8:85:5d:31:62: ed:2d:37:ed:3e:aa:ea:ec:cc:7a:ca:29:fa:8a:8d:e0:51:cd: 62:cf:14:92:b7:f3:9a:2b:fa:17:ef:58:88:5f:20:84:e7:37: 04:ee:cd:98:14:64:26:ca:5c:da:68:7a:d2:63:c7:bd:81:a9: df:6d:c5:8c:c0:df:78:dc:3d:06:41:d7:6b:f0:a6:6c:01:e4: a9:6d:11:4b:ba:a7:ab:c4:c8:9d:07:56:02:50:f4:12:99:07: 8f:b6:5c:a2:58:91:18:48:40:94:fb:c7:e0:56:9f:d1:a5:76: 8b:c2:10:15:6e:31:8d:ca:6a:5c:73:d7:a7:54:db:d2:92:69: 94:eb:50:31:86:09:cf:01:a3:68:5f:4a:2c:1f:73:94:8d:c3: 0b:8b:72:bd:b2:23:5b:c3:15:6f:d2:ac:2e:9b:3f:14:48:73: c6:5d:41:45:c5:ed:31:4a:00:cf:a0:b4:f4:b7:a6:2a:6e:a2: 7b:c3:de:ce:09:e6:ae:fa:03:be:17:00:68:c8:75:8c:8e:90: c4:c3:be:da:79:a7:ea:01:73:97:da:37:87:38:77:09:b9:3f: 7f:14:8a:42:b6:0d:bc:84:ce:49:20:08:5e:6b:93:6a:30:4d: c0:53:64:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPNWu0epc96dc+qU7oR8oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZGE2NzEzNWI3MzdjYTlkMmRmZDdiOTdmZTU5NzhiOGYz MDBkNmIwHhcNMjUxMjI1MDIwMDU0WhcNMjUxMjI2MDIwMDU0WjAzMTEwLwYDVQQD EyhiMDliNDY2MGVjOTZiY2I4YTU1MDYwMjUxNWVlYmRiM2JjNWFhYzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWFYxhluNLg2DTUnssH2ALt/P4Oq 2YFBSti640j1UJXRzplZXqXjL3ZNoS5FbIL1eluWdMRwodI+KYixrW+CYX8hzu94 KHiAJYMvfWQUQabst7dGmRwoII5tCTDsbrcCMDt0LWwHaBT5it5h4di/kyJb5Tsw A8+3bf/iqyRe61v/OSiNObSpq74WzXbY6oMzVrugZobldDA5oCd9SjWt8D9B5OHd RprkR9iIO1ML8Azumtc6k21fuQG1d4mW359ooLxnosD+euAccMDL5EclIxm0UQyA s6v7SyHVHcU+4O3wZVIOwwMAh7uftaPqNGvOvW5EYxnIC8n+8UbUtKp/ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCbRmDslry4pVBgJRXuvbO8WqxgMB8GA1UdIwQY MBaAFPHaZxNbc3yp0t/XuX/ll4uPMA1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hMmNjYjEtYTcyOC00ZjA0LTk2NDEt ZmMxMTJhZTYzZWE0LzEvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9hMmNjYjEtYTcyOC00ZjA0LTk2NDEtZmMxMTJhZTYzZWE0 LzEvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdnsadwa Iu7WDPZ73tiFXTFi7S037T6q6uzMesop+oqN4FHNYs8Ukrfzmiv6F+9YiF8ghOc3 BO7NmBRkJspc2mh60mPHvYGp323FjMDfeNw9BkHXa/CmbAHkqW0RS7qnq8TInQdW AlD0EpkHj7ZcoliRGEhAlPvH4Faf0aV2i8IQFW4xjcpqXHPXp1Tb0pJplOtQMYYJ zwGjaF9KLB9zlI3DC4tyvbIjW8MVb9KsLps/FEhzxl1BRcXtMUoAz6C09LemKm6i e8PezgnmrvoDvhcAaMh1jI6QxMO+2nmn6gFzl9o3hzh3Cbk/fxSKQrYNvITOSSAI XmuTajBNwFNkUw== -----END CERTIFICATE-----Generated at Thu Dec 25 09:16:21 2025 by rpki-client