This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft File: m8c4G4L5davxnX1QGo2QvNxDnwY.mft (raw, json) Hash identifier: ZWUapaODGrbskfOrZuGuVOWHja4WlRPidNxCzKfKCro= Subject key identifier: BF:3A:96:8A:25:97:F8:DC:53:CC:9F:C9:9D:DC:E2:AD:1B:DA:32:85 Authority key identifier: 9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06 Certificate issuer: /CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06 Certificate serial: 019B2F301ABFCE7043CA11F0F5006B6987E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft Manifest number: 0AE1 Signing time: Thu 18 Dec 2025 02:00:40 +0000 Manifest this update: Thu 18 Dec 2025 02:00:40 +0000 Manifest next update: Fri 19 Dec 2025 02:00:40 +0000 Files and hashes: 1: 4AyeZ6UgoSX9es2BbU_DizGhUdY.roa (hash: VWKfnEijREHtHZ2eztHBUGUXBqi65LO9HiloDpo6nX4=) 2: m8c4G4L5davxnX1QGo2QvNxDnwY.crl (hash: fSon7cJN9ShwYyhCo9pqUf7srtQDj3TMCFt/0dGTzK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:1a:bf:ce:70:43:ca:11:f0:f5:00:6b:69:87:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06 Validity Not Before: Dec 18 02:00:40 2025 GMT Not After : Dec 19 02:00:40 2025 GMT Subject: CN=bf3a968a2597f8dc53cc9fc99ddce2ad1bda3285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4c:7a:2d:7f:6b:b0:be:ba:7e:36:f2:3b:00: b0:1d:7d:5e:9b:30:8d:1f:cc:6e:df:13:dd:97:64: 5b:2e:e9:6b:03:e0:95:82:d6:37:83:ef:a0:55:28: 0b:2f:08:40:7c:93:dc:5d:b8:63:c1:0a:1c:2e:2b: 17:6e:c3:f5:d7:0d:08:fa:93:75:2b:2b:e9:47:9e: 88:91:03:ae:45:42:47:76:ae:91:e7:4b:6e:f0:2e: 25:81:69:6e:93:c7:a2:a7:6d:c2:a1:e4:30:7c:65: 62:fe:34:4f:d9:dd:a9:4e:42:39:2e:ae:4e:d5:a9: 47:63:3f:ec:25:75:05:b5:66:ce:d0:06:2c:96:ae: e4:fc:cf:9d:d3:7e:88:8c:74:fd:ab:a9:84:df:ac: 88:aa:a1:8e:46:31:9c:89:2c:57:45:a7:ea:fd:c6: be:82:b8:3d:90:0f:f5:45:e8:9e:c7:47:db:5e:22: ef:a6:84:a0:7e:9a:60:65:e4:38:ea:4d:cf:34:50: 90:8d:34:b4:7d:4d:6b:5c:9a:1c:f6:44:81:5f:4c: c6:8b:48:e4:d7:71:9f:be:c3:a8:fd:7c:66:3f:b2: f5:32:be:7c:d9:02:2b:5b:85:0b:43:4a:68:c8:96: 47:73:a7:6e:02:e5:56:6d:b1:76:e0:91:f1:cb:a8: b1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3A:96:8A:25:97:F8:DC:53:CC:9F:C9:9D:DC:E2:AD:1B:DA:32:85 X509v3 Authority Key Identifier: keyid:9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:99:38:64:e9:2e:b7:ef:ce:c9:67:89:69:81:fc:b1:d4:db: 01:29:e6:f6:f4:78:4c:a9:8f:79:cf:7c:ca:77:e5:9e:eb:5a: d6:24:d7:7e:f7:2d:15:e2:09:57:6d:ab:4a:99:d1:f3:c9:ba: 83:cc:fb:3f:54:0e:fe:82:ba:47:b2:2c:25:50:f7:a2:22:6f: a9:5c:63:7a:b0:c1:b4:0d:4d:72:bf:38:54:1b:bb:ea:a2:2a: b0:b0:4a:42:1d:06:48:33:f9:77:e4:23:09:41:49:6e:e0:52: a5:5e:6c:9d:f7:e8:78:5f:44:f9:2e:58:c4:70:62:0f:8b:65: bb:40:93:27:d7:5f:c7:01:47:ba:78:a2:fa:99:bf:da:de:78: 5d:87:d7:92:e7:d1:30:28:c3:4e:34:48:e5:1b:3c:13:a9:75: eb:f2:6b:12:90:64:db:d5:eb:39:23:87:7e:c8:7b:67:39:62: 38:11:29:1f:11:46:5e:15:df:6a:96:09:f6:ab:39:59:b4:d3: ce:e1:29:32:ff:e1:57:1b:91:64:b2:a2:90:b7:77:36:b1:ec: 6f:39:43:07:22:fb:41:e2:23:2e:c0:68:5d:ec:fa:3f:11:dd: 84:8b:41:c8:17:0c:de:d4:72:ae:66:9a:df:02:c9:66:1e:c0: 41:e5:bd:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMBq/znBDyhHw9QBraYfmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYzczODFiODJmOTc1YWJmMTlkN2Q1MDFhOGQ5MGJjZGM0 MzlmMDYwHhcNMjUxMjE4MDIwMDQwWhcNMjUxMjE5MDIwMDQwWjAzMTEwLwYDVQQD EyhiZjNhOTY4YTI1OTdmOGRjNTNjYzlmYzk5ZGRjZTJhZDFiZGEzMjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUx6LX9rsL66fjbyOwCwHX1emzCN H8xu3xPdl2RbLulrA+CVgtY3g++gVSgLLwhAfJPcXbhjwQocLisXbsP11w0I+pN1 KyvpR56IkQOuRUJHdq6R50tu8C4lgWluk8eip23CoeQwfGVi/jRP2d2pTkI5Lq5O 1alHYz/sJXUFtWbO0AYslq7k/M+d036IjHT9q6mE36yIqqGORjGciSxXRafq/ca+ grg9kA/1Reiex0fbXiLvpoSgfppgZeQ46k3PNFCQjTS0fU1rXJoc9kSBX0zGi0jk 13GfvsOo/XxmP7L1Mr582QIrW4ULQ0poyJZHc6duAuVWbbF24JHxy6ixZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL86looll/jcU8yfyZ3c4q0b2jKFMB8GA1UdIwQY MBaAFJvHOBuC+XWr8Z19UBqNkLzcQ58GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbThjNEc0TDVkYXZ4blgxUUdvMlF2TnhEbndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82YmYyMzItMWEyOC00YWE0LThlYmQt YmY3ZmE5NGQyYTRlLzEvbThjNEc0TDVkYXZ4blgxUUdvMlF2TnhEbndZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82YmYyMzItMWEyOC00YWE0LThlYmQtYmY3ZmE5NGQyYTRl LzEvbThjNEc0TDVkYXZ4blgxUUdvMlF2TnhEbndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZk4ZOku t+/OyWeJaYH8sdTbASnm9vR4TKmPec98ynflnuta1iTXfvctFeIJV22rSpnR88m6 g8z7P1QO/oK6R7IsJVD3oiJvqVxjerDBtA1Ncr84VBu76qIqsLBKQh0GSDP5d+Qj CUFJbuBSpV5snffoeF9E+S5YxHBiD4tlu0CTJ9dfxwFHunii+pm/2t54XYfXkufR MCjDTjRI5Rs8E6l16/JrEpBk29XrOSOHfsh7ZzliOBEpHxFGXhXfapYJ9qs5WbTT zuEpMv/hVxuRZLKikLd3NrHsbzlDByL7QeIjLsBoXez6PxHdhItByBcM3tRyrmaa 3wLJZh7AQeW9dA== -----END CERTIFICATE-----Generated at Thu Dec 18 10:28:21 2025 by rpki-client