This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft File: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft (raw, json) Hash identifier: bO+WE/M016Ef2xH5O3GgzqBscl8uLWs8UqQ5ra14p7E= Subject key identifier: 79:2F:C0:9E:56:03:99:C8:46:87:BF:D0:4F:2D:3A:F2:0A:A6:B4:E3 Authority key identifier: F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0 Certificate issuer: /CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0 Certificate serial: 019B66556E25025484B5D012EA776E3C1945 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft Manifest number: 179B Signing time: Sun 28 Dec 2025 19:00:33 +0000 Manifest this update: Sun 28 Dec 2025 19:00:33 +0000 Manifest next update: Mon 29 Dec 2025 19:00:33 +0000 Files and hashes: 1: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl (hash: rX0hKM/XO/BiiS0iQryXJ1ePU7hdG43cQoBTi4vuCCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 19:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:55:6e:25:02:54:84:b5:d0:12:ea:77:6e:3c:19:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0 Validity Not Before: Dec 28 19:00:33 2025 GMT Not After : Dec 29 19:00:33 2025 GMT Subject: CN=792fc09e560399c84687bfd04f2d3af20aa6b4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:46:9a:20:58:e2:5b:77:37:f0:41:56:07:c9: 29:15:02:d2:2f:5c:9d:a6:a0:dd:ea:46:1c:fe:9a: 94:1e:6e:92:19:54:da:16:23:8d:46:8e:cf:12:1e: 74:26:f3:51:d3:08:e2:50:3a:3c:bd:01:0d:10:0d: e1:85:e5:9d:d9:8d:03:4a:99:c0:28:3d:a8:a8:a5: b6:2e:46:f6:46:79:17:a4:d8:07:48:cb:cc:6a:76: 45:9c:59:01:64:04:bf:15:a0:45:0a:aa:47:2e:22: a5:86:e9:42:27:31:fc:db:1f:d8:d2:c1:90:a3:0b: 44:0b:f3:bd:5b:73:5d:73:aa:89:4c:08:9a:5e:2b: fa:8f:cf:af:11:3a:fd:74:15:8a:2c:37:30:34:f0: d9:02:71:98:88:6a:bd:ae:25:69:01:56:14:3f:03: 2e:ab:11:c1:a8:b4:ec:19:b7:af:8e:00:22:2f:a2: 07:96:49:ef:93:f4:53:7c:06:e4:5b:d3:f7:59:37: bc:ee:35:5b:2a:cf:03:85:05:1a:29:c9:50:cd:73: eb:99:f1:04:a5:74:fa:88:73:a0:ab:18:7a:91:d8: 52:94:63:f9:87:86:c3:a5:a9:50:d0:80:98:b0:95: 1a:f2:6c:c4:26:0b:f2:b1:fb:3c:a4:d1:ab:da:65: 54:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2F:C0:9E:56:03:99:C8:46:87:BF:D0:4F:2D:3A:F2:0A:A6:B4:E3 X509v3 Authority Key Identifier: keyid:F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:3a:01:78:8b:88:31:8a:54:d9:96:f5:ad:90:4a:9b:c0:f6: 54:22:8e:d3:95:9c:f8:6d:dc:23:86:37:81:b3:67:c4:3f:e7: 4f:dd:fb:28:29:bd:02:04:6c:71:e5:bd:f6:8e:6d:c9:5e:14: cf:7b:d6:dc:d7:58:32:21:08:91:ce:d3:a6:ab:fd:e5:7e:79: b7:3b:5b:fa:d6:12:25:ce:a3:c8:d8:45:6c:ac:ea:da:56:4d: 75:58:0a:d7:2d:08:d7:2f:fb:e6:9e:9a:f6:a0:da:43:2e:a3: 04:2f:df:d0:d6:13:6b:6a:b5:df:77:74:2e:aa:09:63:df:a2: 2d:c0:29:16:f0:e7:69:91:03:bf:a0:7e:20:0a:4b:5e:1e:48: d0:5d:08:9e:cc:ac:d2:d0:8a:53:5c:6d:d8:0b:b4:53:b4:81: 0b:f7:7a:95:b1:2b:ac:b6:ab:47:ab:14:24:c3:7c:4c:b5:3b: 39:9e:25:22:5a:49:2f:1f:54:67:12:ee:8e:2a:c0:eb:76:fe: b2:7b:0f:30:7a:6b:e8:8b:ab:19:89:1f:94:63:24:05:af:c7: a5:0d:07:0b:97:2a:74:f8:e1:a3:14:25:b2:31:2a:a4:9b:dc: 22:ad:c4:75:26:c3:ae:ac:15:5a:87:80:49:58:28:46:cf:3c: 4c:9a:75:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmVW4lAlSEtdAS6nduPBlFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNDU0YWIzYzNlMDliNjU1Y2I0NzI1NTM5ZmY2ZTY5OTMx YzQ2YjAwHhcNMjUxMjI4MTkwMDMzWhcNMjUxMjI5MTkwMDMzWjAzMTEwLwYDVQQD Eyg3OTJmYzA5ZTU2MDM5OWM4NDY4N2JmZDA0ZjJkM2FmMjBhYTZiNGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+EaaIFjiW3c38EFWB8kpFQLSL1yd pqDd6kYc/pqUHm6SGVTaFiONRo7PEh50JvNR0wjiUDo8vQENEA3hheWd2Y0DSpnA KD2oqKW2Lkb2RnkXpNgHSMvManZFnFkBZAS/FaBFCqpHLiKlhulCJzH82x/Y0sGQ owtEC/O9W3Ndc6qJTAiaXiv6j8+vETr9dBWKLDcwNPDZAnGYiGq9riVpAVYUPwMu qxHBqLTsGbevjgAiL6IHlknvk/RTfAbkW9P3WTe87jVbKs8DhQUaKclQzXPrmfEE pXT6iHOgqxh6kdhSlGP5h4bDpalQ0ICYsJUa8mzEJgvysfs8pNGr2mVUdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkvwJ5WA5nIRoe/0E8tOvIKprTjMB8GA1UdIwQY MBaAFPFFSrPD4JtlXLRyVTn/bmmTHEawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFVWS3M4UGdtMlZjdEhKVk9mOXVhWk1jUnJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kMzFlYWItMzFlMS00OTY0LTk2MmUt ZTE1YmM5NjUwYWFiLzEvOFVWS3M4UGdtMlZjdEhKVk9mOXVhWk1jUnJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9kMzFlYWItMzFlMS00OTY0LTk2MmUtZTE1YmM5NjUwYWFi LzEvOFVWS3M4UGdtMlZjdEhKVk9mOXVhWk1jUnJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDoBeIuI MYpU2Zb1rZBKm8D2VCKO05Wc+G3cI4Y3gbNnxD/nT937KCm9AgRsceW99o5tyV4U z3vW3NdYMiEIkc7Tpqv95X55tztb+tYSJc6jyNhFbKzq2lZNdVgK1y0I1y/75p6a 9qDaQy6jBC/f0NYTa2q133d0LqoJY9+iLcApFvDnaZEDv6B+IApLXh5I0F0Insys 0tCKU1xt2Au0U7SBC/d6lbErrLarR6sUJMN8TLU7OZ4lIlpJLx9UZxLujirA63b+ snsPMHpr6IurGYkflGMkBa/HpQ0HC5cqdPjhoxQlsjEqpJvcIq3EdSbDrqwVWoeA SVgoRs88TJp1+A== -----END CERTIFICATE-----Generated at Sun Dec 28 23:22:05 2025 by rpki-client