This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft File: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json) Hash identifier: TPWsxWj1BJtulgiMXbVKc/Wr4riW3BL9BeaeEVkPLu0= Subject key identifier: 29:CC:FC:AC:91:9D:45:23:1D:3C:AF:ED:24:F7:39:95:35:B7:2E:3A Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16 Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516 Certificate serial: 019B48B94C797662CDCB8BDBEB7A8E6663DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft Manifest number: 0CD9 Signing time: Tue 23 Dec 2025 01:01:01 +0000 Manifest this update: Tue 23 Dec 2025 01:01:01 +0000 Manifest next update: Wed 24 Dec 2025 01:01:01 +0000 Files and hashes: 1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: h3Bd5VpxoZbFo6E5yJKHX0x6gRC7Tk9mkBnaVZUUUfY=) 2: RcN3Kuq3ry-DnLR50I8ZgxWiZps.roa (hash: 21uJ31ZQvbuNpqex7iYKgjQtgSig9b6f7lgE5wHxtS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:4c:79:76:62:cd:cb:8b:db:eb:7a:8e:66:63:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516 Validity Not Before: Dec 23 01:01:01 2025 GMT Not After : Dec 24 01:01:01 2025 GMT Subject: CN=29ccfcac919d45231d3cafed24f7399535b72e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c5:47:6c:78:c3:d8:20:66:13:57:52:a8:ce: 12:0c:44:76:ab:76:69:0c:62:03:c3:9c:00:2a:7b: 20:70:69:46:a0:5e:41:84:1a:e3:d0:ba:f5:d7:95: f0:48:67:81:d2:72:be:cd:7e:54:4e:b8:ff:0d:ff: 97:6f:54:0b:45:d4:47:56:02:07:6f:54:5a:55:2b: 47:b5:7d:a8:44:8a:e5:f7:f1:cd:f0:a5:1f:17:9c: 73:a4:88:fb:03:d2:9d:9d:bb:67:36:c5:b2:9b:dd: 91:b0:04:eb:88:01:09:52:a9:d3:dc:62:91:90:06: 6a:45:ea:ee:2f:05:a8:a8:9b:40:23:8a:04:93:a3: 23:d8:88:d7:2d:5d:0e:8a:6d:c9:e8:70:79:a9:a6: 86:c4:e4:7f:19:7f:37:0e:88:10:4e:5a:04:84:4c: e9:34:99:8a:8b:c7:d8:56:da:e0:a7:82:b1:dd:e8: 85:c9:69:a1:b4:db:6e:c2:aa:76:7a:49:d6:a7:d8: 38:bd:6a:02:cf:12:41:20:30:3f:b3:df:20:55:01: a7:0a:fd:4a:76:76:58:90:08:1b:85:ec:fd:ad:b2: d9:83:df:be:a9:3b:03:48:ec:79:3a:8d:62:ea:7f: 9c:99:f1:3a:6f:1e:6f:09:71:13:73:8e:77:37:5e: 6c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CC:FC:AC:91:9D:45:23:1D:3C:AF:ED:24:F7:39:95:35:B7:2E:3A X509v3 Authority Key Identifier: keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:b7:05:d2:41:d2:1a:93:6d:8b:3f:6f:86:5b:e2:fc:2f:73: 1a:07:f2:ab:f8:4c:20:37:9c:2f:ac:c1:4b:12:20:5f:2f:a5: 2d:c8:aa:75:a0:7f:dc:3a:e5:61:ea:cb:03:40:26:77:b8:df: 47:10:fe:f8:e6:5d:1d:9a:c9:ac:94:9a:6c:60:33:da:56:61: 57:3f:a9:8d:84:ba:21:c2:4b:8a:df:af:7e:5f:a8:59:45:3d: c8:79:83:d8:50:56:be:77:d6:89:67:b1:e0:d5:0e:c7:d0:1d: f1:0d:0f:5c:73:96:27:93:23:8c:d8:9e:71:9a:da:26:d2:2f: 6b:88:bf:a0:0c:b5:28:2f:2a:36:97:f5:8a:a3:82:3a:2a:df: fd:fd:e5:ed:06:58:a9:ad:c4:85:77:89:bb:e9:69:d5:fc:57: ad:34:23:4a:0c:fe:2d:67:c7:99:39:38:9b:67:9f:e7:41:d5: 69:56:17:90:e7:72:3e:ca:ad:f2:9d:55:11:5f:9f:f2:1b:04: 76:cc:4e:4e:15:d5:e5:60:9a:e2:bc:e7:4a:1d:7e:82:af:67: d7:a5:43:b6:f7:1f:41:92:e4:e3:be:01:62:ca:04:7e:68:b3: 18:b3:0e:ad:c2:68:ae:5b:87:6e:e1:4f:a6:fe:2f:27:2b:e2: 24:de:11:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuUx5dmLNy4vb63qOZmPaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNTZkYjJkMjg3NGY5ZTU5ODVjOWYxOGYwNWZlNTZlODNm MDk1MTYwHhcNMjUxMjIzMDEwMTAxWhcNMjUxMjI0MDEwMTAxWjAzMTEwLwYDVQQD EygyOWNjZmNhYzkxOWQ0NTIzMWQzY2FmZWQyNGY3Mzk5NTM1YjcyZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocVHbHjD2CBmE1dSqM4SDER2q3Zp DGIDw5wAKnsgcGlGoF5BhBrj0Lr115XwSGeB0nK+zX5UTrj/Df+Xb1QLRdRHVgIH b1RaVStHtX2oRIrl9/HN8KUfF5xzpIj7A9KdnbtnNsWym92RsATriAEJUqnT3GKR kAZqReruLwWoqJtAI4oEk6Mj2IjXLV0Oim3J6HB5qaaGxOR/GX83DogQTloEhEzp NJmKi8fYVtrgp4Kx3eiFyWmhtNtuwqp2eknWp9g4vWoCzxJBIDA/s98gVQGnCv1K dnZYkAgbhez9rbLZg9++qTsDSOx5Oo1i6n+cmfE6bx5vCXETc453N15sIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnM/KyRnUUjHTyv7ST3OZU1ty46MB8GA1UdIwQY MBaAFPFW2y0odPnlmFyfGPBf5W6D8JUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFZiYkxTaDAtZVdZWEo4WThGX2xib1B3bFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85YmI0MGQtYWQyOC00ZTUxLTg0Yjgt NWFlNTNhMDZlYWE3LzEvOFZiYkxTaDAtZVdZWEo4WThGX2xib1B3bFJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85YmI0MGQtYWQyOC00ZTUxLTg0YjgtNWFlNTNhMDZlYWE3 LzEvOFZiYkxTaDAtZVdZWEo4WThGX2xib1B3bFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7cF0kHS GpNtiz9vhlvi/C9zGgfyq/hMIDecL6zBSxIgXy+lLciqdaB/3DrlYerLA0Amd7jf RxD++OZdHZrJrJSabGAz2lZhVz+pjYS6IcJLit+vfl+oWUU9yHmD2FBWvnfWiWex 4NUOx9Ad8Q0PXHOWJ5MjjNiecZraJtIva4i/oAy1KC8qNpf1iqOCOirf/f3l7QZY qa3EhXeJu+lp1fxXrTQjSgz+LWfHmTk4m2ef50HVaVYXkOdyPsqt8p1VEV+f8hsE dsxOThXV5WCa4rznSh1+gq9n16VDtvcfQZLk474BYsoEfmizGLMOrcJorluHbuFP pv4vJyviJN4RTQ== -----END CERTIFICATE-----Generated at Tue Dec 23 03:48:28 2025 by rpki-client