This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft File: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json) Hash identifier: kqEKW/5XsNUaQrfDIbhBBeHfZbwZ75OmjfTTHWZZs8o= Subject key identifier: AD:77:37:FF:A1:A0:86:53:28:BE:02:B3:CB:4A:0F:60:A6:66:FE:D7 Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16 Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516 Certificate serial: 019B3F111F786135C892DC53E53547552236 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft Manifest number: 0CD4 Signing time: Sun 21 Dec 2025 04:00:45 +0000 Manifest this update: Sun 21 Dec 2025 04:00:45 +0000 Manifest next update: Mon 22 Dec 2025 04:00:45 +0000 Files and hashes: 1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: 5gt+TvVz3KwCR15a5ueatgQBvbu0tH8ySEHy1v5oToc=) 2: RcN3Kuq3ry-DnLR50I8ZgxWiZps.roa (hash: 21uJ31ZQvbuNpqex7iYKgjQtgSig9b6f7lgE5wHxtS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:1f:78:61:35:c8:92:dc:53:e5:35:47:55:22:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516 Validity Not Before: Dec 21 04:00:45 2025 GMT Not After : Dec 22 04:00:45 2025 GMT Subject: CN=ad7737ffa1a0865328be02b3cb4a0f60a666fed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:eb:33:3c:db:a0:e2:fa:91:0d:dc:40:62:cb: 32:58:bd:f0:df:8d:2f:fc:f8:32:01:41:8a:b2:d6: 8a:39:14:1c:a9:5f:dd:83:6e:ca:cc:7d:99:8f:e2: e8:87:16:13:42:06:0c:e3:04:4f:be:82:49:26:99: 58:ff:e3:30:c8:94:a8:c6:7c:6b:90:6b:d1:ad:b9: 6a:30:ae:e2:25:b6:f4:fa:81:85:6a:9c:4f:db:57: ca:da:84:81:f7:3f:91:55:55:67:4d:3f:14:44:d4: ac:4c:38:48:94:70:a2:b2:f9:fe:2e:3e:22:14:3f: 6b:28:0f:7e:dd:30:85:e8:1e:f5:ff:a4:6b:0a:f7: 02:5c:5a:f1:8e:54:d9:83:13:0e:23:2f:68:00:ce: 78:76:11:a0:07:40:a6:12:79:7b:34:02:83:ec:bc: 22:f4:5d:db:87:eb:90:c9:bb:2e:55:06:20:71:54: 01:7a:36:84:f1:88:b5:67:e0:67:5c:d7:93:e3:3b: 7f:41:3f:9d:21:dd:22:e2:b0:a2:b2:de:d3:2d:11: d9:61:e9:fa:d0:01:40:9c:cc:06:6d:78:45:f2:2d: 9e:06:c6:19:e1:34:41:af:45:6b:87:ae:83:99:9a: 16:45:26:a3:1b:b3:13:ef:1d:1d:fb:1e:c3:34:d7: de:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:77:37:FF:A1:A0:86:53:28:BE:02:B3:CB:4A:0F:60:A6:66:FE:D7 X509v3 Authority Key Identifier: keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:7c:03:42:3f:66:0a:88:57:1f:e0:fe:93:5b:5d:ef:4d:ba: 3d:5b:90:dc:97:bc:d3:94:a4:03:4a:e8:c7:14:ba:f9:ef:b2: 0f:22:ce:f5:ef:6a:35:a8:ff:d7:8e:92:4f:a7:e0:eb:93:be: e0:5e:21:3d:8c:d0:df:6f:6a:26:aa:55:32:3b:ff:6b:5e:1d: 00:50:67:28:bd:75:6a:66:fb:69:f8:c2:44:cf:96:fc:21:91: cf:84:f5:5a:13:90:32:ef:2e:50:1e:c3:60:3c:87:bb:e2:6f: 37:5d:d0:98:69:8e:e4:e3:68:b9:d2:77:c0:98:20:6e:b1:0e: 34:cd:9c:8b:55:da:e0:bc:3a:22:af:13:41:59:b6:03:a6:d2: 2d:36:78:0b:8f:8c:55:b9:f7:cf:f5:d6:5b:61:60:0b:e9:f3: 2f:b7:d3:e7:66:c0:44:7a:8e:68:09:b9:34:31:d1:1b:b4:e1: 84:ed:eb:5a:6d:bc:90:a1:3c:f3:df:54:b2:6a:4f:0d:5d:96: e5:c4:2e:ff:df:a0:21:d7:87:a2:11:d0:77:3d:19:e3:56:9b: 3f:d8:b5:33:de:80:77:c3:76:fb:99:fd:c4:77:1f:6b:d5:0e: 76:8d:48:86:8f:be:18:c9:ea:2b:15:f7:e2:b7:e6:eb:b4:14: 68:8e:0a:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ER94YTXIktxT5TVHVSI2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNTZkYjJkMjg3NGY5ZTU5ODVjOWYxOGYwNWZlNTZlODNm MDk1MTYwHhcNMjUxMjIxMDQwMDQ1WhcNMjUxMjIyMDQwMDQ1WjAzMTEwLwYDVQQD EyhhZDc3MzdmZmExYTA4NjUzMjhiZTAyYjNjYjRhMGY2MGE2NjZmZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+szPNug4vqRDdxAYssyWL3w340v /PgyAUGKstaKORQcqV/dg27KzH2Zj+LohxYTQgYM4wRPvoJJJplY/+MwyJSoxnxr kGvRrblqMK7iJbb0+oGFapxP21fK2oSB9z+RVVVnTT8URNSsTDhIlHCisvn+Lj4i FD9rKA9+3TCF6B71/6RrCvcCXFrxjlTZgxMOIy9oAM54dhGgB0CmEnl7NAKD7Lwi 9F3bh+uQybsuVQYgcVQBejaE8Yi1Z+BnXNeT4zt/QT+dId0i4rCist7TLRHZYen6 0AFAnMwGbXhF8i2eBsYZ4TRBr0Vrh66DmZoWRSajG7MT7x0d+x7DNNfe+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK13N/+hoIZTKL4Cs8tKD2CmZv7XMB8GA1UdIwQY MBaAFPFW2y0odPnlmFyfGPBf5W6D8JUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFZiYkxTaDAtZVdZWEo4WThGX2xib1B3bFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85YmI0MGQtYWQyOC00ZTUxLTg0Yjgt NWFlNTNhMDZlYWE3LzEvOFZiYkxTaDAtZVdZWEo4WThGX2xib1B3bFJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85YmI0MGQtYWQyOC00ZTUxLTg0YjgtNWFlNTNhMDZlYWE3 LzEvOFZiYkxTaDAtZVdZWEo4WThGX2xib1B3bFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHwDQj9m CohXH+D+k1td7026PVuQ3Je805SkA0roxxS6+e+yDyLO9e9qNaj/146ST6fg65O+ 4F4hPYzQ329qJqpVMjv/a14dAFBnKL11amb7afjCRM+W/CGRz4T1WhOQMu8uUB7D YDyHu+JvN13QmGmO5ONoudJ3wJggbrEONM2ci1Xa4Lw6Iq8TQVm2A6bSLTZ4C4+M Vbn3z/XWW2FgC+nzL7fT52bARHqOaAm5NDHRG7ThhO3rWm28kKE8899UsmpPDV2W 5cQu/9+gIdeHohHQdz0Z41abP9i1M96Ad8N2+5n9xHcfa9UOdo1Iho++GMnqKxX3 4rfm67QUaI4KTA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:36:19 2025 by rpki-client