This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft File: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft (raw, json) Hash identifier: LsDg0pCJAocHkLdVtNYMnQ9LexKAiLtVgKeBJupTEGc= Subject key identifier: D6:FF:CB:D0:0A:D2:49:6B:19:31:DE:39:6D:6B:50:51:1E:7E:7D:7C Authority key identifier: F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B Certificate issuer: /CN=f27808519f2b08045c7fb41a61fda4e09e51891b Certificate serial: 019B766F1B6D9CFA0ABA2F7979335FD0AB6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft Manifest number: 17A3 Signing time: Wed 31 Dec 2025 22:02:31 +0000 Manifest this update: Wed 31 Dec 2025 22:02:31 +0000 Manifest next update: Thu 01 Jan 2026 22:02:31 +0000 Files and hashes: 1: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl (hash: IUNjxfK2yWboYNm+OaLcLrN8YuIN5/+QUhKLsaBr56s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 22:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:6f:1b:6d:9c:fa:0a:ba:2f:79:79:33:5f:d0:ab:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f27808519f2b08045c7fb41a61fda4e09e51891b Validity Not Before: Dec 31 22:02:31 2025 GMT Not After : Jan 1 22:02:31 2026 GMT Subject: CN=d6ffcbd00ad2496b1931de396d6b50511e7e7d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:04:d1:5a:d9:8e:36:79:c5:e8:21:c4:65:2c: 7e:86:cc:72:f0:9f:60:4c:ad:fe:09:c6:70:0e:30: f5:49:66:57:14:8b:dd:25:85:c3:84:b8:37:1b:c0: 5b:90:e8:a0:86:2e:31:60:97:10:ca:81:9c:34:7a: b3:53:f7:e7:e0:30:59:55:ef:bc:b8:2c:c1:e3:3a: 0a:ee:0b:4b:4a:46:c6:0f:78:ed:05:97:ac:c6:5a: 99:b8:ce:65:e4:19:b8:62:03:71:96:6f:7e:b4:48: b9:98:31:8f:ac:cd:8c:5e:ca:36:49:3a:42:a2:f1: f6:e0:95:19:b3:25:a1:5e:ad:11:33:a4:08:93:d0: a6:29:38:db:15:b1:91:fe:0e:79:49:35:c6:b3:12: 16:03:2f:41:67:e3:a0:02:f5:58:08:e0:e5:2b:e0: 44:f8:2b:1a:9d:1e:f8:30:83:9d:e1:de:84:dc:c5: 8f:39:06:1e:70:f7:22:11:9f:40:1f:ee:4d:e1:be: 12:2c:23:bf:0d:55:d5:c7:4c:de:07:63:80:f7:e9: 3d:3c:26:aa:87:6d:4e:da:d1:59:13:22:2e:6f:50: 9f:4b:23:08:a8:5c:0f:c5:0c:ac:8e:dc:94:b9:fc: 74:cd:37:a8:31:0c:ff:3e:d6:e4:92:7b:47:cc:e7: 52:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FF:CB:D0:0A:D2:49:6B:19:31:DE:39:6D:6B:50:51:1E:7E:7D:7C X509v3 Authority Key Identifier: keyid:F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:56:8f:94:eb:1a:cc:d0:d5:4d:bf:6e:36:9c:6b:e0:27:f0: e1:40:8a:95:60:d1:7d:9b:72:4a:73:9a:bf:c4:78:a9:66:32: ce:7e:41:7c:b7:3a:82:2f:49:9b:ee:56:8b:7f:dc:91:de:e2: fa:21:60:67:d4:d8:00:82:ac:f1:e2:56:9f:a1:f1:cb:cb:a6: d4:59:ef:39:ff:35:b6:f1:b9:7d:60:35:5f:0c:80:20:02:35: 7f:b1:0c:32:65:06:19:45:f4:cc:f4:44:52:76:69:ee:59:16: a5:2d:7e:02:0a:01:5d:88:2d:8a:78:d3:fa:ad:0a:cf:f5:b5: fc:5c:38:03:58:b9:52:19:b6:2d:54:d6:03:6c:60:03:9e:76: 28:3f:96:ca:06:0c:42:a0:22:d1:33:83:a5:69:53:d0:60:87: c2:5e:fa:b7:3a:2d:69:ff:6d:f7:1a:f9:2a:84:c9:db:0d:78: f9:f2:86:3a:80:97:4e:a4:1d:b2:a2:a4:5c:df:2d:bb:f1:12: 39:9f:66:fb:95:98:fa:d7:fc:e8:07:b6:ea:70:38:55:3a:c0: 48:90:25:b2:65:72:af:41:74:25:e6:be:d1:a1:dc:7c:cc:6c: f1:6d:14:7d:ca:a0:c7:0c:0f:c6:37:7c:52:81:bc:8d:16:09: 85:9c:d6:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2bxttnPoKui95eTNf0KtqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNzgwODUxOWYyYjA4MDQ1YzdmYjQxYTYxZmRhNGUwOWU1 MTg5MWIwHhcNMjUxMjMxMjIwMjMxWhcNMjYwMTAxMjIwMjMxWjAzMTEwLwYDVQQD EyhkNmZmY2JkMDBhZDI0OTZiMTkzMWRlMzk2ZDZiNTA1MTFlN2U3ZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQTRWtmONnnF6CHEZSx+hsxy8J9g TK3+CcZwDjD1SWZXFIvdJYXDhLg3G8BbkOighi4xYJcQyoGcNHqzU/fn4DBZVe+8 uCzB4zoK7gtLSkbGD3jtBZesxlqZuM5l5Bm4YgNxlm9+tEi5mDGPrM2MXso2STpC ovH24JUZsyWhXq0RM6QIk9CmKTjbFbGR/g55STXGsxIWAy9BZ+OgAvVYCODlK+BE +CsanR74MIOd4d6E3MWPOQYecPciEZ9AH+5N4b4SLCO/DVXVx0zeB2OA9+k9PCaq h21O2tFZEyIub1CfSyMIqFwPxQysjtyUufx0zTeoMQz/PtbkkntHzOdSwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNb/y9AK0klrGTHeOW1rUFEefn18MB8GA1UdIwQY MBaAFPJ4CFGfKwgEXH+0GmH9pOCeUYkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG5nSVVaOHJDQVJjZjdRYVlmMms0SjVSaVJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81N2JhYWYtZTJlZi00N2VhLWFiYjct NTg1NWMxZDE0YzliLzEvOG5nSVVaOHJDQVJjZjdRYVlmMms0SjVSaVJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81N2JhYWYtZTJlZi00N2VhLWFiYjctNTg1NWMxZDE0Yzli LzEvOG5nSVVaOHJDQVJjZjdRYVlmMms0SjVSaVJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL1aPlOsa zNDVTb9uNpxr4Cfw4UCKlWDRfZtySnOav8R4qWYyzn5BfLc6gi9Jm+5Wi3/ckd7i +iFgZ9TYAIKs8eJWn6Hxy8um1FnvOf81tvG5fWA1XwyAIAI1f7EMMmUGGUX0zPRE UnZp7lkWpS1+AgoBXYgtinjT+q0Kz/W1/Fw4A1i5Uhm2LVTWA2xgA552KD+WygYM QqAi0TODpWlT0GCHwl76tzotaf9t9xr5KoTJ2w14+fKGOoCXTqQdsqKkXN8tu/ES OZ9m+5WY+tf86Ae26nA4VTrASJAlsmVyr0F0Jea+0aHcfMxs8W0UfcqgxwwPxjd8 UoG8jRYJhZzWOw== -----END CERTIFICATE-----Generated at Thu Jan 1 05:46:32 2026 by rpki-client