This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft File: c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft (raw, json) Hash identifier: /B5Iw6fUU+JwJVt9+2rm3lyzC0L0m9NJeyZ140SpqZ0= Subject key identifier: E0:02:4E:BB:7F:B5:92:AF:18:99:53:25:43:E5:50:69:08:22:8B:82 Authority key identifier: 73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC Certificate issuer: /CN=73cbc147eadd81548151f3510e2de09d868ac6cc Certificate serial: 019B6FFD6C51771657188D4B9878E89F5304 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft Manifest number: 17A2 Signing time: Tue 30 Dec 2025 16:00:37 +0000 Manifest this update: Tue 30 Dec 2025 16:00:37 +0000 Manifest next update: Wed 31 Dec 2025 16:00:37 +0000 Files and hashes: 1: YlBw5zZMyGmVSKcyUcis3LeoBu4.roa (hash: FNW2TVY99VnemA7lyfpV1rEplwNPKCZ+roIw6UfcWJE=) 2: c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl (hash: 5N2KvT2zrIHPi8kJ432ORnsvVcCR+/av9wddEDmdoQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 16:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:fd:6c:51:77:16:57:18:8d:4b:98:78:e8:9f:53:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73cbc147eadd81548151f3510e2de09d868ac6cc Validity Not Before: Dec 30 16:00:37 2025 GMT Not After : Dec 31 16:00:37 2025 GMT Subject: CN=e0024ebb7fb592af1899532543e5506908228b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c5:74:f9:f4:58:b9:41:b0:9e:2d:33:4e:1d: 27:0a:0f:19:97:8e:6f:4d:c6:d7:37:e1:32:13:23: 24:d8:b5:32:ca:20:6e:f4:39:20:cb:9b:d9:26:c7: c7:a1:64:bc:29:9d:12:0f:82:e5:ea:4d:eb:5c:9d: 85:b4:80:c5:79:9e:46:b5:7e:53:90:c2:8b:76:9b: 4b:37:e9:37:78:e6:d5:8c:30:99:b9:a9:b6:d0:c1: 04:8a:24:7c:15:0e:78:58:93:f6:40:95:f1:be:8a: 39:aa:95:e6:b6:83:9e:d3:01:56:a0:d4:dd:cf:24: 49:88:f8:c0:f7:ab:c0:1f:36:19:b6:90:d2:af:fb: c8:ee:fc:d1:bd:33:8f:67:98:07:9b:fc:37:85:48: 1b:ba:d1:0b:e7:87:41:d3:47:88:b4:14:82:56:2b: a2:01:83:f6:19:33:72:f6:37:5f:e2:9c:20:3b:f9: d2:46:59:df:03:e2:e8:95:1f:ab:e0:a4:60:9f:44: 0a:8c:70:33:8f:af:52:14:e1:09:90:3b:1c:bd:1d: bf:6b:6e:aa:96:f8:17:8a:03:a9:e1:d8:b5:ab:3a: ea:bb:1a:3c:9d:ce:07:98:d1:90:e0:d8:c9:1b:7f: b5:9c:de:31:6c:70:81:ed:93:35:e7:1d:24:85:54: 69:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:02:4E:BB:7F:B5:92:AF:18:99:53:25:43:E5:50:69:08:22:8B:82 X509v3 Authority Key Identifier: keyid:73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:cb:31:fc:12:8d:7b:f3:f6:55:66:15:d7:24:df:ee:25:3f: 1f:4e:84:12:18:c9:e1:28:be:34:1d:3c:32:9d:e9:0a:70:b8: dc:72:aa:09:d3:f4:cf:7f:25:b9:1d:ba:05:d0:a2:ea:c7:c4: c0:85:dc:78:a8:e2:77:b0:89:66:93:e6:62:ec:dc:65:30:30: 2e:12:14:a6:86:5a:d1:43:36:4e:c5:14:22:1b:ce:c5:6c:f7: 89:e5:f6:63:b7:1d:84:12:1f:80:4e:69:4f:dc:82:7a:53:86: 18:3c:a9:56:48:e6:b3:22:98:1b:7c:aa:f2:b8:47:4d:c8:13: 5f:86:26:cf:6c:4e:54:ac:01:b6:2c:68:cd:97:a9:a7:8f:83: 0d:21:40:fa:f0:85:f2:25:40:5a:16:6f:89:4b:de:f2:b2:58: 97:dd:0a:90:62:3f:10:c8:7e:ff:7e:25:85:68:77:66:aa:08: 79:e9:5b:f1:60:46:38:64:a3:a9:98:db:3a:ae:fd:0d:62:1f: b4:db:90:b6:ee:fc:85:bb:43:68:80:c6:a7:0c:32:02:5d:5b: b1:76:d9:dc:93:ca:2e:ce:42:4c:42:08:92:c6:68:76:64:59: 0a:17:d6:b0:b1:54:cc:b0:60:25:d1:fd:d8:de:0e:d0:73:37: 15:ed:60:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtv/WxRdxZXGI1LmHjon1MEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczY2JjMTQ3ZWFkZDgxNTQ4MTUxZjM1MTBlMmRlMDlkODY4 YWM2Y2MwHhcNMjUxMjMwMTYwMDM3WhcNMjUxMjMxMTYwMDM3WjAzMTEwLwYDVQQD EyhlMDAyNGViYjdmYjU5MmFmMTg5OTUzMjU0M2U1NTA2OTA4MjI4YjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8V0+fRYuUGwni0zTh0nCg8Zl45v TcbXN+EyEyMk2LUyyiBu9Dkgy5vZJsfHoWS8KZ0SD4Ll6k3rXJ2FtIDFeZ5GtX5T kMKLdptLN+k3eObVjDCZuam20MEEiiR8FQ54WJP2QJXxvoo5qpXmtoOe0wFWoNTd zyRJiPjA96vAHzYZtpDSr/vI7vzRvTOPZ5gHm/w3hUgbutEL54dB00eItBSCViui AYP2GTNy9jdf4pwgO/nSRlnfA+LolR+r4KRgn0QKjHAzj69SFOEJkDscvR2/a26q lvgXigOp4di1qzrquxo8nc4HmNGQ4NjJG3+1nN4xbHCB7ZM15x0khVRp0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOACTrt/tZKvGJlTJUPlUGkIIouCMB8GA1UdIwQY MBaAFHPLwUfq3YFUgVHzUQ4t4J2GisbMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzh2QlItcmRnVlNCVWZOUkRpM2duWWFLeHN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNjMwNGItNmM1OS00ZjVmLWI2NDYt NWYwZDkxZjRmOTA4LzEvYzh2QlItcmRnVlNCVWZOUkRpM2duWWFLeHN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hNjMwNGItNmM1OS00ZjVmLWI2NDYtNWYwZDkxZjRmOTA4 LzEvYzh2QlItcmRnVlNCVWZOUkRpM2duWWFLeHN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8sx/BKN e/P2VWYV1yTf7iU/H06EEhjJ4Si+NB08Mp3pCnC43HKqCdP0z38luR26BdCi6sfE wIXceKjid7CJZpPmYuzcZTAwLhIUpoZa0UM2TsUUIhvOxWz3ieX2Y7cdhBIfgE5p T9yCelOGGDypVkjmsyKYG3yq8rhHTcgTX4Ymz2xOVKwBtixozZepp4+DDSFA+vCF 8iVAWhZviUve8rJYl90KkGI/EMh+/34lhWh3ZqoIeelb8WBGOGSjqZjbOq79DWIf tNuQtu78hbtDaIDGpwwyAl1bsXbZ3JPKLs5CTEIIksZodmRZChfWsLFUzLBgJdH9 2N4O0HM3Fe1gQg== -----END CERTIFICATE-----Generated at Wed Dec 31 02:00:29 2025 by rpki-client