This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft File: 8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json) Hash identifier: enL2FNTzSgFgCcMdQ9RydmA7VgPb3MX9X8xhlLtPJp0= Subject key identifier: B8:C9:AA:78:EC:BE:E4:66:9E:92:C4:B9:BF:A5:CE:16:8A:F7:FD:1C Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b Certificate serial: 019B5D52547F7A22BF7272F8612626FA39B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft Manifest number: 172A Signing time: Sat 27 Dec 2025 01:00:35 +0000 Manifest this update: Sat 27 Dec 2025 01:00:35 +0000 Manifest next update: Sun 28 Dec 2025 01:00:35 +0000 Files and hashes: 1: 1-wkMXSOgCsAbfcTJoQ9M_9mEa8U.roa (hash: ChEU1antJRBwFOEOOm1ILlDCVAljbS+GMt59ceUbKBY=) 2: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: AmYfMAOb66vrRoUozWu+llJltS7Hd6EoAGnrX4JjJsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:52:54:7f:7a:22:bf:72:72:f8:61:26:26:fa:39:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b Validity Not Before: Dec 27 01:00:35 2025 GMT Not After : Dec 28 01:00:35 2025 GMT Subject: CN=b8c9aa78ecbee4669e92c4b9bfa5ce168af7fd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:28:e3:d0:77:3a:ea:96:83:a8:4e:34:4f:d6: 17:59:f5:94:c6:a6:66:91:a5:42:95:00:9b:20:24: 48:2c:fe:c1:1f:09:b2:24:1f:5e:3c:a8:32:d1:42: 22:e3:0f:8e:0d:1e:e9:fd:f3:f4:d1:db:c8:db:0c: e9:b9:67:c0:bf:ed:d0:44:a5:4b:1a:26:19:d1:67: 2a:b3:a7:e3:81:7f:73:a4:12:77:ed:bf:53:7c:6a: 42:09:d2:d9:9b:5a:b6:35:4d:b3:3b:97:47:ce:9b: 93:15:c2:63:ec:b7:f6:9f:11:42:d9:56:97:6c:8a: 95:f3:39:9f:7e:de:30:d3:79:32:63:44:ba:eb:5d: 7f:04:81:5d:d8:25:03:0d:96:99:8f:a7:54:95:fd: a1:06:7d:47:df:3f:96:fa:2f:a5:82:a4:c4:d5:2a: 95:ee:6c:65:c8:61:27:ad:9d:4e:62:05:72:10:51: 2c:b4:42:3e:9a:2f:34:1b:43:ad:a8:60:b6:22:00: 8f:bf:8c:fa:c7:08:1c:dc:7c:15:ce:78:fe:8e:ec: c0:6b:22:60:f0:e1:e1:f0:5e:00:05:fd:1a:ba:95: a3:f5:93:41:f6:2c:5c:09:e0:ee:93:88:0d:09:73: cd:ee:11:2f:63:7c:76:71:74:6a:00:2f:ae:ec:46: ae:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C9:AA:78:EC:BE:E4:66:9E:92:C4:B9:BF:A5:CE:16:8A:F7:FD:1C X509v3 Authority Key Identifier: keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:45:1e:ae:30:62:cb:6b:7c:60:09:be:9b:42:a7:82:9a:34: 62:01:db:71:fe:2d:79:44:7d:fb:f2:a9:84:48:b0:8d:2e:a2: b1:5c:bb:83:7e:3d:f7:13:4c:74:6f:7b:be:9b:e1:a2:a7:be: 65:91:2e:20:94:35:35:01:3f:b9:b0:9c:7d:80:91:d3:dd:34: 53:11:2e:f7:c1:07:14:2c:83:e3:c4:ab:75:89:cf:71:2c:99: 5c:65:99:3e:6d:09:6c:55:3a:40:63:49:a1:57:3f:0d:4a:3b: 06:0c:8c:c7:12:37:18:c4:46:4c:89:65:1f:5e:37:d7:d6:a2: 4a:99:b6:38:21:3c:71:81:3b:6e:b8:73:c4:43:27:96:51:73: 27:b2:0e:4d:05:d3:00:de:fe:ff:8d:6a:57:b6:fe:63:e5:8b: 0d:cf:d7:ec:60:df:64:ba:56:9a:7c:f5:46:3c:40:03:37:77: 58:ef:e4:9b:bf:85:42:b8:de:94:cc:c2:1a:40:e1:22:8f:99: ce:0a:cb:32:75:24:84:f3:31:31:10:3d:53:68:bc:a3:cb:a1: 8e:31:b6:a3:30:01:46:45:d5:02:cc:ad:10:c4:44:91:43:5c: 60:c9:5b:73:84:b6:69:95:e6:37:81:fd:8d:a3:0a:0d:8f:7a: 52:79:9f:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdUlR/eiK/cnL4YSYm+jm5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMzI1OGFhNmI4M2VjOWZiN2JlOTY2YzYyNmE5MTY2Nzgx YzdmM2IwHhcNMjUxMjI3MDEwMDM1WhcNMjUxMjI4MDEwMDM1WjAzMTEwLwYDVQQD EyhiOGM5YWE3OGVjYmVlNDY2OWU5MmM0YjliZmE1Y2UxNjhhZjdmZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCjj0Hc66paDqE40T9YXWfWUxqZm kaVClQCbICRILP7BHwmyJB9ePKgy0UIi4w+ODR7p/fP00dvI2wzpuWfAv+3QRKVL GiYZ0Wcqs6fjgX9zpBJ37b9TfGpCCdLZm1q2NU2zO5dHzpuTFcJj7Lf2nxFC2VaX bIqV8zmfft4w03kyY0S6611/BIFd2CUDDZaZj6dUlf2hBn1H3z+W+i+lgqTE1SqV 7mxlyGEnrZ1OYgVyEFEstEI+mi80G0OtqGC2IgCPv4z6xwgc3HwVznj+juzAayJg 8OHh8F4ABf0aupWj9ZNB9ixcCeDuk4gNCXPN7hEvY3x2cXRqAC+u7EauxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjJqnjsvuRmnpLEub+lzhaK9/0cMB8GA1UdIwQY MBaAFPIyWKprg+yft76WbGJqkWZ4HH87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGpKWXFtdUQ3Si0zdnBac1ltcVJabmdjZnpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80OGMzYTgtYjk1NC00MWM5LWJkMjMt NzEyZmNmYTQ0MWU0LzEvOGpKWXFtdUQ3Si0zdnBac1ltcVJabmdjZnpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC80OGMzYTgtYjk1NC00MWM5LWJkMjMtNzEyZmNmYTQ0MWU0 LzEvOGpKWXFtdUQ3Si0zdnBac1ltcVJabmdjZnpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0UerjBi y2t8YAm+m0Kngpo0YgHbcf4teUR9+/KphEiwjS6isVy7g3499xNMdG97vpvhoqe+ ZZEuIJQ1NQE/ubCcfYCR0900UxEu98EHFCyD48SrdYnPcSyZXGWZPm0JbFU6QGNJ oVc/DUo7BgyMxxI3GMRGTIllH14319aiSpm2OCE8cYE7brhzxEMnllFzJ7IOTQXT AN7+/41qV7b+Y+WLDc/X7GDfZLpWmnz1RjxAAzd3WO/km7+FQrjelMzCGkDhIo+Z zgrLMnUkhPMxMRA9U2i8o8uhjjG2ozABRkXVAsytEMREkUNcYMlbc4S2aZXmN4H9 jaMKDY96UnmfKA== -----END CERTIFICATE-----Generated at Sat Dec 27 07:26:23 2025 by rpki-client