This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft File: 8RqaRFV9Rv8tgIiiKIha_wANwqI.mft (raw, json) Hash identifier: ICAYHpmeechPXElquy/xXvs3Sf3GEm+J1FQ2P37tJg0= Subject key identifier: 2E:9A:C1:D3:CE:BE:CD:6D:F9:26:4E:A2:E1:A2:D9:7C:F6:37:D2:5E Authority key identifier: F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2 Certificate issuer: /CN=f11a9a44557d46ff2d8088a228885aff000dc2a2 Certificate serial: 019B3CEBE21BDD00CEDBCF6E0DAB9852DE76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft Manifest number: 0BD4 Signing time: Sat 20 Dec 2025 18:00:50 +0000 Manifest this update: Sat 20 Dec 2025 18:00:50 +0000 Manifest next update: Sun 21 Dec 2025 18:00:50 +0000 Files and hashes: 1: 8RqaRFV9Rv8tgIiiKIha_wANwqI.crl (hash: C/pVLcrs65K2aUl3ovpPpRlYP4MBPE7btPravLn5oVI=) 2: TqtHjEwEgPXdT8pg7HJGWpoB6aI.roa (hash: JiojTj7/u167MnISfmEDzN29ADgR4Ig1J4bZKyBHw7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:e2:1b:dd:00:ce:db:cf:6e:0d:ab:98:52:de:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f11a9a44557d46ff2d8088a228885aff000dc2a2 Validity Not Before: Dec 20 18:00:50 2025 GMT Not After : Dec 21 18:00:50 2025 GMT Subject: CN=2e9ac1d3cebecd6df9264ea2e1a2d97cf637d25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:53:35:a1:e3:89:c7:0e:87:e7:f3:5c:7b:b7: 9c:3e:9a:8c:76:78:4c:10:e4:0d:13:64:67:ac:e0: bf:80:7c:1d:6c:a2:5d:af:ce:27:33:00:44:e1:11: fd:6c:25:c4:01:bf:8f:d2:8f:95:c4:33:88:b4:fd: ab:b7:68:21:8e:45:30:46:93:e5:b6:c4:d0:e5:c4: 39:ff:e8:45:52:e6:80:d3:32:f4:98:5b:4c:d0:fc: a7:45:9a:e7:68:72:b8:02:29:4b:ec:d1:91:97:43: 65:20:d2:5b:3d:71:0e:80:14:fa:75:cd:2d:dc:c4: e5:c0:44:e9:62:72:b3:7e:f7:44:61:9c:a7:b2:97: c1:06:2e:5a:51:d4:17:90:8a:ce:ab:2c:4b:ea:00: 6b:d3:c0:db:f3:a7:d1:30:32:88:ed:cf:bd:32:6f: d5:ca:d2:5e:57:69:5d:65:87:d8:7a:6d:05:4f:45: 5e:85:cd:90:08:60:cd:49:92:04:a6:d3:e4:68:72: a8:80:96:61:8f:a6:e9:72:af:66:55:f1:da:d4:84: b0:8c:ba:af:54:95:63:ec:d7:a9:29:26:04:d8:a4: f1:b4:f7:1c:b5:a0:06:5f:c9:9f:8f:d4:c1:34:b9: 66:f0:52:20:07:45:f6:50:01:6d:a6:54:7d:00:62: 6d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9A:C1:D3:CE:BE:CD:6D:F9:26:4E:A2:E1:A2:D9:7C:F6:37:D2:5E X509v3 Authority Key Identifier: keyid:F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f5:1f:0b:ce:6e:03:7c:e0:9b:a2:8d:32:67:e1:95:c9:ae: 9e:79:46:1a:c7:27:e9:1d:1d:77:d0:d1:ad:51:32:3c:cc:3b: e8:45:ad:1a:93:b1:e3:71:ef:83:d3:bf:c0:b9:43:ad:fd:f6: 4f:1f:59:23:83:1c:e1:7e:6c:75:2f:0e:57:71:7d:3e:c5:8c: 8a:1c:64:c6:26:06:5a:5d:6a:a7:75:9a:3e:a5:7f:cc:37:b5: e9:c9:9d:7f:37:0b:02:80:a8:13:b1:09:3c:7d:23:b5:eb:78: da:a5:4c:03:8a:80:09:04:25:5b:2c:f0:ad:a9:35:18:94:9a: 8d:13:97:3d:17:12:ee:b5:84:0c:6f:dd:c2:d4:cf:52:5b:52: e4:91:68:c3:a6:2d:5b:41:cb:7b:c5:ea:f4:05:19:3c:24:a2: a9:f5:71:d5:c7:13:aa:07:58:06:8a:a7:c1:be:08:d2:50:27: 7e:23:33:06:f9:d3:7c:fb:24:4a:f6:77:4c:7a:65:36:ca:b5: fa:5d:3f:9b:e4:b1:ee:dc:6d:c7:4d:2d:58:67:ce:f3:ae:a8: 49:25:31:9d:5b:d6:04:f3:46:79:75:fd:ea:33:76:25:d1:24: 45:17:52:b4:35:ed:9c:a6:15:4e:2c:bd:6c:a0:01:94:56:ff: 34:d4:81:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86+Ib3QDO289uDauYUt52MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMWE5YTQ0NTU3ZDQ2ZmYyZDgwODhhMjI4ODg1YWZmMDAw ZGMyYTIwHhcNMjUxMjIwMTgwMDUwWhcNMjUxMjIxMTgwMDUwWjAzMTEwLwYDVQQD EygyZTlhYzFkM2NlYmVjZDZkZjkyNjRlYTJlMWEyZDk3Y2Y2MzdkMjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41M1oeOJxw6H5/Nce7ecPpqMdnhM EOQNE2RnrOC/gHwdbKJdr84nMwBE4RH9bCXEAb+P0o+VxDOItP2rt2ghjkUwRpPl tsTQ5cQ5/+hFUuaA0zL0mFtM0PynRZrnaHK4AilL7NGRl0NlINJbPXEOgBT6dc0t 3MTlwETpYnKzfvdEYZynspfBBi5aUdQXkIrOqyxL6gBr08Db86fRMDKI7c+9Mm/V ytJeV2ldZYfYem0FT0Vehc2QCGDNSZIEptPkaHKogJZhj6bpcq9mVfHa1ISwjLqv VJVj7NepKSYE2KTxtPcctaAGX8mfj9TBNLlm8FIgB0X2UAFtplR9AGJtHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6awdPOvs1t+SZOouGi2Xz2N9JeMB8GA1UdIwQY MBaAFPEamkRVfUb/LYCIoiiIWv8ADcKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFJxYVJGVjlSdjh0Z0lpaUtJaGFfd0FOd3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8wN2U0YjItNmIzOC00YmMwLWE2ODAt YTYwYmM3ZDA3ODc4LzEvOFJxYVJGVjlSdjh0Z0lpaUtJaGFfd0FOd3FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8wN2U0YjItNmIzOC00YmMwLWE2ODAtYTYwYmM3ZDA3ODc4 LzEvOFJxYVJGVjlSdjh0Z0lpaUtJaGFfd0FOd3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApfUfC85u A3zgm6KNMmfhlcmunnlGGscn6R0dd9DRrVEyPMw76EWtGpOx43Hvg9O/wLlDrf32 Tx9ZI4Mc4X5sdS8OV3F9PsWMihxkxiYGWl1qp3WaPqV/zDe16cmdfzcLAoCoE7EJ PH0jtet42qVMA4qACQQlWyzwrak1GJSajROXPRcS7rWEDG/dwtTPUltS5JFow6Yt W0HLe8Xq9AUZPCSiqfVx1ccTqgdYBoqnwb4I0lAnfiMzBvnTfPskSvZ3THplNsq1 +l0/m+Sx7txtx00tWGfO866oSSUxnVvWBPNGeXX96jN2JdEkRRdStDXtnKYVTiy9 bKABlFb/NNSB+g== -----END CERTIFICATE-----Generated at Sat Dec 20 21:27:18 2025 by rpki-client