This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft File: 12b8bxuOK2BPf7c8Kf1daJoOqB0.mft (raw, json) Hash identifier: wgHm0mdvS5MtleJ+RldfXD06MCJpUn7g4Z3yeun3Qjs= Subject key identifier: CF:BC:39:16:FE:BE:FC:70:17:E2:7A:65:10:78:EB:CB:1B:B8:BB:FE Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d Certificate serial: 019B717DA340B0FD59690F50D293CB6F9907 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft Manifest number: 17B2 Signing time: Tue 30 Dec 2025 23:00:17 +0000 Manifest this update: Tue 30 Dec 2025 23:00:17 +0000 Manifest next update: Wed 31 Dec 2025 23:00:17 +0000 Files and hashes: 1: 12b8bxuOK2BPf7c8Kf1daJoOqB0.crl (hash: HJQ+5G5nfvmnSlUHbMG4MTeUOaGBBhOUgte7En25c7g=) 2: qGuTXxX3KPPGE7gornZUmtCgXus.roa (hash: hoxbUVU+eahUxnAmZd8qLyauIUnjncf8aJqcwbWkeXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7d:a3:40:b0:fd:59:69:0f:50:d2:93:cb:6f:99:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d Validity Not Before: Dec 30 23:00:17 2025 GMT Not After : Dec 31 23:00:17 2025 GMT Subject: CN=cfbc3916febefc7017e27a651078ebcb1bb8bbfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:35:5a:03:20:7e:71:db:e2:c3:dc:fe:6f:00: 40:d5:c0:21:3a:0b:e4:ae:47:8f:bd:a3:24:f7:bd: a3:11:db:0d:9d:2e:98:8a:58:4f:59:1e:a7:6f:f8: 65:2c:9c:20:34:f7:32:40:e9:0e:29:16:5c:2b:fb: 82:4e:34:6c:42:17:7c:a0:8e:f9:1a:cb:6a:21:2b: 53:33:d0:eb:c1:d0:73:ef:21:c0:c8:95:e5:79:a7: 45:a0:94:ec:78:36:5d:03:f7:a0:e8:8b:42:fe:d2: d6:ab:16:5a:8a:c3:1b:e2:93:65:33:e8:23:23:58: 93:1d:bc:ca:ed:fc:7f:1d:28:53:2f:17:f9:64:cc: 46:84:69:3d:26:79:24:52:e2:95:73:0e:47:c6:37: 27:1d:0f:6f:7c:40:e6:42:4e:ba:7c:07:d4:d7:44: ce:02:a5:01:ef:1f:0f:88:4e:45:76:87:24:c0:2e: 02:2f:71:5a:3c:95:86:c8:21:87:a3:15:e4:36:44: 79:35:49:d3:b4:39:83:13:ae:41:34:78:e2:80:1e: fa:74:4d:6f:58:60:48:52:b6:cf:28:b2:c1:94:8f: 70:3c:f9:d4:83:2b:c4:32:35:9f:f3:54:1e:1f:47: 42:12:65:1f:cd:28:51:43:da:88:e4:98:30:35:9a: 04:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BC:39:16:FE:BE:FC:70:17:E2:7A:65:10:78:EB:CB:1B:B8:BB:FE X509v3 Authority Key Identifier: keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:69:23:4b:25:c9:3d:dc:ea:eb:51:38:0e:12:12:3f:9d:a2: 39:c8:56:5f:ca:6f:5d:1f:f7:86:06:65:b7:da:7b:01:91:39: 51:f3:bb:27:ac:c9:f1:32:07:0f:f5:aa:8b:8d:2b:35:86:71: e5:cc:e4:43:35:66:5b:5b:74:3b:7b:28:03:bf:89:d7:c5:1d: 75:16:ff:7f:88:40:a2:6b:58:1b:4e:1b:c2:bb:bb:90:22:4c: b6:92:db:16:71:54:93:8f:a1:29:be:a8:40:5f:27:e0:e1:0c: 7c:d1:69:d0:ba:f8:bb:f1:99:87:8d:cb:b6:24:ef:05:da:20: d2:b9:d7:7b:a8:f8:ba:6e:fd:c3:68:7f:63:0b:7f:d2:e3:28: 24:aa:b7:8a:c2:15:15:85:16:f5:93:fd:18:25:0e:c5:28:08: 71:c2:9e:0e:5f:53:74:67:55:f9:29:2a:48:83:46:bd:7a:2d: d6:c3:66:3a:5c:c4:f3:05:33:4f:ec:02:ff:2e:e5:3d:94:52: 53:5b:e8:07:4b:35:e4:97:d5:ae:3d:ad:27:cd:67:8f:63:96: e4:98:9a:ec:83:46:e6:91:86:e7:bf:69:b8:73:f2:ad:4a:34: 04:5f:cf:dc:2a:0e:2b:8d:63:7f:5c:15:ad:e0:9d:e6:79:b7: 13:0d:8a:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfaNAsP1ZaQ9Q0pPLb5kHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NjZmYzZmMWI4ZTJiNjA0ZjdmYjczYzI5ZmQ1ZDY4OWEw ZWE4MWQwHhcNMjUxMjMwMjMwMDE3WhcNMjUxMjMxMjMwMDE3WjAzMTEwLwYDVQQD EyhjZmJjMzkxNmZlYmVmYzcwMTdlMjdhNjUxMDc4ZWJjYjFiYjhiYmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDVaAyB+cdviw9z+bwBA1cAhOgvk rkePvaMk972jEdsNnS6YilhPWR6nb/hlLJwgNPcyQOkOKRZcK/uCTjRsQhd8oI75 GstqIStTM9DrwdBz7yHAyJXleadFoJTseDZdA/eg6ItC/tLWqxZaisMb4pNlM+gj I1iTHbzK7fx/HShTLxf5ZMxGhGk9JnkkUuKVcw5HxjcnHQ9vfEDmQk66fAfU10TO AqUB7x8PiE5FdockwC4CL3FaPJWGyCGHoxXkNkR5NUnTtDmDE65BNHjigB76dE1v WGBIUrbPKLLBlI9wPPnUgyvEMjWf81QeH0dCEmUfzShRQ9qI5JgwNZoEhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+8ORb+vvxwF+J6ZRB468sbuLv+MB8GA1UdIwQY MBaAFNdm/G8bjitgT3+3PCn9XWiaDqgdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMzgyOWEtOTUyNy00NDRiLWJkNzIt M2VmM2ZkOTY5OTU3LzEvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9mMzgyOWEtOTUyNy00NDRiLWJkNzItM2VmM2ZkOTY5OTU3 LzEvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGkjSyXJ Pdzq61E4DhISP52iOchWX8pvXR/3hgZlt9p7AZE5UfO7J6zJ8TIHD/Wqi40rNYZx 5czkQzVmW1t0O3soA7+J18UddRb/f4hAomtYG04bwru7kCJMtpLbFnFUk4+hKb6o QF8n4OEMfNFp0Lr4u/GZh43LtiTvBdog0rnXe6j4um79w2h/Ywt/0uMoJKq3isIV FYUW9ZP9GCUOxSgIccKeDl9TdGdV+SkqSINGvXot1sNmOlzE8wUzT+wC/y7lPZRS U1voB0s15JfVrj2tJ81nj2OW5Jia7ING5pGG579puHPyrUo0BF/P3CoOK41jf1wV reCd5nm3Ew2K3Q== -----END CERTIFICATE-----Generated at Wed Dec 31 08:55:13 2025 by rpki-client