This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft File: 8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json) Hash identifier: 4LGi6HgAMV8u+BNTzA+RMBantxEakYhu+SJ4yjZncU4= Subject key identifier: 22:71:FD:D5:B7:C6:35:1C:01:43:7A:82:45:C1:B3:4D:E8:73:E8:A8 Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3 Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3 Certificate serial: 019B4438DF3B9CD8C02314AEEDC129195C46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft Manifest number: 0877 Signing time: Mon 22 Dec 2025 04:02:16 +0000 Manifest this update: Mon 22 Dec 2025 04:02:16 +0000 Manifest next update: Tue 23 Dec 2025 04:02:16 +0000 Files and hashes: 1: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: TDK+Ke6A5MVZOem3J5y5FMvy7u6etehzEep0HjnxH94=) 2: 9BXUrv8yMotCa9wi2rTgBBgI1OA.roa (hash: 4WrQuplF7eXybB0cG6ut10OAMsEsYkXu1xsES1nQaEs=) 3: FwjOhi182_59p8dwQga5XgkbJ0s.roa (hash: Mc8kDGGDUHY1tIZcCKRSsVLGZ6kIEWbGczkswWitHog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:df:3b:9c:d8:c0:23:14:ae:ed:c1:29:19:5c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3 Validity Not Before: Dec 22 04:02:16 2025 GMT Not After : Dec 23 04:02:16 2025 GMT Subject: CN=2271fdd5b7c6351c01437a8245c1b34de873e8a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:94:49:69:4f:0a:38:61:1c:75:89:82:99:40: 04:10:45:94:68:b5:77:c7:93:96:26:7c:5b:1f:7b: 60:b5:49:cb:41:1c:61:73:68:31:e0:05:38:a2:cd: d4:9c:62:e6:62:09:3a:cb:55:bb:50:70:2e:80:36: 14:75:65:bd:eb:7a:f3:76:db:48:22:e0:c2:ed:c0: b1:9d:72:48:d7:41:89:c4:08:39:83:e8:a3:3c:e4: 60:c0:37:58:4b:b5:e6:20:1b:35:76:30:78:3f:78: 4f:12:ec:9e:d9:fa:a9:8a:9f:af:99:a4:b8:03:d0: 57:77:21:ef:17:a9:93:1d:93:53:ba:39:4c:f1:08: e6:d5:85:29:51:90:d4:d8:45:0f:02:60:b8:c4:25: 99:d8:e4:58:ff:8c:46:39:5a:e3:d1:f3:68:c6:28: 19:94:7e:41:a0:3a:e6:2b:9f:5e:30:4e:f2:80:c9: 71:85:3f:09:7d:77:65:f1:4e:cf:3d:db:58:e5:a7: b6:32:8e:c1:12:f9:2d:15:5c:f7:f4:29:1c:e3:7a: 18:0a:69:44:43:d3:b7:c8:09:51:47:4c:09:f7:ec: 59:93:1e:d9:98:27:8a:55:ab:9a:0c:af:2c:ee:11: d0:ef:77:6e:8c:c8:31:27:88:f3:fb:3a:bb:ca:54: 87:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:71:FD:D5:B7:C6:35:1C:01:43:7A:82:45:C1:B3:4D:E8:73:E8:A8 X509v3 Authority Key Identifier: keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b9:23:89:92:62:a8:42:08:55:73:07:f1:d0:57:a8:ba:02: 26:03:c0:bb:59:98:a7:6c:3f:42:05:c2:38:3b:31:a8:2b:fa: dd:77:95:ce:5a:0a:7a:1a:ff:c5:8a:86:99:3e:9b:0d:99:39: 71:81:63:f5:54:8c:4b:0b:99:19:71:66:85:46:66:fa:c7:34: 31:6b:14:bb:14:0a:49:b1:02:33:40:a5:3b:bd:64:48:86:fc: 36:b9:53:03:68:8d:c9:99:45:e7:8d:86:0f:2e:2b:04:79:0f: eb:1d:44:34:b1:a6:af:00:f4:dc:fc:d4:37:ae:ff:ac:26:fc: 62:3b:ef:12:d8:45:c0:c2:71:5f:41:5f:8d:45:6e:79:1b:d3: 86:b8:b8:04:08:38:b7:89:01:17:07:24:13:ac:09:9f:3d:20: 30:f5:c6:e0:87:c9:b2:ee:2b:57:8c:c4:84:f5:d9:ee:31:cb: 9d:bc:f8:e3:c1:1f:a6:5d:3a:73:8a:8c:0c:3f:9c:20:7b:de: c9:c4:c0:22:72:db:cc:80:cc:ec:93:c6:af:b9:01:6c:ed:9a: e8:76:ad:07:2e:23:19:ac:68:54:9a:6e:0f:57:d0:3b:27:82: 19:2d:07:70:91:c3:07:c0:20:ce:a6:22:f4:4c:f5:83:93:b4: 3f:3b:e2:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEON87nNjAIxSu7cEpGVxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZDljYmJlZmRlNjEyZTYxZTBjZDBmZjBiODcxOTYxY2Jm Nzk3ZTMwHhcNMjUxMjIyMDQwMjE2WhcNMjUxMjIzMDQwMjE2WjAzMTEwLwYDVQQD EygyMjcxZmRkNWI3YzYzNTFjMDE0MzdhODI0NWMxYjM0ZGU4NzNlOGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJRJaU8KOGEcdYmCmUAEEEWUaLV3 x5OWJnxbH3tgtUnLQRxhc2gx4AU4os3UnGLmYgk6y1W7UHAugDYUdWW963rzdttI IuDC7cCxnXJI10GJxAg5g+ijPORgwDdYS7XmIBs1djB4P3hPEuye2fqpip+vmaS4 A9BXdyHvF6mTHZNTujlM8Qjm1YUpUZDU2EUPAmC4xCWZ2ORY/4xGOVrj0fNoxigZ lH5BoDrmK59eME7ygMlxhT8JfXdl8U7PPdtY5ae2Mo7BEvktFVz39Ckc43oYCmlE Q9O3yAlRR0wJ9+xZkx7ZmCeKVauaDK8s7hHQ73dujMgxJ4jz+zq7ylSHFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJx/dW3xjUcAUN6gkXBs03oc+ioMB8GA1UdIwQY MBaAFPDZy7795hLmHgzQ/wuHGWHL95fjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE5uTHZ2M21FdVllRE5EX0M0Y1pZY3YzbC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80OTk2OWUtNTQ2Yy00M2U1LThkYmQt ZjkyOTE1YTk2OGJjLzEvOE5uTHZ2M21FdVllRE5EX0M0Y1pZY3YzbC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC80OTk2OWUtNTQ2Yy00M2U1LThkYmQtZjkyOTE1YTk2OGJj LzEvOE5uTHZ2M21FdVllRE5EX0M0Y1pZY3YzbC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrkjiZJi qEIIVXMH8dBXqLoCJgPAu1mYp2w/QgXCODsxqCv63XeVzloKehr/xYqGmT6bDZk5 cYFj9VSMSwuZGXFmhUZm+sc0MWsUuxQKSbECM0ClO71kSIb8NrlTA2iNyZlF542G Dy4rBHkP6x1ENLGmrwD03PzUN67/rCb8YjvvEthFwMJxX0FfjUVueRvThri4BAg4 t4kBFwckE6wJnz0gMPXG4IfJsu4rV4zEhPXZ7jHLnbz448Efpl06c4qMDD+cIHve ycTAInLbzIDM7JPGr7kBbO2a6HatBy4jGaxoVJpuD1fQOyeCGS0HcJHDB8AgzqYi 9Ez1g5O0Pzvirg== -----END CERTIFICATE-----Generated at Mon Dec 22 10:04:33 2025 by rpki-client