This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft File: 8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json) Hash identifier: j0oQTralib0Us8CEgpUT70duvEuZP+DP2qHmZN6VXN4= Subject key identifier: FC:1A:E1:41:D8:D9:2B:06:26:D4:80:8E:44:CD:60:68:9C:D9:FE:E4 Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89 Certificate issuer: /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89 Certificate serial: 019B5305E3BAB0EF74BD39B4FD6187F837A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft Manifest number: 1793 Signing time: Thu 25 Dec 2025 01:00:53 +0000 Manifest this update: Thu 25 Dec 2025 01:00:53 +0000 Manifest next update: Fri 26 Dec 2025 01:00:53 +0000 Files and hashes: 1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: 9EomTSl2WhIsKYhwyVs454MLh13+2PM34vOakZga35c=) 2: jfUqkf_BnbSeyvKiFitEY3b5cmY.roa (hash: MkQ1kYsqlZvezBQ/uBC4v1whC4HDYOAxUmlDZ4BgXWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:05:e3:ba:b0:ef:74:bd:39:b4:fd:61:87:f8:37:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89 Validity Not Before: Dec 25 01:00:53 2025 GMT Not After : Dec 26 01:00:53 2025 GMT Subject: CN=fc1ae141d8d92b0626d4808e44cd60689cd9fee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:03:e4:43:aa:39:f9:bd:33:23:73:3f:fa:e6: b1:01:20:f4:aa:32:52:fc:1e:23:04:f3:8b:5b:12: 6d:83:26:4f:ea:be:12:9e:92:a1:61:ce:85:3d:48: 8e:4c:54:63:3d:cc:e7:9c:55:a0:f8:99:c1:1b:ad: 3b:f2:2c:9a:19:fb:c7:37:e0:87:19:95:8f:2d:ab: fe:84:55:8b:7a:79:75:a9:8f:de:78:b4:8b:ae:93: 20:18:08:e9:0c:a4:f0:49:d4:c0:10:9c:bc:f2:f1: 1f:18:4d:4c:f1:14:ed:2d:b0:85:49:41:9c:3b:84: ee:b2:d7:66:1a:1d:f7:01:ca:f3:7c:ee:53:c6:5d: ec:60:72:8f:fa:da:9e:2f:6b:6f:5e:a7:d5:d4:a2: a9:0b:88:a2:3a:c2:b0:4e:7c:8a:bb:23:40:db:e7: 13:fb:05:db:21:b4:d2:db:3f:cc:bb:4d:26:9d:87: 75:85:3c:2e:4c:15:f5:1f:27:e8:58:6b:48:92:3a: e4:17:23:3e:6d:95:19:f5:ed:0e:85:12:2f:92:57: 8a:17:32:61:2c:91:a8:87:21:ba:6e:d1:ce:20:d3: 6f:0b:cb:a6:2f:6c:9d:df:56:32:52:57:f1:30:0d: 14:b1:12:aa:6d:44:53:85:e6:eb:96:74:61:c2:0c: 8e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1A:E1:41:D8:D9:2B:06:26:D4:80:8E:44:CD:60:68:9C:D9:FE:E4 X509v3 Authority Key Identifier: keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:04:29:69:99:c1:74:97:3c:4e:f4:e2:21:5e:5a:b4:df:6b: 34:01:53:c6:c4:63:14:a9:8d:fe:47:90:64:cd:85:37:87:c9: dd:c4:2b:b2:9c:25:5c:b2:ec:a5:40:5a:ad:31:ca:0b:ed:2a: fd:4d:32:e1:dd:27:e9:ac:02:8a:f0:2a:e9:e2:14:60:ae:a4: 95:dd:18:7f:ce:3d:89:9e:04:07:37:50:2c:6f:de:3f:08:77: 7c:bd:6b:85:86:5c:3f:12:5f:d4:4e:28:71:0c:74:f6:42:4c: f7:98:14:a0:b2:cb:f8:d0:01:6d:96:2b:80:a7:94:8a:95:92: 89:88:3f:45:95:5a:08:09:72:d4:ba:21:b4:ee:cf:19:ae:52: 29:c5:38:44:97:d1:a9:3d:41:0d:7f:94:97:3a:7a:9c:16:f1: b7:53:8a:20:e2:6e:38:50:73:b2:36:cb:81:91:16:9e:57:7b: 0d:a9:a0:8d:38:b8:de:4a:27:eb:50:01:01:0d:ff:e2:f9:d6: 49:bc:69:4d:d6:7a:36:d1:bf:1d:c6:25:31:35:11:25:ac:5f: 32:49:10:55:16:f9:9e:c3:9e:66:d8:13:8d:aa:6c:b7:0f:8a: cf:ad:7a:dd:5d:ce:b9:ea:fc:c1:6c:70:f7:55:b8:a5:e9:1a: b0:f2:bb:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBeO6sO90vTm0/WGH+DekMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNzlhM2U4NTRmMDEwMTVlOWQwZTAzZTg5ZDgwNzBjYzll YmNmODkwHhcNMjUxMjI1MDEwMDUzWhcNMjUxMjI2MDEwMDUzWjAzMTEwLwYDVQQD EyhmYzFhZTE0MWQ4ZDkyYjA2MjZkNDgwOGU0NGNkNjA2ODljZDlmZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAPkQ6o5+b0zI3M/+uaxASD0qjJS /B4jBPOLWxJtgyZP6r4SnpKhYc6FPUiOTFRjPcznnFWg+JnBG6078iyaGfvHN+CH GZWPLav+hFWLenl1qY/eeLSLrpMgGAjpDKTwSdTAEJy88vEfGE1M8RTtLbCFSUGc O4TustdmGh33AcrzfO5Txl3sYHKP+tqeL2tvXqfV1KKpC4iiOsKwTnyKuyNA2+cT +wXbIbTS2z/Mu00mnYd1hTwuTBX1HyfoWGtIkjrkFyM+bZUZ9e0OhRIvkleKFzJh LJGohyG6btHOINNvC8umL2yd31YyUlfxMA0UsRKqbURThebrlnRhwgyO2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwa4UHY2SsGJtSAjkTNYGic2f7kMB8GA1UdIwQY MBaAFPJ5o+hU8BAV6dDgPonYBwzJ68+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG5tajZGVHdFQlhwME9BLWlkZ0hETW5yejRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84MzhkYjItMGM4OC00ZmY0LWI5YmMt OGJhZTdlOWZkNzVjLzEvOG5tajZGVHdFQlhwME9BLWlkZ0hETW5yejRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC84MzhkYjItMGM4OC00ZmY0LWI5YmMtOGJhZTdlOWZkNzVj LzEvOG5tajZGVHdFQlhwME9BLWlkZ0hETW5yejRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwQpaZnB dJc8TvTiIV5atN9rNAFTxsRjFKmN/keQZM2FN4fJ3cQrspwlXLLspUBarTHKC+0q /U0y4d0n6awCivAq6eIUYK6kld0Yf849iZ4EBzdQLG/ePwh3fL1rhYZcPxJf1E4o cQx09kJM95gUoLLL+NABbZYrgKeUipWSiYg/RZVaCAly1LohtO7PGa5SKcU4RJfR qT1BDX+Ulzp6nBbxt1OKIOJuOFBzsjbLgZEWnld7DamgjTi43kon61ABAQ3/4vnW SbxpTdZ6NtG/HcYlMTURJaxfMkkQVRb5nsOeZtgTjapstw+Kz6163V3Ouer8wWxw 91W4pekasPK7oQ== -----END CERTIFICATE-----Generated at Thu Dec 25 03:30:42 2025 by rpki-client