This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json) Hash identifier: C+VwcZZ83hWXiwFhCoaP47+0pQ84KQJ6iPRsLaUNbaY= Subject key identifier: D3:5B:8B:68:96:54:01:04:0E:E3:DD:40:7E:45:8B:DC:65:D7:0F:90 Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd Certificate serial: 019B3E6DE38F20FCDD237AF79228F50DCE2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft Manifest number: 0E30 Signing time: Sun 21 Dec 2025 01:02:27 +0000 Manifest this update: Sun 21 Dec 2025 01:02:27 +0000 Manifest next update: Mon 22 Dec 2025 01:02:27 +0000 Files and hashes: 1: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: Wfha4wXrfO90mizeLKCrgEuwI5OsxKQZqcLL3HYT/rY=) 2: f8mNy-1avonS_WiVxLnjQLPSSV8.roa (hash: Zx+TLSuG3LLevKeGkpvoHFC+rwTqCzGzO/bzI3CHmxw=) 3: s6pjMkaUMJH3bmFXp69HLkN6HiA.roa (hash: nbZzfTGEGLYlrEJQFB74A8uRuG/tPptj9lY9KUc17PU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:e3:8f:20:fc:dd:23:7a:f7:92:28:f5:0d:ce:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd Validity Not Before: Dec 21 01:02:27 2025 GMT Not After : Dec 22 01:02:27 2025 GMT Subject: CN=d35b8b68965401040ee3dd407e458bdc65d70f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:d9:72:3b:2d:cb:89:73:39:50:5b:1b:ba: 81:38:a9:44:0b:e5:f3:5d:ef:65:3b:b5:76:83:84: 94:52:e7:3e:11:65:b3:11:af:ce:42:44:f8:9d:1b: 0e:e7:e7:6e:11:0d:b8:f3:dc:0a:8c:8b:d4:66:09: 63:2c:88:b0:a6:74:de:ee:47:e8:c2:63:9a:f4:5a: 4f:9c:7b:51:53:5b:c0:81:60:80:e6:33:80:56:df: cb:52:4c:30:87:cc:d5:be:21:c1:4d:f3:7f:5a:0c: a3:b1:d4:75:fb:4c:97:29:57:92:bc:eb:42:1e:08: e2:3d:5c:a4:6c:17:88:50:77:28:fd:df:02:7e:69: f0:f9:5a:3e:db:5a:78:0d:f5:17:3b:1b:d6:01:9a: 6a:e1:96:1a:2e:5a:17:3d:07:55:53:93:2b:7a:98: 1e:4b:85:54:66:04:9c:e3:1f:74:ca:1b:db:98:a7: c2:4e:f5:5c:de:ae:60:b0:d8:22:86:6c:01:a4:aa: 0e:97:d0:2c:68:51:d2:69:fe:bc:1b:89:6c:f6:cc: e0:98:c2:5d:7e:c0:ca:40:bf:68:23:75:af:98:26: cc:27:db:02:c8:c6:d8:f9:40:d9:16:00:36:63:cf: 91:ea:88:42:c2:f1:f8:56:14:e1:09:a6:93:fb:0b: b4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5B:8B:68:96:54:01:04:0E:E3:DD:40:7E:45:8B:DC:65:D7:0F:90 X509v3 Authority Key Identifier: keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:43:61:08:45:04:10:0d:20:1d:cb:09:43:c5:30:a4:59:5e: 5d:93:ab:90:3d:3d:85:61:7b:9d:47:67:78:96:87:a9:36:06: ba:cc:85:a6:99:36:75:7e:4d:5b:91:3a:a1:55:1c:7d:76:d8: 2d:ec:39:f8:39:c7:c0:c4:0b:9c:b4:2b:d1:05:93:a7:31:ad: d9:3d:3f:39:8a:32:80:66:96:f2:06:40:87:bf:c5:ab:b7:6b: a0:41:e5:9d:f1:eb:17:c6:ec:b4:4f:f7:b9:dc:5f:c4:12:02: fe:1a:2b:e0:d0:c0:c8:39:8a:46:54:75:f3:ba:1c:ba:1b:01: ad:7c:6c:f3:6c:2c:bb:b3:06:cf:7f:86:f9:8d:60:3a:89:8b: f7:61:6c:3b:2f:c3:b5:f3:02:d5:4e:c4:73:b5:78:c4:08:6f: 1a:13:c6:a3:d2:76:f3:5e:16:1d:90:53:6c:ba:e5:fe:2b:64: a0:6d:24:2d:ac:96:09:62:ea:eb:40:85:09:05:6c:e0:ec:b6: a3:2d:4e:07:bd:a9:7e:cf:d0:37:b4:17:ec:a6:72:9a:9d:69: 7a:a0:f0:48:47:a9:ab:d1:51:73:b0:a6:d7:5a:9e:a9:2b:1e: ae:97:af:04:89:5e:cb:2a:c8:17:2f:ce:1e:c2:74:01:86:68: 98:9b:bd:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+beOPIPzdI3r3kij1Dc4uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YzE4MjQ3YTUzMjY0NzNhYmM5NmY1YTEwNzFkMTU5YzFl YjdlY2QwHhcNMjUxMjIxMDEwMjI3WhcNMjUxMjIyMDEwMjI3WjAzMTEwLwYDVQQD EyhkMzViOGI2ODk2NTQwMTA0MGVlM2RkNDA3ZTQ1OGJkYzY1ZDcwZjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFXZcjsty4lzOVBbG7qBOKlEC+Xz Xe9lO7V2g4SUUuc+EWWzEa/OQkT4nRsO5+duEQ2489wKjIvUZgljLIiwpnTe7kfo wmOa9FpPnHtRU1vAgWCA5jOAVt/LUkwwh8zVviHBTfN/WgyjsdR1+0yXKVeSvOtC HgjiPVykbBeIUHco/d8Cfmnw+Vo+21p4DfUXOxvWAZpq4ZYaLloXPQdVU5Mrepge S4VUZgSc4x90yhvbmKfCTvVc3q5gsNgihmwBpKoOl9AsaFHSaf68G4ls9szgmMJd fsDKQL9oI3WvmCbMJ9sCyMbY+UDZFgA2Y8+R6ohCwvH4VhThCaaT+wu03QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNbi2iWVAEEDuPdQH5Fi9xl1w+QMB8GA1UdIwQY MBaAFAfBgkelMmRzq8lvWhBx0VnB637NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNzBkY2YtOTVlNy00NDk1LWE0MTEt M2E1NzE4YjQxZjdiLzEvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kNzBkY2YtOTVlNy00NDk1LWE0MTEtM2E1NzE4YjQxZjdi LzEvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkNhCEUE EA0gHcsJQ8UwpFleXZOrkD09hWF7nUdneJaHqTYGusyFppk2dX5NW5E6oVUcfXbY Lew5+DnHwMQLnLQr0QWTpzGt2T0/OYoygGaW8gZAh7/Fq7droEHlnfHrF8bstE/3 udxfxBIC/hor4NDAyDmKRlR187ocuhsBrXxs82wsu7MGz3+G+Y1gOomL92FsOy/D tfMC1U7Ec7V4xAhvGhPGo9J2814WHZBTbLrl/itkoG0kLayWCWLq60CFCQVs4Oy2 oy1OB72pfs/QN7QX7KZymp1peqDwSEepq9FRc7Cm11qeqSserpevBIleyyrIFy/O HsJ0AYZomJu9rA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:19:53 2025 by rpki-client