This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft File: _s8oKCHaV19okXZHzz4YmPnQpio.mft (raw, json) Hash identifier: s7a5pnCATS2KCdyqBpoFsVgQ/+E9U3cYeRkn9MhS/UI= Subject key identifier: A4:7B:6E:D1:EB:28:E8:66:1A:01:F5:FE:E8:8A:01:31:C0:1B:5A:00 Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A Certificate issuer: /CN=fecf282821da575f68917647cf3e1898f9d0a62a Certificate serial: 019B5B9B5FA45102050517ED34A9E4D33E07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 17:01:07 +0000 Manifest this update: Fri 26 Dec 2025 17:01:07 +0000 Manifest next update: Sat 27 Dec 2025 17:01:07 +0000 Files and hashes: 1: 2OXGBjO85npyAkFnRouh_UBk1Hs.roa (hash: HbPy+YRVvuPyiRQMlka5FfjRj4FCj/zQuaXQr9znzdU=) 2: _s8oKCHaV19okXZHzz4YmPnQpio.crl (hash: Tp9piaFd0+Jys+iedwfMjcwPkgAW8yzTEl/EhQKreeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 17:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:9b:5f:a4:51:02:05:05:17:ed:34:a9:e4:d3:3e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a Validity Not Before: Dec 26 17:01:07 2025 GMT Not After : Dec 27 17:01:07 2025 GMT Subject: CN=a47b6ed1eb28e8661a01f5fee88a0131c01b5a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2d:5d:82:ff:18:4d:23:7f:21:fa:42:e6:4d: df:5c:ff:9a:1e:e0:8a:3a:a6:15:bc:8d:58:99:3c: 22:1f:00:ac:7c:78:d8:e3:2a:bf:1b:59:86:87:be: 7e:49:17:5b:17:a8:d4:98:d4:66:42:79:d3:c2:4d: 46:2b:5b:55:69:93:f4:6a:44:ca:37:50:2a:4b:37: 23:ad:eb:6a:2c:4a:84:dd:e0:e5:44:05:1d:45:a9: 5b:a4:dd:1d:55:1f:44:c2:ef:10:89:66:00:ec:d1: 47:61:1e:cb:e4:ff:47:1e:45:96:09:e4:0d:a1:27: 51:a5:65:7a:a8:5a:98:7a:07:36:18:3c:df:75:42: 35:26:38:06:b3:86:6c:16:8d:16:47:2a:57:1d:c5: 03:c9:57:dd:d2:d4:d1:63:91:9e:40:17:e6:5d:ff: e5:90:e7:84:f2:e3:ad:cb:fb:47:28:81:84:47:bb: 61:c7:4f:8c:d2:0b:f9:23:c6:01:5d:21:d2:ed:cc: b8:c0:bc:10:15:91:35:03:18:50:ed:53:c6:5f:a7: d5:a9:ba:2b:69:43:da:34:90:c5:f7:f1:d8:89:3c: 24:f6:14:70:30:6f:42:00:97:53:c3:c1:91:28:62: 2c:cd:37:7e:9c:47:62:b6:5d:29:ce:6d:95:ce:c7: a7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7B:6E:D1:EB:28:E8:66:1A:01:F5:FE:E8:8A:01:31:C0:1B:5A:00 X509v3 Authority Key Identifier: keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:90:81:55:1d:db:ce:96:0f:09:1c:c8:d1:27:81:e4:34:60: c2:35:5f:56:4e:3c:0b:69:34:81:02:dd:69:fe:9b:d8:eb:eb: b9:be:93:04:c7:d1:78:3f:48:45:40:35:59:38:6c:56:2d:1d: 03:d2:e6:77:ca:e9:1c:16:92:64:0b:6f:1d:a4:f8:ed:11:b8: 24:4b:e4:b3:29:03:9e:94:22:a7:f5:5a:0d:59:26:d9:77:58: c9:58:4a:29:28:01:34:cc:c6:d0:2c:e5:1c:15:db:b1:56:6b: 72:a0:79:97:85:4a:23:f6:63:ba:72:11:32:42:74:31:89:f0: bd:97:ee:3f:13:17:50:00:30:42:f5:16:3b:b9:84:40:e3:0e: 7a:59:eb:66:57:4b:c8:19:7e:51:f6:be:37:8c:42:5d:85:c8: 53:d1:d9:b4:d1:7e:8b:0c:cc:1b:34:6c:32:0a:e7:a0:ad:2b: 8f:9c:fd:45:c7:c7:8d:12:40:1a:74:c1:44:65:8b:4b:71:62: c9:11:d3:a5:06:0c:2c:9d:f7:ca:5c:2e:d8:f2:41:42:d4:70: f9:a2:3e:02:52:54:1c:06:ad:b4:01:44:bf:ad:a6:fc:9d:e3: 44:fa:fa:90:b4:72:ad:a3:d3:4c:ce:e0:01:2b:b1:1d:75:5e: f0:39:db:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbm1+kUQIFBRftNKnk0z4HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlY2YyODI4MjFkYTU3NWY2ODkxNzY0N2NmM2UxODk4Zjlk MGE2MmEwHhcNMjUxMjI2MTcwMTA3WhcNMjUxMjI3MTcwMTA3WjAzMTEwLwYDVQQD EyhhNDdiNmVkMWViMjhlODY2MWEwMWY1ZmVlODhhMDEzMWMwMWI1YTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti1dgv8YTSN/IfpC5k3fXP+aHuCK OqYVvI1YmTwiHwCsfHjY4yq/G1mGh75+SRdbF6jUmNRmQnnTwk1GK1tVaZP0akTK N1AqSzcjretqLEqE3eDlRAUdRalbpN0dVR9Ewu8QiWYA7NFHYR7L5P9HHkWWCeQN oSdRpWV6qFqYegc2GDzfdUI1JjgGs4ZsFo0WRypXHcUDyVfd0tTRY5GeQBfmXf/l kOeE8uOty/tHKIGER7thx0+M0gv5I8YBXSHS7cy4wLwQFZE1AxhQ7VPGX6fVqbor aUPaNJDF9/HYiTwk9hRwMG9CAJdTw8GRKGIszTd+nEditl0pzm2VzsenCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKR7btHrKOhmGgH1/uiKATHAG1oAMB8GA1UdIwQY MBaAFP7PKCgh2ldfaJF2R88+GJj50KYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3M4b0tDSGFWMTlva1haSHp6NFltUG5RcGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yODg2MjgtMjAzOS00MDg1LWEwMDYt MDYwY2Q5YzkyZjI2LzEvX3M4b0tDSGFWMTlva1haSHp6NFltUG5RcGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8yODg2MjgtMjAzOS00MDg1LWEwMDYtMDYwY2Q5YzkyZjI2 LzEvX3M4b0tDSGFWMTlva1haSHp6NFltUG5RcGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5CBVR3b zpYPCRzI0SeB5DRgwjVfVk48C2k0gQLdaf6b2Ovrub6TBMfReD9IRUA1WThsVi0d A9Lmd8rpHBaSZAtvHaT47RG4JEvksykDnpQip/VaDVkm2XdYyVhKKSgBNMzG0Czl HBXbsVZrcqB5l4VKI/ZjunIRMkJ0MYnwvZfuPxMXUAAwQvUWO7mEQOMOelnrZldL yBl+Ufa+N4xCXYXIU9HZtNF+iwzMGzRsMgrnoK0rj5z9RcfHjRJAGnTBRGWLS3Fi yRHTpQYMLJ33ylwu2PJBQtRw+aI+AlJUHAattAFEv62m/J3jRPr6kLRyraPTTM7g ASuxHXVe8Dnbjg== -----END CERTIFICATE-----Generated at Sat Dec 27 02:34:31 2025 by rpki-client