This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft File: 8J3iYg0i-mnFTL68by9IUFbOL-U.mft (raw, json) Hash identifier: KhZ9YF+cEkvjaAx2e6t7kciaQOMSkr3w533taL+MH5M= Subject key identifier: C1:77:DF:9F:57:02:5F:D7:B7:C9:97:83:86:09:9C:0E:DE:AD:5C:40 Authority key identifier: F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5 Certificate issuer: /CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5 Certificate serial: 019B38D7F72E59AA93A43108741B5B5D48F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft Manifest number: 0445 Signing time: Fri 19 Dec 2025 23:00:36 +0000 Manifest this update: Fri 19 Dec 2025 23:00:36 +0000 Manifest next update: Sat 20 Dec 2025 23:00:36 +0000 Files and hashes: 1: 8J3iYg0i-mnFTL68by9IUFbOL-U.crl (hash: IrxAaZtmZOrVs6UdlbFAW68cnJGH52yZDvOE+debLTQ=) 2: gtqtvDZxxq5MJdwetq5IVth42z0.roa (hash: DsoC8S+ekUdxd5VaMM9eODyiV+OQ6KDTcMckhDvQ+dw=) 3: vlbjkguhua3sXNAb4WL9C-kH7NI.roa (hash: W2Tg0b912XPXpVMo5wmJMbF6s29yN1E6dtpyPDGr82E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d7:f7:2e:59:aa:93:a4:31:08:74:1b:5b:5d:48:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5 Validity Not Before: Dec 19 23:00:36 2025 GMT Not After : Dec 20 23:00:36 2025 GMT Subject: CN=c177df9f57025fd7b7c9978386099c0edead5c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0b:52:f1:20:a2:b6:85:66:65:09:b4:c8:1a: 36:a6:72:c8:e5:6c:c4:37:dc:c2:de:6c:30:6c:f8: b5:05:a9:ea:61:53:47:a5:55:7a:10:e0:40:a9:5e: 45:f9:dd:88:99:a1:a8:3b:02:cf:eb:74:61:c9:ac: 40:6d:4b:ea:2a:bc:e7:18:e4:d2:ce:dc:c8:22:d4: 19:02:e6:5c:6f:28:9d:d0:e3:85:2d:64:a0:ae:01: f6:d8:d8:29:8d:09:9c:98:96:3b:96:4e:49:3f:60: ad:2a:64:c1:2f:79:ea:8a:33:63:25:f5:7d:df:5c: e5:a6:d2:f9:dd:be:01:97:f9:f5:b2:f6:0b:b1:b9: 9e:97:c3:d6:bc:8f:72:97:7a:41:e5:d0:0e:fe:4b: 4a:b9:11:78:97:63:4e:b0:22:2e:5b:08:23:2d:38: 54:ae:e5:d5:82:08:94:38:dc:4f:1c:a8:12:d1:a2: 81:a8:e1:c2:4a:08:ff:68:a9:a7:6e:18:cf:95:9d: 5b:a1:c0:e4:5a:1f:4c:5f:59:b1:f9:df:18:1d:14: 8b:7d:22:c0:e9:3a:cc:53:2d:e0:c3:09:d8:03:4d: 81:9d:06:c9:36:26:86:ce:2d:21:6f:89:ea:42:ba: f5:69:9f:6d:a7:20:0b:8b:96:05:97:a4:be:b5:fa: 42:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:77:DF:9F:57:02:5F:D7:B7:C9:97:83:86:09:9C:0E:DE:AD:5C:40 X509v3 Authority Key Identifier: keyid:F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:20:11:e3:22:4d:b0:59:ad:d9:60:90:87:7d:d1:01:97:78: 3c:8a:8a:ac:e4:15:c1:24:f1:35:81:b1:3d:23:ce:9c:04:b4: 08:0a:f2:c9:10:81:ae:41:41:93:71:92:76:21:aa:27:07:f0: f3:f6:6c:4a:02:02:9f:ce:06:77:ef:90:e1:fe:ba:33:0b:ad: 11:9c:16:7c:af:db:a0:6a:72:7a:91:51:1f:b8:b8:eb:ee:42: b5:09:5d:4f:7b:57:a0:b5:6a:f2:d2:91:2c:78:e1:84:65:d3: 08:1d:77:88:fc:cb:c8:c5:10:81:8f:1f:26:83:13:e4:6c:3a: 69:34:49:a0:4f:c3:f2:aa:3b:53:a7:39:d1:26:12:40:02:98: 1b:b7:9d:a6:e7:56:80:45:9a:3e:e0:5c:51:7a:16:39:45:97: 42:f8:de:7e:d9:91:4b:ac:ec:72:e6:22:7d:04:df:c6:29:50: d6:ec:1e:25:cf:9b:b3:51:e9:08:ee:fc:59:4e:d1:e4:77:96: a8:41:2c:4e:0a:3f:36:64:ed:d8:c2:e3:f9:2e:d3:73:c4:bd: 47:77:6b:2e:d1:f0:59:aa:32:17:c5:67:8b:d1:75:b6:cc:68: 2e:f9:7d:84:c7:5d:ce:65:d7:98:85:ad:2f:2b:8f:07:9f:78: 7d:bb:17:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs41/cuWaqTpDEIdBtbXUj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwOWRlMjYyMGQyMmZhNjljNTRjYmViYzZmMmY0ODUwNTZj ZTJmZTUwHhcNMjUxMjE5MjMwMDM2WhcNMjUxMjIwMjMwMDM2WjAzMTEwLwYDVQQD EyhjMTc3ZGY5ZjU3MDI1ZmQ3YjdjOTk3ODM4NjA5OWMwZWRlYWQ1YzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwtS8SCitoVmZQm0yBo2pnLI5WzE N9zC3mwwbPi1BanqYVNHpVV6EOBAqV5F+d2ImaGoOwLP63RhyaxAbUvqKrznGOTS ztzIItQZAuZcbyid0OOFLWSgrgH22NgpjQmcmJY7lk5JP2CtKmTBL3nqijNjJfV9 31zlptL53b4Bl/n1svYLsbmel8PWvI9yl3pB5dAO/ktKuRF4l2NOsCIuWwgjLThU ruXVggiUONxPHKgS0aKBqOHCSgj/aKmnbhjPlZ1bocDkWh9MX1mx+d8YHRSLfSLA 6TrMUy3gwwnYA02BnQbJNiaGzi0hb4nqQrr1aZ9tpyALi5YFl6S+tfpCewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMF3359XAl/Xt8mXg4YJnA7erVxAMB8GA1UdIwQY MBaAFPCd4mINIvppxUy+vG8vSFBWzi/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85Mjg1OTMtN2EwYS00MzEyLTg2ZTIt ZjgyZDYwMGRkNGUyLzEvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85Mjg1OTMtN2EwYS00MzEyLTg2ZTItZjgyZDYwMGRkNGUy LzEvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSAR4yJN sFmt2WCQh33RAZd4PIqKrOQVwSTxNYGxPSPOnAS0CAryyRCBrkFBk3GSdiGqJwfw 8/ZsSgICn84Gd++Q4f66MwutEZwWfK/boGpyepFRH7i46+5CtQldT3tXoLVq8tKR LHjhhGXTCB13iPzLyMUQgY8fJoMT5Gw6aTRJoE/D8qo7U6c50SYSQAKYG7edpudW gEWaPuBcUXoWOUWXQvjeftmRS6zscuYifQTfxilQ1uweJc+bs1HpCO78WU7R5HeW qEEsTgo/NmTt2MLj+S7Tc8S9R3drLtHwWaoyF8Vni9F1tsxoLvl9hMddzmXXmIWt LyuPB594fbsXLw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:35:08 2025 by rpki-client