This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft File: 8bmuyqN97cDywE9RvJY_zS5KrMw.mft (raw, json) Hash identifier: S+CyVG/SJfydqmwAjJR1Aja2G/EWqpzxkP3N6OqHeCU= Subject key identifier: 28:2C:8B:39:50:17:96:BE:A6:34:28:EA:FF:BE:87:A5:96:61:72:3D Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC Certificate issuer: /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc Certificate serial: 019B51BC217CFED6B68A384142235E46F073 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft Manifest number: 0594 Signing time: Wed 24 Dec 2025 19:00:42 +0000 Manifest this update: Wed 24 Dec 2025 19:00:42 +0000 Manifest next update: Thu 25 Dec 2025 19:00:42 +0000 Files and hashes: 1: 8bmuyqN97cDywE9RvJY_zS5KrMw.crl (hash: hNdgVSAzQGZcT3q9Vl2Fnk4YdpxqoJwEnQadq2jLGfc=) 2: wN3I7D42_Scvh3kTX6wbZgc3STg.roa (hash: +5WZ8eZml5reiYd5KuhYrJcZjNCC9ofGPFNFq+2Hrx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:21:7c:fe:d6:b6:8a:38:41:42:23:5e:46:f0:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc Validity Not Before: Dec 24 19:00:42 2025 GMT Not After : Dec 25 19:00:42 2025 GMT Subject: CN=282c8b39501796bea63428eaffbe87a59661723d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c0:e3:9f:4b:2f:0c:04:7e:12:25:cd:bc:9f: 06:08:59:b2:56:7b:18:e1:eb:e8:23:f4:d5:9f:1b: 7e:cf:6b:85:e3:d9:6d:1c:b6:10:d8:22:5e:f9:a5: ca:27:49:70:3b:fb:0d:ff:87:0d:0d:fe:87:94:05: 14:93:b7:1c:1a:19:87:be:4c:50:5c:29:cb:55:35: e9:7c:62:b2:d0:66:cb:62:34:50:bb:c5:34:f2:0c: 47:bf:6f:76:6d:86:38:59:73:e4:58:86:e1:6f:6b: 1f:c0:3d:ee:ea:02:4d:88:48:87:f9:c3:c0:c4:8f: 13:60:6e:aa:fe:3e:ae:16:b8:2c:6c:9a:71:cf:41: fa:f7:41:e1:4c:ba:8e:fc:99:1e:b9:dc:8d:73:49: 6f:52:2e:be:c8:1a:9d:04:13:06:86:de:d2:13:06: 20:85:29:38:fc:91:b3:bb:b2:0a:71:31:75:ec:cd: 52:74:9e:d7:2e:2c:fe:19:d9:b5:70:f3:e6:52:6b: 25:ed:c4:5c:3f:6c:0c:19:4f:91:52:c2:83:f1:76: ac:5e:8f:84:79:37:7d:a3:a6:01:f5:ac:64:c3:01: d9:e4:d8:12:c2:35:a7:88:e6:16:35:9f:05:20:c8: 13:ed:8e:18:6b:e8:f9:8e:94:8a:b9:5a:2f:8f:f0: 4f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2C:8B:39:50:17:96:BE:A6:34:28:EA:FF:BE:87:A5:96:61:72:3D X509v3 Authority Key Identifier: keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b3:b9:ec:ec:db:e9:f9:7c:40:ed:8a:1a:ed:6f:df:53:d4: 92:c1:21:ef:bd:af:fd:59:ee:2d:59:d6:42:04:a8:8d:d6:af: c9:fc:e3:e0:67:52:16:ed:e9:eb:d4:7d:57:bb:de:fb:3d:ce: bd:07:1f:7a:bf:b4:f8:2d:af:72:b0:66:63:c8:6c:2b:56:34: 67:8a:af:04:7c:5d:7f:59:ce:2a:bc:1f:23:e6:c3:70:e9:09: b5:2d:a6:b1:8a:77:30:68:53:fa:d2:6f:c0:e4:c1:e9:8c:ea: 20:a3:7a:4b:4c:4a:e8:6c:e5:2c:94:09:ef:4a:a1:b4:16:0e: e2:4f:0b:a7:cd:77:0c:ad:fa:6f:fe:07:c4:a8:49:56:79:a3: 23:e6:13:4d:1b:2e:ff:79:78:1b:14:ec:e0:53:59:74:1e:d6: 46:3d:16:59:0b:85:ff:ed:6e:7d:3a:0f:cc:34:59:32:41:5e: fa:57:80:b0:40:2a:be:b5:b5:7d:bd:2a:1a:50:90:83:ec:a4: a2:9a:0a:d1:33:9e:7a:89:1e:05:41:9c:29:7e:86:4d:b4:83: e5:a9:a5:c3:dc:56:95:7d:e9:26:09:9a:02:1d:ea:70:4c:5b: 3f:9e:46:60:02:a7:06:96:ca:68:da:de:e9:c8:24:e5:c1:0c: 43:9e:c8:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvCF8/ta2ijhBQiNeRvBzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYjlhZWNhYTM3ZGVkYzBmMmMwNGY1MWJjOTYzZmNkMmU0 YWFjY2MwHhcNMjUxMjI0MTkwMDQyWhcNMjUxMjI1MTkwMDQyWjAzMTEwLwYDVQQD EygyODJjOGIzOTUwMTc5NmJlYTYzNDI4ZWFmZmJlODdhNTk2NjE3MjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycDjn0svDAR+EiXNvJ8GCFmyVnsY 4evoI/TVnxt+z2uF49ltHLYQ2CJe+aXKJ0lwO/sN/4cNDf6HlAUUk7ccGhmHvkxQ XCnLVTXpfGKy0GbLYjRQu8U08gxHv292bYY4WXPkWIbhb2sfwD3u6gJNiEiH+cPA xI8TYG6q/j6uFrgsbJpxz0H690HhTLqO/JkeudyNc0lvUi6+yBqdBBMGht7SEwYg hSk4/JGzu7IKcTF17M1SdJ7XLiz+Gdm1cPPmUmsl7cRcP2wMGU+RUsKD8XasXo+E eTd9o6YB9axkwwHZ5NgSwjWniOYWNZ8FIMgT7Y4Ya+j5jpSKuVovj/BP7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgsizlQF5a+pjQo6v++h6WWYXI9MB8GA1UdIwQY MBaAFPG5rsqjfe3A8sBPUbyWP80uSqzMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGJtdXlxTjk3Y0R5d0U5UnZKWV96UzVLck13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80YmQ3MGMtMDk0YS00M2QwLWFkZGEt MDRmYmQ2ODE4OTZhLzEvOGJtdXlxTjk3Y0R5d0U5UnZKWV96UzVLck13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC80YmQ3MGMtMDk0YS00M2QwLWFkZGEtMDRmYmQ2ODE4OTZh LzEvOGJtdXlxTjk3Y0R5d0U5UnZKWV96UzVLck13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLO57Ozb 6fl8QO2KGu1v31PUksEh772v/VnuLVnWQgSojdavyfzj4GdSFu3p69R9V7ve+z3O vQcfer+0+C2vcrBmY8hsK1Y0Z4qvBHxdf1nOKrwfI+bDcOkJtS2msYp3MGhT+tJv wOTB6YzqIKN6S0xK6GzlLJQJ70qhtBYO4k8Lp813DK36b/4HxKhJVnmjI+YTTRsu /3l4GxTs4FNZdB7WRj0WWQuF/+1ufToPzDRZMkFe+leAsEAqvrW1fb0qGlCQg+yk opoK0TOeeokeBUGcKX6GTbSD5amlw9xWlX3pJgmaAh3qcExbP55GYAKnBpbKaNre 6cgk5cEMQ57IYQ== -----END CERTIFICATE-----Generated at Thu Dec 25 03:42:32 2025 by rpki-client