This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft File: 8YCPGr745rWc1DWaa0SB_HyWMdE.mft (raw, json) Hash identifier: 2XTYUIfnFmFGZt8Z5uzESo0Pn6SfnoVpLeY5npzTdtg= Subject key identifier: 3F:DC:89:F7:B4:B9:63:AF:2C:FB:04:05:DD:20:A7:5B:51:8B:1C:14 Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1 Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1 Certificate serial: 019B48F004A467EEF224B09397B3CBE88D73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 02:00:47 +0000 Manifest this update: Tue 23 Dec 2025 02:00:47 +0000 Manifest next update: Wed 24 Dec 2025 02:00:47 +0000 Files and hashes: 1: 1-pC8r9w9eHPboI6UQ9SPxm6C-JI.roa (hash: 4/hN4BZtPakrI9kWgmVlEfI4CA36mWdfywhv2fUv0zc=) 2: 8YCPGr745rWc1DWaa0SB_HyWMdE.crl (hash: aV2Qlyi3D9F+cOOKBe7wVl1cVq6dSau6MT/Y1Ple1jo=) 3: ewa-i1ZX3x5sx5ypquiCHGcdBZY.roa (hash: oyaoG9o+HMw8UbuIoU2MjdUmgeJrqz7dNC1WMoDWkeM=) 4: f3N3ZaRV0bOdlX13-KIGTXiHS-c.roa (hash: G7D6BUoaKLhAlCeuz2Rq/Eb+8hPzua6dwGFSHRCAqy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:04:a4:67:ee:f2:24:b0:93:97:b3:cb:e8:8d:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1 Validity Not Before: Dec 23 02:00:47 2025 GMT Not After : Dec 24 02:00:47 2025 GMT Subject: CN=3fdc89f7b4b963af2cfb0405dd20a75b518b1c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:12:6e:02:fd:e4:bc:b1:fb:76:60:f5:c5:d1: 81:b0:34:b0:90:9e:b5:f8:39:8e:35:89:e4:c5:89: c3:04:7e:47:0f:f1:0e:02:67:90:82:84:07:2c:cb: 6e:48:c8:ee:b1:cd:f1:f4:65:ba:d1:46:54:f8:04: 47:1a:3b:61:c7:27:fb:f0:a5:22:5b:06:71:8b:cd: d5:56:65:23:86:5e:0c:7c:4c:ff:26:c6:48:fa:2a: 65:9b:15:4b:71:c0:d6:15:b6:ac:99:51:64:f5:6b: f1:9b:9e:59:1b:80:60:76:f7:32:6d:98:b5:64:73: 17:4b:2b:b5:8b:31:17:0a:97:9d:05:ed:c4:75:a4: 2f:38:c7:10:50:ae:63:46:dc:aa:50:e3:ec:62:f1: e6:13:40:d3:2b:98:54:ee:17:29:e6:af:5c:45:bf: 9d:96:8c:69:cb:c6:da:1e:db:89:4e:ae:11:81:87: d0:ea:2e:d7:55:34:bf:48:18:a2:20:3d:ef:7a:4d: 2d:72:ac:0a:a2:60:98:57:e9:6d:a1:6b:da:c6:e4: cb:bd:21:05:0f:65:d7:b9:fa:23:ed:44:d4:f9:8f: 4d:f5:d3:d9:07:2d:96:34:1c:80:4d:b1:38:fd:ce: 6a:53:11:8a:9a:3d:2d:77:6e:f3:3e:43:88:15:8a: 07:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DC:89:F7:B4:B9:63:AF:2C:FB:04:05:DD:20:A7:5B:51:8B:1C:14 X509v3 Authority Key Identifier: keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2b:24:a6:c6:d7:e7:3e:63:40:d1:cc:a2:b0:b1:11:47:7e: 45:db:64:f9:3b:d0:fc:4a:92:7c:60:10:98:1d:9a:95:c0:1e: 9e:f9:a4:70:fb:be:80:4c:2d:b3:ee:cf:8a:48:c9:ba:7d:2e: 7c:b7:30:98:82:c8:12:a0:4c:be:31:18:d9:a2:5a:22:3f:4c: 10:46:35:9a:3a:73:7a:34:57:6b:1c:04:f6:48:1a:de:14:e8: 3b:02:c5:39:e6:83:d2:28:37:b4:22:7c:12:1f:e0:8e:29:9d: 14:09:f1:82:2a:15:2b:63:4d:b2:71:8b:24:8a:cb:99:cb:7a: 5d:cf:59:3a:43:61:08:ae:10:96:24:ab:a6:ac:fe:a9:ed:30: 80:d5:d8:f9:ce:08:3a:5d:f9:d6:f9:42:65:a8:4f:42:71:fc: be:22:d4:c4:58:24:48:13:30:d5:59:03:db:11:9d:f3:41:bc: 5a:d8:86:d0:a2:b8:cf:96:5a:32:1e:a9:20:0e:76:20:1d:f6: 1d:23:08:03:12:e8:21:b6:29:96:10:c3:f8:aa:5f:b7:ac:89: e3:9c:3c:87:96:d0:b0:39:89:6a:ed:cc:84:ce:20:4b:e9:32: 5f:74:ba:bc:8a:f3:4b:19:1e:a0:dc:64:c8:c6:47:2f:9a:ef: f3:42:fa:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8ASkZ+7yJLCTl7PL6I1zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxODA4ZjFhYmVmOGU2YjU5Y2Q0MzU5YTZiNDQ4MWZjN2M5 NjMxZDEwHhcNMjUxMjIzMDIwMDQ3WhcNMjUxMjI0MDIwMDQ3WjAzMTEwLwYDVQQD EygzZmRjODlmN2I0Yjk2M2FmMmNmYjA0MDVkZDIwYTc1YjUxOGIxYzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxJuAv3kvLH7dmD1xdGBsDSwkJ61 +DmONYnkxYnDBH5HD/EOAmeQgoQHLMtuSMjusc3x9GW60UZU+ARHGjthxyf78KUi WwZxi83VVmUjhl4MfEz/JsZI+iplmxVLccDWFbasmVFk9Wvxm55ZG4BgdvcybZi1 ZHMXSyu1izEXCpedBe3EdaQvOMcQUK5jRtyqUOPsYvHmE0DTK5hU7hcp5q9cRb+d loxpy8baHtuJTq4RgYfQ6i7XVTS/SBiiID3vek0tcqwKomCYV+ltoWvaxuTLvSEF D2XXufoj7UTU+Y9N9dPZBy2WNByATbE4/c5qUxGKmj0td27zPkOIFYoHbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/cife0uWOvLPsEBd0gp1tRixwUMB8GA1UdIwQY MBaAFPGAjxq++Oa1nNQ1mmtEgfx8ljHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYt MDMwNzdlMzdjNjFhLzEvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYtMDMwNzdlMzdjNjFh LzEvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCskpsbX 5z5jQNHMorCxEUd+Rdtk+TvQ/EqSfGAQmB2alcAenvmkcPu+gEwts+7PikjJun0u fLcwmILIEqBMvjEY2aJaIj9MEEY1mjpzejRXaxwE9kga3hToOwLFOeaD0ig3tCJ8 Eh/gjimdFAnxgioVK2NNsnGLJIrLmct6Xc9ZOkNhCK4QliSrpqz+qe0wgNXY+c4I Ol351vlCZahPQnH8viLUxFgkSBMw1VkD2xGd80G8WtiG0KK4z5ZaMh6pIA52IB32 HSMIAxLoIbYplhDD+Kpft6yJ45w8h5bQsDmJau3MhM4gS+kyX3S6vIrzSxkeoNxk yMZHL5rv80L6FQ== -----END CERTIFICATE-----Generated at Tue Dec 23 09:14:46 2025 by rpki-client