This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft File: 8YCPGr745rWc1DWaa0SB_HyWMdE.mft (raw, json) Hash identifier: sAoX4rO1UxcE/1gjmIPhIFvz0+SmtKr7zAilwxpPRa8= Subject key identifier: 86:9F:32:5D:C0:4C:80:78:F2:8C:00:8C:2F:35:83:7E:86:81:C0:28 Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1 Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1 Certificate serial: 019B3B6B4E3B0EF58CC55926262B6F4904B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 11:00:46 +0000 Manifest this update: Sat 20 Dec 2025 11:00:46 +0000 Manifest next update: Sun 21 Dec 2025 11:00:46 +0000 Files and hashes: 1: 1-pC8r9w9eHPboI6UQ9SPxm6C-JI.roa (hash: 4/hN4BZtPakrI9kWgmVlEfI4CA36mWdfywhv2fUv0zc=) 2: 8YCPGr745rWc1DWaa0SB_HyWMdE.crl (hash: SLPy8CGBt6B410Cye0hWZ8Y9riCeM3rarAad+ryn01Q=) 3: ewa-i1ZX3x5sx5ypquiCHGcdBZY.roa (hash: oyaoG9o+HMw8UbuIoU2MjdUmgeJrqz7dNC1WMoDWkeM=) 4: f3N3ZaRV0bOdlX13-KIGTXiHS-c.roa (hash: G7D6BUoaKLhAlCeuz2Rq/Eb+8hPzua6dwGFSHRCAqy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:4e:3b:0e:f5:8c:c5:59:26:26:2b:6f:49:04:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1 Validity Not Before: Dec 20 11:00:46 2025 GMT Not After : Dec 21 11:00:46 2025 GMT Subject: CN=869f325dc04c8078f28c008c2f35837e8681c028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:27:74:69:18:97:76:2e:5a:27:f7:d3:9c:cd: dc:e0:b5:1b:e7:ac:aa:53:12:b5:4a:d4:ef:5b:63: 0e:d3:77:9e:7f:d9:7c:e6:f6:bb:54:75:8f:eb:c9: 24:46:b1:99:bb:0f:13:63:e6:9d:c2:09:78:ad:49: 54:d6:b6:5d:0b:47:3b:29:08:51:45:0e:39:c0:ec: 68:fb:4a:fe:6e:da:f9:68:8f:ef:17:91:67:90:fa: 11:ab:32:d3:20:90:05:1a:a9:df:72:13:3b:99:5f: 41:63:a9:d5:1f:5b:99:b3:a5:e3:d7:9b:0d:cd:a7: 76:01:49:19:f4:6d:8a:3a:4f:78:9d:41:b2:d9:c1: 78:29:15:ac:07:78:cc:fb:f4:e3:ee:c4:b4:97:dc: 7b:26:a7:a3:02:33:f3:72:20:e1:35:60:d3:1a:c5: 3f:93:1c:89:e5:f2:7c:dc:a9:6d:74:b8:78:ea:eb: c1:e3:4d:0a:8e:c1:85:66:69:ba:2e:2d:9c:64:46: af:f4:d9:92:85:1c:f9:d6:93:c8:bd:58:da:b6:7b: e0:37:e5:ab:7e:98:97:2b:8d:99:2e:06:7a:8e:2b: 51:f5:49:65:0c:a1:5f:4e:1b:c2:f0:ab:02:07:be: 88:66:78:4c:ce:99:32:23:3b:c1:0b:ce:ed:e3:da: af:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9F:32:5D:C0:4C:80:78:F2:8C:00:8C:2F:35:83:7E:86:81:C0:28 X509v3 Authority Key Identifier: keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e4:84:37:d1:d9:96:8b:69:db:47:11:56:56:c7:39:6c:4f: dc:d2:ae:a1:36:e2:f3:fd:30:b9:6c:f5:b1:b4:8f:ae:d9:18: 5b:20:e0:98:c7:e9:c1:a6:d2:64:29:b2:5f:de:ea:f0:b5:a1: 5b:f0:0f:f1:10:d7:58:ac:f7:b7:a8:ad:7f:d7:9e:97:6d:3f: 27:79:a6:eb:63:07:5c:11:ae:90:02:3f:70:ac:cd:a4:b9:2b: a5:89:29:90:95:7b:56:99:7a:a4:48:37:1e:10:fe:94:a8:e5: 78:23:a5:0a:a3:96:62:b9:bd:75:6d:b6:e7:53:a4:b1:03:3c: ac:ef:fd:a6:0b:ea:9c:72:8a:71:2e:ac:60:b8:f8:8b:4a:54: 65:ba:f1:bf:0c:e0:9f:0c:4d:ed:9c:80:05:d4:53:f6:9e:06: 98:99:6a:9b:c6:a8:e5:55:77:65:78:85:52:72:ee:a2:6f:5c: dc:86:48:f7:60:73:dd:ec:34:d6:43:db:15:e1:c6:8f:83:e0: 94:33:fd:d2:a5:4f:3b:88:5b:19:49:38:a6:43:79:8f:2c:f0: f1:e7:1a:75:6f:14:dc:97:c5:4d:d7:02:07:d0:29:24:ce:d0: 14:d9:d2:44:43:36:4c:24:48:7c:a1:f5:2e:17:66:c4:f2:6b: c3:f5:dc:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a047DvWMxVkmJitvSQSyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxODA4ZjFhYmVmOGU2YjU5Y2Q0MzU5YTZiNDQ4MWZjN2M5 NjMxZDEwHhcNMjUxMjIwMTEwMDQ2WhcNMjUxMjIxMTEwMDQ2WjAzMTEwLwYDVQQD Eyg4NjlmMzI1ZGMwNGM4MDc4ZjI4YzAwOGMyZjM1ODM3ZTg2ODFjMDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCd0aRiXdi5aJ/fTnM3c4LUb56yq UxK1StTvW2MO03eef9l85va7VHWP68kkRrGZuw8TY+adwgl4rUlU1rZdC0c7KQhR RQ45wOxo+0r+btr5aI/vF5FnkPoRqzLTIJAFGqnfchM7mV9BY6nVH1uZs6Xj15sN zad2AUkZ9G2KOk94nUGy2cF4KRWsB3jM+/Tj7sS0l9x7JqejAjPzciDhNWDTGsU/ kxyJ5fJ83KltdLh46uvB400KjsGFZmm6Li2cZEav9NmShRz51pPIvVjatnvgN+Wr fpiXK42ZLgZ6jitR9UllDKFfThvC8KsCB76IZnhMzpkyIzvBC87t49qvDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIafMl3ATIB48owAjC81g36GgcAoMB8GA1UdIwQY MBaAFPGAjxq++Oa1nNQ1mmtEgfx8ljHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYt MDMwNzdlMzdjNjFhLzEvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYtMDMwNzdlMzdjNjFh LzEvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAneSEN9HZ lotp20cRVlbHOWxP3NKuoTbi8/0wuWz1sbSPrtkYWyDgmMfpwabSZCmyX97q8LWh W/AP8RDXWKz3t6itf9eel20/J3mm62MHXBGukAI/cKzNpLkrpYkpkJV7Vpl6pEg3 HhD+lKjleCOlCqOWYrm9dW2251OksQM8rO/9pgvqnHKKcS6sYLj4i0pUZbrxvwzg nwxN7ZyABdRT9p4GmJlqm8ao5VV3ZXiFUnLuom9c3IZI92Bz3ew01kPbFeHGj4Pg lDP90qVPO4hbGUk4pkN5jyzw8ecadW8U3JfFTdcCB9ApJM7QFNnSREM2TCRIfKH1 LhdmxPJrw/Xcrw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:07:05 2025 by rpki-client