This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft File: 8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json) Hash identifier: xU4fMG5LtjX/NMiFt7sLr9pipslrSmpjNUdQtysq/oc= Subject key identifier: 05:C6:9A:73:77:79:24:41:A7:98:BB:9F:74:6F:E2:37:9B:83:2B:F6 Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16 Certificate issuer: /CN=f278acbcc46f133efd393f51160fdbb7607e1e16 Certificate serial: 019B44A61E43992C792B2FA1AA66C9BC95A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft Manifest number: 1151 Signing time: Mon 22 Dec 2025 06:01:35 +0000 Manifest this update: Mon 22 Dec 2025 06:01:35 +0000 Manifest next update: Tue 23 Dec 2025 06:01:35 +0000 Files and hashes: 1: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: DgThwFwIVOXxgSkt28ttDnA42jzqH1PtdOWQX4CbAjE=) 2: Mkl44sEh_I1NJhSRpZogcHN-KpQ.roa (hash: UFBdvkUQHMElnZ7pMex1cDJSyxO3mce2NK6vzaKBwPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a6:1e:43:99:2c:79:2b:2f:a1:aa:66:c9:bc:95:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16 Validity Not Before: Dec 22 06:01:35 2025 GMT Not After : Dec 23 06:01:35 2025 GMT Subject: CN=05c69a7377792441a798bb9f746fe2379b832bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9f:07:f7:2d:7b:08:cb:da:8c:51:fc:03:e5: 57:c2:c5:08:9e:df:c0:cf:da:e3:ff:d1:28:02:f5: bb:7a:2a:17:f1:71:86:09:0a:98:c7:22:9c:25:c0: 5f:86:00:27:c2:fd:e5:98:49:63:c3:5d:bc:97:40: d5:69:43:48:0c:1a:0f:60:ef:0e:64:f0:16:e5:8f: ed:47:6b:30:4a:69:b4:f6:d4:35:6f:7b:c9:1d:94: b4:38:8d:a3:13:7b:92:b6:44:aa:76:60:b8:b0:3b: 0d:37:29:04:33:41:d9:b2:28:08:dc:9a:b3:5c:f0: 12:3a:16:fd:ac:5a:56:3f:cf:77:e1:25:1a:a1:cd: 93:e2:9d:9b:17:01:40:f3:18:71:84:b3:3c:cd:1b: 28:cd:1a:9b:4c:5d:ba:01:04:38:53:0d:b8:ba:4e: 2a:c0:13:3d:df:ea:d3:b8:69:2a:12:30:25:0f:de: 2f:df:3b:8f:86:8d:cb:e6:08:4c:eb:00:01:57:95: 01:1b:31:0c:c1:90:42:af:86:25:53:64:86:dd:f8: 68:55:67:17:41:77:81:6f:32:f4:0a:2b:f4:b8:d5: ec:85:b8:28:6e:d5:34:28:5c:7c:c0:a1:78:19:b3: e2:d0:f6:3a:be:d6:ca:ea:22:f3:e2:b1:15:4b:c6: 6e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C6:9A:73:77:79:24:41:A7:98:BB:9F:74:6F:E2:37:9B:83:2B:F6 X509v3 Authority Key Identifier: keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:c1:11:bf:fb:aa:1d:62:bf:65:5f:82:32:25:34:d2:0e:82: d9:82:29:39:6d:c9:59:0a:d8:25:d4:17:e1:6a:f9:f6:ba:3b: 96:49:96:f9:a8:9e:3b:25:97:5d:3d:d9:00:48:48:5d:47:cc: 6b:e3:c0:a6:98:bb:5e:a6:61:dc:3c:7f:94:0c:7d:65:ea:90: 6b:1e:7c:96:77:d2:8b:7f:e6:d4:33:e1:19:ad:77:35:11:9c: 53:28:b0:e8:d5:f6:cf:88:6f:54:53:15:ed:ec:04:a8:ba:ff: ef:ff:99:5b:8e:b9:93:22:c4:44:3f:ea:29:06:6e:05:bf:01: c6:99:dc:e2:57:f8:a6:31:4b:f4:72:5b:1e:00:0e:b9:2c:7c: b3:5b:61:c9:d0:29:36:0f:05:37:5f:ed:24:c0:6a:d4:54:8c: e9:0f:33:9a:f0:01:02:01:e8:c5:46:02:4b:6f:d0:fc:dd:2d: a3:6d:25:1a:55:f0:d1:f2:79:c8:3b:cd:cc:33:46:8c:85:57: db:d3:c8:53:54:e6:7c:68:a1:dc:8b:da:85:d9:b5:6c:2d:d2: 6f:0a:82:07:45:74:1e:ee:5d:99:2b:9f:d7:29:4c:23:02:d9: 43:73:cd:fe:60:79:2b:d4:dc:77:e9:91:f3:a7:a4:85:f0:d8: 24:6f:2f:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEph5DmSx5Ky+hqmbJvJWlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNzhhY2JjYzQ2ZjEzM2VmZDM5M2Y1MTE2MGZkYmI3NjA3 ZTFlMTYwHhcNMjUxMjIyMDYwMTM1WhcNMjUxMjIzMDYwMTM1WjAzMTEwLwYDVQQD EygwNWM2OWE3Mzc3NzkyNDQxYTc5OGJiOWY3NDZmZTIzNzliODMyYmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0p8H9y17CMvajFH8A+VXwsUInt/A z9rj/9EoAvW7eioX8XGGCQqYxyKcJcBfhgAnwv3lmEljw128l0DVaUNIDBoPYO8O ZPAW5Y/tR2swSmm09tQ1b3vJHZS0OI2jE3uStkSqdmC4sDsNNykEM0HZsigI3Jqz XPASOhb9rFpWP8934SUaoc2T4p2bFwFA8xhxhLM8zRsozRqbTF26AQQ4Uw24uk4q wBM93+rTuGkqEjAlD94v3zuPho3L5ghM6wABV5UBGzEMwZBCr4YlU2SG3fhoVWcX QXeBbzL0Civ0uNXshbgobtU0KFx8wKF4GbPi0PY6vtbK6iLz4rEVS8Zu5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXGmnN3eSRBp5i7n3Rv4jebgyv2MB8GA1UdIwQY MBaAFPJ4rLzEbxM+/Tk/URYP27dgfh4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG5pc3ZNUnZFejc5T1Q5UkZnX2J0MkItSGhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS81MzcyNjctYjI0My00NjU3LTk5ZmYt OTRiNTE0NDMzYzExLzEvOG5pc3ZNUnZFejc5T1Q5UkZnX2J0MkItSGhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS81MzcyNjctYjI0My00NjU3LTk5ZmYtOTRiNTE0NDMzYzEx LzEvOG5pc3ZNUnZFejc5T1Q5UkZnX2J0MkItSGhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcERv/uq HWK/ZV+CMiU00g6C2YIpOW3JWQrYJdQX4Wr59ro7lkmW+aieOyWXXT3ZAEhIXUfM a+PAppi7XqZh3Dx/lAx9ZeqQax58lnfSi3/m1DPhGa13NRGcUyiw6NX2z4hvVFMV 7ewEqLr/7/+ZW465kyLERD/qKQZuBb8Bxpnc4lf4pjFL9HJbHgAOuSx8s1thydAp Ng8FN1/tJMBq1FSM6Q8zmvABAgHoxUYCS2/Q/N0to20lGlXw0fJ5yDvNzDNGjIVX 29PIU1TmfGih3Ivahdm1bC3SbwqCB0V0Hu5dmSuf1ylMIwLZQ3PN/mB5K9Tcd+mR 86ekhfDYJG8vHg== -----END CERTIFICATE-----Generated at Mon Dec 22 07:52:57 2025 by rpki-client