This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft File: 8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json) Hash identifier: m7r5JNPYGBmaGbUmShU2622kBBefYRi3Vq4VqCUur7g= Subject key identifier: 2B:6A:BA:FC:62:03:48:5D:2C:89:D4:2A:E0:E6:E5:B2:72:BB:F3:B1 Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c Certificate serial: 019B3BD98B90F7B0AC57053F96F446FF0931 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 13:01:11 +0000 Manifest this update: Sat 20 Dec 2025 13:01:11 +0000 Manifest next update: Sun 21 Dec 2025 13:01:11 +0000 Files and hashes: 1: 4ghkRfOquB-e7Fok48kTrT0aVAU.roa (hash: 6SkfRPpDusU3pdgmnRmAtb8LYqLwuaj5aFdgg7X05Uw=) 2: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: LQpBdtLjCeBxX7uAuhtxNcNl4oOVN1pBTSP6YC/dUs8=) 3: k86L2r6PyseZfyszmOgSsSpazQk.roa (hash: IsdULHTb1wucLEEG+EnermzxJ4zmYkO1E7qf8JXpI3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:8b:90:f7:b0:ac:57:05:3f:96:f4:46:ff:09:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c Validity Not Before: Dec 20 13:01:11 2025 GMT Not After : Dec 21 13:01:11 2025 GMT Subject: CN=2b6abafc6203485d2c89d42ae0e6e5b272bbf3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4f:de:ae:ca:29:4a:de:4a:ab:55:21:f1:1d: 77:ad:c6:94:b9:ec:42:c0:35:00:80:e0:ed:39:a4: 65:c2:f2:08:2c:6e:c4:47:b0:19:39:80:84:73:73: 12:25:92:5b:ea:94:4e:ab:0d:63:a5:b8:4d:4b:df: 70:7c:51:26:9f:d7:31:12:ed:8e:d2:76:26:ef:2b: f0:b6:f9:98:94:d8:7b:98:73:6b:46:72:a0:fe:e0: 08:ff:e5:f6:62:cb:73:89:ce:07:e9:5d:6e:55:17: 65:8d:07:4d:48:29:68:96:e3:da:49:02:7b:02:86: 9a:c9:19:18:50:04:18:01:19:50:de:c5:88:66:b7: 0b:73:10:17:48:e6:90:f8:44:21:5d:1e:fd:68:7f: 44:ce:b5:52:da:6d:d5:4c:6a:23:1e:6a:ab:76:22: bd:57:42:69:92:24:77:52:fd:0c:49:3c:a8:a2:68: 60:17:71:61:c0:3a:20:dc:86:84:e0:8a:ed:b1:3e: 5f:26:f5:f9:88:b9:dc:0d:d5:97:46:c2:86:11:b8: 56:04:0c:d1:82:ee:dc:2e:d4:df:58:e6:f5:56:0e: 0f:27:20:ad:74:93:7f:24:de:36:17:eb:b9:02:f3: 35:14:29:03:24:7f:ab:24:f6:5a:7a:7c:0e:43:bd: a9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6A:BA:FC:62:03:48:5D:2C:89:D4:2A:E0:E6:E5:B2:72:BB:F3:B1 X509v3 Authority Key Identifier: keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:66:d7:45:d3:73:6c:b7:68:a2:3b:f3:67:ff:a7:38:9e:21: f2:9d:f6:13:4e:f4:83:a8:a5:dd:2f:52:88:96:74:41:3f:bd: 73:b5:18:3b:09:0f:21:77:86:13:1b:e6:50:fc:0e:02:c8:01: 78:79:1d:35:b5:24:bb:99:84:01:a2:33:c5:f1:97:fa:d9:07: c8:89:89:19:da:a3:93:d1:c7:54:c7:cf:66:39:78:f0:fe:fc: a4:05:20:48:cf:4f:0e:27:55:b6:ae:a4:ca:48:ff:8e:99:e2: 4f:ea:cd:4a:2f:4d:c8:be:ca:e7:42:0c:c4:3b:e7:8b:04:89: b4:9e:51:aa:48:a1:71:c2:fd:e9:b6:a5:2f:85:85:13:03:91: ce:dd:da:4e:03:b6:79:69:1c:36:92:3e:ad:64:6a:4d:14:40: f1:d9:8d:54:f8:3d:18:a5:ef:9f:37:8e:2e:f9:85:ce:b5:a4: 3e:39:94:02:a0:88:34:6e:0d:3d:0e:ea:66:3b:05:62:01:f2: e6:56:44:7a:db:ed:b5:fc:76:96:0e:e1:fe:80:fc:20:09:74: 0e:38:45:cc:7b:a4:8d:2a:2b:68:e8:01:9d:35:95:23:dc:34: 7b:52:98:41:7a:0f:41:00:1d:a4:b1:39:8a:ad:64:47:2d:17: 3d:e3:3c:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72YuQ97CsVwU/lvRG/wkxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZGQ3OTViZTM2ZTRiNWIzMDllYmM4ZTA0ZWE3Mzk0MTM1 YzcxNGMwHhcNMjUxMjIwMTMwMTExWhcNMjUxMjIxMTMwMTExWjAzMTEwLwYDVQQD EygyYjZhYmFmYzYyMDM0ODVkMmM4OWQ0MmFlMGU2ZTViMjcyYmJmM2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0/ersopSt5Kq1Uh8R13rcaUuexC wDUAgODtOaRlwvIILG7ER7AZOYCEc3MSJZJb6pROqw1jpbhNS99wfFEmn9cxEu2O 0nYm7yvwtvmYlNh7mHNrRnKg/uAI/+X2Ystzic4H6V1uVRdljQdNSCloluPaSQJ7 AoaayRkYUAQYARlQ3sWIZrcLcxAXSOaQ+EQhXR79aH9EzrVS2m3VTGojHmqrdiK9 V0JpkiR3Uv0MSTyoomhgF3FhwDog3IaE4IrtsT5fJvX5iLncDdWXRsKGEbhWBAzR gu7cLtTfWOb1Vg4PJyCtdJN/JN42F+u5AvM1FCkDJH+rJPZaenwOQ72pUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtquvxiA0hdLInUKuDm5bJyu/OxMB8GA1UdIwQY MBaAFPHdeVvjbktbMJ68jgTqc5QTXHFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGQxNVctTnVTMXN3bnJ5T0JPcHpsQk5jY1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85NzliZGItMDFhMy00ZDE3LTg3NDYt ZmU0NDc3MmQ1YWUxLzEvOGQxNVctTnVTMXN3bnJ5T0JPcHpsQk5jY1V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85NzliZGItMDFhMy00ZDE3LTg3NDYtZmU0NDc3MmQ1YWUx LzEvOGQxNVctTnVTMXN3bnJ5T0JPcHpsQk5jY1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGbXRdNz bLdoojvzZ/+nOJ4h8p32E070g6il3S9SiJZ0QT+9c7UYOwkPIXeGExvmUPwOAsgB eHkdNbUku5mEAaIzxfGX+tkHyImJGdqjk9HHVMfPZjl48P78pAUgSM9PDidVtq6k ykj/jpniT+rNSi9NyL7K50IMxDvniwSJtJ5RqkihccL96balL4WFEwORzt3aTgO2 eWkcNpI+rWRqTRRA8dmNVPg9GKXvnzeOLvmFzrWkPjmUAqCING4NPQ7qZjsFYgHy 5lZEetvttfx2lg7h/oD8IAl0DjhFzHukjSoraOgBnTWVI9w0e1KYQXoPQQAdpLE5 iq1kRy0XPeM83Q== -----END CERTIFICATE-----Generated at Sat Dec 20 16:19:49 2025 by rpki-client