This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft File: 8FCiDjDskV3tHfIAVa9rXyZnLqk.mft (raw, json) Hash identifier: B2xGk4FjWmb7V2O6CGRoaCsqSZFQxK8q9ALmrMJcz44= Subject key identifier: 82:92:60:65:11:2C:41:BB:F1:A0:98:87:69:99:72:66:CC:B9:1D:7B Authority key identifier: F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9 Certificate issuer: /CN=f050a20e30ec915ded1df20055af6b5f26672ea9 Certificate serial: 019B6F58F564956EDA84A0DF02902FCA7809 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft Manifest number: 17A0 Signing time: Tue 30 Dec 2025 13:00:59 +0000 Manifest this update: Tue 30 Dec 2025 13:00:59 +0000 Manifest next update: Wed 31 Dec 2025 13:00:59 +0000 Files and hashes: 1: 8FCiDjDskV3tHfIAVa9rXyZnLqk.crl (hash: ALkSIpSNxF9WrJfzSjL2Ul6dlrnTGp9mDoG3IiR6yVg=) 2: DYi7F6e5pGT8BUg7LPKGmN6_EDw.roa (hash: i4XKBDV9uWZ8rdo9xvJHenErvD+Z3AjDvUvgRz1NJaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:58:f5:64:95:6e:da:84:a0:df:02:90:2f:ca:78:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f050a20e30ec915ded1df20055af6b5f26672ea9 Validity Not Before: Dec 30 13:00:59 2025 GMT Not After : Dec 31 13:00:59 2025 GMT Subject: CN=82926065112c41bbf1a0988769997266ccb91d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ca:5d:ba:dc:dd:7f:90:2c:a7:51:b0:57:d3: 33:f1:a6:e4:21:bb:9f:8c:42:5a:54:b9:91:48:b1: fb:18:7f:55:40:d1:3e:29:1e:db:52:32:70:f1:69: c7:50:6f:63:d3:88:bb:cb:75:d6:42:18:da:99:e1: f8:dd:d1:61:c0:fb:fc:76:80:c2:95:fb:71:fd:0a: 48:f0:f5:af:8f:f9:27:fa:cb:11:db:b5:2d:c0:7a: 25:a9:94:f4:e1:3d:56:27:18:a3:5a:7e:0a:11:41: cf:85:43:7e:a4:b4:31:74:c3:14:d4:ed:87:40:77: 4b:d9:11:5d:00:47:76:62:33:92:11:b6:db:59:8c: f4:f0:aa:24:de:d5:a3:f6:24:f5:4c:dc:e2:b3:04: fe:68:53:29:23:de:de:6a:dc:1f:fe:59:e3:a6:06: e3:6c:54:4f:11:8e:1a:9e:d2:e0:88:2c:7d:5f:67: c0:6d:38:d8:b0:23:d6:cb:78:a0:02:f6:ea:1d:e2: 1c:7e:01:9e:28:29:a1:da:4a:b7:a6:93:b1:30:f2: 8e:52:e0:3d:f8:4d:9b:45:4e:17:fc:6f:b7:26:6a: 25:ca:60:b4:dc:c8:41:83:8d:c7:50:8d:93:38:2e: db:bb:a5:53:cf:79:91:02:00:1f:68:4b:82:36:3a: e9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:92:60:65:11:2C:41:BB:F1:A0:98:87:69:99:72:66:CC:B9:1D:7B X509v3 Authority Key Identifier: keyid:F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d6:ff:58:b9:13:21:46:58:84:aa:82:9f:43:97:e9:66:d2: 9e:36:25:d7:ae:d9:63:79:20:25:2b:1b:65:8e:b3:42:77:55: 23:ca:50:4c:89:f5:21:1d:57:60:31:c5:f1:4e:bf:b6:cb:6c: 2f:37:e3:18:82:19:d4:51:f7:2a:76:56:98:9e:7e:dd:a8:bf: 22:c8:0f:19:0e:cf:80:20:9b:a8:90:82:39:41:5a:f9:91:0a: f4:e5:3a:d5:98:34:ab:28:26:4b:46:69:5c:5e:a0:a3:88:a0: 87:72:ac:17:7d:2b:87:9e:74:32:92:b0:e8:e9:51:9a:3e:33: d5:d0:80:f1:65:4d:bb:94:e9:5b:48:98:3c:1d:fc:6c:d3:4f: ed:04:d9:d1:37:4d:91:17:d5:5c:25:5a:02:d1:58:e5:c4:ce: 4c:0f:03:62:7f:05:40:3d:6f:3e:7a:51:0d:8c:a3:e0:56:12: 8d:17:6d:f4:a2:50:bc:36:ab:18:ce:da:d9:47:94:0a:75:86: 1a:ec:fa:5e:bc:c0:05:f6:eb:84:7f:2b:4c:08:94:af:65:c5: 3c:57:cd:88:49:30:3b:53:f9:41:5a:f6:1f:47:27:e8:a2:fa: 0b:49:de:9b:a7:a7:77:7c:d5:b2:62:de:2d:e3:ff:71:cf:61: b2:64:01:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvWPVklW7ahKDfApAvyngJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTBhMjBlMzBlYzkxNWRlZDFkZjIwMDU1YWY2YjVmMjY2 NzJlYTkwHhcNMjUxMjMwMTMwMDU5WhcNMjUxMjMxMTMwMDU5WjAzMTEwLwYDVQQD Eyg4MjkyNjA2NTExMmM0MWJiZjFhMDk4ODc2OTk5NzI2NmNjYjkxZDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxspdutzdf5Asp1GwV9Mz8abkIbuf jEJaVLmRSLH7GH9VQNE+KR7bUjJw8WnHUG9j04i7y3XWQhjameH43dFhwPv8doDC lftx/QpI8PWvj/kn+ssR27UtwHolqZT04T1WJxijWn4KEUHPhUN+pLQxdMMU1O2H QHdL2RFdAEd2YjOSEbbbWYz08Kok3tWj9iT1TNziswT+aFMpI97eatwf/lnjpgbj bFRPEY4antLgiCx9X2fAbTjYsCPWy3igAvbqHeIcfgGeKCmh2kq3ppOxMPKOUuA9 +E2bRU4X/G+3JmolymC03MhBg43HUI2TOC7bu6VTz3mRAgAfaEuCNjrpFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKSYGURLEG78aCYh2mZcmbMuR17MB8GA1UdIwQY MBaAFPBQog4w7JFd7R3yAFWva18mZy6pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iNWQ4MDktMmRiMC00ZmJmLThhMGQt OWQzMTY3ODMxOTM0LzEvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9iNWQ4MDktMmRiMC00ZmJmLThhMGQtOWQzMTY3ODMxOTM0 LzEvOEZDaURqRHNrVjN0SGZJQVZhOXJYeVpuTHFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9b/WLkT IUZYhKqCn0OX6WbSnjYl167ZY3kgJSsbZY6zQndVI8pQTIn1IR1XYDHF8U6/tsts LzfjGIIZ1FH3KnZWmJ5+3ai/IsgPGQ7PgCCbqJCCOUFa+ZEK9OU61Zg0qygmS0Zp XF6go4igh3KsF30rh550MpKw6OlRmj4z1dCA8WVNu5TpW0iYPB38bNNP7QTZ0TdN kRfVXCVaAtFY5cTOTA8DYn8FQD1vPnpRDYyj4FYSjRdt9KJQvDarGM7a2UeUCnWG Guz6XrzABfbrhH8rTAiUr2XFPFfNiEkwO1P5QVr2H0cn6KL6C0nem6end3zVsmLe LeP/cc9hsmQBkw== -----END CERTIFICATE-----Generated at Tue Dec 30 21:59:51 2025 by rpki-client