This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft File: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft (raw, json) Hash identifier: Xvyvtg+b3NHEbjqYG5qdWizrjI7cuabOjvTQpJuQ5xk= Subject key identifier: 0E:FC:F8:54:0F:99:D9:9F:77:D4:AC:AA:C3:BE:6F:37:93:6E:83:ED Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5 Certificate issuer: /CN=f2262faf4376420024aad72983ac3e87944ea7a5 Certificate serial: 019B3C7ED3340C97CF5865782851C4E3F9A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft Manifest number: 0469 Signing time: Sat 20 Dec 2025 16:01:42 +0000 Manifest this update: Sat 20 Dec 2025 16:01:42 +0000 Manifest next update: Sun 21 Dec 2025 16:01:42 +0000 Files and hashes: 1: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl (hash: gK1OY9t2W0Ej7va2A5ZBT6Dgz1if9dilnHWZOHRKwxI=) 2: 9Mc_YHkeRnOleVXlULa1kHSDpsY.roa (hash: vM50N/l+aDNC1xeVIe5zjbI+WcZUV2cPPG76tUoJrmA=) 3: I-0idQ-x8b_iuF_AN1e-P1ZFsto.roa (hash: J959UKPkKfG7mGSEhJQ4lp0ApYm6t4BNil0ibX/rnJ0=) 4: I8X4-fx8YNfYZj3EvfIsATaUGac.roa (hash: c5YWTRrX3QnWTxXe+8t+vVb1UcDfoatadHEMGSgtrjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:d3:34:0c:97:cf:58:65:78:28:51:c4:e3:f9:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5 Validity Not Before: Dec 20 16:01:42 2025 GMT Not After : Dec 21 16:01:42 2025 GMT Subject: CN=0efcf8540f99d99f77d4acaac3be6f37936e83ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2c:43:0b:b5:ec:e4:6e:12:e8:0f:c8:c6:2c: 20:cb:86:25:2d:ca:71:d6:93:77:a9:12:70:e3:2e: 97:a4:2f:c8:04:0e:f5:41:3e:aa:50:10:bd:3e:42: 80:b0:0e:8b:eb:f8:04:6b:ad:43:18:2b:a4:40:2a: 88:1f:6a:0f:4b:1a:82:45:85:43:26:13:8d:7a:c2: 5b:b0:88:33:58:d3:16:fe:9e:d2:6a:6d:ed:3f:d5: a8:43:e8:f1:9a:c2:67:cd:23:8b:a8:84:ff:74:49: 37:2b:af:f7:6d:14:66:bb:28:a0:e2:4a:d7:f1:ad: 28:3d:0f:24:68:bd:11:35:12:46:27:b4:7a:1f:3c: 6a:0d:43:fe:cc:18:15:e1:9a:68:d3:f1:af:ee:a6: 7a:03:f1:3e:50:2b:16:6b:f6:37:1a:c7:88:ee:ad: 83:a4:fb:c1:ae:5c:b1:87:37:cd:cd:84:e7:3c:6f: 35:07:5c:d2:76:b7:38:90:46:f3:52:21:07:ee:79: e4:7f:11:d5:ba:9f:c0:45:b5:e5:0d:4a:c5:54:53: 67:3c:14:8b:c4:2f:fa:38:6a:a2:29:7d:12:5f:4c: aa:2d:03:32:48:14:38:a5:9a:91:f6:3a:9a:10:5c: f6:9f:a2:f3:77:9d:5e:44:f7:fe:e0:9f:20:50:56: 61:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FC:F8:54:0F:99:D9:9F:77:D4:AC:AA:C3:BE:6F:37:93:6E:83:ED X509v3 Authority Key Identifier: keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:be:44:01:ff:f8:27:73:ec:19:6e:34:28:24:84:ba:86:8b: 25:0c:78:f4:c3:2c:47:a6:2f:91:9a:85:36:c1:78:76:4b:4b: 9f:2e:cf:b2:f6:d9:14:d5:7c:6a:d8:14:94:55:d6:8e:89:8d: e4:28:81:a5:8e:93:52:7a:be:a0:ba:a1:b0:6e:98:9c:76:9a: 2b:ac:49:d0:34:84:bb:15:3b:06:b6:31:fa:00:20:d1:ad:00: 75:77:d4:2a:9d:e1:a5:e1:dc:35:72:fd:8b:6f:74:7d:8e:0f: 05:f8:bd:e7:72:32:0d:28:93:c1:ba:84:1d:a7:dd:72:31:31: 7e:8d:5f:a3:e8:e8:de:f0:24:50:b2:3c:46:a1:b6:60:77:2f: 1f:b1:a5:09:81:aa:9c:e4:d7:1d:52:24:8e:8d:93:be:01:06: 1e:0c:6a:1e:92:92:27:0f:2a:86:11:34:fc:f0:8e:5c:65:65: 8a:8c:93:a7:33:f6:c9:2d:56:63:f8:83:7b:ec:5f:fa:6b:1f: 4f:9f:12:0c:a2:0e:4d:2a:56:49:5d:4d:95:74:4f:6a:4a:ab: 83:94:07:c7:cd:e5:9f:7f:25:5f:55:24:21:63:d8:bd:06:81: 59:78:8b:cc:f4:16:43:3f:bb:09:99:aa:90:da:b3:f7:c1:d3: e9:fc:51:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ftM0DJfPWGV4KFHE4/mjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMjYyZmFmNDM3NjQyMDAyNGFhZDcyOTgzYWMzZTg3OTQ0 ZWE3YTUwHhcNMjUxMjIwMTYwMTQyWhcNMjUxMjIxMTYwMTQyWjAzMTEwLwYDVQQD EygwZWZjZjg1NDBmOTlkOTlmNzdkNGFjYWFjM2JlNmYzNzkzNmU4M2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyxDC7Xs5G4S6A/Ixiwgy4YlLcpx 1pN3qRJw4y6XpC/IBA71QT6qUBC9PkKAsA6L6/gEa61DGCukQCqIH2oPSxqCRYVD JhONesJbsIgzWNMW/p7Sam3tP9WoQ+jxmsJnzSOLqIT/dEk3K6/3bRRmuyig4krX 8a0oPQ8kaL0RNRJGJ7R6HzxqDUP+zBgV4Zpo0/Gv7qZ6A/E+UCsWa/Y3GseI7q2D pPvBrlyxhzfNzYTnPG81B1zSdrc4kEbzUiEH7nnkfxHVup/ARbXlDUrFVFNnPBSL xC/6OGqiKX0SX0yqLQMySBQ4pZqR9jqaEFz2n6Lzd51eRPf+4J8gUFZhswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA78+FQPmdmfd9SsqsO+bzeTboPtMB8GA1UdIwQY MBaAFPImL69DdkIAJKrXKYOsPoeUTqelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMt YmFkYWZjYTM5NDRmLzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMtYmFkYWZjYTM5NDRm LzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb75EAf/4 J3PsGW40KCSEuoaLJQx49MMsR6YvkZqFNsF4dktLny7PsvbZFNV8atgUlFXWjomN 5CiBpY6TUnq+oLqhsG6YnHaaK6xJ0DSEuxU7BrYx+gAg0a0AdXfUKp3hpeHcNXL9 i290fY4PBfi953IyDSiTwbqEHafdcjExfo1fo+jo3vAkULI8RqG2YHcvH7GlCYGq nOTXHVIkjo2TvgEGHgxqHpKSJw8qhhE0/PCOXGVlioyTpzP2yS1WY/iDe+xf+msf T58SDKIOTSpWSV1NlXRPakqrg5QHx83ln38lX1UkIWPYvQaBWXiLzPQWQz+7CZmq kNqz98HT6fxR5Q== -----END CERTIFICATE-----Generated at Sat Dec 20 22:35:52 2025 by rpki-client