This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json) Hash identifier: CWwsmyyy1FfacCJjrW+wy5XiKsRbTed3BrHj7ZDjEkw= Subject key identifier: 38:36:EA:A4:9E:8D:08:09:53:95:8E:8A:1D:A7:C0:47:31:3C:05:BA Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2 Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2 Certificate serial: 019B405A8B9D14269C799246BF7E1A40ECE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 10:00:34 +0000 Manifest this update: Sun 21 Dec 2025 10:00:34 +0000 Manifest next update: Mon 22 Dec 2025 10:00:34 +0000 Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: zAAhsOZ5AytSUmR2wMOSmeDWwjRumUi0TOCMgSkyM58=) 2: a-zhZjuXDc_FsfQbRuaEtluPpHA.roa (hash: 5+3esVT/zzC55YQOAsi2tnDDnrmv1Y7c5U2ef5q3Qdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:8b:9d:14:26:9c:79:92:46:bf:7e:1a:40:ec:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2 Validity Not Before: Dec 21 10:00:34 2025 GMT Not After : Dec 22 10:00:34 2025 GMT Subject: CN=3836eaa49e8d080953958e8a1da7c047313c05ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:95:97:d2:65:91:4c:80:b6:6c:88:80:e1:85: 3c:13:a0:a2:cf:f3:9c:e2:a1:09:94:93:a5:1d:b7: 6a:7b:1e:92:57:72:99:4c:cd:51:d1:ce:af:bd:27: 37:a5:58:ae:9b:f6:08:78:41:c0:ea:ea:10:d1:5b: 85:c2:cf:c6:0a:b5:19:7c:3d:c7:9a:bf:e5:3e:6f: 31:14:72:a6:c5:0e:12:8f:dd:dc:50:c0:ff:19:c0: 20:e8:fc:bf:ad:c1:d0:a2:71:a2:55:69:29:24:40: 60:08:fb:0a:44:44:b7:e7:86:e5:29:2f:7d:3d:40: 66:44:86:34:40:9f:ed:eb:84:79:5f:fa:ce:bf:d7: d4:bf:04:52:16:2f:a4:f3:76:6c:85:df:8a:ab:73: d8:36:59:c8:0f:e8:ff:0f:dd:6c:65:9e:05:0b:c2: 88:34:85:bc:13:44:7b:19:dc:45:65:0c:7d:0d:23: 34:2d:15:96:e1:22:04:90:9a:69:e5:ef:d9:b1:83: 9a:7e:94:f1:3c:d8:f0:bf:29:f8:61:c0:09:e5:2f: ae:84:11:a6:8b:7b:94:f8:c2:e2:30:81:40:2e:56: 84:19:03:d0:9c:a4:47:22:17:48:7e:0d:37:0e:e1: 7b:91:4c:15:26:dc:96:10:10:6c:5f:df:43:fc:9f: 50:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:36:EA:A4:9E:8D:08:09:53:95:8E:8A:1D:A7:C0:47:31:3C:05:BA X509v3 Authority Key Identifier: keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:5b:c8:b4:42:14:5a:50:81:88:b4:ad:e2:d5:78:88:bd:c2: f8:22:d8:50:dd:f9:bc:4b:65:47:3b:ce:08:f6:a9:41:ef:c5: 00:2a:7a:de:e3:54:4d:c6:c8:52:71:fa:3b:12:04:ce:71:0a: 99:1e:de:21:57:8f:72:76:38:eb:80:25:34:9f:5e:31:80:3d: 98:a8:4c:8b:ce:41:95:3f:87:c8:96:f7:7b:e0:fc:de:5f:1e: 77:40:08:f5:65:ca:06:f2:a0:54:71:e1:49:56:43:17:d0:1b: d0:20:06:60:4e:84:ba:fd:ff:28:ee:8b:90:c6:d5:07:1b:d6: c7:73:63:3a:9e:f2:5d:57:af:9c:0b:cb:4d:9d:7f:fa:11:4e: 31:94:a6:c9:97:70:1a:c7:56:5d:11:94:72:61:27:7a:99:30: b5:67:3d:f4:74:7f:2c:27:53:49:eb:61:35:01:36:87:45:a0: 6c:ed:a0:80:1c:81:32:7d:fe:c4:8f:04:4a:4e:49:e0:74:2c: 05:0c:6e:16:87:17:26:78:db:d2:66:12:c5:fc:d2:04:88:08: f6:ab:af:3f:b4:c0:66:c3:4f:76:0f:46:21:58:1a:d0:f7:90: 85:42:f3:ad:7a:9e:83:50:1b:a0:95:aa:9e:86:b2:81:a5:71: 81:06:44:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWoudFCaceZJGv34aQOznMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjY4MWNhYTFkMzdlNTg5OWJhMjdkZmJjMzY5NjBlMDZi NWQzZjIwHhcNMjUxMjIxMTAwMDM0WhcNMjUxMjIyMTAwMDM0WjAzMTEwLwYDVQQD EygzODM2ZWFhNDllOGQwODA5NTM5NThlOGExZGE3YzA0NzMxM2MwNWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZWX0mWRTIC2bIiA4YU8E6Ciz/Oc 4qEJlJOlHbdqex6SV3KZTM1R0c6vvSc3pVium/YIeEHA6uoQ0VuFws/GCrUZfD3H mr/lPm8xFHKmxQ4Sj93cUMD/GcAg6Py/rcHQonGiVWkpJEBgCPsKRES354blKS99 PUBmRIY0QJ/t64R5X/rOv9fUvwRSFi+k83Zshd+Kq3PYNlnID+j/D91sZZ4FC8KI NIW8E0R7GdxFZQx9DSM0LRWW4SIEkJpp5e/ZsYOafpTxPNjwvyn4YcAJ5S+uhBGm i3uU+MLiMIFALlaEGQPQnKRHIhdIfg03DuF7kUwVJtyWEBBsX99D/J9QDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDg26qSejQgJU5WOih2nwEcxPAW6MB8GA1UdIwQY MBaAFPJmgcqh035Ymbon37w2lg4GtdPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYWVlYjYtODAxNy00YzIyLWE4MWMt NjQwNzVjMmFlNDYzLzEvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jYWVlYjYtODAxNy00YzIyLWE4MWMtNjQwNzVjMmFlNDYz LzEvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVvItEIU WlCBiLSt4tV4iL3C+CLYUN35vEtlRzvOCPapQe/FACp63uNUTcbIUnH6OxIEznEK mR7eIVePcnY464AlNJ9eMYA9mKhMi85BlT+HyJb3e+D83l8ed0AI9WXKBvKgVHHh SVZDF9Ab0CAGYE6Euv3/KO6LkMbVBxvWx3NjOp7yXVevnAvLTZ1/+hFOMZSmyZdw GsdWXRGUcmEnepkwtWc99HR/LCdTSethNQE2h0WgbO2ggByBMn3+xI8ESk5J4HQs BQxuFocXJnjb0mYSxfzSBIgI9quvP7TAZsNPdg9GIVga0PeQhULzrXqeg1AboJWq noaygaVxgQZEAA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:52:14 2025 by rpki-client