This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json) Hash identifier: 5ia3FPMFvgI70lMLag/AizPp9d6lgj7k+gkWD+7G+I8= Subject key identifier: FA:AC:6E:89:5B:5A:53:29:B0:AF:3C:97:40:6D:7A:6F:0D:67:D5:A2 Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac Certificate serial: 019B3A90A3994429275CD871360158639FF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 07:01:56 +0000 Manifest this update: Sat 20 Dec 2025 07:01:56 +0000 Manifest next update: Sun 21 Dec 2025 07:01:56 +0000 Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: 7fbhlLzvUxBDERt+SxaAmYXNxme0mJDVJOmf2R2UrOg=) 2: m61Skl38qNd_z8iy_icAt6gZ-a0.roa (hash: agPnne36nNKEttk3MarLpGi1Y49vXcfn+4zgZdtH3ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:a3:99:44:29:27:5c:d8:71:36:01:58:63:9f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac Validity Not Before: Dec 20 07:01:56 2025 GMT Not After : Dec 21 07:01:56 2025 GMT Subject: CN=faac6e895b5a5329b0af3c97406d7a6f0d67d5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1d:08:af:44:02:b1:1b:1f:57:2d:17:36:8a: db:82:30:2f:86:b7:27:d5:ea:d5:c3:c6:8f:aa:d1: 16:39:4d:7b:d4:ad:dd:40:4d:da:cc:58:71:67:c1: cf:2c:b0:d4:ce:7b:f1:0b:f0:b4:56:28:6c:05:68: 5d:af:94:43:1d:22:92:16:c5:51:62:52:cd:7c:59: 9a:15:ab:03:d1:5f:3a:a4:12:fe:5b:58:aa:3c:a9: 56:92:49:5c:9d:16:22:60:1b:40:4c:75:62:ad:f9: dd:ca:b9:c1:ba:41:74:a8:b0:b6:56:89:51:ad:21: bc:94:f6:b7:84:ec:cb:fa:80:ad:19:ef:20:6a:9d: 59:6f:ad:b0:2e:a3:58:75:c4:d9:ae:d8:1c:c1:55: 5a:e6:b9:a2:a8:1e:a2:b7:b2:0c:ff:53:ad:5b:69: 63:ef:52:2d:4b:d6:93:2b:76:b1:27:98:a8:6f:5a: 41:32:31:07:ab:25:78:72:b6:64:fd:74:a4:22:a4: d5:f8:eb:a7:19:af:9d:26:d7:52:b1:b3:d5:d4:c3: dc:88:dc:72:8f:a8:18:b5:6a:25:e8:ad:75:e9:02: 11:6f:de:b9:fc:89:ac:d8:25:d7:70:cb:ca:08:26: b6:02:77:59:7a:36:39:93:9c:cc:96:6e:7b:16:84: 20:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AC:6E:89:5B:5A:53:29:B0:AF:3C:97:40:6D:7A:6F:0D:67:D5:A2 X509v3 Authority Key Identifier: keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:54:8f:3d:df:c4:22:bf:f5:81:46:12:de:17:f1:e2:e1:fd: e6:a0:48:3f:15:5e:b1:ad:41:5f:64:70:c4:d0:2b:8c:76:68: 23:58:6d:e7:15:e7:dc:de:da:af:06:f1:3f:81:e5:a6:24:ed: de:fe:af:72:e6:cc:63:63:de:d8:83:be:1d:ca:93:6a:5b:79: 3e:1f:bc:d0:e8:f4:81:38:b7:50:ce:3a:46:f2:4a:9a:0c:8d: 83:8d:c2:a9:75:12:38:33:10:cc:97:ce:09:fe:98:13:eb:ff: c9:b4:20:31:3c:a6:66:e7:cf:2c:be:c3:a4:ee:93:02:eb:85: 33:26:60:4e:c7:0b:4a:2d:fb:2c:af:3e:55:e8:d5:7c:61:91: 2b:12:9e:ab:54:8c:a7:ea:35:b4:aa:04:64:54:39:26:83:27: 69:5d:94:bd:95:ce:75:ef:63:e0:b2:1a:0d:68:c2:f2:68:21: 35:40:12:e6:6c:f1:5b:02:05:b7:a0:60:b8:a6:4f:1a:79:d0: 0d:0f:ad:4e:8f:a4:4d:38:97:bf:3f:c7:d2:c5:55:fc:ef:a7: 51:4a:26:7a:e4:ac:89:d9:dc:89:37:f9:84:13:11:75:ae:46: a1:7e:47:b2:b6:8a:6c:aa:04:c6:95:d6:2d:ad:32:72:fd:34: 9e:e1:ba:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kKOZRCknXNhxNgFYY5/zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNTZhOWVkYjJkOWFkZTIwNGQ4MjMxM2NjZTk4YjY2MjNh OWQ4YWMwHhcNMjUxMjIwMDcwMTU2WhcNMjUxMjIxMDcwMTU2WjAzMTEwLwYDVQQD EyhmYWFjNmU4OTViNWE1MzI5YjBhZjNjOTc0MDZkN2E2ZjBkNjdkNWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB0Ir0QCsRsfVy0XNorbgjAvhrcn 1erVw8aPqtEWOU171K3dQE3azFhxZ8HPLLDUznvxC/C0VihsBWhdr5RDHSKSFsVR YlLNfFmaFasD0V86pBL+W1iqPKlWkklcnRYiYBtATHVirfndyrnBukF0qLC2VolR rSG8lPa3hOzL+oCtGe8gap1Zb62wLqNYdcTZrtgcwVVa5rmiqB6it7IM/1OtW2lj 71ItS9aTK3axJ5iob1pBMjEHqyV4crZk/XSkIqTV+OunGa+dJtdSsbPV1MPciNxy j6gYtWol6K116QIRb965/Ims2CXXcMvKCCa2AndZejY5k5zMlm57FoQg2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqsbolbWlMpsK88l0Btem8NZ9WiMB8GA1UdIwQY MBaAFPJWqe2y2a3iBNgjE8zpi2YjqdisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGxhcDdiTFpyZUlFMkNNVHpPbUxaaU9wMkt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8xMjZjOWUtNGZhNy00OWQ0LTkyOGMt OTEwN2M5MTJkN2Q4LzEvOGxhcDdiTFpyZUlFMkNNVHpPbUxaaU9wMkt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8xMjZjOWUtNGZhNy00OWQ0LTkyOGMtOTEwN2M5MTJkN2Q4 LzEvOGxhcDdiTFpyZUlFMkNNVHpPbUxaaU9wMkt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlSPPd/E Ir/1gUYS3hfx4uH95qBIPxVesa1BX2RwxNArjHZoI1ht5xXn3N7arwbxP4HlpiTt 3v6vcubMY2Pe2IO+HcqTalt5Ph+80Oj0gTi3UM46RvJKmgyNg43CqXUSODMQzJfO Cf6YE+v/ybQgMTymZufPLL7DpO6TAuuFMyZgTscLSi37LK8+VejVfGGRKxKeq1SM p+o1tKoEZFQ5JoMnaV2UvZXOde9j4LIaDWjC8mghNUAS5mzxWwIFt6BguKZPGnnQ DQ+tTo+kTTiXvz/H0sVV/O+nUUomeuSsidnciTf5hBMRda5GoX5HsraKbKoExpXW La0ycv00nuG6Ww== -----END CERTIFICATE-----Generated at Sat Dec 20 12:06:04 2025 by rpki-client