This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft File: 8v_48bgcLGFPw-lOsXy6CUAhGgE.mft (raw, json) Hash identifier: s2Q67ToNKZ6M/0DzVVHPwpMbkCc+fJWaY1VMVFU4awk= Subject key identifier: 3C:A6:BF:CB:34:07:ED:F0:14:4F:87:44:DD:47:0B:44:DA:05:C7:E6 Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01 Certificate issuer: /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01 Certificate serial: 019B522A8903C7E73554D38BE06817AAE34B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 21:01:17 +0000 Manifest this update: Wed 24 Dec 2025 21:01:17 +0000 Manifest next update: Thu 25 Dec 2025 21:01:17 +0000 Files and hashes: 1: 8v_48bgcLGFPw-lOsXy6CUAhGgE.crl (hash: 6Saf1b9koOqmM0WXsKHaRuF6zagc/u0iBgCKSDzWTh8=) 2: vf_PL7Z26am-bUWHqusGVLE57ns.roa (hash: lq/qQHwmZ7jgnqMZo6s1jASjE57LJ9Te+YbA+3H42GE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:89:03:c7:e7:35:54:d3:8b:e0:68:17:aa:e3:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01 Validity Not Before: Dec 24 21:01:17 2025 GMT Not After : Dec 25 21:01:17 2025 GMT Subject: CN=3ca6bfcb3407edf0144f8744dd470b44da05c7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e8:57:ee:cb:5a:d8:a6:35:ab:62:27:fe:81: 45:7d:04:30:92:26:51:5a:94:c5:e8:52:c5:25:51: 75:d4:32:d8:9b:ab:ca:46:db:26:fd:d9:7e:ec:a3: c7:81:d6:e3:3d:5f:12:23:9c:f8:51:06:f8:6d:56: dc:db:58:14:43:d4:31:71:0c:e2:78:73:54:e2:f7: 66:8d:bf:d7:8a:58:51:60:ed:61:df:f8:b6:52:65: a7:99:0f:e1:9e:e1:6f:c7:18:3d:3e:46:33:71:c4: 7a:d2:17:14:e4:b0:2d:dc:98:f1:d2:6f:1c:e4:9b: ee:81:05:7d:7f:1e:9a:eb:80:7e:48:13:72:4a:af: b9:34:c9:dd:08:24:77:a0:55:59:18:35:9b:bd:bb: ce:f9:6e:0c:f7:5d:5f:1a:12:4f:06:2e:a7:50:28: 81:60:69:22:6b:bd:44:5c:92:18:e3:09:ec:8b:8d: da:85:1e:b2:cd:fd:b7:4d:c1:67:53:df:a9:26:6a: 09:9b:00:1c:12:8c:05:97:5a:78:c0:c1:4c:af:c4: af:2d:56:d4:2b:8f:aa:2a:8a:75:02:39:f8:5c:d0: 88:85:11:85:9b:7e:07:7e:2e:88:dd:f3:de:aa:9d: d0:45:7a:66:b9:78:e5:09:78:cb:29:63:01:aa:3f: db:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A6:BF:CB:34:07:ED:F0:14:4F:87:44:DD:47:0B:44:DA:05:C7:E6 X509v3 Authority Key Identifier: keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:34:1e:3a:ce:ce:8a:67:75:cd:ae:77:44:67:03:15:56:43: d7:cc:2b:c8:ef:18:37:6e:dd:a2:94:27:08:ad:5b:70:51:5d: 43:a8:a6:41:fa:54:e6:e3:5e:2d:44:10:be:7c:fb:1a:75:d9: 28:a6:15:78:fc:b6:6a:f1:3d:37:a4:39:90:0c:d4:3d:d3:40: 91:f5:be:ad:c5:fd:83:3c:a9:45:85:48:ef:20:4b:ca:f2:e5: 47:45:44:0a:46:b8:7a:f2:9c:8d:fb:df:e9:ab:ca:8d:2d:76: d4:30:09:99:00:bf:04:5e:cc:66:f8:28:5c:f7:dd:97:c7:3c: b1:01:3c:81:ac:cc:7c:7e:96:b5:64:a3:23:30:92:7f:03:42: dc:09:b7:40:d7:85:a8:33:04:8a:ba:52:c6:81:b0:1a:55:fc: c9:4b:cc:5a:b5:dc:ba:98:c3:7f:46:b1:8a:3a:e7:64:d7:07: 61:8a:e7:96:51:a6:d7:ac:ba:1d:49:b3:a6:3c:48:fc:b8:5b: 9f:6a:3e:a2:5a:9d:eb:3a:2f:31:1b:39:61:ca:1e:af:59:f8: 51:cd:7c:f1:21:34:10:3f:47:d6:b0:e4:73:e7:18:54:62:ca: 83:45:ee:b2:3f:03:97:5b:1b:12:67:8e:8b:c1:0d:82:55:22: 52:e4:39:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKokDx+c1VNOL4GgXquNLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZmZmOGYxYjgxYzJjNjE0ZmMzZTk0ZWIxN2NiYTA5NDAy MTFhMDEwHhcNMjUxMjI0MjEwMTE3WhcNMjUxMjI1MjEwMTE3WjAzMTEwLwYDVQQD EygzY2E2YmZjYjM0MDdlZGYwMTQ0Zjg3NDRkZDQ3MGI0NGRhMDVjN2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+hX7sta2KY1q2In/oFFfQQwkiZR WpTF6FLFJVF11DLYm6vKRtsm/dl+7KPHgdbjPV8SI5z4UQb4bVbc21gUQ9QxcQzi eHNU4vdmjb/XilhRYO1h3/i2UmWnmQ/hnuFvxxg9PkYzccR60hcU5LAt3Jjx0m8c 5JvugQV9fx6a64B+SBNySq+5NMndCCR3oFVZGDWbvbvO+W4M911fGhJPBi6nUCiB YGkia71EXJIY4wnsi43ahR6yzf23TcFnU9+pJmoJmwAcEowFl1p4wMFMr8SvLVbU K4+qKop1Ajn4XNCIhRGFm34Hfi6I3fPeqp3QRXpmuXjlCXjLKWMBqj/bnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDymv8s0B+3wFE+HRN1HC0TaBcfmMB8GA1UdIwQY MBaAFPL/+PG4HCxhT8PpTrF8uglAIRoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHZfNDhiZ2NMR0ZQdy1sT3NYeTZDVUFoR2dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yMDAyYzQtZWIwYS00NzAwLTkwNzYt MTc0NDFiZmU1NmNmLzEvOHZfNDhiZ2NMR0ZQdy1sT3NYeTZDVUFoR2dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8yMDAyYzQtZWIwYS00NzAwLTkwNzYtMTc0NDFiZmU1NmNm LzEvOHZfNDhiZ2NMR0ZQdy1sT3NYeTZDVUFoR2dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzQeOs7O imd1za53RGcDFVZD18wryO8YN27dopQnCK1bcFFdQ6imQfpU5uNeLUQQvnz7GnXZ KKYVePy2avE9N6Q5kAzUPdNAkfW+rcX9gzypRYVI7yBLyvLlR0VECka4evKcjfvf 6avKjS121DAJmQC/BF7MZvgoXPfdl8c8sQE8gazMfH6WtWSjIzCSfwNC3Am3QNeF qDMEirpSxoGwGlX8yUvMWrXcupjDf0axijrnZNcHYYrnllGm16y6HUmzpjxI/Lhb n2o+olqd6zovMRs5Ycoer1n4Uc188SE0ED9H1rDkc+cYVGLKg0Xusj8Dl1sbEmeO i8ENglUiUuQ5uw== -----END CERTIFICATE-----Generated at Thu Dec 25 01:22:17 2025 by rpki-client