This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json) Hash identifier: LO9EpD1HHjlEoawPLz1mWQtsG6cATQfmjoQ9CADk5sE= Subject key identifier: B4:53:C9:66:7B:73:AD:3A:11:38:69:7F:FC:D3:30:4C:7D:50:84:21 Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0 Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0 Certificate serial: 019B3D231B92A7F690BCEF4F16C34787FE07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft Manifest number: 11D1 Signing time: Sat 20 Dec 2025 19:01:09 +0000 Manifest this update: Sat 20 Dec 2025 19:01:09 +0000 Manifest next update: Sun 21 Dec 2025 19:01:09 +0000 Files and hashes: 1: 3xyNiwxMLt2FgnnzD8FWO0WnAhc.roa (hash: pOZz2o1zgseBlXSeMbMTXOoQ45eoVXgqdP67Uo4BTQg=) 2: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: joyKS2rSZuP+2fY8VPCAAwyKmIfjS5UvNafv/eGWA2A=) 3: I-Q-pMgCHQ9W_jpWDux3P7cZIcY.roa (hash: pAX53nRh4A+NdTng//otyGRQizgrDPu6+ERbaPVic0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:1b:92:a7:f6:90:bc:ef:4f:16:c3:47:87:fe:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0 Validity Not Before: Dec 20 19:01:09 2025 GMT Not After : Dec 21 19:01:09 2025 GMT Subject: CN=b453c9667b73ad3a1138697ffcd3304c7d508421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:12:60:95:9b:77:ac:f0:65:c7:6f:1f:b3:2a: 0c:98:a5:bc:2a:46:82:08:3b:fa:3c:4e:db:7a:49: 9b:56:a4:63:ec:1e:70:7e:f2:39:3b:a4:ce:3e:20: d7:31:18:2e:c5:dd:20:5a:f4:61:92:59:1f:db:50: fc:9b:1c:0c:96:f2:98:d7:68:b6:b0:4b:f2:d3:57: 86:45:fd:c0:31:86:6c:01:ff:5c:94:5f:97:df:e0: ae:7b:69:1d:4b:aa:25:71:b3:52:96:a6:31:7b:0d: d9:79:9e:fd:f5:83:30:49:bb:eb:98:03:70:9f:a2: a5:b0:84:a9:65:43:4c:c0:51:1e:a0:70:81:72:82: cd:42:67:13:eb:0e:d3:b2:d5:1e:ec:14:f1:c3:90: ac:15:52:47:02:0d:e9:eb:d7:e5:29:c0:99:d9:eb: 4c:07:9d:cd:ef:ce:d2:e0:b5:6f:68:3a:aa:dd:32: ca:e5:c8:d3:62:8d:4a:9d:e5:8c:c2:08:8a:91:70: 7f:b5:a9:22:42:18:6b:50:87:b4:d5:fc:5e:9b:8d: 00:f1:4f:4e:fb:d6:6b:ff:94:99:85:eb:19:39:8d: 03:85:48:68:db:85:0d:07:93:99:b9:f5:3a:69:b1: f0:48:ce:ef:5f:4b:bb:54:e5:b8:ac:f4:f4:55:4d: fb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:53:C9:66:7B:73:AD:3A:11:38:69:7F:FC:D3:30:4C:7D:50:84:21 X509v3 Authority Key Identifier: keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:f2:c6:a9:3e:e8:87:d8:54:32:33:41:da:7f:cf:4c:fb:a7: ba:5d:89:47:73:e4:fd:ee:5e:41:02:09:70:c2:cf:ae:92:e1: 22:36:28:d0:64:b7:09:95:ab:89:84:2c:3d:1c:f0:34:d6:0f: 67:ff:65:25:75:0c:94:5f:44:0c:6f:75:7f:f2:2b:9d:7e:e5: 6c:24:65:36:f7:33:24:bc:8b:63:5c:d6:6a:1e:4d:7d:f3:b8: 36:65:84:88:89:58:45:bb:09:3d:1f:c8:67:34:09:f0:c8:d8: e5:31:11:9f:88:48:89:c5:a4:00:f5:ca:f4:b9:e0:87:63:47: ea:1c:78:10:07:1f:5b:5d:5b:53:6b:76:6d:51:e7:46:b2:1b: be:ba:fd:a0:3f:0a:4a:79:9b:14:94:f5:48:44:38:c4:7e:f5: 08:a6:5a:be:f4:99:c2:e8:61:69:40:be:a7:91:ed:a2:f0:54: 17:b6:5e:9a:9f:06:5e:d0:88:a5:70:37:5b:b9:e7:8c:5e:e3: 89:6d:5a:b5:cf:20:0a:7e:ca:06:13:0b:10:9f:44:7c:be:fb: 60:6f:3f:14:c2:a6:26:0d:f3:28:9b:7c:dd:4e:e4:6e:48:a3: a3:e6:aa:22:68:ae:4f:a6:2f:35:62:62:8f:ab:84:41:d6:f0: 13:1d:17:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IxuSp/aQvO9PFsNHh/4HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNWNiOWFmYzhhODY3MGUxZjExNmNiZDIxNDk5YzlmNzEy MTViYzAwHhcNMjUxMjIwMTkwMTA5WhcNMjUxMjIxMTkwMTA5WjAzMTEwLwYDVQQD EyhiNDUzYzk2NjdiNzNhZDNhMTEzODY5N2ZmY2QzMzA0YzdkNTA4NDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRJglZt3rPBlx28fsyoMmKW8KkaC CDv6PE7bekmbVqRj7B5wfvI5O6TOPiDXMRguxd0gWvRhklkf21D8mxwMlvKY12i2 sEvy01eGRf3AMYZsAf9clF+X3+Cue2kdS6olcbNSlqYxew3ZeZ799YMwSbvrmANw n6KlsISpZUNMwFEeoHCBcoLNQmcT6w7TstUe7BTxw5CsFVJHAg3p69flKcCZ2etM B53N787S4LVvaDqq3TLK5cjTYo1KneWMwgiKkXB/takiQhhrUIe01fxem40A8U9O +9Zr/5SZhesZOY0DhUho24UNB5OZufU6abHwSM7vX0u7VOW4rPT0VU377wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRTyWZ7c606EThpf/zTMEx9UIQhMB8GA1UdIwQY MBaAFPFcua/IqGcOHxFsvSFJnJ9xIVvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgt MDI3YTc0M2JhNDYyLzEvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgtMDI3YTc0M2JhNDYy LzEvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvLGqT7o h9hUMjNB2n/PTPunul2JR3Pk/e5eQQIJcMLPrpLhIjYo0GS3CZWriYQsPRzwNNYP Z/9lJXUMlF9EDG91f/IrnX7lbCRlNvczJLyLY1zWah5NffO4NmWEiIlYRbsJPR/I ZzQJ8MjY5TERn4hIicWkAPXK9Lngh2NH6hx4EAcfW11bU2t2bVHnRrIbvrr9oD8K SnmbFJT1SEQ4xH71CKZavvSZwuhhaUC+p5HtovBUF7Zemp8GXtCIpXA3W7nnjF7j iW1atc8gCn7KBhMLEJ9EfL77YG8/FMKmJg3zKJt83U7kbkijo+aqImiuT6YvNWJi j6uEQdbwEx0X4w== -----END CERTIFICATE-----Generated at Sun Dec 21 04:07:05 2025 by rpki-client