This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft File: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft (raw, json) Hash identifier: mgH7ujGjhNthpHA7Men0LQNU/GIVabZo6g4XFAHpm8o= Subject key identifier: 31:26:3F:85:E9:0B:54:65:F2:CE:D8:25:3F:A5:61:45:EF:E2:34:D8 Authority key identifier: 8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83 Certificate issuer: /CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83 Certificate serial: 019B3C7EC7E7E8094ED83D690DFC6B928607 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 16:01:40 +0000 Manifest this update: Sat 20 Dec 2025 16:01:40 +0000 Manifest next update: Sun 21 Dec 2025 16:01:40 +0000 Files and hashes: 1: di6vtJn17ke553wiZoaxDGK1MLE.roa (hash: HpCMH1Ia0lvZ8f3O26OMSYPbId0TPu+1abwCSdtco9A=) 2: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl (hash: QblSvK4jUxqh6Ny0RRarMZoJMuCt7GJvzyxILiT8ldg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:c7:e7:e8:09:4e:d8:3d:69:0d:fc:6b:92:86:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83 Validity Not Before: Dec 20 16:01:40 2025 GMT Not After : Dec 21 16:01:40 2025 GMT Subject: CN=31263f85e90b5465f2ced8253fa56145efe234d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1d:19:0d:26:be:8a:20:8b:e1:31:ee:fe:cf: ca:bd:9e:e8:53:e9:d6:89:a0:6c:86:ce:9a:fc:3c: 30:04:26:cf:06:f2:b8:1c:1a:28:80:7b:63:c9:41: bd:ab:7b:2d:ed:dd:15:a3:be:f4:b4:48:9d:47:1c: 01:4b:ef:f4:59:2c:d2:3f:33:07:54:0c:56:d3:e8: 2a:bf:3e:6d:41:04:ea:b3:88:84:75:ae:91:f5:67: ec:60:91:fb:bd:2e:6d:86:80:80:a2:ad:c5:13:8b: 89:6b:92:f0:29:ee:5d:e8:37:7f:10:66:a7:1a:06: 8e:f5:07:e7:0f:3a:ce:40:2b:ca:7b:a7:5c:f2:61: 5e:b4:fa:9f:a1:8c:fc:2a:2c:a6:56:dd:d8:34:9d: 9a:f6:86:b3:b8:8b:0b:20:7f:e8:9b:dc:33:2a:b1: 19:ca:20:9f:25:48:c6:fb:24:42:13:ce:68:02:fa: ac:d8:0f:9e:ab:fa:45:be:30:28:93:72:db:eb:72: 81:c9:4f:ab:6d:e8:c3:0f:a7:d3:e2:73:da:46:fa: 03:c6:d1:5d:0f:60:96:ba:00:f9:3b:6e:5b:58:1b: 53:f9:38:b7:1e:b9:60:35:f9:7c:64:2a:aa:4b:25: 6d:76:59:0c:5c:08:a3:6c:60:02:a4:b0:16:fe:ad: 9a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:26:3F:85:E9:0B:54:65:F2:CE:D8:25:3F:A5:61:45:EF:E2:34:D8 X509v3 Authority Key Identifier: keyid:8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:55:be:dd:ee:5f:0a:4a:d8:7e:e1:3c:46:28:c3:3a:f8:40: 7d:d6:16:8c:23:33:5c:2a:af:1c:e3:7f:23:16:b6:dc:97:a4: a5:94:1a:c6:87:e2:52:ab:85:ad:44:cb:f9:62:10:ee:d5:ed: d8:68:3a:6d:f4:c1:44:c8:cb:d1:41:f7:4b:61:04:79:40:75: b5:82:b7:69:53:f6:e2:1e:63:4e:bc:a7:bf:10:90:17:c2:af: 86:5d:04:13:2f:c9:dc:1e:78:ed:5e:a6:f9:41:b4:93:e8:dc: dd:33:19:f9:6d:cd:3b:8c:d4:c9:e4:23:b1:92:a0:3c:db:d4: 10:ee:98:34:7b:f2:42:be:2b:8f:cf:66:7f:dd:d9:60:51:5b: 03:8f:12:ac:c9:ad:6a:99:e0:8e:15:50:02:40:02:15:c2:39: bf:95:a8:b7:10:f9:c6:7b:d3:b0:e2:d9:1e:dc:df:bf:f3:56: b4:28:b3:f9:63:59:34:71:44:fa:fe:7a:96:0f:12:7f:93:ce: c8:09:18:32:6c:c6:57:36:db:bf:bc:80:14:a1:34:aa:16:79: 08:15:bc:9d:5e:7e:6c:cb:fd:4d:cf:87:f2:72:11:2a:ba:b4: 4c:c0:c6:18:27:b8:e7:1b:d9:4c:93:e8:ab:7d:d7:a6:1a:a5: cd:b9:e3:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fsfn6AlO2D1pDfxrkoYHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiY2JkYjUxZWI4MDIyNmY0MTQ3N2E3YmM1MGUwZjk2MTQ1 NWVkODMwHhcNMjUxMjIwMTYwMTQwWhcNMjUxMjIxMTYwMTQwWjAzMTEwLwYDVQQD EygzMTI2M2Y4NWU5MGI1NDY1ZjJjZWQ4MjUzZmE1NjE0NWVmZTIzNGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx0ZDSa+iiCL4THu/s/KvZ7oU+nW iaBshs6a/DwwBCbPBvK4HBoogHtjyUG9q3st7d0Vo770tEidRxwBS+/0WSzSPzMH VAxW0+gqvz5tQQTqs4iEda6R9WfsYJH7vS5thoCAoq3FE4uJa5LwKe5d6Dd/EGan GgaO9QfnDzrOQCvKe6dc8mFetPqfoYz8KiymVt3YNJ2a9oazuIsLIH/om9wzKrEZ yiCfJUjG+yRCE85oAvqs2A+eq/pFvjAok3Lb63KByU+rbejDD6fT4nPaRvoDxtFd D2CWugD5O25bWBtT+Ti3HrlgNfl8ZCqqSyVtdlkMXAijbGACpLAW/q2awwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEmP4XpC1Rl8s7YJT+lYUXv4jTYMB8GA1UdIwQY MBaAFIvL21HrgCJvQUd6e8UOD5YUVe2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81NjRmM2EtNTJkNi00ZDA5LTgxZTIt ZWZhOTM5MWY3ZDllLzEvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy81NjRmM2EtNTJkNi00ZDA5LTgxZTItZWZhOTM5MWY3ZDll LzEvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1W+3e5f CkrYfuE8RijDOvhAfdYWjCMzXCqvHON/Ixa23JekpZQaxofiUquFrUTL+WIQ7tXt 2Gg6bfTBRMjL0UH3S2EEeUB1tYK3aVP24h5jTrynvxCQF8Kvhl0EEy/J3B547V6m +UG0k+jc3TMZ+W3NO4zUyeQjsZKgPNvUEO6YNHvyQr4rj89mf93ZYFFbA48SrMmt apngjhVQAkACFcI5v5WotxD5xnvTsOLZHtzfv/NWtCiz+WNZNHFE+v56lg8Sf5PO yAkYMmzGVzbbv7yAFKE0qhZ5CBW8nV5+bMv9Tc+H8nIRKrq0TMDGGCe45xvZTJPo q33XphqlzbnjzA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:09:01 2025 by rpki-client