This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft File: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft (raw, json) Hash identifier: hqvORBxW7Kd9GkgrEvMYAylvVFceR0aqTL5hN+bOhxs= Subject key identifier: BC:9B:85:36:1C:CD:FA:BD:1E:C1:2E:08:8A:EE:DE:3A:F0:1A:0F:1C Authority key identifier: AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D Certificate issuer: /CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d Certificate serial: 019B511762BEEB6728907DBFFD0FCEEA0926 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft Manifest number: 0BF1 Signing time: Wed 24 Dec 2025 16:00:45 +0000 Manifest this update: Wed 24 Dec 2025 16:00:45 +0000 Manifest next update: Thu 25 Dec 2025 16:00:45 +0000 Files and hashes: 1: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl (hash: RocyWeMcWDt1lUJd87ldo898gaf/dDlnNxfQ4fQ6XyM=) 2: y434m32YaOSFWfdjMrvD69-28ws.roa (hash: 2wH2CADXRiwQAKzkBQR9rJEZcF/YGQDp6VtufnWzYz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:62:be:eb:67:28:90:7d:bf:fd:0f:ce:ea:09:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d Validity Not Before: Dec 24 16:00:45 2025 GMT Not After : Dec 25 16:00:45 2025 GMT Subject: CN=bc9b85361ccdfabd1ec12e088aeede3af01a0f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1a:77:da:5f:47:52:63:f1:04:e1:ea:a3:46: 20:40:ff:2f:43:cc:80:6b:72:65:89:c1:03:ce:56: d3:12:ae:01:da:29:54:b8:59:57:c6:3c:18:06:0a: 43:1b:81:bc:5e:7d:1d:a5:5e:72:6b:8c:60:73:8e: e5:a8:94:e8:53:ed:23:4c:bc:4b:66:ae:99:62:60: e0:93:3c:32:a7:f3:ee:ff:3d:89:26:fd:16:24:e5: de:0a:13:8d:94:c0:28:71:91:fa:97:67:13:91:41: ed:21:6b:54:53:de:12:31:aa:3f:a7:8f:d6:d5:5e: 61:26:9b:70:10:9f:e0:60:1a:c4:c1:0c:e9:e3:c2: 25:9f:12:e9:19:87:1b:a1:5a:93:77:f0:5e:be:39: eb:a5:66:a2:93:1c:bb:87:53:10:ba:bc:26:f2:f5: a4:42:7a:9f:8d:d7:90:2d:f2:28:e7:da:47:74:d8: 78:0a:4c:7c:fc:1e:98:a2:30:5e:5b:ec:25:22:33: 1d:c4:ca:3e:32:12:0f:4d:84:1b:dd:3f:1a:af:61: 4c:73:14:55:f3:26:af:69:61:9e:76:63:74:48:52: 13:47:51:97:6b:9c:cc:4a:c5:83:cd:2d:ea:d1:1b: 4a:dd:2e:cc:fa:c3:7b:44:8f:1b:7b:04:85:a8:15: 72:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:9B:85:36:1C:CD:FA:BD:1E:C1:2E:08:8A:EE:DE:3A:F0:1A:0F:1C X509v3 Authority Key Identifier: keyid:AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f1:99:9f:d5:ca:d8:5d:cd:c6:3f:84:22:af:a6:dd:66:7d: 79:b0:59:bd:7e:6c:b7:3b:51:fc:89:ee:d4:38:eb:41:0a:df: 2f:2c:fd:7f:3c:5c:96:60:9a:69:a8:fc:0e:0d:ab:d2:f3:1e: 90:70:ea:a4:b1:5d:45:d6:fb:73:f1:ec:17:78:cd:38:80:e0: e6:b9:63:bb:ec:20:9e:48:59:93:44:06:e1:9e:d3:3c:98:e4: ba:b4:11:60:fa:ba:25:00:30:4a:22:18:b9:5c:2c:fe:e6:11: 15:09:35:23:2a:ae:47:93:40:2c:1f:9c:24:b5:4c:a3:2d:a8: 84:6c:51:cc:76:6f:25:07:a5:24:56:17:27:5f:9c:01:b4:bc: 09:17:aa:69:f5:82:65:fb:83:c0:a2:44:a2:2d:37:73:97:af: 28:9f:0e:51:50:aa:b9:4f:0b:52:e0:eb:f9:c7:ca:11:43:cf: b1:e4:4d:9c:29:1e:fd:c8:52:8a:66:b0:66:3a:a9:37:b4:15: 20:96:bf:2d:69:85:ca:6e:63:cd:ba:8d:51:b2:ab:6f:aa:33: 83:01:08:02:3d:0e:89:51:ab:9b:af:71:47:2e:fa:81:77:a8: 93:5a:72:7b:2e:dd:0f:c6:d7:0e:f7:6a:5c:8f:01:72:8c:26: 57:7b:c2:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF2K+62cokH2//Q/O6gkmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmY2MxZDMwZWRlZWFiNTRiNTgxMmE5OTBhOTQzZTNlOGZl ODM5MWQwHhcNMjUxMjI0MTYwMDQ1WhcNMjUxMjI1MTYwMDQ1WjAzMTEwLwYDVQQD EyhiYzliODUzNjFjY2RmYWJkMWVjMTJlMDg4YWVlZGUzYWYwMWEwZjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxp32l9HUmPxBOHqo0YgQP8vQ8yA a3JlicEDzlbTEq4B2ilUuFlXxjwYBgpDG4G8Xn0dpV5ya4xgc47lqJToU+0jTLxL Zq6ZYmDgkzwyp/Pu/z2JJv0WJOXeChONlMAocZH6l2cTkUHtIWtUU94SMao/p4/W 1V5hJptwEJ/gYBrEwQzp48IlnxLpGYcboVqTd/BevjnrpWaikxy7h1MQurwm8vWk QnqfjdeQLfIo59pHdNh4Ckx8/B6YojBeW+wlIjMdxMo+MhIPTYQb3T8ar2FMcxRV 8yavaWGedmN0SFITR1GXa5zMSsWDzS3q0RtK3S7M+sN7RI8bewSFqBVyxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLybhTYczfq9HsEuCIru3jrwGg8cMB8GA1UdIwQY MBaAFK/MHTDt7qtUtYEqmQqUPj6P6DkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjh3ZE1PM3VxMVMxZ1NxWkNwUS1Qb19vT1IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wMjE3YzItNzM1NC00MDYxLTllZjct YTIyMGZlNmEyYTI1LzEvcjh3ZE1PM3VxMVMxZ1NxWkNwUS1Qb19vT1IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8wMjE3YzItNzM1NC00MDYxLTllZjctYTIyMGZlNmEyYTI1 LzEvcjh3ZE1PM3VxMVMxZ1NxWkNwUS1Qb19vT1IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApfGZn9XK 2F3Nxj+EIq+m3WZ9ebBZvX5stztR/Inu1DjrQQrfLyz9fzxclmCaaaj8Dg2r0vMe kHDqpLFdRdb7c/HsF3jNOIDg5rlju+wgnkhZk0QG4Z7TPJjkurQRYPq6JQAwSiIY uVws/uYRFQk1IyquR5NALB+cJLVMoy2ohGxRzHZvJQelJFYXJ1+cAbS8CReqafWC ZfuDwKJEoi03c5evKJ8OUVCquU8LUuDr+cfKEUPPseRNnCke/chSimawZjqpN7QV IJa/LWmFym5jzbqNUbKrb6ozgwEIAj0OiVGrm69xRy76gXeok1pyey7dD8bXDvdq XI8BcowmV3vCvg== -----END CERTIFICATE-----Generated at Wed Dec 24 20:00:36 2025 by rpki-client