This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft File: j8Yziy6SHZEmxTYwPweMnruah1I.mft (raw, json) Hash identifier: cX3nOUqgf56N2isCtU0+eYak5Iz2DA5syipyfuB2w7c= Subject key identifier: 6A:6D:B9:DD:1E:39:8C:CC:04:5C:9C:EE:78:78:C7:27:B3:FC:C9:EC Authority key identifier: 8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52 Certificate issuer: /CN=8fc6338b2e921d9126c536303f078c9ebb9a8752 Certificate serial: 019B41A4EDACAD5252FD06A844A4151D7F42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 16:01:26 +0000 Manifest this update: Sun 21 Dec 2025 16:01:26 +0000 Manifest next update: Mon 22 Dec 2025 16:01:26 +0000 Files and hashes: 1: E9E2NhUKJP_3TXPCgDM1hcFl3-A.roa (hash: aBze8FprGa3p4/CGvI/TFD3mAyVwA/i5ic5RvbopQHs=) 2: j8Yziy6SHZEmxTYwPweMnruah1I.crl (hash: Q2lh+wdpEHhixiyffrY8RdOvn2fCm+1yXZTyoOuEjPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:ed:ac:ad:52:52:fd:06:a8:44:a4:15:1d:7f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc6338b2e921d9126c536303f078c9ebb9a8752 Validity Not Before: Dec 21 16:01:26 2025 GMT Not After : Dec 22 16:01:26 2025 GMT Subject: CN=6a6db9dd1e398ccc045c9cee7878c727b3fcc9ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ee:c8:c6:a8:76:62:fe:d2:02:18:fe:df:54: df:a8:0c:ac:da:38:a2:c3:47:11:08:8b:fe:2d:58: bf:88:cd:50:aa:41:ea:ee:b0:5c:7f:24:00:81:e1: a9:ee:02:9d:5d:55:d6:f4:73:4b:bb:8d:cc:f7:28: 10:17:7a:35:c8:ae:48:4c:40:83:12:12:68:fd:e3: 8d:fd:5d:70:1a:c7:63:05:07:6e:0a:9a:39:a6:b5: 49:4c:73:01:d3:19:a9:70:ab:ef:81:a1:96:d3:a9: 78:b0:22:f8:16:10:ff:6e:a6:b9:73:36:39:d7:4b: 94:70:c7:7e:53:a0:b2:a2:39:af:1b:4a:57:67:b1: d7:98:6b:59:39:ac:b2:41:6f:37:e0:9e:a5:ff:89: 4e:1d:26:0d:ca:23:e6:3e:f9:73:8b:64:97:70:31: b8:4e:da:11:b4:e8:05:f7:80:cd:d1:80:b6:89:dd: 17:3f:d3:96:77:de:e0:f2:d1:26:f1:c2:1b:81:b7: 8c:0d:c3:cc:1d:68:67:aa:3e:d4:b9:c3:ba:c5:c0: 8c:b1:f2:37:66:ad:4f:77:cb:14:81:ad:17:6e:1d: aa:15:5c:b8:50:80:93:3d:a2:0b:1c:93:2e:0d:d6: fa:d3:fb:e0:db:09:8f:c3:a8:8a:9c:ce:11:4f:8b: 85:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6D:B9:DD:1E:39:8C:CC:04:5C:9C:EE:78:78:C7:27:B3:FC:C9:EC X509v3 Authority Key Identifier: keyid:8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:84:b9:a6:1c:72:5c:df:80:37:5f:53:8a:28:19:ea:f0:f7: 2e:b9:25:d7:b7:07:b2:00:ee:aa:6d:2e:4a:92:7e:51:e9:22: c6:77:c3:19:61:8b:2f:c7:f0:5b:d6:65:7b:8c:f5:ed:a7:86: e3:29:0a:e0:ef:59:74:f1:8e:27:fb:9f:90:ca:a5:3d:ed:8e: 51:95:61:2a:ca:67:23:d5:d1:1d:66:1c:af:8c:43:cd:3c:be: f3:3b:dd:01:20:3b:f5:5b:c0:3d:9b:84:f4:eb:21:b6:66:60: 15:dd:9b:67:bf:51:c5:e8:00:4e:9d:35:fb:84:af:f9:65:6b: 99:aa:13:4f:8c:d7:2c:db:ad:aa:fd:4b:ae:2a:0b:60:6c:5a: 7d:f8:94:f0:c5:e7:77:06:df:56:b9:d5:e4:27:e0:ee:2c:be: b1:ef:74:23:76:0e:04:56:50:25:03:36:7f:d4:29:ec:a7:a9: 83:16:06:aa:15:cb:9b:7c:f2:b7:72:e1:9d:89:f3:4f:de:29: e6:39:d6:0b:ce:02:63:14:23:8d:97:12:99:1a:10:6f:68:93: c3:ff:6d:06:02:57:61:78:a7:ef:fd:c3:2d:53:e3:be:e8:69: 28:74:52:2d:da:0a:c5:24:90:05:e2:f9:80:94:c5:21:2d:45: 9b:0d:cb:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpO2srVJS/QaoRKQVHX9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzYzMzhiMmU5MjFkOTEyNmM1MzYzMDNmMDc4YzllYmI5 YTg3NTIwHhcNMjUxMjIxMTYwMTI2WhcNMjUxMjIyMTYwMTI2WjAzMTEwLwYDVQQD Eyg2YTZkYjlkZDFlMzk4Y2NjMDQ1YzljZWU3ODc4YzcyN2IzZmNjOWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye7Ixqh2Yv7SAhj+31TfqAys2jii w0cRCIv+LVi/iM1QqkHq7rBcfyQAgeGp7gKdXVXW9HNLu43M9ygQF3o1yK5ITECD EhJo/eON/V1wGsdjBQduCpo5prVJTHMB0xmpcKvvgaGW06l4sCL4FhD/bqa5czY5 10uUcMd+U6CyojmvG0pXZ7HXmGtZOayyQW834J6l/4lOHSYNyiPmPvlzi2SXcDG4 TtoRtOgF94DN0YC2id0XP9OWd97g8tEm8cIbgbeMDcPMHWhnqj7UucO6xcCMsfI3 Zq1Pd8sUga0Xbh2qFVy4UICTPaILHJMuDdb60/vg2wmPw6iKnM4RT4uFNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGptud0eOYzMBFyc7nh4xyez/MnsMB8GA1UdIwQY MBaAFI/GM4sukh2RJsU2MD8HjJ67modSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhZeml5NlNIWkVteFRZd1B3ZU1ucnVhaDFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jZmNiOTMtZDhmNC00NjlhLTkwZjkt OGYzNGRmMzA0OTI3LzEvajhZeml5NlNIWkVteFRZd1B3ZU1ucnVhaDFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jZmNiOTMtZDhmNC00NjlhLTkwZjktOGYzNGRmMzA0OTI3 LzEvajhZeml5NlNIWkVteFRZd1B3ZU1ucnVhaDFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIS5phxy XN+AN19TiigZ6vD3Lrkl17cHsgDuqm0uSpJ+UekixnfDGWGLL8fwW9Zle4z17aeG 4ykK4O9ZdPGOJ/ufkMqlPe2OUZVhKspnI9XRHWYcr4xDzTy+8zvdASA79VvAPZuE 9OshtmZgFd2bZ79RxegATp01+4Sv+WVrmaoTT4zXLNutqv1LrioLYGxaffiU8MXn dwbfVrnV5Cfg7iy+se90I3YOBFZQJQM2f9Qp7KepgxYGqhXLm3zyt3LhnYnzT94p 5jnWC84CYxQjjZcSmRoQb2iTw/9tBgJXYXin7/3DLVPjvuhpKHRSLdoKxSSQBeL5 gJTFIS1Fmw3LKw== -----END CERTIFICATE-----Generated at Sun Dec 21 20:55:06 2025 by rpki-client