This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft File: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft (raw, json) Hash identifier: VVNQd0QWaVxeylxC0X76psJ2orW7vbb5J0gmpywJLQM= Subject key identifier: E4:F4:6B:59:7C:80:03:0F:67:FB:F4:36:48:00:D3:AA:08:44:11:74 Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A Certificate issuer: /CN=73c2f49445980199475512f5297608f45d08bb5a Certificate serial: 019B3FB5F7CE1CDFE192A10C58705BFEB4B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 07:00:48 +0000 Manifest this update: Sun 21 Dec 2025 07:00:48 +0000 Manifest next update: Mon 22 Dec 2025 07:00:48 +0000 Files and hashes: 1: T8CaRngGi_3wzcIt9PzPZ1wckgY.roa (hash: 37vNH+xFSIYvkh93FypQjuj5VJFxVq0H4oy/OpBqTs8=) 2: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl (hash: BF49M+pX6obdjJjAM2CZcgfVr3+hntFfps51/VByF2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:f7:ce:1c:df:e1:92:a1:0c:58:70:5b:fe:b4:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a Validity Not Before: Dec 21 07:00:48 2025 GMT Not After : Dec 22 07:00:48 2025 GMT Subject: CN=e4f46b597c80030f67fbf4364800d3aa08441174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:01:24:b9:c3:28:86:9b:81:e3:b3:c2:8b:ed: b6:58:e9:91:cb:80:1e:7d:43:15:62:55:f0:82:5c: 38:e7:b2:24:a6:47:17:e1:4c:30:08:21:d6:a6:51: ee:6c:aa:e0:80:e3:f9:0c:16:77:0b:73:1a:97:43: 73:d3:8d:58:21:8a:eb:03:be:aa:00:65:a2:4d:b9: ce:09:59:12:b1:f6:5f:f2:26:eb:07:d5:b0:64:3e: 9d:67:39:c0:fd:48:32:d6:04:d4:a6:83:1c:d1:28: f3:83:fb:90:1f:b3:6e:99:fd:84:2b:48:91:c6:db: e3:57:85:3f:bd:66:c5:75:c3:39:57:0d:d7:d5:fc: f8:cd:b2:b4:e8:2a:c2:c2:2f:0c:3e:d5:e8:ff:30: 20:dc:03:1a:fa:5f:4f:89:db:22:e9:89:b6:f9:f2: 6c:5e:34:27:eb:61:3b:de:05:4b:35:39:06:02:ad: 5a:58:b9:c6:f9:70:54:6d:1a:ae:a0:60:58:90:b8: e1:6a:49:22:25:17:0b:f2:9c:29:ec:9a:7a:a7:7e: 30:5f:74:cd:25:9c:90:66:c9:9e:cd:aa:43:67:bf: 58:20:93:55:ca:2b:4e:e3:0d:06:73:81:f3:5c:c7: 6b:2f:81:71:c3:c6:7a:92:31:d2:4b:f7:08:b2:aa: fc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F4:6B:59:7C:80:03:0F:67:FB:F4:36:48:00:D3:AA:08:44:11:74 X509v3 Authority Key Identifier: keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:77:69:7e:1b:99:c7:e3:ca:4f:67:2e:79:4f:46:b9:d4:81: e9:be:58:54:61:ac:57:e9:30:6d:94:90:7e:1f:d9:6f:51:d7: bd:a6:ad:e5:28:a3:04:31:c7:39:2a:f7:c0:23:66:53:19:7c: 65:7d:f3:d5:a0:19:e0:0e:7c:f9:c9:33:e6:48:0f:b5:3f:73: 80:bd:7a:16:d6:eb:8b:03:23:07:b9:e7:7b:56:3e:95:46:dd: 59:c6:77:4b:30:b8:99:ef:40:ca:7f:f6:fe:4b:f5:16:11:b3: c4:f1:0e:a4:dd:55:9a:b7:94:d8:1b:fa:3c:80:79:87:d7:28: 19:1b:24:d4:c4:3d:1f:0e:9c:f4:04:d5:79:19:01:a9:6c:dc: e2:42:11:50:a4:02:75:6b:77:3e:d1:76:46:e7:e8:a3:74:84: 32:b1:9e:87:a8:8d:17:c5:e9:60:a0:69:d6:9a:4d:f9:ec:c2: 63:a1:3c:d0:08:66:57:55:33:73:04:d2:27:a1:9b:3a:47:d5: 95:9c:68:d0:f4:db:a7:fb:24:66:0d:02:ca:51:ed:6c:3c:6d: 36:96:54:7d:63:72:a7:1e:02:c9:25:96:3d:bf:12:41:be:17: d4:fb:89:36:53:da:86:ff:1a:d9:4c:88:81:2d:f7:fb:c6:4d: 82:af:ab:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tffOHN/hkqEMWHBb/rS1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzJmNDk0NDU5ODAxOTk0NzU1MTJmNTI5NzYwOGY0NWQw OGJiNWEwHhcNMjUxMjIxMDcwMDQ4WhcNMjUxMjIyMDcwMDQ4WjAzMTEwLwYDVQQD EyhlNGY0NmI1OTdjODAwMzBmNjdmYmY0MzY0ODAwZDNhYTA4NDQxMTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AEkucMohpuB47PCi+22WOmRy4Ae fUMVYlXwglw457IkpkcX4UwwCCHWplHubKrggOP5DBZ3C3Mal0Nz041YIYrrA76q AGWiTbnOCVkSsfZf8ibrB9WwZD6dZznA/Ugy1gTUpoMc0Sjzg/uQH7Numf2EK0iR xtvjV4U/vWbFdcM5Vw3X1fz4zbK06CrCwi8MPtXo/zAg3AMa+l9Pidsi6Ym2+fJs XjQn62E73gVLNTkGAq1aWLnG+XBUbRquoGBYkLjhakkiJRcL8pwp7Jp6p34wX3TN JZyQZsmezapDZ79YIJNVyitO4w0Gc4HzXMdrL4Fxw8Z6kjHSS/cIsqr8FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOT0a1l8gAMPZ/v0NkgA06oIRBF0MB8GA1UdIwQY MBaAFHPC9JRFmAGZR1US9Sl2CPRdCLtaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhMMGxFV1lBWmxIVlJMMUtYWUk5RjBJdTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84YTI1MTgtMzlhMC00YTk4LTk1NjIt Nzg3YjliNTg0YzJkLzEvYzhMMGxFV1lBWmxIVlJMMUtYWUk5RjBJdTFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy84YTI1MTgtMzlhMC00YTk4LTk1NjItNzg3YjliNTg0YzJk LzEvYzhMMGxFV1lBWmxIVlJMMUtYWUk5RjBJdTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXdpfhuZ x+PKT2cueU9GudSB6b5YVGGsV+kwbZSQfh/Zb1HXvaat5SijBDHHOSr3wCNmUxl8 ZX3z1aAZ4A58+ckz5kgPtT9zgL16FtbriwMjB7nne1Y+lUbdWcZ3SzC4me9Ayn/2 /kv1FhGzxPEOpN1VmreU2Bv6PIB5h9coGRsk1MQ9Hw6c9ATVeRkBqWzc4kIRUKQC dWt3PtF2Rufoo3SEMrGeh6iNF8XpYKBp1ppN+ezCY6E80AhmV1UzcwTSJ6GbOkfV lZxo0PTbp/skZg0CylHtbDxtNpZUfWNypx4CySWWPb8SQb4X1PuJNlPahv8a2UyI gS33+8ZNgq+r3g== -----END CERTIFICATE-----Generated at Sun Dec 21 11:27:33 2025 by rpki-client