This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft File: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json) Hash identifier: Zvqu1ds69fb3Kas2Zrf9sFS/BetXEyZ+7ykfZbUSI3U= Subject key identifier: 0F:1A:11:83:60:35:54:B9:4E:AE:A7:49:42:14:71:AC:BF:AF:64:95 Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61 Certificate issuer: /CN=f32220b696e2e766516c05743d137dbbc17fd261 Certificate serial: 019B785C7BC4A77F4A68648FDAF4403DDD79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft Manifest number: 17A4 Signing time: Thu 01 Jan 2026 07:01:25 +0000 Manifest this update: Thu 01 Jan 2026 07:01:25 +0000 Manifest next update: Fri 02 Jan 2026 07:01:25 +0000 Files and hashes: 1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: rXaxBuBVERiqO9T+Y6G8b5G4AkRaRJjpFI2j3UHOHjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5c:7b:c4:a7:7f:4a:68:64:8f:da:f4:40:3d:dd:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261 Validity Not Before: Jan 1 07:01:25 2026 GMT Not After : Jan 2 07:01:25 2026 GMT Subject: CN=0f1a1183603554b94eaea749421471acbfaf6495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:10:b3:90:3b:e4:a4:e5:12:ec:6e:ad:09:2e: ae:ca:da:88:3b:51:90:f1:83:64:7d:b7:81:c1:7d: a8:61:07:da:97:c8:3a:de:99:e9:ce:fc:7c:47:24: b2:04:03:20:44:fe:e5:06:c7:a0:a6:d7:27:7d:76: 35:00:8c:4a:2a:87:da:eb:0c:55:5c:81:4a:bf:a4: 0c:2a:a9:7f:ae:70:2f:5b:72:5d:13:61:3a:05:c6: cf:84:45:28:71:67:04:b2:34:63:e7:36:c1:03:ed: a5:fb:c1:30:59:7c:c5:67:70:46:ba:7b:aa:4d:9a: 5b:25:66:9b:f0:76:62:32:35:2a:6c:f2:95:7d:6c: f5:92:18:e6:fd:86:37:a3:f9:06:19:8b:87:51:85: 55:1b:d0:2e:5f:66:7e:ac:d5:9b:ef:2e:8b:78:c2: 26:ed:46:87:77:41:86:52:e2:29:12:dd:7a:25:ee: 17:37:69:d4:d9:c1:d2:c6:14:61:ec:5f:78:87:9e: 03:41:1a:83:04:7a:af:75:53:d6:71:43:39:15:e4: b5:74:33:a9:1b:2d:b6:79:ef:5a:3a:58:ad:11:1b: 03:17:d3:78:93:66:e6:44:e7:33:ad:5a:ca:7c:d7: 3d:0e:13:8f:87:b3:3e:0f:fc:41:92:0a:32:4a:f9: 6d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1A:11:83:60:35:54:B9:4E:AE:A7:49:42:14:71:AC:BF:AF:64:95 X509v3 Authority Key Identifier: keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:67:a6:61:e1:7c:39:5d:27:52:8c:1b:2a:ab:6a:b6:47:03: 71:98:e4:e9:54:13:96:64:16:f9:67:dd:32:0b:5b:f1:a6:ed: 4d:ce:87:4a:ed:ab:20:98:40:a3:55:99:c9:84:61:67:09:b6: a2:f5:f9:a0:c2:74:41:fc:c5:e1:a9:07:9d:ee:32:00:08:89: 5c:f1:e6:01:63:d3:bc:82:b4:07:4f:26:8c:d2:d5:24:e7:c6: 01:f7:75:26:8a:03:78:36:40:9f:0c:49:60:28:6c:87:14:05: ce:88:69:1a:50:93:aa:d5:64:d1:f2:3f:37:99:4d:5a:91:5d: 5b:b6:87:1d:74:0e:14:cc:1b:18:0f:f1:3f:59:d4:b2:75:be: c8:97:bf:5b:f8:0b:b4:ca:4f:b5:0f:e8:c4:fe:a2:fb:8b:4f: 94:e5:9c:5b:79:63:b3:c2:0c:c6:63:e4:a8:4b:58:df:f9:23: d9:1f:a4:03:7e:6a:5d:e3:f2:f2:e9:df:e7:ee:ef:86:cd:08: 64:38:39:43:09:42:f2:d1:91:ae:d1:8a:d1:8f:6b:19:4a:07: b4:fb:1f:14:c6:29:39:21:3b:06:2e:9d:c7:0c:5b:b7:bb:d3: fc:72:1a:75:4c:5f:af:12:3f:c2:7f:d6:f7:36:ba:b6:ba:bb: 99:a3:3c:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4XHvEp39KaGSP2vRAPd15MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjIyMGI2OTZlMmU3NjY1MTZjMDU3NDNkMTM3ZGJiYzE3 ZmQyNjEwHhcNMjYwMTAxMDcwMTI1WhcNMjYwMTAyMDcwMTI1WjAzMTEwLwYDVQQD EygwZjFhMTE4MzYwMzU1NGI5NGVhZWE3NDk0MjE0NzFhY2JmYWY2NDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BCzkDvkpOUS7G6tCS6uytqIO1GQ 8YNkfbeBwX2oYQfal8g63pnpzvx8RySyBAMgRP7lBsegptcnfXY1AIxKKofa6wxV XIFKv6QMKql/rnAvW3JdE2E6BcbPhEUocWcEsjRj5zbBA+2l+8EwWXzFZ3BGunuq TZpbJWab8HZiMjUqbPKVfWz1khjm/YY3o/kGGYuHUYVVG9AuX2Z+rNWb7y6LeMIm 7UaHd0GGUuIpEt16Je4XN2nU2cHSxhRh7F94h54DQRqDBHqvdVPWcUM5FeS1dDOp Gy22ee9aOlitERsDF9N4k2bmROczrVrKfNc9DhOPh7M+D/xBkgoySvltGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8aEYNgNVS5Tq6nSUIUcay/r2SVMB8GA1UdIwQY MBaAFPMiILaW4udmUWwFdD0TfbvBf9JhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlJZ3RwYmk1MlpSYkFWMFBSTjl1OEZfMG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80OTNlMjAtN2UxNy00NzU5LWIzNDUt MGViMGIyNDBiOWI3LzEvOHlJZ3RwYmk1MlpSYkFWMFBSTjl1OEZfMG1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS80OTNlMjAtN2UxNy00NzU5LWIzNDUtMGViMGIyNDBiOWI3 LzEvOHlJZ3RwYmk1MlpSYkFWMFBSTjl1OEZfMG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2emYeF8 OV0nUowbKqtqtkcDcZjk6VQTlmQW+WfdMgtb8abtTc6HSu2rIJhAo1WZyYRhZwm2 ovX5oMJ0QfzF4akHne4yAAiJXPHmAWPTvIK0B08mjNLVJOfGAfd1JooDeDZAnwxJ YChshxQFzohpGlCTqtVk0fI/N5lNWpFdW7aHHXQOFMwbGA/xP1nUsnW+yJe/W/gL tMpPtQ/oxP6i+4tPlOWcW3ljs8IMxmPkqEtY3/kj2R+kA35qXePy8unf5+7vhs0I ZDg5QwlC8tGRrtGK0Y9rGUoHtPsfFMYpOSE7Bi6dxwxbt7vT/HIadUxfrxI/wn/W 9za6trq7maM8Rw== -----END CERTIFICATE-----Generated at Thu Jan 1 15:57:40 2026 by rpki-client