This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft File: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json) Hash identifier: yiGxFyHqH9nSxoFs+64DSwzvpghXq7lD6a0J1lZAqys= Subject key identifier: 73:AD:54:5F:D3:96:41:98:59:47:85:C7:7C:79:38:51:86:67:CD:55 Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a Certificate serial: 019B405BB0DA1B892DC7DB13F6976350FE66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 10:01:49 +0000 Manifest this update: Sun 21 Dec 2025 10:01:49 +0000 Manifest next update: Mon 22 Dec 2025 10:01:49 +0000 Files and hashes: 1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: 0HsVPxOAYMDjy8nw9+Co4+t0ouXP4nTxkg5ofmigmU4=) 2: WVDdYi47m-6hf2_QV0K2CVkP7zw.roa (hash: 9WCgzOj2n+hDIFLmZXxef2ObXsI93yW31Mx8FRKIiM8=) 3: _nQyzxD5tzJPLFHKcoFX_hH-tT8.roa (hash: K943OWLrTeetJ5gY0wxowSl9TJP/OQ1YX347sbUwBP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:b0:da:1b:89:2d:c7:db:13:f6:97:63:50:fe:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a Validity Not Before: Dec 21 10:01:49 2025 GMT Not After : Dec 22 10:01:49 2025 GMT Subject: CN=73ad545fd3964198594785c77c7938518667cd55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:34:a6:6e:ee:6d:3a:91:23:0b:ca:9c:29:2a: f7:d7:d9:18:f9:5f:bb:0d:06:95:c0:ff:c4:69:0e: 36:ed:51:bd:64:02:1d:dc:aa:d7:3e:5d:e8:25:2c: 61:53:d1:51:67:4f:ff:f2:3d:e5:44:17:0b:c4:45: f9:89:00:13:ce:bc:f3:be:90:f9:8b:bf:37:28:34: 8a:b3:9d:5d:36:f1:5e:54:b6:4e:b7:7d:d2:53:d0: 9b:7e:5b:2d:54:50:62:4a:75:6e:aa:c4:40:d9:51: 27:32:19:2d:bd:06:84:53:7a:0e:5c:bc:c6:94:06: 9e:f2:e1:31:e9:b7:d4:32:5b:67:09:5b:c4:48:08: 08:7c:76:fb:c3:0b:52:a3:23:52:77:0f:3c:28:d8: e6:89:7b:65:c7:bd:b2:06:10:19:bf:49:02:9a:a4: 27:f7:d0:4c:03:c7:94:cf:80:ef:73:6c:91:dd:d7: be:e8:a5:b0:13:4b:84:be:8f:cf:bf:e7:63:cf:11: fb:44:0f:be:b4:f3:06:b2:70:7c:90:34:f6:8e:f1: 98:01:16:9d:4d:f0:36:a1:90:14:a4:4d:1a:33:f6: c3:bd:d2:00:28:35:78:46:01:b2:8e:48:f0:c1:54: 9d:b3:f9:a2:bb:0d:e8:42:e0:96:bf:b7:86:cb:20: 80:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AD:54:5F:D3:96:41:98:59:47:85:C7:7C:79:38:51:86:67:CD:55 X509v3 Authority Key Identifier: keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:71:55:70:0b:15:1c:d1:b9:44:0a:f9:fa:61:76:00:e2:3b: d4:7e:e9:cf:9e:eb:16:9e:f8:c3:df:2a:a8:ea:45:ec:e5:e4: ca:ae:a7:72:5b:24:fd:a0:1c:90:ee:76:7a:c1:ed:47:76:a2: 52:5e:ad:82:9d:37:5b:e4:d0:10:e2:0b:51:d6:5c:9f:4b:eb: 80:0a:61:ec:1b:2b:9f:83:07:b6:1d:f6:a8:c6:53:83:1f:27: f0:40:3e:5a:65:64:a6:9a:76:06:48:69:42:5f:22:d0:a0:d0: e4:14:1b:bc:6c:33:04:52:04:76:f3:da:2d:01:e9:48:6e:9b: fb:04:f7:e7:b3:7c:d2:e4:b0:d8:cc:da:c4:63:05:7a:a6:9a: a2:52:b1:3a:03:fa:07:8c:70:8c:08:76:f4:b5:9c:0a:8c:18: 6b:a2:a1:b7:0f:cb:85:41:be:9f:05:41:1d:e5:76:b1:23:b4: bc:75:65:b6:1f:fb:c4:9a:58:2d:c0:54:70:0a:96:ca:7b:50: 18:16:75:8f:76:03:0c:6b:c4:d4:e5:11:25:a6:b2:41:66:c1: 5f:57:11:ee:57:44:11:8b:7d:02:70:e4:78:73:47:0a:f7:09: 4c:72:ea:81:0c:f7:9f:d4:2b:13:68:77:a1:48:20:a6:ee:f3: 3c:15:01:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW7DaG4ktx9sT9pdjUP5mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMWM4OTk3YTM1NGJjN2Q0ZTVhNjBhOWY0MjQzOGExODJm YTk5OGEwHhcNMjUxMjIxMTAwMTQ5WhcNMjUxMjIyMTAwMTQ5WjAzMTEwLwYDVQQD Eyg3M2FkNTQ1ZmQzOTY0MTk4NTk0Nzg1Yzc3Yzc5Mzg1MTg2NjdjZDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjSmbu5tOpEjC8qcKSr319kY+V+7 DQaVwP/EaQ427VG9ZAId3KrXPl3oJSxhU9FRZ0//8j3lRBcLxEX5iQATzrzzvpD5 i783KDSKs51dNvFeVLZOt33SU9CbflstVFBiSnVuqsRA2VEnMhktvQaEU3oOXLzG lAae8uEx6bfUMltnCVvESAgIfHb7wwtSoyNSdw88KNjmiXtlx72yBhAZv0kCmqQn 99BMA8eUz4Dvc2yR3de+6KWwE0uEvo/Pv+djzxH7RA++tPMGsnB8kDT2jvGYARad TfA2oZAUpE0aM/bDvdIAKDV4RgGyjkjwwVSds/miuw3oQuCWv7eGyyCANQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOtVF/TlkGYWUeFx3x5OFGGZ81VMB8GA1UdIwQY MBaAFPAciZejVLx9TlpgqfQkOKGC+pmKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mYWE5NWYtM2IzMi00MWZlLWFiZTMt YzI3YzRhNjEwYmQzLzEvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9mYWE5NWYtM2IzMi00MWZlLWFiZTMtYzI3YzRhNjEwYmQz LzEvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHFVcAsV HNG5RAr5+mF2AOI71H7pz57rFp74w98qqOpF7OXkyq6nclsk/aAckO52esHtR3ai Ul6tgp03W+TQEOILUdZcn0vrgAph7Bsrn4MHth32qMZTgx8n8EA+WmVkppp2Bkhp Ql8i0KDQ5BQbvGwzBFIEdvPaLQHpSG6b+wT357N80uSw2MzaxGMFeqaaolKxOgP6 B4xwjAh29LWcCowYa6Khtw/LhUG+nwVBHeV2sSO0vHVlth/7xJpYLcBUcAqWyntQ GBZ1j3YDDGvE1OURJaayQWbBX1cR7ldEEYt9AnDkeHNHCvcJTHLqgQz3n9QrE2h3 oUggpu7zPBUB/A== -----END CERTIFICATE-----Generated at Sun Dec 21 14:10:53 2025 by rpki-client