This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft File: v8pT8KWH822Jqcq4K_WlA2xhQKI.mft (raw, json) Hash identifier: 2vuDULwTGujjGtalCIr/rS0Yp5mgHVWDcgIsylib9Y8= Subject key identifier: 89:43:D1:D8:92:B1:8B:BE:53:40:2C:8C:AF:36:89:0D:8B:EE:58:B3 Authority key identifier: BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2 Certificate issuer: /CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2 Certificate serial: 019B4994967D8D97098ED494661BA08A3B26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 05:00:33 +0000 Manifest this update: Tue 23 Dec 2025 05:00:33 +0000 Manifest next update: Wed 24 Dec 2025 05:00:33 +0000 Files and hashes: 1: QDWmx_ik_mzSmaKaFjMrEYPMK6E.roa (hash: JZeZqTP/kJM8f2vw7vOLQj4DQbxRzuI8jkZc142sebw=) 2: v8pT8KWH822Jqcq4K_WlA2xhQKI.crl (hash: cGgmynAv3SJln1bODaQy3KNGW+W5a4xhHjozCVNZwyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:94:96:7d:8d:97:09:8e:d4:94:66:1b:a0:8a:3b:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2 Validity Not Before: Dec 23 05:00:33 2025 GMT Not After : Dec 24 05:00:33 2025 GMT Subject: CN=8943d1d892b18bbe53402c8caf36890d8bee58b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5a:93:b5:4a:d7:70:b5:c7:12:39:0d:00:22: 86:d2:be:69:55:56:6d:ef:b7:fc:02:7a:07:0a:56: 0b:27:ed:b6:63:56:f6:d8:7c:34:9d:33:c4:49:a9: 00:59:d0:5e:fe:a7:d3:9b:48:5e:c6:ad:dc:1a:10: c9:b4:37:42:1c:2a:13:c7:33:5c:ad:f8:bc:5c:64: c8:9a:19:a9:61:3a:80:28:1e:3d:8b:72:10:0c:26: 5f:c3:73:2c:39:3d:3e:e3:81:f7:c0:ca:62:be:ea: 7f:c6:71:e0:4e:e9:4f:30:5d:61:24:f5:2e:e2:d7: 1b:b9:7e:e1:5c:97:90:fc:49:c0:f5:d1:70:b4:38: a3:14:5b:46:54:64:02:3c:c3:4a:6d:76:ff:6a:fc: 51:47:db:af:43:b6:97:49:f4:30:f4:99:fc:49:2c: d0:bd:e3:ae:73:35:74:64:68:1c:1e:c6:12:ea:75: fe:cd:a7:76:3f:cf:6e:c7:f0:86:95:66:61:02:8d: 7b:68:af:b4:28:0f:22:03:41:d7:85:5e:80:03:27: b3:5f:6b:c3:21:ea:05:42:02:9c:e3:d3:76:82:c5: 83:68:bc:ed:b7:cd:a3:e3:90:e4:8e:ba:fc:a3:ae: b4:82:b0:5c:e1:a4:c9:af:96:3d:e8:6a:2d:cd:df: 1a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:43:D1:D8:92:B1:8B:BE:53:40:2C:8C:AF:36:89:0D:8B:EE:58:B3 X509v3 Authority Key Identifier: keyid:BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c7:c1:07:a0:20:75:7a:eb:0d:ec:38:86:4a:ca:e5:90:6c: bc:26:31:f9:9a:a2:13:f3:1a:14:b0:6e:18:b7:29:da:ee:cc: 1f:f0:2b:9f:03:80:47:60:46:98:8a:04:7d:b2:4c:1d:ad:90: 0b:f6:66:ca:57:80:04:38:3b:d6:82:d5:27:43:88:b9:6c:67: 3b:55:f2:dd:4c:41:81:21:72:85:33:d4:62:ea:da:b4:d8:61: 57:e0:0d:92:66:0f:9d:36:73:7b:32:1c:23:99:57:6f:16:10: e0:02:d0:35:ff:67:50:33:77:35:71:57:24:b9:82:1b:15:05: 2a:88:79:33:98:71:45:83:e5:7e:f7:dc:7e:2c:fe:c1:e1:3a: 24:22:aa:b2:e4:c2:bd:e9:76:e1:fe:31:d7:2a:d7:c6:1e:c4: 92:0c:07:0b:8e:ad:4e:ca:09:89:6e:90:6b:21:71:72:4b:de: 1c:28:39:54:65:8e:7c:f9:16:58:a0:54:f1:ba:b4:66:fa:63: cd:cc:55:94:f3:78:43:4b:9e:21:95:d0:5a:0d:6d:6d:be:85: 69:98:3f:c1:42:41:5e:17:92:d2:34:cd:b5:b0:ea:5b:06:ed: 58:c5:0c:47:d5:79:c9:96:d7:cb:25:e1:1a:2b:da:07:04:d9: 2d:35:c1:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlJZ9jZcJjtSUZhugijsmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmY2E1M2YwYTU4N2YzNmQ4OWE5Y2FiODJiZjVhNTAzNmM2 MTQwYTIwHhcNMjUxMjIzMDUwMDMzWhcNMjUxMjI0MDUwMDMzWjAzMTEwLwYDVQQD Eyg4OTQzZDFkODkyYjE4YmJlNTM0MDJjOGNhZjM2ODkwZDhiZWU1OGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVqTtUrXcLXHEjkNACKG0r5pVVZt 77f8AnoHClYLJ+22Y1b22Hw0nTPESakAWdBe/qfTm0hexq3cGhDJtDdCHCoTxzNc rfi8XGTImhmpYTqAKB49i3IQDCZfw3MsOT0+44H3wMpivup/xnHgTulPMF1hJPUu 4tcbuX7hXJeQ/EnA9dFwtDijFFtGVGQCPMNKbXb/avxRR9uvQ7aXSfQw9Jn8SSzQ veOuczV0ZGgcHsYS6nX+zad2P89ux/CGlWZhAo17aK+0KA8iA0HXhV6AAyezX2vD IeoFQgKc49N2gsWDaLztt82j45Dkjrr8o660grBc4aTJr5Y96Gotzd8aqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlD0diSsYu+U0AsjK82iQ2L7lizMB8GA1UdIwQY MBaAFL/KU/Clh/NtianKuCv1pQNsYUCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjhwVDhLV0g4MjJKcWNxNEtfV2xBMnhoUUtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mYzEyZWMtM2VhYy00NDU1LTkxYzkt Zjk5YzRlNWMyOTUzLzEvdjhwVDhLV0g4MjJKcWNxNEtfV2xBMnhoUUtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mYzEyZWMtM2VhYy00NDU1LTkxYzktZjk5YzRlNWMyOTUz LzEvdjhwVDhLV0g4MjJKcWNxNEtfV2xBMnhoUUtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcfBB6Ag dXrrDew4hkrK5ZBsvCYx+ZqiE/MaFLBuGLcp2u7MH/ArnwOAR2BGmIoEfbJMHa2Q C/ZmyleABDg71oLVJ0OIuWxnO1Xy3UxBgSFyhTPUYuratNhhV+ANkmYPnTZzezIc I5lXbxYQ4ALQNf9nUDN3NXFXJLmCGxUFKoh5M5hxRYPlfvfcfiz+weE6JCKqsuTC vel24f4x1yrXxh7EkgwHC46tTsoJiW6QayFxckveHCg5VGWOfPkWWKBU8bq0Zvpj zcxVlPN4Q0ueIZXQWg1tbb6FaZg/wUJBXheS0jTNtbDqWwbtWMUMR9V5yZbXyyXh GivaBwTZLTXBYA== -----END CERTIFICATE-----Generated at Tue Dec 23 11:01:53 2025 by rpki-client