This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft File: i8qzttz8va_XYxEPhmqCgV3qRGM.mft (raw, json) Hash identifier: PvtRkWBJP9t7bjkd0lJFSqV1NZ94kgazDB9aDqCLOeE= Subject key identifier: 5E:87:C4:D5:11:45:5E:FD:D7:BF:21:CD:3D:70:E7:89:61:53:E3:8D Authority key identifier: 8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63 Certificate issuer: /CN=8bcab3b6dcfcbdafd763110f866a82815dea4463 Certificate serial: 019B66FA30F93E986AF633F358ECF4E765DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft Manifest number: 0411 Signing time: Sun 28 Dec 2025 22:00:31 +0000 Manifest this update: Sun 28 Dec 2025 22:00:31 +0000 Manifest next update: Mon 29 Dec 2025 22:00:31 +0000 Files and hashes: 1: XDaCGcZealj-spshbO6gPk6HDcA.roa (hash: nsrfqrdgPjlaid22aLgk/rpbmAlJVh+pY8pGwnfkSSY=) 2: i8qzttz8va_XYxEPhmqCgV3qRGM.crl (hash: 6ooylZes4erVXRP2IBUYdppFjVxnapDfUge5UU9kwQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fa:30:f9:3e:98:6a:f6:33:f3:58:ec:f4:e7:65:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bcab3b6dcfcbdafd763110f866a82815dea4463 Validity Not Before: Dec 28 22:00:31 2025 GMT Not After : Dec 29 22:00:31 2025 GMT Subject: CN=5e87c4d511455efdd7bf21cd3d70e7896153e38d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bc:55:99:81:99:c3:7b:53:24:71:ae:17:c4: 4f:08:a5:54:26:ce:1f:15:a1:64:c4:d0:f2:90:a1: cd:e0:52:e9:dd:2e:cb:9f:b7:cf:a2:a1:94:28:b8: b9:dd:0d:6e:6e:51:97:26:73:a8:09:f6:98:91:14: 25:41:16:24:06:f8:8a:28:b4:59:9e:26:d3:0d:15: 33:13:61:f1:0a:83:f8:ab:db:dc:90:5b:7b:98:9a: d3:ce:55:d1:9c:42:72:2d:e3:01:a2:52:6f:23:d7: 08:38:ee:d8:51:8d:ee:51:ed:41:4b:fc:fc:b8:a7: 8d:45:eb:dd:50:db:14:8a:70:89:3d:10:d3:6a:e5: e6:bb:56:5e:66:0f:4a:7d:1e:e8:30:02:2c:9d:73: 0c:e2:0b:2e:4e:bf:36:1d:ff:d6:7e:cc:b9:82:d8: f3:d2:d4:d4:3c:be:54:c1:56:32:b7:af:e3:30:4a: e6:95:ae:80:46:7c:5a:f4:a6:bc:8f:2d:3a:ea:96: e9:69:99:63:f8:ad:5b:74:45:ad:40:8f:8c:16:5c: c3:02:b3:56:32:e2:ce:19:f6:cd:ad:d8:98:1f:46: c0:40:c0:79:59:27:aa:b5:de:92:b9:a6:91:9c:3e: ed:45:ff:68:77:d5:60:d6:c4:cb:36:ec:f1:10:ef: 58:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:87:C4:D5:11:45:5E:FD:D7:BF:21:CD:3D:70:E7:89:61:53:E3:8D X509v3 Authority Key Identifier: keyid:8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ce:a9:96:60:97:c7:47:c5:0c:db:89:ed:c1:01:da:bf:88: 25:fb:e8:1d:2e:3e:f1:50:e3:6b:dd:3e:9c:84:38:c0:ad:43: c6:61:1b:b0:e1:15:c5:b5:25:9c:06:b5:bb:e3:2f:39:f1:af: 4d:37:ae:a1:15:47:f6:ca:2f:7b:70:5d:af:ac:af:6e:6d:73: 94:23:4a:bb:72:c2:e2:4a:2a:02:6e:5f:d0:da:7d:03:d5:46: 03:2d:01:f5:4c:54:14:72:fc:b6:5a:2f:13:8c:7f:cf:67:f3: 68:38:69:49:17:fd:e6:f6:e6:6e:48:d9:24:af:f7:59:64:4c: 37:7c:31:54:ce:58:b2:98:40:a4:89:a4:1e:12:64:93:18:cb: c1:70:c6:68:44:5a:40:ab:e8:df:a7:69:86:94:e9:15:1e:f1: 64:8c:e5:e6:4e:4c:9f:de:40:ab:81:f1:d5:f2:b1:95:5f:46: 54:3f:ab:dd:85:84:c6:c6:44:a8:6e:06:b2:ca:93:ee:25:16: 4b:bf:65:f6:1c:58:fb:6a:38:a0:94:2c:5d:b0:3f:2c:64:82: 00:55:f7:c8:72:2d:30:b9:ad:3a:9c:d4:4c:18:3b:03:d8:42: cd:be:de:4f:63:6c:c7:bb:a2:9b:cc:51:31:ae:a1:04:33:69: 0c:79:fa:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+jD5Pphq9jPzWOz052XdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiY2FiM2I2ZGNmY2JkYWZkNzYzMTEwZjg2NmE4MjgxNWRl YTQ0NjMwHhcNMjUxMjI4MjIwMDMxWhcNMjUxMjI5MjIwMDMxWjAzMTEwLwYDVQQD Eyg1ZTg3YzRkNTExNDU1ZWZkZDdiZjIxY2QzZDcwZTc4OTYxNTNlMzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bxVmYGZw3tTJHGuF8RPCKVUJs4f FaFkxNDykKHN4FLp3S7Ln7fPoqGUKLi53Q1ublGXJnOoCfaYkRQlQRYkBviKKLRZ nibTDRUzE2HxCoP4q9vckFt7mJrTzlXRnEJyLeMBolJvI9cIOO7YUY3uUe1BS/z8 uKeNRevdUNsUinCJPRDTauXmu1ZeZg9KfR7oMAIsnXMM4gsuTr82Hf/Wfsy5gtjz 0tTUPL5UwVYyt6/jMErmla6ARnxa9Ka8jy066pbpaZlj+K1bdEWtQI+MFlzDArNW MuLOGfbNrdiYH0bAQMB5WSeqtd6SuaaRnD7tRf9od9Vg1sTLNuzxEO9YeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6HxNURRV79178hzT1w54lhU+ONMB8GA1UdIwQY MBaAFIvKs7bc/L2v12MRD4ZqgoFd6kRjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaThxenR0ejh2YV9YWXhFUGhtcUNnVjNxUkdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mODc5YTItMjg4MS00M2IxLWE4MTAt ZjJjODkyYzJkYzdkLzEvaThxenR0ejh2YV9YWXhFUGhtcUNnVjNxUkdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9mODc5YTItMjg4MS00M2IxLWE4MTAtZjJjODkyYzJkYzdk LzEvaThxenR0ejh2YV9YWXhFUGhtcUNnVjNxUkdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi86plmCX x0fFDNuJ7cEB2r+IJfvoHS4+8VDja90+nIQ4wK1DxmEbsOEVxbUlnAa1u+MvOfGv TTeuoRVH9sove3Bdr6yvbm1zlCNKu3LC4koqAm5f0Np9A9VGAy0B9UxUFHL8tlov E4x/z2fzaDhpSRf95vbmbkjZJK/3WWRMN3wxVM5YsphApImkHhJkkxjLwXDGaERa QKvo36dphpTpFR7xZIzl5k5Mn95Aq4Hx1fKxlV9GVD+r3YWExsZEqG4GssqT7iUW S79l9hxY+2o4oJQsXbA/LGSCAFX3yHItMLmtOpzUTBg7A9hCzb7eT2Nsx7uim8xR Ma6hBDNpDHn6Rw== -----END CERTIFICATE-----Generated at Mon Dec 29 00:49:41 2025 by rpki-client