This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft File: 8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft (raw, json) Hash identifier: yeDmNyhGE4etkoGp1biBdAuSj4JTFfYbm8QwDJ6D3Xc= Subject key identifier: 68:AF:3B:B2:39:D7:45:73:15:97:BC:1D:28:43:A5:98:A1:A6:53:14 Authority key identifier: F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45 Certificate issuer: /CN=f2beed4df207c3609adfded80dddd9316f0a9b45 Certificate serial: 019B548647224E5AF0227B15D57CF73D0C6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 08:00:44 +0000 Manifest this update: Thu 25 Dec 2025 08:00:44 +0000 Manifest next update: Fri 26 Dec 2025 08:00:44 +0000 Files and hashes: 1: 8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl (hash: m7uKvhwhIM1AL3zE0ss+KCaX3/YKJumUi7ifsBwrwFk=) 2: hL-DXnMsqPz6nlhjJn7RS4zQddU.roa (hash: PY6Hm3vuvoHo1j0KhJs+BA0EtLz3qhxo9ur8To6A/3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:47:22:4e:5a:f0:22:7b:15:d5:7c:f7:3d:0c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2beed4df207c3609adfded80dddd9316f0a9b45 Validity Not Before: Dec 25 08:00:44 2025 GMT Not After : Dec 26 08:00:44 2025 GMT Subject: CN=68af3bb239d745731597bc1d2843a598a1a65314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:36:bd:2b:d1:15:d8:41:4a:f4:76:d1:a2:b5: 0f:4b:c7:e3:30:9b:42:78:06:07:bc:98:fe:f9:b8: b3:c3:da:56:b6:04:ad:d4:82:75:24:89:2e:33:62: fc:ad:93:58:e2:60:1a:d4:ec:16:16:a9:5c:c2:05: 0a:96:34:bc:98:34:7a:4b:ea:d7:91:ac:9f:4d:73: 0a:47:f0:b6:31:ca:eb:6a:0f:c8:e6:2e:8e:05:e6: 57:ff:b6:77:17:bd:48:11:28:2d:93:43:bf:be:1b: c2:cd:e3:0a:02:15:02:70:3d:65:48:09:37:42:50: 92:05:7d:03:13:7e:9a:a0:44:f5:fd:2e:4d:f8:a2: 8c:2f:63:e0:ca:c1:1b:64:24:a0:9b:10:42:d7:e5: 50:7f:53:5d:4e:b8:27:fb:6b:fa:31:29:d4:a7:bb: 66:3a:4e:12:02:ea:20:3f:93:9e:8b:bd:c7:ee:d7: 7e:d4:f0:1d:5f:a4:78:43:89:95:4c:65:41:62:b0: 5e:34:9e:7c:30:5d:4e:b7:68:05:76:18:6d:fb:d5: 29:d8:30:82:c5:0f:7b:2e:a8:f5:e5:a3:06:ac:de: cb:c0:8a:38:46:0d:65:b3:e4:df:09:e4:0f:67:aa: 8a:ea:54:42:57:5a:c6:96:2d:d5:f0:fa:e5:41:05: 6f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AF:3B:B2:39:D7:45:73:15:97:BC:1D:28:43:A5:98:A1:A6:53:14 X509v3 Authority Key Identifier: keyid:F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:1d:66:ad:22:2f:4b:e7:3d:ba:f0:1c:35:dd:fc:72:ad:32: aa:b5:4d:68:b4:e8:22:a3:18:bf:51:1d:a4:40:1e:4d:3b:7f: be:b1:7b:44:dd:2f:0f:60:0a:60:ef:0f:ee:33:35:8e:d5:ba: 24:eb:89:5a:57:79:80:40:40:95:85:6f:a8:04:ff:38:03:a5: 6a:e1:53:54:75:c2:40:b6:b2:65:58:74:b3:fa:cf:27:c5:b4: 58:e3:2a:99:e9:c1:9f:c2:63:89:cd:47:85:b7:8a:0f:d9:d2: 20:b6:15:41:b0:8d:54:48:ed:f3:44:df:91:2d:80:a4:aa:37: e2:b4:28:b9:15:f3:b6:6f:50:12:8a:02:00:d5:58:ef:8e:13: fc:11:7a:77:b7:95:4e:0b:69:69:16:f7:17:89:53:f9:5a:bd: b7:a3:f3:e3:68:ec:f2:2e:1a:16:71:9c:44:b3:2a:e1:3e:18: a3:eb:46:44:47:c8:fc:83:c2:7c:34:94:58:45:55:7a:e8:34: 3c:d1:7f:2a:fc:ba:c6:52:87:32:dc:8b:85:df:6b:d3:af:10: b0:b7:c4:38:65:b8:32:55:b0:a3:b6:52:c4:a5:eb:dd:cc:2f: fb:a5:dd:a3:a7:05:0a:00:c2:10:90:15:b1:fe:93:da:5f:45: 2c:bd:31:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhkciTlrwInsV1Xz3PQxrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYmVlZDRkZjIwN2MzNjA5YWRmZGVkODBkZGRkOTMxNmYw YTliNDUwHhcNMjUxMjI1MDgwMDQ0WhcNMjUxMjI2MDgwMDQ0WjAzMTEwLwYDVQQD Eyg2OGFmM2JiMjM5ZDc0NTczMTU5N2JjMWQyODQzYTU5OGExYTY1MzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ja9K9EV2EFK9HbRorUPS8fjMJtC eAYHvJj++bizw9pWtgSt1IJ1JIkuM2L8rZNY4mAa1OwWFqlcwgUKljS8mDR6S+rX kayfTXMKR/C2Mcrrag/I5i6OBeZX/7Z3F71IESgtk0O/vhvCzeMKAhUCcD1lSAk3 QlCSBX0DE36aoET1/S5N+KKML2PgysEbZCSgmxBC1+VQf1NdTrgn+2v6MSnUp7tm Ok4SAuogP5Oei73H7td+1PAdX6R4Q4mVTGVBYrBeNJ58MF1Ot2gFdhht+9Up2DCC xQ97Lqj15aMGrN7LwIo4Rg1ls+TfCeQPZ6qK6lRCV1rGli3V8PrlQQVvVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGivO7I510VzFZe8HShDpZihplMUMB8GA1UdIwQY MBaAFPK+7U3yB8Ngmt/e2A3d2TFvCptFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHI3dFRmSUh3MkNhMzk3WURkM1pNVzhLbTBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jNmJjYmEtYTk5Ni00YmI1LWJhNGEt YTQ2MTUzMTQ1Y2Y4LzEvOHI3dFRmSUh3MkNhMzk3WURkM1pNVzhLbTBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jNmJjYmEtYTk5Ni00YmI1LWJhNGEtYTQ2MTUzMTQ1Y2Y4 LzEvOHI3dFRmSUh3MkNhMzk3WURkM1pNVzhLbTBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaB1mrSIv S+c9uvAcNd38cq0yqrVNaLToIqMYv1EdpEAeTTt/vrF7RN0vD2AKYO8P7jM1jtW6 JOuJWld5gEBAlYVvqAT/OAOlauFTVHXCQLayZVh0s/rPJ8W0WOMqmenBn8Jjic1H hbeKD9nSILYVQbCNVEjt80TfkS2ApKo34rQouRXztm9QEooCANVY744T/BF6d7eV TgtpaRb3F4lT+Vq9t6Pz42js8i4aFnGcRLMq4T4Yo+tGREfI/IPCfDSUWEVVeug0 PNF/Kvy6xlKHMtyLhd9r068QsLfEOGW4MlWwo7ZSxKXr3cwv+6Xdo6cFCgDCEJAV sf6T2l9FLL0xtA== -----END CERTIFICATE-----Generated at Thu Dec 25 12:30:13 2025 by rpki-client