This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft File: 8yyk3zLccfQREE-UtRrBS2Z1gks.mft (raw, json) Hash identifier: WtNnjrhVxzzJsqYhImHEh28+WZK/dVSOSIIU3z+n9bo= Subject key identifier: C0:26:A0:FC:1A:8B:28:D6:CC:9B:F9:03:E3:D6:CA:18:83:E2:F0:17 Authority key identifier: F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B Certificate issuer: /CN=f32ca4df32dc71f411104f94b51ac14b6675824b Certificate serial: 019B44DC6ACA80C65FD6164B26B8E39F19BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft Manifest number: 01CA Signing time: Mon 22 Dec 2025 07:00:54 +0000 Manifest this update: Mon 22 Dec 2025 07:00:54 +0000 Manifest next update: Tue 23 Dec 2025 07:00:54 +0000 Files and hashes: 1: 8yyk3zLccfQREE-UtRrBS2Z1gks.crl (hash: MDsrk+vvwlwuM6TAtOB+H7VYr8+B9l01Nh/WyATmcWg=) 2: AhlTJGVn8a8rsbPjwh1Of-tiZ-E.roa (hash: PvYJX4JVcBus78Efd+Q4dFc2SvUKpYf6MzmiID5icj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:6a:ca:80:c6:5f:d6:16:4b:26:b8:e3:9f:19:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f32ca4df32dc71f411104f94b51ac14b6675824b Validity Not Before: Dec 22 07:00:54 2025 GMT Not After : Dec 23 07:00:54 2025 GMT Subject: CN=c026a0fc1a8b28d6cc9bf903e3d6ca1883e2f017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a5:70:4f:a9:d9:7c:80:fa:71:7f:e1:16:96: 18:b0:e4:5a:bb:f9:de:6d:cb:b7:e0:85:40:3e:d8: 44:5b:e1:f5:a5:f5:bb:1a:a4:55:74:a6:69:cc:6e: 5b:3d:5d:5b:c9:98:ee:fb:da:30:d5:63:d6:79:00: a9:71:be:74:f2:03:a6:80:58:8a:1c:b2:86:cd:3a: 7b:d2:5b:85:8e:14:01:78:2d:2c:c6:b3:8b:3a:fe: cb:89:fa:a2:93:7d:e3:56:af:f4:1a:b4:3b:d7:ba: 41:69:a4:92:33:c1:80:32:7a:92:6f:0c:4c:c6:4a: 58:77:f1:8f:73:a9:32:c8:cd:26:91:43:29:93:2c: 27:92:06:b5:64:e9:2b:cc:2a:fe:e8:38:3c:51:a5: ce:1e:7c:2c:86:c8:4e:68:ce:8d:53:3a:42:8e:9d: 9e:54:62:aa:a4:51:04:45:49:12:bb:3d:4a:18:9c: 9e:5e:47:71:9b:a1:f6:14:4b:6d:e9:17:b4:90:88: 75:75:85:f9:ca:fa:89:1a:9c:e6:2f:eb:c3:5e:da: cf:40:79:8e:2a:15:b5:51:f7:e1:76:78:90:11:b0: 4c:8d:5c:47:3f:86:51:a2:b5:69:54:69:d1:ef:da: be:4e:ce:de:74:60:b1:c4:76:c8:ff:de:24:d2:26: 94:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:26:A0:FC:1A:8B:28:D6:CC:9B:F9:03:E3:D6:CA:18:83:E2:F0:17 X509v3 Authority Key Identifier: keyid:F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:90:a1:ca:b1:16:b4:2e:12:7d:db:7b:60:09:2c:54:ce:32: a3:51:1b:e5:22:77:58:48:f6:2a:fa:c2:e1:80:0c:65:b2:97: c3:61:15:38:eb:a3:e5:6c:ec:8a:af:58:a3:57:d8:14:0b:aa: de:de:e4:e5:b4:91:fe:fd:a4:2a:2f:15:f2:2e:f8:18:1f:49: e0:36:e2:7c:6d:2b:68:f4:4a:09:e6:6f:51:e1:e0:c4:4d:88: 10:e4:58:d2:bf:80:b0:a8:07:ff:61:f6:ad:eb:76:90:52:29: 84:e0:ff:a1:ad:11:98:5f:8f:1c:0f:8c:db:45:fc:5f:31:36: 07:ce:4d:43:2d:e5:bd:06:66:7f:96:f4:f1:d3:2d:e4:1c:ba: 52:f8:88:9f:03:b3:1f:a0:f0:2b:6f:4a:19:1b:12:4d:b8:9f: 6b:80:1c:bb:f8:21:40:5a:88:5b:52:bc:7b:a7:f2:cd:a1:e0: 78:a8:46:ca:63:5d:ed:80:be:19:bc:00:15:df:80:b0:e1:a5: 67:de:dc:01:5f:b5:1d:b3:ba:4d:7b:79:3a:05:f7:28:ab:22: b5:29:35:28:39:33:1c:1f:35:d5:7c:c9:cd:f8:27:a0:60:54: f1:d5:d0:ef:4b:dd:dc:bd:3b:4e:b8:c8:d2:b0:f3:f7:5e:d2: 17:dc:6c:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3GrKgMZf1hZLJrjjnxm6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMmNhNGRmMzJkYzcxZjQxMTEwNGY5NGI1MWFjMTRiNjY3 NTgyNGIwHhcNMjUxMjIyMDcwMDU0WhcNMjUxMjIzMDcwMDU0WjAzMTEwLwYDVQQD EyhjMDI2YTBmYzFhOGIyOGQ2Y2M5YmY5MDNlM2Q2Y2ExODgzZTJmMDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqVwT6nZfID6cX/hFpYYsORau/ne bcu34IVAPthEW+H1pfW7GqRVdKZpzG5bPV1byZju+9ow1WPWeQCpcb508gOmgFiK HLKGzTp70luFjhQBeC0sxrOLOv7Lifqik33jVq/0GrQ717pBaaSSM8GAMnqSbwxM xkpYd/GPc6kyyM0mkUMpkywnkga1ZOkrzCr+6Dg8UaXOHnwshshOaM6NUzpCjp2e VGKqpFEERUkSuz1KGJyeXkdxm6H2FEtt6Re0kIh1dYX5yvqJGpzmL+vDXtrPQHmO KhW1UffhdniQEbBMjVxHP4ZRorVpVGnR79q+Ts7edGCxxHbI/94k0iaUmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAmoPwaiyjWzJv5A+PWyhiD4vAXMB8GA1UdIwQY MBaAFPMspN8y3HH0ERBPlLUawUtmdYJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHl5azN6TGNjZlFSRUUtVXRSckJTMloxZ2tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS80ZWRiZWMtZmZlYS00MDYyLTg5Y2It NjU2NjAwYzllNDQwLzEvOHl5azN6TGNjZlFSRUUtVXRSckJTMloxZ2tzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS80ZWRiZWMtZmZlYS00MDYyLTg5Y2ItNjU2NjAwYzllNDQw LzEvOHl5azN6TGNjZlFSRUUtVXRSckJTMloxZ2tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopChyrEW tC4Sfdt7YAksVM4yo1Eb5SJ3WEj2KvrC4YAMZbKXw2EVOOuj5Wzsiq9Yo1fYFAuq 3t7k5bSR/v2kKi8V8i74GB9J4DbifG0raPRKCeZvUeHgxE2IEORY0r+AsKgH/2H2 ret2kFIphOD/oa0RmF+PHA+M20X8XzE2B85NQy3lvQZmf5b08dMt5By6UviInwOz H6DwK29KGRsSTbifa4Acu/ghQFqIW1K8e6fyzaHgeKhGymNd7YC+GbwAFd+AsOGl Z97cAV+1HbO6TXt5OgX3KKsitSk1KDkzHB811XzJzfgnoGBU8dXQ70vd3L07TrjI 0rDz917SF9xsXg== -----END CERTIFICATE-----Generated at Mon Dec 22 13:59:18 2025 by rpki-client