This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft File: 8l2dskSP6XudF6RL5dZEhI-gGOE.mft (raw, json) Hash identifier: OGnOBnykgVD89ajFLc04bdKAj+4ggdGIbjS2S591xdI= Subject key identifier: 98:B1:CA:BC:4B:80:58:B0:A2:48:B1:B2:58:C7:FC:68:DD:51:61:60 Authority key identifier: F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1 Certificate issuer: /CN=f25d9db2448fe97b9d17a44be5d644848fa018e1 Certificate serial: 019B3E6CC9CF700429BABFA673AB3E79457A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 01:01:15 +0000 Manifest this update: Sun 21 Dec 2025 01:01:15 +0000 Manifest next update: Mon 22 Dec 2025 01:01:15 +0000 Files and hashes: 1: 8l2dskSP6XudF6RL5dZEhI-gGOE.crl (hash: pQtCgoMIbS2An3kAsCiy8ZDLSC7OG2CQluLMfBJG/CY=) 2: Mp26SDBIvgVqZ2UGJotoJUFrQYY.roa (hash: EI7XvBXkkd55hdBHcnfva3vB3xf9LKxoCK2MkhKmBG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:c9:cf:70:04:29:ba:bf:a6:73:ab:3e:79:45:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f25d9db2448fe97b9d17a44be5d644848fa018e1 Validity Not Before: Dec 21 01:01:15 2025 GMT Not After : Dec 22 01:01:15 2025 GMT Subject: CN=98b1cabc4b8058b0a248b1b258c7fc68dd516160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dc:f6:43:5a:8f:e9:14:39:7e:93:76:cc:97: 0c:3e:4e:ef:6b:a7:10:f0:a0:36:75:bf:24:cf:39: 59:f0:0a:23:d2:25:78:6f:73:4a:5b:0f:ed:83:e4: 4a:68:63:35:5c:dc:8e:75:ac:56:c7:fb:35:2c:25: 07:7d:9c:b3:7f:c0:2f:21:bb:4a:65:aa:ed:3b:20: 1b:32:a9:ed:09:cd:57:af:46:c0:b3:49:08:5d:0f: ac:cf:68:dd:63:15:0f:e6:5d:6e:53:a2:b3:14:81: ef:e6:ea:d0:c2:5f:9e:f8:57:54:58:61:c3:9a:b7: b6:17:80:f1:41:9d:ed:32:e2:ad:16:26:47:79:45: 78:bb:d8:ce:14:4a:2f:f8:a2:bc:18:d8:a7:31:60: 5d:e8:95:ae:f7:6f:f5:fb:68:ae:cf:6e:d6:28:2d: 47:47:8b:43:84:66:2c:20:81:ac:2b:c9:c1:9a:07: 56:89:7f:70:7e:c9:ce:8f:0d:96:a4:13:ff:77:b8: 2d:cc:69:cc:1a:53:c6:81:7c:18:a8:b6:8d:21:33: 4d:f2:8f:2f:65:9c:c6:29:57:c8:e3:0b:df:49:da: 7b:dc:85:0a:00:32:7b:e1:39:d8:be:69:15:30:af: 1b:16:75:91:99:c6:71:fb:bf:3b:56:3f:e1:80:a6: bb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B1:CA:BC:4B:80:58:B0:A2:48:B1:B2:58:C7:FC:68:DD:51:61:60 X509v3 Authority Key Identifier: keyid:F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:9c:8d:95:b9:84:6c:c9:6c:69:92:af:11:a6:db:3d:14:19: 03:56:65:9f:f1:52:f0:41:83:3d:d8:4c:80:49:b9:cf:9b:06: 6b:76:57:5f:b6:82:b0:e9:81:1e:a6:70:81:0a:79:f0:01:ab: 19:a9:48:57:ad:50:2c:79:46:b7:e9:db:c0:8f:d2:b2:6e:07: eb:82:cb:71:a5:40:37:00:ea:67:0d:d1:3e:24:75:c3:cc:a4: bc:98:fe:ea:b5:e2:8c:39:ff:54:45:94:fc:3a:67:a7:7b:18: a2:3b:41:52:6a:86:23:5e:b2:4d:bb:e4:15:2d:27:86:ec:2e: ea:e5:3e:5c:8f:59:77:e6:0f:ab:2b:8b:9f:10:76:c7:fe:60: 8a:fa:2c:a5:51:b6:fc:01:65:44:74:83:de:69:5d:79:49:de: f4:18:15:04:7e:2d:a0:33:ea:48:0b:6a:02:8f:3e:ff:e3:f7: fd:63:d6:69:3c:a6:1b:25:d6:58:a8:b9:98:b9:61:0f:ec:02: d6:b3:f5:cf:8a:1b:e8:f8:12:9d:33:94:01:d9:76:c8:98:1f: b9:3f:33:c4:8e:fa:45:b3:3a:e4:31:67:31:40:4d:e0:d6:63: b0:63:c1:f2:d6:3e:1a:e0:cb:dc:14:c9:f3:db:75:02:1d:04: 31:16:e8:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bMnPcAQpur+mc6s+eUV6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNWQ5ZGIyNDQ4ZmU5N2I5ZDE3YTQ0YmU1ZDY0NDg0OGZh MDE4ZTEwHhcNMjUxMjIxMDEwMTE1WhcNMjUxMjIyMDEwMTE1WjAzMTEwLwYDVQQD Eyg5OGIxY2FiYzRiODA1OGIwYTI0OGIxYjI1OGM3ZmM2OGRkNTE2MTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdz2Q1qP6RQ5fpN2zJcMPk7va6cQ 8KA2db8kzzlZ8Aoj0iV4b3NKWw/tg+RKaGM1XNyOdaxWx/s1LCUHfZyzf8AvIbtK ZartOyAbMqntCc1Xr0bAs0kIXQ+sz2jdYxUP5l1uU6KzFIHv5urQwl+e+FdUWGHD mre2F4DxQZ3tMuKtFiZHeUV4u9jOFEov+KK8GNinMWBd6JWu92/1+2iuz27WKC1H R4tDhGYsIIGsK8nBmgdWiX9wfsnOjw2WpBP/d7gtzGnMGlPGgXwYqLaNITNN8o8v ZZzGKVfI4wvfSdp73IUKADJ74TnYvmkVMK8bFnWRmcZx+787Vj/hgKa71wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJixyrxLgFiwokixsljH/GjdUWFgMB8GA1UdIwQY MBaAFPJdnbJEj+l7nRekS+XWRISPoBjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MTYwOGYtZmQ0Yi00MjY4LWE2ZTMt NWVjYjIxZmNmYTc1LzEvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS81MTYwOGYtZmQ0Yi00MjY4LWE2ZTMtNWVjYjIxZmNmYTc1 LzEvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZyNlbmE bMlsaZKvEabbPRQZA1Zln/FS8EGDPdhMgEm5z5sGa3ZXX7aCsOmBHqZwgQp58AGr GalIV61QLHlGt+nbwI/Ssm4H64LLcaVANwDqZw3RPiR1w8ykvJj+6rXijDn/VEWU /Dpnp3sYojtBUmqGI16yTbvkFS0nhuwu6uU+XI9Zd+YPqyuLnxB2x/5givospVG2 /AFlRHSD3mldeUne9BgVBH4toDPqSAtqAo8+/+P3/WPWaTymGyXWWKi5mLlhD+wC 1rP1z4ob6PgSnTOUAdl2yJgfuT8zxI76RbM65DFnMUBN4NZjsGPB8tY+GuDL3BTJ 89t1Ah0EMRbo2Q== -----END CERTIFICATE-----Generated at Sun Dec 21 03:00:35 2025 by rpki-client