This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft File: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft (raw, json) Hash identifier: bEx8yrNWrXEqYyaKDv0VU6Mzoc8d3ACE7Wnd081pcd0= Subject key identifier: 24:51:2C:83:47:77:4E:4F:25:BB:4D:CE:FB:EF:D2:6B:A0:AA:6C:03 Authority key identifier: F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99 Certificate issuer: /CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699 Certificate serial: 019B6F8F8860BE24936E35B19173515EDE25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft Manifest number: 083C Signing time: Tue 30 Dec 2025 14:00:36 +0000 Manifest this update: Tue 30 Dec 2025 14:00:36 +0000 Manifest next update: Wed 31 Dec 2025 14:00:36 +0000 Files and hashes: 1: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl (hash: OaboJ4h3xVPIOyR1JRZt8MrKA/D+4pYQc11twwof6DE=) 2: iI30nfDsBhExpS3xd7Ao_hR6634.roa (hash: Ri4PPxwNbTb8t+Vmf7x4SKgeY8qYnc9vjqMssowa560=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:8f:88:60:be:24:93:6e:35:b1:91:73:51:5e:de:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699 Validity Not Before: Dec 30 14:00:36 2025 GMT Not After : Dec 31 14:00:36 2025 GMT Subject: CN=24512c8347774e4f25bb4dcefbefd26ba0aa6c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:2a:da:17:f7:35:cd:8f:26:64:dd:d9:34: ee:9e:5e:69:d0:76:c9:e8:60:1e:32:d5:45:af:7d: ef:4f:2e:1d:b3:22:be:78:71:57:75:31:0c:6d:75: 8c:83:19:58:2b:c5:9f:18:0c:ff:cf:91:8c:a0:f1: f1:29:50:b0:0d:79:c0:93:1a:0f:27:55:22:97:d8: 53:7c:3f:86:a9:bc:60:99:e9:2d:86:34:79:84:3f: da:c1:ca:b3:5a:19:b6:bf:76:c8:ea:3b:d8:97:2e: e8:ca:d9:2b:01:cb:3b:f1:79:8f:25:28:8a:d6:0f: 5e:fa:d0:5c:c0:fb:55:e3:9b:10:f7:03:0a:58:02: 50:21:b1:5a:38:86:73:b8:d6:96:b3:e5:3d:ac:a7: cb:35:8f:20:10:b9:1c:30:0a:03:38:95:8d:bb:5a: 3d:9c:a6:25:df:23:31:b1:aa:03:48:d2:3e:7b:cb: a7:8d:31:ae:16:47:a6:7a:38:b7:d9:2d:bd:c3:a5: c1:6a:a0:24:d9:24:35:11:8d:df:3f:1d:99:c0:5d: 1d:54:77:a0:87:63:ed:7d:64:33:f7:0b:46:c3:bf: ac:18:9d:b1:56:69:de:55:5b:d3:29:1d:50:59:18: 99:3a:f3:38:1a:71:f1:e6:53:85:4b:75:57:6d:c0: c5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:51:2C:83:47:77:4E:4F:25:BB:4D:CE:FB:EF:D2:6B:A0:AA:6C:03 X509v3 Authority Key Identifier: keyid:F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:5e:8a:3d:48:f5:91:c4:8e:04:a0:2a:72:26:65:43:7f:0a: 85:48:93:1b:a2:6c:3e:46:33:bc:e0:67:27:b1:08:16:79:b4: 85:8e:4e:7c:54:81:09:ff:99:59:e2:f7:40:91:47:87:fb:ea: 20:ea:e5:22:c3:81:df:14:34:18:58:69:7d:13:02:21:82:d5: c7:1b:67:eb:76:50:ce:8a:41:16:1d:d3:ea:b6:be:ba:37:3c: af:15:35:28:63:94:b0:dc:2b:31:af:d6:a8:5d:d5:c1:28:fe: ad:47:82:20:e3:85:a1:28:7f:07:72:09:73:9f:3e:5c:71:a3: 9a:37:56:fd:f8:03:10:90:12:0e:25:38:45:59:eb:87:67:27: cf:52:e4:84:60:c1:fa:70:b0:53:ad:82:9f:90:c0:3e:3c:ac: d2:ca:7f:ad:63:ac:2e:1b:86:f1:66:f5:ac:55:92:f2:b9:b1: e0:24:37:35:3b:2c:b6:61:cf:6e:3d:67:95:df:81:2d:3f:b6: b0:a7:52:ed:db:23:21:1f:8d:2a:1c:5f:f8:c9:3f:94:32:24: 55:da:ed:2f:fb:19:76:67:56:70:d4:41:14:2b:e9:b5:14:95: 5b:f1:69:b3:5b:53:20:66:ae:41:6e:1e:b1:60:e5:aa:3b:b0: 07:ce:80:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvj4hgviSTbjWxkXNRXt4lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYzA2NDQ2MGVhNmQ1Y2ZkM2Y4OGRjMWNmNGVkMDc1MDJi YmI2OTkwHhcNMjUxMjMwMTQwMDM2WhcNMjUxMjMxMTQwMDM2WjAzMTEwLwYDVQQD EygyNDUxMmM4MzQ3Nzc0ZTRmMjViYjRkY2VmYmVmZDI2YmEwYWE2YzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD4q2hf3Nc2PJmTd2TTunl5p0HbJ 6GAeMtVFr33vTy4dsyK+eHFXdTEMbXWMgxlYK8WfGAz/z5GMoPHxKVCwDXnAkxoP J1Uil9hTfD+GqbxgmekthjR5hD/awcqzWhm2v3bI6jvYly7oytkrAcs78XmPJSiK 1g9e+tBcwPtV45sQ9wMKWAJQIbFaOIZzuNaWs+U9rKfLNY8gELkcMAoDOJWNu1o9 nKYl3yMxsaoDSNI+e8unjTGuFkemeji32S29w6XBaqAk2SQ1EY3fPx2ZwF0dVHeg h2PtfWQz9wtGw7+sGJ2xVmneVVvTKR1QWRiZOvM4GnHx5lOFS3VXbcDFXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRRLINHd05PJbtNzvvv0mugqmwDMB8GA1UdIwQY MBaAFPHAZEYOptXP0/iNwc9O0HUCu7aZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGNCa1JnNm0xY19ULUkzQnowN1FkUUs3dHBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mNDUwNmUtZmI4OC00OGE5LTgyODUt YzlhY2ZlM2YzMTIxLzEvOGNCa1JnNm0xY19ULUkzQnowN1FkUUs3dHBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9mNDUwNmUtZmI4OC00OGE5LTgyODUtYzlhY2ZlM2YzMTIx LzEvOGNCa1JnNm0xY19ULUkzQnowN1FkUUs3dHBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQV6KPUj1 kcSOBKAqciZlQ38KhUiTG6JsPkYzvOBnJ7EIFnm0hY5OfFSBCf+ZWeL3QJFHh/vq IOrlIsOB3xQ0GFhpfRMCIYLVxxtn63ZQzopBFh3T6ra+ujc8rxU1KGOUsNwrMa/W qF3VwSj+rUeCIOOFoSh/B3IJc58+XHGjmjdW/fgDEJASDiU4RVnrh2cnz1LkhGDB +nCwU62Cn5DAPjys0sp/rWOsLhuG8Wb1rFWS8rmx4CQ3NTsstmHPbj1nld+BLT+2 sKdS7dsjIR+NKhxf+Mk/lDIkVdrtL/sZdmdWcNRBFCvptRSVW/Fps1tTIGauQW4e sWDlqjuwB86AIw== -----END CERTIFICATE-----Generated at Tue Dec 30 18:41:15 2025 by rpki-client