This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json) Hash identifier: HS6loAIYwBn8ByAIHhezmp7ZX5U2OQpxGRQr2UVS6+g= Subject key identifier: 57:C8:C9:7F:1F:54:B1:DC:C7:CC:19:0C:4B:AF:E2:E0:07:80:84:40 Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21 Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421 Certificate serial: 019B3C46ED132B5647641A77239E92CC862F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 15:00:39 +0000 Manifest this update: Sat 20 Dec 2025 15:00:39 +0000 Manifest next update: Sun 21 Dec 2025 15:00:39 +0000 Files and hashes: 1: 7XoxbsiH0tvuamwOaZJkHsbncU8.roa (hash: eOLDYEBs+ePiFOo04IA8xxSpoLseLj4knNzwy/AuO7c=) 2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: YdPInIsh/Apg0FYeqYO6dFpE/qPo4oeyZNwzPoq8MhM=) 3: Jt7bihKghc7zukL52uY8fgD1W-o.roa (hash: 2TGz2CMfaxj9aqkazkTK9wOsLvIeBADGDZnq6/Vnqk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:ed:13:2b:56:47:64:1a:77:23:9e:92:cc:86:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421 Validity Not Before: Dec 20 15:00:39 2025 GMT Not After : Dec 21 15:00:39 2025 GMT Subject: CN=57c8c97f1f54b1dcc7cc190c4bafe2e007808440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:fd:82:aa:fa:64:e2:2c:d6:5d:4e:9e:ad: 86:c6:df:d8:5b:12:f5:01:61:f1:84:81:74:67:0c: 40:9c:04:54:61:47:b8:9b:39:ac:f0:60:e2:57:54: c1:f5:e0:31:5f:46:b5:b7:76:02:8d:38:7f:29:81: 04:aa:97:14:5a:1e:d2:7d:07:0d:f4:ec:8c:0f:79: 7c:0b:26:81:c9:09:51:af:aa:89:a6:cb:50:61:22: 74:b3:30:dd:3d:2c:55:9f:cf:fa:91:4e:b2:87:02: 51:69:58:44:ef:f6:25:58:74:37:30:96:83:58:92: 4b:28:4d:25:c5:7f:e9:7d:0c:0d:c7:f0:77:97:d9: 56:b4:08:c2:a8:63:61:93:f0:d2:d2:71:41:81:21: 6c:54:5f:97:45:f2:c2:91:b8:23:09:fc:7f:7a:09: 32:7c:5d:80:f2:11:86:da:cb:3b:ab:8b:f2:ec:ed: 78:ec:dc:0d:94:cd:06:2f:16:e1:ac:12:53:1b:a1: f2:90:e6:ee:3b:71:82:80:14:46:af:5d:d9:f2:90: 87:cc:9c:bd:de:58:fa:f8:1e:96:66:26:34:bd:dc: de:94:99:ea:5f:fd:b5:4f:e6:af:9a:86:f6:f5:e7: 72:13:f3:e5:eb:9c:61:0c:95:03:c8:fe:11:49:d2: ec:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C8:C9:7F:1F:54:B1:DC:C7:CC:19:0C:4B:AF:E2:E0:07:80:84:40 X509v3 Authority Key Identifier: keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:62:f5:f1:8f:58:e7:dd:b5:37:ae:f9:f0:31:4f:2f:b2:c8: 16:c7:6f:85:b8:e4:fe:e6:6a:06:4f:c1:51:1e:00:3d:6b:f4: fd:1e:2f:64:89:04:52:d3:63:a9:a2:5e:6a:74:4a:17:5f:9e: 2f:86:39:f2:00:5e:f9:02:cc:4d:58:99:a0:ba:98:ba:e1:29: 86:f4:ee:6d:57:e3:c5:07:dd:e5:76:02:29:20:8b:fe:8e:0d: b1:3c:0d:d7:f4:84:79:63:b5:5d:cf:66:5c:8c:8d:c6:c8:66: cd:5f:cd:23:a3:e3:b1:15:58:f4:1f:87:72:1c:fa:6b:51:0d: 55:ca:ba:7b:fb:5d:f9:cc:d8:97:46:fc:a7:a1:44:3e:32:71: f9:4e:cf:fa:c7:cd:e5:1d:49:2a:f9:65:d7:fe:f1:6d:ec:ae: 64:8a:3c:cd:93:c5:65:a9:84:d0:5c:99:8f:25:d9:09:7d:81: 26:50:5c:e5:95:97:a9:16:99:14:ee:42:5e:bf:8e:09:33:fd: 25:db:14:1a:a4:dd:fa:95:ef:bf:e7:6d:7a:4a:d9:3f:2c:d1: f1:11:65:e4:83:3b:02:e9:7f:ca:3e:6b:34:7b:43:0d:65:34: b2:64:92:2c:4d:de:f8:0d:48:48:27:13:d1:c6:07:55:6b:fd: d9:cb:d6:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8Ru0TK1ZHZBp3I56SzIYvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYjE1ZTc3YWY0ZWRkZTExMTkyYzZmZWNkNTBiMjFjZDM3 OWQ0MjEwHhcNMjUxMjIwMTUwMDM5WhcNMjUxMjIxMTUwMDM5WjAzMTEwLwYDVQQD Eyg1N2M4Yzk3ZjFmNTRiMWRjYzdjYzE5MGM0YmFmZTJlMDA3ODA4NDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqP9gqr6ZOIs1l1Onq2Gxt/YWxL1 AWHxhIF0ZwxAnARUYUe4mzms8GDiV1TB9eAxX0a1t3YCjTh/KYEEqpcUWh7SfQcN 9OyMD3l8CyaByQlRr6qJpstQYSJ0szDdPSxVn8/6kU6yhwJRaVhE7/YlWHQ3MJaD WJJLKE0lxX/pfQwNx/B3l9lWtAjCqGNhk/DS0nFBgSFsVF+XRfLCkbgjCfx/egky fF2A8hGG2ss7q4vy7O147NwNlM0GLxbhrBJTG6HykObuO3GCgBRGr13Z8pCHzJy9 3lj6+B6WZiY0vdzelJnqX/21T+avmob29edyE/Pl65xhDJUDyP4RSdLshwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfIyX8fVLHcx8wZDEuv4uAHgIRAMB8GA1UdIwQY MBaAFPGxXnevTt3hEZLG/s1QshzTedQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUt MTM0MGNjNWIzZDU3LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUtMTM0MGNjNWIzZDU3 LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2L18Y9Y 5921N6758DFPL7LIFsdvhbjk/uZqBk/BUR4APWv0/R4vZIkEUtNjqaJeanRKF1+e L4Y58gBe+QLMTViZoLqYuuEphvTubVfjxQfd5XYCKSCL/o4NsTwN1/SEeWO1Xc9m XIyNxshmzV/NI6PjsRVY9B+Hchz6a1ENVcq6e/td+czYl0b8p6FEPjJx+U7P+sfN 5R1JKvll1/7xbeyuZIo8zZPFZamE0FyZjyXZCX2BJlBc5ZWXqRaZFO5CXr+OCTP9 JdsUGqTd+pXvv+dtekrZPyzR8RFl5IM7Aul/yj5rNHtDDWU0smSSLE3e+A1ISCcT 0cYHVWv92cvWHA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:06:22 2025 by rpki-client