This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft File: d8Bx2YnlMJrDyzwLCNOsslIRErY.mft (raw, json) Hash identifier: 9VEVDw/BUaD1FHeWGzrBneClO4ZOFzkshkjVNGYhURo= Subject key identifier: 94:73:13:E6:9C:D0:76:51:65:7C:9C:2F:6A:C0:60:6F:F5:0D:1E:EE Authority key identifier: 77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6 Certificate issuer: /CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6 Certificate serial: 019B50A99A6E4D6938B21F2C3982EE4809CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft Manifest number: 13B9 Signing time: Wed 24 Dec 2025 14:00:50 +0000 Manifest this update: Wed 24 Dec 2025 14:00:50 +0000 Manifest next update: Thu 25 Dec 2025 14:00:50 +0000 Files and hashes: 1: Le5vpyY48HdbIpkDIdpXFhjYz0Q.roa (hash: Myyoy3T8AQaNeHj3CEH6lMEU7kAImPu/7Rglv2KrnL4=) 2: d8Bx2YnlMJrDyzwLCNOsslIRErY.crl (hash: Gl31TehtiXyLKzS40mhgyQXJh5OUf4FTZSDZLAdbtrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:a9:9a:6e:4d:69:38:b2:1f:2c:39:82:ee:48:09:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6 Validity Not Before: Dec 24 14:00:50 2025 GMT Not After : Dec 25 14:00:50 2025 GMT Subject: CN=947313e69cd07651657c9c2f6ac0606ff50d1eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:42:50:e1:99:de:ba:92:3a:09:42:ce:b8:9f: b8:0c:b3:0c:ba:89:e8:bd:4d:97:db:d4:b6:46:3d: e2:db:72:d1:c7:91:cd:74:25:2f:8b:17:2c:d0:12: ca:dc:b3:ac:b9:eb:33:a7:64:2a:c6:58:e6:ad:fc: e3:56:81:e0:54:aa:f0:71:c2:06:3e:f3:45:32:83: f2:b7:c9:5f:5c:15:b3:8d:c5:c0:7d:58:47:1a:33: 02:dc:cb:bc:7a:31:9d:b3:41:d4:6b:18:02:ce:32: 57:eb:49:78:7f:f3:3a:bb:b3:80:3b:0b:ca:97:ac: 0b:a9:6a:ad:19:30:99:08:37:1d:90:4e:0a:ef:35: a1:cd:bd:d9:11:2d:6b:65:2e:c3:fe:f0:58:35:80: 7d:9e:2f:90:37:0d:80:1f:2c:de:87:de:4d:38:f3: d5:c2:85:d4:36:e7:cb:d4:38:89:bf:b3:f9:73:c9: a8:c9:78:b6:32:f0:5d:55:6c:79:6a:3f:84:2c:d1: 06:12:5a:d4:f8:03:40:28:eb:8e:e6:77:3e:89:b7: 67:92:9d:87:4e:68:5d:ba:61:ec:95:c4:d5:0a:73: 8a:a2:f1:b4:53:ae:cc:13:06:4b:4f:c2:5e:56:a3: ba:2b:a6:5c:b0:8c:e5:1c:fc:10:11:ea:47:85:6d: c1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:73:13:E6:9C:D0:76:51:65:7C:9C:2F:6A:C0:60:6F:F5:0D:1E:EE X509v3 Authority Key Identifier: keyid:77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:51:c9:29:22:4a:40:f1:0f:03:1e:00:c4:4c:94:c6:0b:2f: 00:55:e0:60:a7:0c:cc:cf:08:41:ed:34:0f:2d:d8:b1:4c:73: f0:af:20:37:39:37:fa:40:eb:79:4d:78:f8:0a:d3:58:c9:96: 9a:a2:02:f1:3f:c0:c5:fb:b4:7f:e5:7a:74:44:62:5c:c3:8b: 0d:ab:ce:92:22:aa:84:35:34:26:a7:8a:97:77:25:a3:0e:2e: 6b:0d:bc:be:a6:68:1e:83:21:22:ac:a4:69:9b:48:ad:39:d3: e5:a3:81:8a:4b:e8:07:2b:bb:5a:56:c0:f4:69:e4:3c:1f:99: 31:91:6f:58:fa:9f:dc:9d:30:f3:53:4a:61:e8:2a:3b:8c:57: 70:b8:99:da:50:50:38:26:92:ae:25:7a:6a:ef:0c:42:ae:5d: 6d:ce:7d:c5:bd:6d:9e:64:88:0f:29:35:93:83:ec:dd:90:34: f3:b0:cb:3c:da:99:6b:c2:7b:fe:24:ee:14:d0:76:2b:b8:45: 94:42:16:38:c6:3a:a8:11:20:58:c4:f6:97:8f:0a:02:33:9b: 72:32:29:de:f1:50:a6:61:51:03:f6:21:14:c8:69:2f:ee:32: 01:84:dd:fd:21:35:3a:d5:e2:dd:ba:1d:94:e6:5f:43:2e:de: 21:56:5a:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqZpuTWk4sh8sOYLuSAnOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzA3MWQ5ODllNTMwOWFjM2NiM2MwYjA4ZDNhY2IyNTIx MTEyYjYwHhcNMjUxMjI0MTQwMDUwWhcNMjUxMjI1MTQwMDUwWjAzMTEwLwYDVQQD Eyg5NDczMTNlNjljZDA3NjUxNjU3YzljMmY2YWMwNjA2ZmY1MGQxZWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEJQ4ZneupI6CULOuJ+4DLMMuono vU2X29S2Rj3i23LRx5HNdCUvixcs0BLK3LOsueszp2QqxljmrfzjVoHgVKrwccIG PvNFMoPyt8lfXBWzjcXAfVhHGjMC3Mu8ejGds0HUaxgCzjJX60l4f/M6u7OAOwvK l6wLqWqtGTCZCDcdkE4K7zWhzb3ZES1rZS7D/vBYNYB9ni+QNw2AHyzeh95NOPPV woXUNufL1DiJv7P5c8moyXi2MvBdVWx5aj+ELNEGElrU+ANAKOuO5nc+ibdnkp2H TmhdumHslcTVCnOKovG0U67MEwZLT8JeVqO6K6ZcsIzlHPwQEepHhW3B4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRzE+ac0HZRZXycL2rAYG/1DR7uMB8GA1UdIwQY MBaAFHfAcdmJ5TCaw8s8CwjTrLJSERK2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhCeDJZbmxNSnJEeXp3TENOT3NzbElSRXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84NDRiZmUtZWMxOC00MTdlLThmNWEt NWNjNGRlZDlhN2QyLzEvZDhCeDJZbmxNSnJEeXp3TENOT3NzbElSRXJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi84NDRiZmUtZWMxOC00MTdlLThmNWEtNWNjNGRlZDlhN2Qy LzEvZDhCeDJZbmxNSnJEeXp3TENOT3NzbElSRXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilHJKSJK QPEPAx4AxEyUxgsvAFXgYKcMzM8IQe00Dy3YsUxz8K8gNzk3+kDreU14+ArTWMmW mqIC8T/Axfu0f+V6dERiXMOLDavOkiKqhDU0JqeKl3clow4uaw28vqZoHoMhIqyk aZtIrTnT5aOBikvoByu7WlbA9GnkPB+ZMZFvWPqf3J0w81NKYegqO4xXcLiZ2lBQ OCaSriV6au8MQq5dbc59xb1tnmSIDyk1k4Ps3ZA087DLPNqZa8J7/iTuFNB2K7hF lEIWOMY6qBEgWMT2l48KAjObcjIp3vFQpmFRA/YhFMhpL+4yAYTd/SE1OtXi3bod lOZfQy7eIVZaGA== -----END CERTIFICATE-----Generated at Wed Dec 24 15:44:38 2025 by rpki-client