This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft File: i8EWjaFgICh-6h_eygVBkwqdNok.mft (raw, json) Hash identifier: wQcsK+15WuglGTJ1k6kNe6F7F6Dt86eD+8/oYAqoGM4= Subject key identifier: AF:39:A9:DE:3A:9A:EF:CF:C1:AE:0F:0D:D4:59:F4:35:8B:72:5F:79 Authority key identifier: 8B:C1:16:8D:A1:60:20:28:7E:EA:1F:DE:CA:05:41:93:0A:9D:36:89 Certificate issuer: /CN=8bc1168da16020287eea1fdeca0541930a9d3689 Certificate serial: 019B39B3E796BB56DD2C980FA5CEB17817FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8EWjaFgICh-6h_eygVBkwqdNok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft Manifest number: 040A Signing time: Sat 20 Dec 2025 03:00:50 +0000 Manifest this update: Sat 20 Dec 2025 03:00:50 +0000 Manifest next update: Sun 21 Dec 2025 03:00:50 +0000 Files and hashes: 1: M8dNAav4bGEdssIavf8xkWsYnhg.roa (hash: XQuy4W50mLmkvV791/MW+gWfWSh1bhqASgHVJ90pFyY=) 2: i8EWjaFgICh-6h_eygVBkwqdNok.crl (hash: srRykRRlF6sh1JaVEzisfJhsPVYi17S8aK4FjNDgQBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft rsync://rpki.ripe.net/repository/DEFAULT/i8EWjaFgICh-6h_eygVBkwqdNok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:e7:96:bb:56:dd:2c:98:0f:a5:ce:b1:78:17:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bc1168da16020287eea1fdeca0541930a9d3689 Validity Not Before: Dec 20 03:00:50 2025 GMT Not After : Dec 21 03:00:50 2025 GMT Subject: CN=af39a9de3a9aefcfc1ae0f0dd459f4358b725f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a9:5e:36:ae:7d:f1:de:49:71:78:f7:52:10: 9b:6b:73:3d:06:00:e6:05:f1:9e:ad:42:8f:cf:74: 07:c8:d1:68:a3:c9:53:44:dd:e0:de:1d:c1:1a:9f: e1:3e:10:da:a9:2f:45:d3:5f:ed:e0:0f:d9:da:34: 01:97:5f:63:00:17:68:a3:ff:54:78:56:ee:96:cf: dc:f1:a0:de:60:82:0f:2b:9d:bf:e6:6d:ea:4e:e4: 5a:a9:3e:9a:e2:1f:d2:b6:0b:f1:df:92:2b:8c:9e: 3c:3a:b9:f3:d9:34:ac:6e:17:bf:36:4e:c1:03:48: 80:ec:3c:f8:6d:b4:9b:c7:00:63:41:20:a6:09:4e: 2c:16:e9:f0:62:1f:ec:b8:aa:ef:51:d7:20:ee:a3: a0:ea:75:f5:13:48:22:e0:96:79:64:47:b1:68:e4: 5f:46:af:3c:66:77:ce:da:6e:3f:b0:2b:a0:ca:08: 22:67:36:f2:a0:ff:aa:dc:12:b1:91:bb:47:97:80: d1:10:3d:34:fe:22:43:6e:04:94:17:c9:7b:78:d9: f9:6a:83:9d:bb:8e:dc:3c:6d:16:c7:02:0e:ed:11: b5:c6:c9:11:a3:91:40:79:a0:8f:b1:dc:81:1c:e7: b7:02:8a:b0:69:5b:d7:04:15:2f:bb:37:4e:7a:58: c7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:39:A9:DE:3A:9A:EF:CF:C1:AE:0F:0D:D4:59:F4:35:8B:72:5F:79 X509v3 Authority Key Identifier: keyid:8B:C1:16:8D:A1:60:20:28:7E:EA:1F:DE:CA:05:41:93:0A:9D:36:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8EWjaFgICh-6h_eygVBkwqdNok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:08:e3:43:de:d5:93:8d:eb:8f:12:fd:f3:80:15:da:27:69: 13:fc:e3:d0:a1:38:63:88:ec:99:e2:f7:42:d3:1d:7f:8a:b0: 2a:c6:3c:dd:75:49:69:f6:fd:b8:c6:a8:4c:61:a6:ed:b3:a4: b9:1c:07:72:02:6d:bc:b6:f1:c2:53:ad:00:69:07:e8:7d:5d: 02:ca:e4:53:07:13:22:76:9c:f7:21:87:ef:e2:c6:47:73:a7: f6:5e:42:fa:a3:7d:b6:f4:8a:d4:59:a9:01:93:b1:62:cc:b4: 26:79:7a:90:93:dd:44:3b:98:9f:1b:5e:3c:43:36:c3:1b:16: ea:4d:60:1a:bc:ac:fd:a6:f4:4f:75:d6:20:fd:02:42:85:15: f7:c9:98:5e:62:8c:99:5a:f5:f6:0f:cc:da:7d:dc:35:c8:30: 9b:78:6f:70:1e:9f:ea:67:91:bb:37:e1:eb:d9:90:15:27:18: ae:09:c6:b5:97:6d:38:c4:80:cc:94:93:b3:22:7a:fb:74:6b: 2b:54:20:49:71:6a:38:2e:67:e6:6c:ee:da:5b:5b:67:f8:06: da:ff:be:b7:90:23:e5:86:f7:98:74:22:74:2f:b4:71:47:8d: 53:d3:b4:cb:bb:27:c7:d9:e6:08:a1:b7:8c:d2:01:bf:7c:8e: 45:6e:a6:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s+eWu1bdLJgPpc6xeBf9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYzExNjhkYTE2MDIwMjg3ZWVhMWZkZWNhMDU0MTkzMGE5 ZDM2ODkwHhcNMjUxMjIwMDMwMDUwWhcNMjUxMjIxMDMwMDUwWjAzMTEwLwYDVQQD EyhhZjM5YTlkZTNhOWFlZmNmYzFhZTBmMGRkNDU5ZjQzNThiNzI1Zjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKleNq598d5JcXj3UhCba3M9BgDm BfGerUKPz3QHyNFoo8lTRN3g3h3BGp/hPhDaqS9F01/t4A/Z2jQBl19jABdoo/9U eFbuls/c8aDeYIIPK52/5m3qTuRaqT6a4h/Stgvx35IrjJ48Ornz2TSsbhe/Nk7B A0iA7Dz4bbSbxwBjQSCmCU4sFunwYh/suKrvUdcg7qOg6nX1E0gi4JZ5ZEexaORf Rq88ZnfO2m4/sCugyggiZzbyoP+q3BKxkbtHl4DRED00/iJDbgSUF8l7eNn5aoOd u47cPG0WxwIO7RG1xskRo5FAeaCPsdyBHOe3AoqwaVvXBBUvuzdOeljH5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK85qd46mu/Pwa4PDdRZ9DWLcl95MB8GA1UdIwQY MBaAFIvBFo2hYCAofuof3soFQZMKnTaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaThFV2phRmdJQ2gtNmhfZXlnVkJrd3FkTm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8xOGJjNjAtZWNhNi00OGRkLWFlOTkt MjZjZTA3MWIwYzM2LzEvaThFV2phRmdJQ2gtNmhfZXlnVkJrd3FkTm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8xOGJjNjAtZWNhNi00OGRkLWFlOTktMjZjZTA3MWIwYzM2 LzEvaThFV2phRmdJQ2gtNmhfZXlnVkJrd3FkTm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgjjQ97V k43rjxL984AV2idpE/zj0KE4Y4jsmeL3QtMdf4qwKsY83XVJafb9uMaoTGGm7bOk uRwHcgJtvLbxwlOtAGkH6H1dAsrkUwcTInac9yGH7+LGR3On9l5C+qN9tvSK1Fmp AZOxYsy0Jnl6kJPdRDuYnxtePEM2wxsW6k1gGrys/ab0T3XWIP0CQoUV98mYXmKM mVr19g/M2n3cNcgwm3hvcB6f6meRuzfh69mQFScYrgnGtZdtOMSAzJSTsyJ6+3Rr K1QgSXFqOC5n5mzu2ltbZ/gG2v++t5Aj5Yb3mHQidC+0cUeNU9O0y7snx9nmCKG3 jNIBv3yORW6mVw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:09:09 2025 by rpki-client