This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft File: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft (raw, json) Hash identifier: xpcX67LG08yL+LWW6xtCM4IFvrIQ1aetr3XcHLyv49c= Subject key identifier: 2E:A9:77:5F:82:9A:D0:11:D4:C9:63:72:F8:7E:E6:39:08:48:3A:F3 Authority key identifier: F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99 Certificate issuer: /CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699 Certificate serial: 019B4701DC7A44BA5236B188AE91D53145E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft Manifest number: 0827 Signing time: Mon 22 Dec 2025 17:01:02 +0000 Manifest this update: Mon 22 Dec 2025 17:01:02 +0000 Manifest next update: Tue 23 Dec 2025 17:01:02 +0000 Files and hashes: 1: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl (hash: VfkNNXs2RRwdQXG6l9br+Q6oZlhiEBocvTcNM5fAovU=) 2: iI30nfDsBhExpS3xd7Ao_hR6634.roa (hash: Ri4PPxwNbTb8t+Vmf7x4SKgeY8qYnc9vjqMssowa560=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:01:dc:7a:44:ba:52:36:b1:88:ae:91:d5:31:45:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699 Validity Not Before: Dec 22 17:01:02 2025 GMT Not After : Dec 23 17:01:02 2025 GMT Subject: CN=2ea9775f829ad011d4c96372f87ee63908483af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:55:bf:d3:7e:2c:91:13:0a:7d:39:e1:22:e2: 20:13:cf:57:59:46:ec:f4:f8:e4:2f:87:7a:38:c9: 53:07:2e:67:0c:44:27:76:85:bf:7a:6f:39:27:45: 38:a8:0e:cb:66:18:dc:af:ea:76:3e:f3:d7:fc:d8: 22:63:b5:44:54:f9:d7:2f:8f:09:3b:b8:93:d0:e1: df:9b:7a:88:26:9b:74:2c:04:c0:b3:25:87:35:f1: 44:a5:47:6a:31:2b:90:df:fd:bf:75:f3:1d:7a:de: fa:ab:a4:6d:8d:7c:90:64:8f:2c:b0:cc:5f:7f:b8: 8f:1f:7d:09:81:59:0b:69:df:30:89:5e:42:64:c6: f0:34:19:62:e4:88:5c:d6:13:54:9d:6a:2f:5f:40: e4:30:7c:6b:a0:25:2a:cf:da:df:e5:a2:81:73:30: fe:f3:47:74:e5:43:31:a4:86:fb:7d:78:35:c9:3b: b5:b1:7e:cf:16:5a:e2:05:3e:84:19:11:72:03:20: 17:13:4f:6f:41:90:f0:b4:ca:ae:6f:cd:e8:29:6d: 02:39:7f:7a:6a:43:df:aa:76:0e:3c:e8:fb:91:24: 5b:01:c4:f0:d0:76:c6:10:89:45:43:26:19:76:19: a4:04:0e:5c:33:98:99:e2:ed:33:eb:ab:0c:88:42: 22:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A9:77:5F:82:9A:D0:11:D4:C9:63:72:F8:7E:E6:39:08:48:3A:F3 X509v3 Authority Key Identifier: keyid:F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:cf:80:da:23:99:a3:96:0d:0b:eb:ee:64:57:1f:c0:9b:49: f9:89:57:cc:ba:52:1c:2d:da:83:bb:36:d3:7f:d2:22:be:8d: fc:c6:9f:62:9c:c2:d1:45:84:a1:9e:b5:81:1b:c3:b6:60:81: da:2d:05:78:a5:a2:fd:c6:b9:24:4c:29:d4:19:fe:a2:48:ba: 67:7c:5c:46:a1:9d:31:09:93:41:bd:5f:73:2f:27:36:98:f1: 5b:26:64:91:89:03:fd:0a:77:df:f2:20:88:dc:53:d0:92:ec: 2e:90:a4:ff:24:67:d5:58:66:9d:07:aa:f9:89:d3:ff:f9:39: 5f:22:91:51:e8:9c:55:d1:a5:dc:de:7a:97:6a:2f:8e:35:7c: df:7a:05:a9:8e:0d:14:c7:d4:a8:d6:fc:a1:dd:a0:3f:51:fc: 2a:0a:12:21:8d:bc:38:ea:db:0f:59:71:01:3b:da:ec:de:cf: ba:b6:c0:49:55:05:59:3d:9f:06:69:e9:9b:46:0c:e8:a2:64: 20:dd:6e:ec:79:f6:4f:46:a3:2e:0d:e8:50:f9:3a:12:98:48: b6:77:b4:42:0c:2a:13:2a:df:bb:d5:d4:db:e2:7c:93:66:01: 00:43:61:4d:48:e5:37:2e:c6:51:f5:69:1c:62:7e:fb:e0:89: c5:54:e8:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAdx6RLpSNrGIrpHVMUXhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYzA2NDQ2MGVhNmQ1Y2ZkM2Y4OGRjMWNmNGVkMDc1MDJi YmI2OTkwHhcNMjUxMjIyMTcwMTAyWhcNMjUxMjIzMTcwMTAyWjAzMTEwLwYDVQQD EygyZWE5Nzc1ZjgyOWFkMDExZDRjOTYzNzJmODdlZTYzOTA4NDgzYWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVW/034skRMKfTnhIuIgE89XWUbs 9PjkL4d6OMlTBy5nDEQndoW/em85J0U4qA7LZhjcr+p2PvPX/NgiY7VEVPnXL48J O7iT0OHfm3qIJpt0LATAsyWHNfFEpUdqMSuQ3/2/dfMdet76q6RtjXyQZI8ssMxf f7iPH30JgVkLad8wiV5CZMbwNBli5Ihc1hNUnWovX0DkMHxroCUqz9rf5aKBczD+ 80d05UMxpIb7fXg1yTu1sX7PFlriBT6EGRFyAyAXE09vQZDwtMqub83oKW0COX96 akPfqnYOPOj7kSRbAcTw0HbGEIlFQyYZdhmkBA5cM5iZ4u0z66sMiEIiTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6pd1+CmtAR1Mljcvh+5jkISDrzMB8GA1UdIwQY MBaAFPHAZEYOptXP0/iNwc9O0HUCu7aZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGNCa1JnNm0xY19ULUkzQnowN1FkUUs3dHBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mNDUwNmUtZmI4OC00OGE5LTgyODUt YzlhY2ZlM2YzMTIxLzEvOGNCa1JnNm0xY19ULUkzQnowN1FkUUs3dHBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9mNDUwNmUtZmI4OC00OGE5LTgyODUtYzlhY2ZlM2YzMTIx LzEvOGNCa1JnNm0xY19ULUkzQnowN1FkUUs3dHBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAac+A2iOZ o5YNC+vuZFcfwJtJ+YlXzLpSHC3ag7s203/SIr6N/MafYpzC0UWEoZ61gRvDtmCB 2i0FeKWi/ca5JEwp1Bn+oki6Z3xcRqGdMQmTQb1fcy8nNpjxWyZkkYkD/Qp33/Ig iNxT0JLsLpCk/yRn1VhmnQeq+YnT//k5XyKRUeicVdGl3N56l2ovjjV833oFqY4N FMfUqNb8od2gP1H8KgoSIY28OOrbD1lxATva7N7PurbASVUFWT2fBmnpm0YM6KJk IN1u7Hn2T0ajLg3oUPk6EphItne0QgwqEyrfu9XU2+J8k2YBAENhTUjlNy7GUfVp HGJ+++CJxVToBQ== -----END CERTIFICATE-----Generated at Mon Dec 22 20:31:36 2025 by rpki-client