This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft File: _8P1ykeS2U0ao2616jqhtAQ80BQ.mft (raw, json) Hash identifier: dyK2wfP3vAPHfzYjZFV8d+iWiKLd4AAZwNsvTMRQqQg= Subject key identifier: 7B:04:32:89:57:05:11:23:6A:46:C6:41:3E:18:FF:41:A2:6F:EC:F2 Authority key identifier: FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14 Certificate issuer: /CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014 Certificate serial: 019B5ABFF3D587A890F77CF4C9866B925018 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft Manifest number: 2E Signing time: Fri 26 Dec 2025 13:01:27 +0000 Manifest this update: Fri 26 Dec 2025 13:01:27 +0000 Manifest next update: Sat 27 Dec 2025 13:01:27 +0000 Files and hashes: 1: _8P1ykeS2U0ao2616jqhtAQ80BQ.crl (hash: BgZ8jU9YxvbOpsTlIjHTKgHBZw4bWlWzmtA3bc75mTc=) 2: tWk8_qiddKPFwvBChXygjosFxfs.roa (hash: l9/b6N+haDaG/tVx4P4Y2DzGqshnTNzH3azJieIxhfU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:f3:d5:87:a8:90:f7:7c:f4:c9:86:6b:92:50:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014 Validity Not Before: Dec 26 13:01:27 2025 GMT Not After : Dec 27 13:01:27 2025 GMT Subject: CN=7b043289570511236a46c6413e18ff41a26fecf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:94:14:e2:9c:9a:28:bc:4e:45:b7:24:62:5f: d0:8c:ab:7d:09:c3:bc:bd:8e:b3:07:6e:1d:b4:66: 42:a1:38:4c:89:44:98:b3:4c:65:9b:69:7e:ff:6d: ac:da:5a:cd:32:65:34:f3:1e:d8:8b:ea:6d:78:4e: 97:a7:55:f4:23:23:0c:67:96:2a:12:59:64:15:1f: f6:bc:5c:91:1d:d5:30:4c:a9:d3:36:ad:8d:60:06: 33:20:e2:08:58:17:7b:5a:e5:92:54:18:7a:da:fb: 09:79:69:02:ba:69:e4:f6:54:70:b1:bf:5e:aa:28: 30:e1:55:f1:ac:ad:1e:54:60:a0:fa:fd:63:67:30: f8:69:3a:28:79:a4:4d:7b:34:00:83:1a:02:b0:a2: 3d:68:f6:99:41:ae:d0:9c:d5:e8:b9:55:7e:2f:7f: 1e:28:8b:28:0a:98:c3:67:e8:ae:25:55:49:0f:ea: 8d:9a:a7:d0:62:d9:96:40:05:26:d9:26:9b:4b:b1: 6f:5a:8c:11:36:cb:b5:75:90:a1:c6:88:14:94:f7: 32:0a:3d:9d:d8:ef:ab:63:3b:df:ca:01:38:dc:0b: ba:fc:79:62:84:83:25:69:83:72:52:ce:3d:85:94: c4:b0:5f:72:f6:e9:bb:2d:c3:68:e4:96:d1:09:40: f4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:04:32:89:57:05:11:23:6A:46:C6:41:3E:18:FF:41:A2:6F:EC:F2 X509v3 Authority Key Identifier: keyid:FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:3b:6a:68:ea:9b:55:ef:33:bd:25:31:4b:70:df:24:28:04: 73:73:f4:a5:b6:b1:4c:78:85:b6:4f:bd:cd:bd:16:a0:79:d8: 49:8c:4c:29:a7:41:f2:db:91:c4:ea:b3:14:3b:e7:80:2b:50: b7:3a:a2:6b:85:24:ea:17:b9:cc:53:5b:ff:c8:0d:ca:65:79: 97:f8:18:52:4d:e5:8a:15:5c:68:63:e0:75:4d:38:ff:9d:cb: 8e:21:61:58:83:fc:bd:ca:58:f3:bd:36:e7:89:1c:e1:df:4f: cc:13:f8:f3:49:ac:48:e8:c4:01:13:35:04:43:7a:ae:4f:9b: b1:67:46:a1:7b:7c:10:7b:0e:7e:81:4f:50:ab:50:5d:52:7b: c1:2b:15:62:3a:ae:ab:01:67:30:d1:4a:41:66:af:31:b3:d1: f8:8d:42:50:a0:63:54:8f:e5:25:f9:58:41:6b:d8:b7:78:00: df:9d:84:77:d4:1c:9b:a8:f3:7d:dc:f0:72:d2:21:d3:93:b0: 64:dd:b3:b1:7e:71:05:10:6e:52:51:8e:b0:4b:c7:a2:3a:94: 68:8f:3b:c9:2c:66:ac:ba:2c:18:56:7f:0b:b8:b8:54:58:3c: 0f:3f:a6:25:7a:5d:62:6e:9f:c0:0a:12:8f:4c:d9:9c:2b:4a: df:5d:6b:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav/PVh6iQ93z0yYZrklAYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYzNmNWNhNDc5MmQ5NGQxYWEzNmViNWVhM2FhMWI0MDQz Y2QwMTQwHhcNMjUxMjI2MTMwMTI3WhcNMjUxMjI3MTMwMTI3WjAzMTEwLwYDVQQD Eyg3YjA0MzI4OTU3MDUxMTIzNmE0NmM2NDEzZTE4ZmY0MWEyNmZlY2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZQU4pyaKLxORbckYl/QjKt9CcO8 vY6zB24dtGZCoThMiUSYs0xlm2l+/22s2lrNMmU08x7Yi+pteE6Xp1X0IyMMZ5Yq EllkFR/2vFyRHdUwTKnTNq2NYAYzIOIIWBd7WuWSVBh62vsJeWkCumnk9lRwsb9e qigw4VXxrK0eVGCg+v1jZzD4aTooeaRNezQAgxoCsKI9aPaZQa7QnNXouVV+L38e KIsoCpjDZ+iuJVVJD+qNmqfQYtmWQAUm2SabS7FvWowRNsu1dZChxogUlPcyCj2d 2O+rYzvfygE43Au6/HlihIMlaYNyUs49hZTEsF9y9um7LcNo5JbRCUD0NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsEMolXBREjakbGQT4Y/0Gib+zyMB8GA1UdIwQY MBaAFP/D9cpHktlNGqNuteo6obQEPNAUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzhQMXlrZVMyVTBhbzI2MTZqcWh0QVE4MEJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mZDY5NjMtZDI1Yy00MDJmLTllYTEt MjhlZDBmOTI4MTMzLzEvXzhQMXlrZVMyVTBhbzI2MTZqcWh0QVE4MEJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mZDY5NjMtZDI1Yy00MDJmLTllYTEtMjhlZDBmOTI4MTMz LzEvXzhQMXlrZVMyVTBhbzI2MTZqcWh0QVE4MEJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjtqaOqb Ve8zvSUxS3DfJCgEc3P0pbaxTHiFtk+9zb0WoHnYSYxMKadB8tuRxOqzFDvngCtQ tzqia4Uk6he5zFNb/8gNymV5l/gYUk3lihVcaGPgdU04/53LjiFhWIP8vcpY8702 54kc4d9PzBP480msSOjEARM1BEN6rk+bsWdGoXt8EHsOfoFPUKtQXVJ7wSsVYjqu qwFnMNFKQWavMbPR+I1CUKBjVI/lJflYQWvYt3gA352Ed9Qcm6jzfdzwctIh05Ow ZN2zsX5xBRBuUlGOsEvHojqUaI87ySxmrLosGFZ/C7i4VFg8Dz+mJXpdYm6fwAoS j0zZnCtK311rKA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:35 2025 by rpki-client