This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft File: 8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json) Hash identifier: ih0UcTC5K4CbMeUS/vsnI6NUp2T03q3pqo0yX65FQoc= Subject key identifier: E4:DD:DA:FB:F1:D2:51:16:65:FF:6D:97:16:4F:CB:B2:17:66:12:65 Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c Certificate serial: 019B1125C624AB5776B95B4632B86A7397C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft Manifest number: 1705 Signing time: Fri 12 Dec 2025 06:00:46 +0000 Manifest this update: Fri 12 Dec 2025 06:00:46 +0000 Manifest next update: Sat 13 Dec 2025 06:00:46 +0000 Files and hashes: 1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: 4YkJCZCGROs/B7u3a/hLtH4GlmIDdt4i/sIfX7v8qHo=) 2: yT1Jx8Ou-jYtMpuKi40cHf-H83c.roa (hash: Lx4YPLeLSMnJ3NGAZ4PST+Ci/ylYMYy1Z+vRgBl8ZqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 06:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:25:c6:24:ab:57:76:b9:5b:46:32:b8:6a:73:97:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f26144c824959711b652d78c18702bf432f2195c Validity Not Before: Dec 12 06:00:46 2025 GMT Not After : Dec 13 06:00:46 2025 GMT Subject: CN=e4dddafbf1d2511665ff6d97164fcbb217661265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:64:8e:11:a6:3b:a4:8f:f2:f2:a1:30:c6:63: 28:21:4b:92:db:67:64:9a:74:af:d7:32:08:f2:d6: c0:14:1e:8c:bd:03:40:aa:f7:1f:bd:86:f7:47:50: c6:b7:b1:a3:6a:2a:1e:cd:6e:ae:bc:82:d9:58:43: 82:8e:f7:ee:dc:c3:19:51:ef:35:ca:4c:f9:de:10: dd:ca:e8:28:4e:91:7a:a5:95:16:14:f5:44:de:7d: 77:6a:6a:70:83:c9:1f:73:79:0f:31:b6:d8:6e:cb: e9:f7:29:9e:1a:93:d4:95:48:71:cc:96:03:83:c0: d8:1c:71:b0:27:b7:4b:23:dc:e1:48:58:51:2b:34: 99:ef:19:3f:e6:6a:c7:b1:a4:3d:1e:71:c0:fa:d3: 66:90:2a:bc:2a:f4:5d:0e:0b:c1:2b:94:32:52:8b: 9b:0d:e2:9b:de:59:e6:69:d8:15:c3:13:be:b3:03: cd:b3:45:9d:60:a9:8d:3d:30:81:4c:ee:c4:65:54: d2:8b:30:7e:f6:f6:1a:b2:d0:e7:ef:e3:44:23:2d: 34:29:2c:6c:b5:d6:04:64:36:6f:de:d7:79:a8:d7: c9:30:47:f0:92:bd:7e:bd:68:e6:bf:3a:0a:c1:92: 30:20:d6:89:4e:06:eb:29:92:bd:e4:5f:c5:5f:08: c7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DD:DA:FB:F1:D2:51:16:65:FF:6D:97:16:4F:CB:B2:17:66:12:65 X509v3 Authority Key Identifier: keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:db:1c:00:15:ef:29:56:be:7b:8e:05:8e:fa:8a:dd:b3:d6: cd:eb:ba:f5:d2:c9:cd:c9:11:bd:d6:c2:a8:da:39:1b:f3:d7: 45:5a:7a:07:22:06:92:07:30:3d:bd:f0:de:f8:c9:4b:0b:aa: 40:2d:fc:90:1f:a0:fc:e3:6f:40:bb:2c:51:2a:01:94:e2:ce: fa:90:82:84:41:e1:8a:de:05:56:b4:b8:16:36:0f:78:18:08: 08:23:74:3c:e1:3b:9d:9d:3b:80:77:3d:63:df:af:4a:63:75: 02:f7:b7:7f:62:c3:38:3e:73:e7:81:8d:2c:ff:ac:e5:d5:b9: 68:b9:d3:f2:c6:62:15:cc:95:77:e2:0d:90:91:a0:a8:45:8a: 6b:e2:d0:35:ae:48:bb:8b:3e:d2:db:ee:c4:50:76:36:c7:ed: eb:9f:d4:9c:a1:49:ef:75:1a:c9:34:25:a6:d3:16:1b:c3:dd: 6b:3f:ad:f9:57:74:85:20:f9:6c:a4:c8:37:97:5a:71:79:a0: 98:49:7e:07:3c:2c:13:8f:aa:d4:08:09:9c:ab:ea:43:51:4a: 74:61:94:8f:25:00:7a:18:b7:36:bc:17:55:af:5d:56:97:07: 3c:58:1e:e3:4f:b4:53:91:0b:54:22:e1:9f:0f:43:4e:f7:8b: 3c:25:d0:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJcYkq1d2uVtGMrhqc5fFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjE0NGM4MjQ5NTk3MTFiNjUyZDc4YzE4NzAyYmY0MzJm MjE5NWMwHhcNMjUxMjEyMDYwMDQ2WhcNMjUxMjEzMDYwMDQ2WjAzMTEwLwYDVQQD EyhlNGRkZGFmYmYxZDI1MTE2NjVmZjZkOTcxNjRmY2JiMjE3NjYxMjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mSOEaY7pI/y8qEwxmMoIUuS22dk mnSv1zII8tbAFB6MvQNAqvcfvYb3R1DGt7GjaioezW6uvILZWEOCjvfu3MMZUe81 ykz53hDdyugoTpF6pZUWFPVE3n13ampwg8kfc3kPMbbYbsvp9ymeGpPUlUhxzJYD g8DYHHGwJ7dLI9zhSFhRKzSZ7xk/5mrHsaQ9HnHA+tNmkCq8KvRdDgvBK5QyUoub DeKb3lnmadgVwxO+swPNs0WdYKmNPTCBTO7EZVTSizB+9vYastDn7+NEIy00KSxs tdYEZDZv3td5qNfJMEfwkr1+vWjmvzoKwZIwINaJTgbrKZK95F/FXwjHcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTd2vvx0lEWZf9tlxZPy7IXZhJlMB8GA1UdIwQY MBaAFPJhRMgklZcRtlLXjBhwK/Qy8hlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1GRXlDU1ZseEcyVXRlTUdIQXI5REx5R1Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hNjZjMjUtMjcxMS00NjU5LWIxNjIt MzViNDgzYmI0Yzg0LzEvOG1GRXlDU1ZseEcyVXRlTUdIQXI5REx5R1Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hNjZjMjUtMjcxMS00NjU5LWIxNjItMzViNDgzYmI0Yzg0 LzEvOG1GRXlDU1ZseEcyVXRlTUdIQXI5REx5R1Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddscABXv KVa+e44FjvqK3bPWzeu69dLJzckRvdbCqNo5G/PXRVp6ByIGkgcwPb3w3vjJSwuq QC38kB+g/ONvQLssUSoBlOLO+pCChEHhit4FVrS4FjYPeBgICCN0POE7nZ07gHc9 Y9+vSmN1Ave3f2LDOD5z54GNLP+s5dW5aLnT8sZiFcyVd+INkJGgqEWKa+LQNa5I u4s+0tvuxFB2Nsft65/UnKFJ73UayTQlptMWG8Pdaz+t+Vd0hSD5bKTIN5dacXmg mEl+BzwsE4+q1AgJnKvqQ1FKdGGUjyUAehi3NrwXVa9dVpcHPFge40+0U5ELVCLh nw9DTveLPCXQ3A== -----END CERTIFICATE-----Generated at Fri Dec 12 13:40:01 2025 by rpki-client