This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft File: 8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json) Hash identifier: h5Ck3RDqzUNgw8A49ky9sw+kAydToLANgUhC0+CwsQE= Subject key identifier: 59:67:D6:5A:28:1C:B0:D3:85:C0:F8:C5:2C:E1:2F:B8:FC:28:33:28 Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c Certificate serial: 019B1EAA7870987FEC9A86838762EFA2D10A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft Manifest number: 170C Signing time: Sun 14 Dec 2025 21:00:46 +0000 Manifest this update: Sun 14 Dec 2025 21:00:46 +0000 Manifest next update: Mon 15 Dec 2025 21:00:46 +0000 Files and hashes: 1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: q5b5412qOBrwxoYvgADXiUpOpURrrbKXQCzlbbCes1M=) 2: yT1Jx8Ou-jYtMpuKi40cHf-H83c.roa (hash: Lx4YPLeLSMnJ3NGAZ4PST+Ci/ylYMYy1Z+vRgBl8ZqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:aa:78:70:98:7f:ec:9a:86:83:87:62:ef:a2:d1:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f26144c824959711b652d78c18702bf432f2195c Validity Not Before: Dec 14 21:00:46 2025 GMT Not After : Dec 15 21:00:46 2025 GMT Subject: CN=5967d65a281cb0d385c0f8c52ce12fb8fc283328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:de:48:2c:40:a9:47:cb:30:72:53:60:48:10: 28:da:6b:fc:27:91:b8:88:30:d5:bc:a0:f3:d5:eb: d2:3d:e4:97:28:97:bc:79:5b:c3:25:ac:f4:01:41: 7a:f4:75:87:63:97:4c:8e:66:d8:ff:93:e6:2a:09: 9b:72:12:31:16:21:3a:93:6a:cf:58:d0:31:f4:a4: eb:89:ba:22:9d:8e:ab:ca:13:ff:90:db:13:ba:a0: f2:59:35:5d:09:cd:25:92:35:3b:bb:1b:a8:40:02: 37:1f:98:76:42:91:55:ba:23:b3:32:18:8f:cf:b4: 71:a8:f0:dd:e2:d8:ff:2b:24:22:e2:f1:21:4f:bf: 76:7e:58:92:06:c3:fd:6c:d2:83:fb:08:da:bf:ef: 30:bb:09:35:9f:59:60:d1:63:7b:ec:dc:47:86:04: 43:61:36:9c:04:cc:94:e1:2a:63:c9:19:72:e1:32: 14:f0:7f:db:cc:a6:2e:c5:ee:5f:8a:26:ad:9c:1f: 9c:47:b1:89:49:90:85:c3:68:de:89:ca:cd:47:21: 8d:29:af:72:e8:d6:d4:00:d1:60:f4:f5:28:36:8f: b1:d8:36:bc:6d:0b:ea:60:1f:e1:ae:5d:58:ca:c7: 8d:7b:33:f4:3f:e2:c0:e9:47:e0:ca:0f:40:91:c4: 43:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:67:D6:5A:28:1C:B0:D3:85:C0:F8:C5:2C:E1:2F:B8:FC:28:33:28 X509v3 Authority Key Identifier: keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a6:04:9f:c5:a9:c3:f1:9c:78:9b:7b:c6:23:31:6f:08:db: 24:bb:81:28:bd:1f:45:c9:12:86:99:9b:06:ba:38:6a:e2:65: 0a:64:33:88:58:16:4c:59:3c:42:ad:b3:fd:75:f0:86:25:59: 8c:e4:99:6c:d9:90:a1:54:3d:db:33:2f:79:91:89:77:25:93: ea:1d:f4:84:a8:79:a5:ce:3c:76:c5:a8:00:d2:77:13:8a:a6: fa:ab:7d:74:99:15:73:6b:03:cd:d3:25:fa:93:f5:82:6c:41: 21:94:16:c1:66:c3:fc:ca:ed:75:4b:1a:e3:87:30:8b:a5:c8: e5:5e:38:85:f7:fd:2f:0d:f7:3e:95:a5:20:d4:10:d9:6c:67: ab:d6:9e:2b:44:26:55:ad:ad:61:7b:80:1c:df:a0:3e:58:12: fe:03:b0:48:a4:10:cf:ae:ee:47:f1:0f:12:5b:d4:a8:b1:d4: 20:b8:a9:d1:9c:db:d9:1d:cb:ee:eb:f9:7c:df:a5:67:2e:dc: 29:20:23:e7:7e:f1:c8:ef:2e:c4:48:7d:98:11:0c:f7:12:95: b9:31:53:79:fd:c1:8c:82:3d:c5:2f:a3:19:9f:2c:10:85:90: ca:a0:03:09:ee:26:c5:3a:ad:62:40:9f:aa:89:c9:33:dd:fe: 18:7c:42:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseqnhwmH/smoaDh2LvotEKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjE0NGM4MjQ5NTk3MTFiNjUyZDc4YzE4NzAyYmY0MzJm MjE5NWMwHhcNMjUxMjE0MjEwMDQ2WhcNMjUxMjE1MjEwMDQ2WjAzMTEwLwYDVQQD Eyg1OTY3ZDY1YTI4MWNiMGQzODVjMGY4YzUyY2UxMmZiOGZjMjgzMzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA795ILECpR8swclNgSBAo2mv8J5G4 iDDVvKDz1evSPeSXKJe8eVvDJaz0AUF69HWHY5dMjmbY/5PmKgmbchIxFiE6k2rP WNAx9KTriboinY6ryhP/kNsTuqDyWTVdCc0lkjU7uxuoQAI3H5h2QpFVuiOzMhiP z7RxqPDd4tj/KyQi4vEhT792fliSBsP9bNKD+wjav+8wuwk1n1lg0WN77NxHhgRD YTacBMyU4SpjyRly4TIU8H/bzKYuxe5fiiatnB+cR7GJSZCFw2jeicrNRyGNKa9y 6NbUANFg9PUoNo+x2Da8bQvqYB/hrl1YyseNezP0P+LA6Ufgyg9AkcRDJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFln1looHLDThcD4xSzhL7j8KDMoMB8GA1UdIwQY MBaAFPJhRMgklZcRtlLXjBhwK/Qy8hlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1GRXlDU1ZseEcyVXRlTUdIQXI5REx5R1Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hNjZjMjUtMjcxMS00NjU5LWIxNjIt MzViNDgzYmI0Yzg0LzEvOG1GRXlDU1ZseEcyVXRlTUdIQXI5REx5R1Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hNjZjMjUtMjcxMS00NjU5LWIxNjItMzViNDgzYmI0Yzg0 LzEvOG1GRXlDU1ZseEcyVXRlTUdIQXI5REx5R1Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqYEn8Wp w/GceJt7xiMxbwjbJLuBKL0fRckShpmbBro4auJlCmQziFgWTFk8Qq2z/XXwhiVZ jOSZbNmQoVQ92zMveZGJdyWT6h30hKh5pc48dsWoANJ3E4qm+qt9dJkVc2sDzdMl +pP1gmxBIZQWwWbD/MrtdUsa44cwi6XI5V44hff9Lw33PpWlINQQ2Wxnq9aeK0Qm Va2tYXuAHN+gPlgS/gOwSKQQz67uR/EPElvUqLHUILip0Zzb2R3L7uv5fN+lZy7c KSAj537xyO8uxEh9mBEM9xKVuTFTef3BjII9xS+jGZ8sEIWQyqADCe4mxTqtYkCf qonJM93+GHxCcg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:58:35 2025 by rpki-client