This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft File: j8LtpUeIeltFA9kFkupQVljabno.mft (raw, json) Hash identifier: 1lZT3R3YcjNeYX39vNr4rPPLGYN/2faQ+R7gVm1mM/0= Subject key identifier: A2:F9:2D:CA:4D:EA:79:FA:8A:6F:BF:3A:10:97:CF:77:39:E4:EB:4C Authority key identifier: 8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A Certificate issuer: /CN=8fc2eda547887a5b4503d90592ea505658da6e7a Certificate serial: 019B41A475360781B81DE93AFB12A53615AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft Manifest number: 169C Signing time: Sun 21 Dec 2025 16:00:55 +0000 Manifest this update: Sun 21 Dec 2025 16:00:55 +0000 Manifest next update: Mon 22 Dec 2025 16:00:55 +0000 Files and hashes: 1: j8LtpUeIeltFA9kFkupQVljabno.crl (hash: uLsB1IFZG4Bwpb5CQ5ps5iJi3YB0Dh9skzmK1cxGJXM=) 2: vo41TJmt3C6QujdoChHPsobf9wU.roa (hash: D6T9SlEvHKEsLXEPPq633IxaLopzaLfHyAO1ibmxPX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:75:36:07:81:b8:1d:e9:3a:fb:12:a5:36:15:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc2eda547887a5b4503d90592ea505658da6e7a Validity Not Before: Dec 21 16:00:55 2025 GMT Not After : Dec 22 16:00:55 2025 GMT Subject: CN=a2f92dca4dea79fa8a6fbf3a1097cf7739e4eb4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:96:ee:ed:52:e6:87:24:90:04:0e:ec:a1:12: 18:50:e0:c2:89:05:be:de:2d:4d:d6:2c:1e:4e:df: f0:41:d3:a2:8d:d7:d0:41:e2:ba:0c:c1:22:a8:ac: 6e:9d:50:90:43:a6:64:fa:e3:d1:c4:15:32:69:ab: 32:8d:4b:57:b4:74:63:6b:c1:df:77:72:01:d1:23: ed:07:c9:a2:99:df:54:fc:a6:8c:47:51:20:51:44: 02:fc:17:64:84:60:2d:97:8a:68:67:c1:e6:73:32: eb:20:d7:f9:fd:7b:10:de:07:d7:50:d5:e8:f9:74: ca:43:33:b3:f5:78:e5:1c:83:8f:68:2b:7e:fe:a7: ff:da:08:fa:6d:ae:7d:8b:fa:66:27:ad:e6:e6:a6: 2c:29:90:d3:f1:bb:4c:5e:74:92:cb:62:77:06:45: c1:7f:81:57:3f:02:fb:d9:1a:5a:81:e7:af:4d:c8: 3e:e6:bf:3b:8f:c8:a4:eb:1a:1d:15:d4:ee:e3:bd: 9e:51:9f:03:05:3d:a6:aa:49:60:d8:fa:31:f3:e2: f0:ed:39:9e:0e:c9:f0:cc:be:d3:02:07:8e:5b:0c: be:80:27:1b:3c:12:3c:59:a1:96:d1:fd:ad:d3:c6: bc:2a:62:f4:ae:a4:77:26:59:e4:4d:cc:8d:c0:14: c8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F9:2D:CA:4D:EA:79:FA:8A:6F:BF:3A:10:97:CF:77:39:E4:EB:4C X509v3 Authority Key Identifier: keyid:8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:39:79:f6:eb:42:de:c1:6e:a8:da:80:1f:db:51:21:bd:42: f6:3c:d5:bd:36:6a:a2:f8:36:e4:8f:b2:3c:6f:20:f3:52:bc: d2:62:05:4c:70:32:dd:fe:b3:bc:f5:0c:b0:fe:d3:94:78:94: aa:79:af:d1:ce:1e:79:0f:5a:a5:d5:a2:fd:1d:4d:52:f6:70: d0:83:0e:eb:51:13:b3:ac:b5:a3:da:25:3e:bc:65:5f:f1:54: ea:b5:c2:0e:98:41:e7:c6:75:05:d5:88:7f:ed:81:18:d6:9f: 6b:44:d3:2d:40:e8:ff:ef:41:86:cb:a1:0a:45:fc:49:78:82: a8:38:a2:d0:85:0a:2c:12:4e:b0:08:20:76:33:e4:b8:0e:f9: 0b:b4:de:a5:21:ff:16:44:e4:87:1e:78:62:ed:e8:94:a3:67: ed:61:9c:91:08:bb:d1:2a:41:b7:00:8d:21:9e:19:ec:51:5a: 66:e1:d5:e4:c0:d0:72:a8:1c:aa:33:24:e2:a5:38:03:01:6d: ed:ef:26:f0:99:21:7c:11:02:f3:f9:89:a8:fc:9d:71:31:c2: 7a:b9:eb:59:8c:d6:1e:dc:ae:f9:80:26:75:01:51:b5:02:a5: 8e:c0:56:31:c8:74:65:9e:07:bc:ab:7d:b7:e6:eb:47:d2:45: fb:4a:23:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpHU2B4G4Hek6+xKlNhWrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzJlZGE1NDc4ODdhNWI0NTAzZDkwNTkyZWE1MDU2NThk YTZlN2EwHhcNMjUxMjIxMTYwMDU1WhcNMjUxMjIyMTYwMDU1WjAzMTEwLwYDVQQD EyhhMmY5MmRjYTRkZWE3OWZhOGE2ZmJmM2ExMDk3Y2Y3NzM5ZTRlYjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJbu7VLmhySQBA7soRIYUODCiQW+ 3i1N1iweTt/wQdOijdfQQeK6DMEiqKxunVCQQ6Zk+uPRxBUyaasyjUtXtHRja8Hf d3IB0SPtB8mimd9U/KaMR1EgUUQC/BdkhGAtl4poZ8HmczLrINf5/XsQ3gfXUNXo +XTKQzOz9XjlHIOPaCt+/qf/2gj6ba59i/pmJ63m5qYsKZDT8btMXnSSy2J3BkXB f4FXPwL72RpageevTcg+5r87j8ik6xodFdTu472eUZ8DBT2mqklg2Pox8+Lw7Tme DsnwzL7TAgeOWwy+gCcbPBI8WaGW0f2t08a8KmL0rqR3JlnkTcyNwBTIsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKL5LcpN6nn6im+/OhCXz3c55OtMMB8GA1UdIwQY MBaAFI/C7aVHiHpbRQPZBZLqUFZY2m56MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhMdHBVZUllbHRGQTlrRmt1cFFWbGphYm5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85MGYxODAtMWY3Ni00NmZjLWE3MjEt MTY4MTM3MGQ5YzEwLzEvajhMdHBVZUllbHRGQTlrRmt1cFFWbGphYm5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85MGYxODAtMWY3Ni00NmZjLWE3MjEtMTY4MTM3MGQ5YzEw LzEvajhMdHBVZUllbHRGQTlrRmt1cFFWbGphYm5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjl59utC 3sFuqNqAH9tRIb1C9jzVvTZqovg25I+yPG8g81K80mIFTHAy3f6zvPUMsP7TlHiU qnmv0c4eeQ9apdWi/R1NUvZw0IMO61ETs6y1o9olPrxlX/FU6rXCDphB58Z1BdWI f+2BGNafa0TTLUDo/+9BhsuhCkX8SXiCqDii0IUKLBJOsAggdjPkuA75C7TepSH/ FkTkhx54Yu3olKNn7WGckQi70SpBtwCNIZ4Z7FFaZuHV5MDQcqgcqjMk4qU4AwFt 7e8m8JkhfBEC8/mJqPydcTHCernrWYzWHtyu+YAmdQFRtQKljsBWMch0ZZ4HvKt9 t+brR9JF+0ojyA== -----END CERTIFICATE-----Generated at Mon Dec 22 02:21:45 2025 by rpki-client