This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft File: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json) Hash identifier: pVMNHxXHtVdH28py23EURWeHAqMXiiJ37eER5uRemrA= Subject key identifier: 04:7D:4A:39:E9:56:76:18:0D:9F:EB:6E:EA:07:E3:A4:1F:83:9B:97 Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16 Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516 Certificate serial: 019B0EC9679DD5A8FD74F939695EEF80CD35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft Manifest number: 0CBB Signing time: Thu 11 Dec 2025 19:00:38 +0000 Manifest this update: Thu 11 Dec 2025 19:00:38 +0000 Manifest next update: Fri 12 Dec 2025 19:00:38 +0000 Files and hashes: 1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: MZ/3tUSvFO3Z1lT77pJqECpWhiD/16rD1AHpHPQgzsg=) 2: RcN3Kuq3ry-DnLR50I8ZgxWiZps.roa (hash: 21uJ31ZQvbuNpqex7iYKgjQtgSig9b6f7lgE5wHxtS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:67:9d:d5:a8:fd:74:f9:39:69:5e:ef:80:cd:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516 Validity Not Before: Dec 11 19:00:38 2025 GMT Not After : Dec 12 19:00:38 2025 GMT Subject: CN=047d4a39e95676180d9feb6eea07e3a41f839b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:12:aa:49:95:b5:14:14:91:0a:7f:1e:2f:7c: 2e:a0:ae:7a:7e:6e:95:6b:40:97:9b:fd:be:3a:1d: dd:9b:b4:70:e4:e5:03:a1:9f:0b:db:92:48:fb:78: ec:ce:e6:37:8c:14:ff:53:66:c9:b0:9d:3c:fd:4e: fe:05:a5:87:47:f7:0c:5a:86:6a:6d:d5:ff:6f:ec: 0c:60:d3:3f:67:ff:93:e2:84:e3:30:db:1c:5f:35: f4:79:aa:44:f5:e0:d7:cb:6e:7d:d7:f6:6c:8c:01: 33:b9:2c:fc:b0:6c:18:b5:f9:3f:c5:7f:bd:96:e4: 47:5a:59:01:6b:dc:c7:c7:d5:5b:3e:9b:c9:1f:3f: 50:e3:c1:bb:df:1e:e9:c6:b5:66:e5:ef:e1:c8:8c: 55:c2:54:e7:04:c0:1d:a9:81:2e:6e:e8:e9:4a:b6: 05:bb:d1:04:66:20:f5:64:ad:e3:d5:53:e5:b9:94: 69:9c:44:36:26:84:76:5c:5a:2a:48:6b:df:6a:ec: 4f:ef:d0:c1:ba:dc:42:ad:6b:02:4d:a1:68:17:86: 10:b2:21:60:64:1a:c8:29:c5:9a:77:b1:d3:cb:9c: 31:59:aa:23:63:f1:06:dc:a5:44:e4:2e:23:36:1c: 1c:f1:98:11:9e:c7:da:e3:a8:58:37:e3:2e:32:5d: d3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7D:4A:39:E9:56:76:18:0D:9F:EB:6E:EA:07:E3:A4:1F:83:9B:97 X509v3 Authority Key Identifier: keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:9b:02:28:5e:7c:2e:5f:7a:18:d8:e3:96:d5:67:93:00:48: 4a:a9:f4:91:08:02:6a:fc:d9:85:b6:7e:a3:ab:46:ff:9a:ca: 17:17:ea:58:ec:6e:cc:82:0d:ea:dc:32:3f:1f:7a:24:39:47: a8:c1:22:c3:6f:fd:7f:2f:a5:6f:85:13:94:40:76:fe:4d:67: 0b:a6:4a:82:32:11:8d:dd:3e:df:70:c2:b4:0f:98:9c:9b:c7: c7:9c:62:59:c0:62:70:d4:a8:01:21:6b:ac:68:16:44:45:d1: 56:72:59:24:0b:ad:4d:21:95:83:80:5a:b2:34:51:ae:14:55: 4c:eb:07:02:be:11:44:b3:bb:cb:03:4f:9f:82:f3:b2:c2:c2: c7:2f:d0:12:c5:a5:49:54:6e:ee:74:dd:a9:b3:ca:16:2f:e5: 7e:3e:18:24:6b:53:2c:ea:0e:20:d1:49:70:17:01:4e:57:83: 89:f0:e1:ba:3c:40:3d:40:ca:0a:97:fc:19:35:1b:75:f3:23: c9:28:07:75:8b:65:00:a6:33:24:e0:f7:aa:e1:cd:3d:55:10: 8f:46:d8:ef:8a:25:66:a4:fa:7f:e5:9b:a2:31:3f:71:f7:39: 62:e1:5b:dc:f9:f1:de:91:dd:b7:4f:5e:9e:4f:c5:28:7e:29: ed:41:7b:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyWed1aj9dPk5aV7vgM01MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNTZkYjJkMjg3NGY5ZTU5ODVjOWYxOGYwNWZlNTZlODNm MDk1MTYwHhcNMjUxMjExMTkwMDM4WhcNMjUxMjEyMTkwMDM4WjAzMTEwLwYDVQQD EygwNDdkNGEzOWU5NTY3NjE4MGQ5ZmViNmVlYTA3ZTNhNDFmODM5Yjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRKqSZW1FBSRCn8eL3wuoK56fm6V a0CXm/2+Oh3dm7Rw5OUDoZ8L25JI+3jszuY3jBT/U2bJsJ08/U7+BaWHR/cMWoZq bdX/b+wMYNM/Z/+T4oTjMNscXzX0eapE9eDXy2591/ZsjAEzuSz8sGwYtfk/xX+9 luRHWlkBa9zHx9VbPpvJHz9Q48G73x7pxrVm5e/hyIxVwlTnBMAdqYEubujpSrYF u9EEZiD1ZK3j1VPluZRpnEQ2JoR2XFoqSGvfauxP79DButxCrWsCTaFoF4YQsiFg ZBrIKcWad7HTy5wxWaojY/EG3KVE5C4jNhwc8ZgRnsfa46hYN+MuMl3T8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAR9SjnpVnYYDZ/rbuoH46Qfg5uXMB8GA1UdIwQY MBaAFPFW2y0odPnlmFyfGPBf5W6D8JUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFZiYkxTaDAtZVdZWEo4WThGX2xib1B3bFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85YmI0MGQtYWQyOC00ZTUxLTg0Yjgt NWFlNTNhMDZlYWE3LzEvOFZiYkxTaDAtZVdZWEo4WThGX2xib1B3bFJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85YmI0MGQtYWQyOC00ZTUxLTg0YjgtNWFlNTNhMDZlYWE3 LzEvOFZiYkxTaDAtZVdZWEo4WThGX2xib1B3bFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5sCKF58 Ll96GNjjltVnkwBISqn0kQgCavzZhbZ+o6tG/5rKFxfqWOxuzIIN6twyPx96JDlH qMEiw2/9fy+lb4UTlEB2/k1nC6ZKgjIRjd0+33DCtA+YnJvHx5xiWcBicNSoASFr rGgWREXRVnJZJAutTSGVg4BasjRRrhRVTOsHAr4RRLO7ywNPn4LzssLCxy/QEsWl SVRu7nTdqbPKFi/lfj4YJGtTLOoOINFJcBcBTleDifDhujxAPUDKCpf8GTUbdfMj ySgHdYtlAKYzJOD3quHNPVUQj0bY74olZqT6f+WbojE/cfc5YuFb3Pnx3pHdt09e nk/FKH4p7UF7Kg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:28:14 2025 by rpki-client