This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json) Hash identifier: GhhU0a5QrmCUL1Mv6vFo0srbQ/OV4cjrOpmPqBgCz2A= Subject key identifier: A4:46:D6:99:C0:AE:61:99:35:39:2A:E0:3E:4D:0A:DC:41:61:53:67 Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42 Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742 Certificate serial: 019B37C541B888DB184EDF60F720C13144AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft Manifest number: 0DE1 Signing time: Fri 19 Dec 2025 18:00:32 +0000 Manifest this update: Fri 19 Dec 2025 18:00:32 +0000 Manifest next update: Sat 20 Dec 2025 18:00:32 +0000 Files and hashes: 1: 4eZ-orLf3Sw1i9FoVC_BgUuV6yY.roa (hash: Hm2QNZ0IWwgkGkpS2MI3Rx4rLkOrxRzbQrRfD6XRt60=) 2: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: 0Lnbp1hQ9FqpgfKTOLQPKEvO7eO3np+qwV3Ns17WcVY=) 3: PvG7RaoFWA1C7HlDkfB4Ix4UWSE.roa (hash: 3vQKjjJTEuiCPTgwApvaXGsOiHre5b8+kVP9FzsOJUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:41:b8:88:db:18:4e:df:60:f7:20:c1:31:44:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742 Validity Not Before: Dec 19 18:00:32 2025 GMT Not After : Dec 20 18:00:32 2025 GMT Subject: CN=a446d699c0ae619935392ae03e4d0adc41615367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:80:6c:f4:c8:1a:34:2d:ed:49:70:44:0e:2f: 96:62:3f:03:32:b6:c7:02:27:7f:7e:15:6b:ef:98: 70:8b:ad:44:82:9d:79:75:94:ab:c0:1d:5c:d5:10: 62:b1:4a:b9:43:9b:73:f3:c0:f2:19:ec:de:2c:74: d6:fa:62:0c:14:c7:1a:a2:ea:54:57:84:06:40:d7: fc:9f:82:93:ce:11:56:b9:9e:84:f2:69:a6:0c:dd: f1:16:55:25:22:80:b6:18:a6:62:8c:15:75:c1:7d: be:86:82:01:f5:35:bc:f1:be:f1:5d:f0:eb:18:73: 07:b8:f0:15:dc:27:1e:76:a0:85:56:6f:0d:61:56: 79:a8:42:6b:9e:18:a6:cd:47:b3:37:25:fb:a9:1d: e6:d5:f2:25:ed:5c:c8:5c:22:f8:20:ea:ec:1a:95: 82:3f:51:f5:f5:a8:c7:16:9e:37:4a:ec:a9:c7:88: 67:1f:e0:45:30:1e:84:d3:41:d2:16:5a:91:cc:2a: a1:8a:f3:2a:d2:f1:a7:00:88:cf:65:9b:25:58:4a: 20:2c:80:2f:f0:62:45:64:c7:b9:e8:9b:30:47:b7: 67:e2:df:27:6d:2e:18:3e:6a:6e:f9:8f:39:8d:4d: 57:10:95:26:bd:bc:10:46:71:b8:ff:74:2a:07:21: 4f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:46:D6:99:C0:AE:61:99:35:39:2A:E0:3E:4D:0A:DC:41:61:53:67 X509v3 Authority Key Identifier: keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:be:70:a0:a5:40:38:29:05:52:58:df:db:9e:cf:91:2f:8e: 3d:31:e0:f3:f3:19:f5:95:bd:59:f2:98:9b:4c:8e:e0:a1:f7: 2b:9a:8d:18:5c:8a:53:08:8f:c4:50:3e:33:76:a9:33:e0:61: 40:88:bd:c0:a2:82:06:02:5b:ba:03:d7:4a:3d:32:ae:57:82: 61:db:9e:c0:67:72:61:61:05:86:31:34:27:37:73:21:e5:4e: f5:c5:21:e3:a3:99:1b:e5:60:d1:ac:73:81:91:8a:19:12:26: 57:a6:21:b7:ae:70:88:3b:35:22:1e:90:a4:40:9b:92:a2:ec: 15:09:78:ab:2d:98:91:57:13:9a:b2:4a:d6:06:00:bc:a8:84: c8:2c:b2:55:d2:6c:70:6a:6b:05:c9:da:3a:93:25:a2:fd:58: d2:7a:7f:05:5e:33:2c:35:f7:db:1a:23:14:1f:26:69:5a:b1: dd:08:79:61:12:96:03:b8:75:e6:e0:71:5b:77:fa:c2:fb:96: 3f:dd:c6:c3:1d:37:b3:40:ef:f5:45:a2:b1:36:29:7c:2a:43: 60:67:d4:f4:4b:c5:87:44:07:3a:44:f7:61:a0:bb:ff:8d:ea: c8:37:2b:a7:63:0c:51:a2:59:fb:9d:9c:96:ae:07:73:d7:63: c7:a9:d0:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xUG4iNsYTt9g9yDBMUSqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyN2M5M2RkYjFhMTcxNTFjNTZmMjJkY2FmMzFkZDgyMjk0 NjM3NDIwHhcNMjUxMjE5MTgwMDMyWhcNMjUxMjIwMTgwMDMyWjAzMTEwLwYDVQQD EyhhNDQ2ZDY5OWMwYWU2MTk5MzUzOTJhZTAzZTRkMGFkYzQxNjE1MzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Bs9MgaNC3tSXBEDi+WYj8DMrbH Aid/fhVr75hwi61Egp15dZSrwB1c1RBisUq5Q5tz88DyGezeLHTW+mIMFMcaoupU V4QGQNf8n4KTzhFWuZ6E8mmmDN3xFlUlIoC2GKZijBV1wX2+hoIB9TW88b7xXfDr GHMHuPAV3CcedqCFVm8NYVZ5qEJrnhimzUezNyX7qR3m1fIl7VzIXCL4IOrsGpWC P1H19ajHFp43Suypx4hnH+BFMB6E00HSFlqRzCqhivMq0vGnAIjPZZslWEogLIAv 8GJFZMe56JswR7dn4t8nbS4YPmpu+Y85jU1XEJUmvbwQRnG4/3QqByFPEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRG1pnArmGZNTkq4D5NCtxBYVNnMB8GA1UdIwQY MBaAFPJ8k92xoXFRxW8i3K8x3YIpRjdCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5Mjkt MzZlMGM4YWZlMjZhLzEvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5MjktMzZlMGM4YWZlMjZh LzEvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX75woKVA OCkFUljf257PkS+OPTHg8/MZ9ZW9WfKYm0yO4KH3K5qNGFyKUwiPxFA+M3apM+Bh QIi9wKKCBgJbugPXSj0yrleCYduewGdyYWEFhjE0JzdzIeVO9cUh46OZG+Vg0axz gZGKGRImV6Yht65wiDs1Ih6QpECbkqLsFQl4qy2YkVcTmrJK1gYAvKiEyCyyVdJs cGprBcnaOpMlov1Y0np/BV4zLDX32xojFB8maVqx3Qh5YRKWA7h15uBxW3f6wvuW P93Gwx03s0Dv9UWisTYpfCpDYGfU9EvFh0QHOkT3YaC7/43qyDcrp2MMUaJZ+52c lq4Hc9djx6nQzg== -----END CERTIFICATE-----Generated at Sat Dec 20 00:19:45 2025 by rpki-client