This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft File: 8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json) Hash identifier: D7/UsCTTzk+BT1isT2NHoM5xyTCyJuSEdK0C3OqigBs= Subject key identifier: BF:56:68:60:F8:BF:2E:A2:16:40:B2:E8:6C:E8:09:23:9E:B9:3C:63 Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b Certificate serial: 019B34C5E2357A30FED1C0E9FCB8DC3BB593 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft Manifest number: 1715 Signing time: Fri 19 Dec 2025 04:02:22 +0000 Manifest this update: Fri 19 Dec 2025 04:02:22 +0000 Manifest next update: Sat 20 Dec 2025 04:02:22 +0000 Files and hashes: 1: 1-wkMXSOgCsAbfcTJoQ9M_9mEa8U.roa (hash: ChEU1antJRBwFOEOOm1ILlDCVAljbS+GMt59ceUbKBY=) 2: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: oiGDZVz8/fCOf4aECqU5G0KeKekS9GeOmDNt/zQgSAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:e2:35:7a:30:fe:d1:c0:e9:fc:b8:dc:3b:b5:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b Validity Not Before: Dec 19 04:02:22 2025 GMT Not After : Dec 20 04:02:22 2025 GMT Subject: CN=bf566860f8bf2ea21640b2e86ce809239eb93c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b5:a1:f7:7b:d3:b3:d1:30:77:53:7b:74:5f: 4a:db:c9:78:bd:4b:f0:55:9b:cf:62:9d:b3:65:23: 13:b6:1b:52:5b:11:cc:bd:31:e6:8d:2e:3c:60:af: 04:c1:bd:bd:93:4d:45:5d:c8:bd:b5:f5:ae:ad:02: 12:14:aa:44:a7:6d:24:80:52:6a:63:74:5b:6b:11: 3b:0a:1a:58:31:8f:e6:55:a2:14:79:3c:cf:b4:c9: cd:b0:a9:21:29:d8:0e:12:6c:1e:26:ce:4b:93:67: 41:13:18:3d:42:d1:b6:1a:94:38:3c:bd:19:40:b9: 99:e8:47:ed:ab:54:85:97:fb:a4:74:fa:09:22:cd: 97:f6:f5:fe:10:52:da:b4:e0:76:5d:f9:10:58:0e: fc:db:e8:16:f4:3f:0d:f1:6e:10:d7:ba:e5:2b:bf: 7a:85:05:e5:44:4a:55:ec:30:f4:7e:8f:a6:e7:b3: c7:bf:00:5c:0b:38:ff:7b:cf:f8:22:bd:e2:0d:e1: 4c:32:36:0d:29:8a:26:b2:2d:a4:0f:e5:2c:18:69: 5e:84:77:01:bf:d3:7f:d0:7b:a4:d1:51:7e:6e:6f: fc:69:26:dc:ad:5c:b1:e5:94:5d:e7:2c:09:85:dd: a8:8c:d3:4a:de:0a:6f:df:d5:1e:16:de:0f:34:cc: f7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:56:68:60:F8:BF:2E:A2:16:40:B2:E8:6C:E8:09:23:9E:B9:3C:63 X509v3 Authority Key Identifier: keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:51:b8:2f:fa:19:87:cf:5f:7a:cc:f5:92:ab:05:fa:c7:2d: af:49:49:90:c1:2c:8d:fc:dd:83:07:72:0f:bb:21:ba:51:a9: 1b:62:76:e8:8d:60:ab:7b:5c:78:41:1e:be:33:9e:ba:f3:51: 2a:7d:05:ce:0e:88:57:9e:b2:77:9a:9c:5f:08:fa:20:ee:64: 44:f6:c6:38:77:ea:5b:ff:06:19:7f:b5:38:9c:71:f8:c6:6e: 4d:e2:18:c3:1b:70:0c:6c:9b:d4:5a:5a:7b:f0:dd:1f:1d:cc: e0:81:05:9c:d5:c7:83:62:b9:43:3d:88:1a:76:1c:ac:72:26: a3:05:42:2b:36:4b:17:39:22:97:d1:99:02:c0:dd:d9:5b:47: 45:46:f1:6b:18:21:e0:76:99:1e:7f:db:c9:cd:7c:ac:f4:7f: 2e:8a:23:ee:fc:cc:20:86:57:55:1c:2c:8c:a5:46:e7:97:bb: 99:7b:28:32:e5:81:27:4b:cb:29:ed:58:d4:bd:1a:8c:2e:22: c0:47:17:de:b0:b7:05:e9:67:f8:ef:7e:d9:ce:92:77:c6:aa: 4b:ab:a2:13:8a:86:be:13:cf:aa:4d:2e:de:f7:80:48:5a:54: 4c:d9:75:ef:60:2b:c8:99:97:43:08:c4:c0:47:9e:b1:49:a4: 78:d2:3e:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xeI1ejD+0cDp/LjcO7WTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMzI1OGFhNmI4M2VjOWZiN2JlOTY2YzYyNmE5MTY2Nzgx YzdmM2IwHhcNMjUxMjE5MDQwMjIyWhcNMjUxMjIwMDQwMjIyWjAzMTEwLwYDVQQD EyhiZjU2Njg2MGY4YmYyZWEyMTY0MGIyZTg2Y2U4MDkyMzllYjkzYzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LWh93vTs9Ewd1N7dF9K28l4vUvw VZvPYp2zZSMTthtSWxHMvTHmjS48YK8Ewb29k01FXci9tfWurQISFKpEp20kgFJq Y3RbaxE7ChpYMY/mVaIUeTzPtMnNsKkhKdgOEmweJs5Lk2dBExg9QtG2GpQ4PL0Z QLmZ6Eftq1SFl/ukdPoJIs2X9vX+EFLatOB2XfkQWA782+gW9D8N8W4Q17rlK796 hQXlREpV7DD0fo+m57PHvwBcCzj/e8/4Ir3iDeFMMjYNKYomsi2kD+UsGGlehHcB v9N/0Huk0VF+bm/8aSbcrVyx5ZRd5ywJhd2ojNNK3gpv39UeFt4PNMz3YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9WaGD4vy6iFkCy6GzoCSOeuTxjMB8GA1UdIwQY MBaAFPIyWKprg+yft76WbGJqkWZ4HH87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGpKWXFtdUQ3Si0zdnBac1ltcVJabmdjZnpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80OGMzYTgtYjk1NC00MWM5LWJkMjMt NzEyZmNmYTQ0MWU0LzEvOGpKWXFtdUQ3Si0zdnBac1ltcVJabmdjZnpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC80OGMzYTgtYjk1NC00MWM5LWJkMjMtNzEyZmNmYTQ0MWU0 LzEvOGpKWXFtdUQ3Si0zdnBac1ltcVJabmdjZnpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVG4L/oZ h89fesz1kqsF+sctr0lJkMEsjfzdgwdyD7shulGpG2J26I1gq3tceEEevjOeuvNR Kn0Fzg6IV56yd5qcXwj6IO5kRPbGOHfqW/8GGX+1OJxx+MZuTeIYwxtwDGyb1Fpa e/DdHx3M4IEFnNXHg2K5Qz2IGnYcrHImowVCKzZLFzkil9GZAsDd2VtHRUbxaxgh 4HaZHn/byc18rPR/Looj7vzMIIZXVRwsjKVG55e7mXsoMuWBJ0vLKe1Y1L0ajC4i wEcX3rC3Beln+O9+2c6Sd8aqS6uiE4qGvhPPqk0u3veASFpUTNl172AryJmXQwjE wEeesUmkeNI++w== -----END CERTIFICATE-----Generated at Fri Dec 19 07:52:02 2025 by rpki-client