This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json) Hash identifier: 72gGMThGxLTyeBq/YXk5wBnq64wABNpLkGeGIBxdR6s= Subject key identifier: 8D:60:93:AC:A1:9A:5C:5D:93:A6:58:E7:1B:0D:B7:CF:C3:6D:06:15 Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78 Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78 Certificate serial: 019B4882EF19797BEDCD04EEB285140FE22D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft Manifest number: 088C Signing time: Tue 23 Dec 2025 00:01:39 +0000 Manifest this update: Tue 23 Dec 2025 00:01:39 +0000 Manifest next update: Wed 24 Dec 2025 00:01:39 +0000 Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: ZSxi51gi+24bk1Ir9rM6VE8hQNvqAWqWOTjy/A9pWzU=) 2: Wl7dfPBMjzt7d3ARPHZzvBDvCz4.roa (hash: YXn3MdI9fbwK137bu2N/c5GjDCAVC9bePDhOy7NGC2E=) 3: ricnvXRyxBIr6uz7wJxhUxO5eB8.roa (hash: OF8ZMoVg6J5N7Pqa2nI+KUupYU9mKGD+TotlcQVJhhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:ef:19:79:7b:ed:cd:04:ee:b2:85:14:0f:e2:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78 Validity Not Before: Dec 23 00:01:39 2025 GMT Not After : Dec 24 00:01:39 2025 GMT Subject: CN=8d6093aca19a5c5d93a658e71b0db7cfc36d0615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:84:f2:80:58:d8:dc:d4:fb:f8:e4:5d:f9:1a: c9:28:b1:ac:13:84:19:de:f0:5c:88:7f:1e:72:93: 75:0b:bc:d4:a7:bd:83:5a:e2:5f:00:a1:40:88:ba: 4d:76:a6:26:55:78:b0:38:a6:29:2d:58:60:2f:0f: 15:96:8a:2a:d7:74:5e:f3:e1:77:0f:aa:85:14:df: b7:e1:cc:5d:64:71:02:e8:93:19:a4:92:6e:80:43: f1:d3:c7:45:2b:15:e3:50:a3:59:ee:33:46:a3:4a: 52:9f:1a:45:3e:6e:f6:fd:4f:67:54:e3:a5:df:6a: 95:2c:b1:cc:a4:d9:d1:47:fd:f0:85:ac:b7:c6:35: ab:25:35:3f:9e:ed:8d:fd:09:16:d4:8b:b5:a1:36: 04:eb:77:ea:9d:6a:4e:43:82:7f:bc:7e:66:9b:95: 8e:ed:a6:1e:6d:32:97:d2:6a:14:d9:98:ad:fa:ec: bb:ef:bc:ab:46:c2:da:bc:2f:0c:0a:92:8e:2c:3f: 39:fe:3e:8b:02:92:cc:8f:bb:75:c2:6a:62:8c:58: 80:9f:fd:e6:cb:80:d8:87:c3:63:23:31:e1:8b:b3: 71:47:4c:70:ca:45:f1:b8:3d:8b:b4:09:8e:35:a5: d3:e5:da:16:ed:e9:9f:7f:06:7e:1e:4b:36:8a:e7: 3f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:60:93:AC:A1:9A:5C:5D:93:A6:58:E7:1B:0D:B7:CF:C3:6D:06:15 X509v3 Authority Key Identifier: keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c6:a0:75:4d:41:c2:3f:3c:93:a8:a5:59:77:a6:50:c1:2c: 37:5f:75:c9:ce:d7:4a:35:35:6f:a3:82:26:00:91:14:23:68: 19:d2:fb:72:23:46:8e:90:79:cd:45:08:cd:50:0f:dd:0a:b8: df:d6:88:0f:9c:af:32:fd:e1:12:80:0c:3c:a3:84:05:d4:07: ab:fb:19:ec:86:66:96:28:e5:88:4c:e9:5f:08:dc:95:f0:a0: 7d:77:39:81:71:f7:f4:84:80:56:bc:bf:aa:22:03:2e:05:49: d4:7a:f4:18:ab:62:16:15:d1:6f:ec:2b:b5:41:1b:e7:e5:ea: e9:b7:be:fe:c2:6f:c7:cc:b3:0f:ae:89:47:2c:9b:1f:fa:d1: 54:ac:42:74:d7:e2:e7:b9:a5:6f:91:40:51:28:09:96:cd:1b: fe:8c:89:61:0d:88:d4:11:38:d8:55:9e:0e:f1:41:1a:0a:ce: 15:f9:6d:85:b3:87:54:9c:d9:3b:85:52:48:c2:e9:02:5c:6f: 31:c8:32:a5:dd:6f:e5:41:a5:0b:57:d6:19:58:a2:cb:20:8d: 14:99:ba:34:c5:29:b5:5e:43:c4:09:6e:6f:fb:2a:ad:31:34: 9e:b7:92:6a:96:c7:7e:a2:49:85:6b:bc:1c:5e:26:8d:d2:f5: fb:0a:c0:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgu8ZeXvtzQTusoUUD+ItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2N2YxMjgzYjYzMGU1ODhjYjAzOWJhNjUyYjkwMjk5ZDcx YThlNzgwHhcNMjUxMjIzMDAwMTM5WhcNMjUxMjI0MDAwMTM5WjAzMTEwLwYDVQQD Eyg4ZDYwOTNhY2ExOWE1YzVkOTNhNjU4ZTcxYjBkYjdjZmMzNmQwNjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqITygFjY3NT7+ORd+RrJKLGsE4QZ 3vBciH8ecpN1C7zUp72DWuJfAKFAiLpNdqYmVXiwOKYpLVhgLw8Vlooq13Re8+F3 D6qFFN+34cxdZHEC6JMZpJJugEPx08dFKxXjUKNZ7jNGo0pSnxpFPm72/U9nVOOl 32qVLLHMpNnRR/3whay3xjWrJTU/nu2N/QkW1Iu1oTYE63fqnWpOQ4J/vH5mm5WO 7aYebTKX0moU2Zit+uy777yrRsLavC8MCpKOLD85/j6LApLMj7t1wmpijFiAn/3m y4DYh8NjIzHhi7NxR0xwykXxuD2LtAmONaXT5doW7emffwZ+Hks2iuc/cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1gk6yhmlxdk6ZY5xsNt8/DbQYVMB8GA1UdIwQY MBaAFNZ/EoO2MOWIywObplK5ApnXGo54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYTg2MGMtMTAwNS00NDIzLTk1YmQt MzA3OWQ1ODhhYTk5LzEvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yYTg2MGMtMTAwNS00NDIzLTk1YmQtMzA3OWQ1ODhhYTk5 LzEvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8agdU1B wj88k6ilWXemUMEsN191yc7XSjU1b6OCJgCRFCNoGdL7ciNGjpB5zUUIzVAP3Qq4 39aID5yvMv3hEoAMPKOEBdQHq/sZ7IZmlijliEzpXwjclfCgfXc5gXH39ISAVry/ qiIDLgVJ1Hr0GKtiFhXRb+wrtUEb5+Xq6be+/sJvx8yzD66JRyybH/rRVKxCdNfi 57mlb5FAUSgJls0b/oyJYQ2I1BE42FWeDvFBGgrOFflthbOHVJzZO4VSSMLpAlxv Mcgypd1v5UGlC1fWGViiyyCNFJm6NMUptV5DxAlub/sqrTE0nreSapbHfqJJhWu8 HF4mjdL1+wrAiA== -----END CERTIFICATE-----Generated at Tue Dec 23 05:48:15 2025 by rpki-client