This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft File: 8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json) Hash identifier: I4zbDk/DwzCnHOURR+N+N6hqUmjBXe9j8I0pTH/QmG0= Subject key identifier: 60:32:67:95:1C:08:0B:5D:41:FA:1D:B9:5B:E9:1E:56:84:D8:64:FC Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3 Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3 Certificate serial: 019B36B3495417699906FA1F24F7547772F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft Manifest number: 0870 Signing time: Fri 19 Dec 2025 13:01:17 +0000 Manifest this update: Fri 19 Dec 2025 13:01:17 +0000 Manifest next update: Sat 20 Dec 2025 13:01:17 +0000 Files and hashes: 1: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: 7MpkOJ9e3YdUp7cS9z8zrPq4Sx5+EyfnZDBd3XUGVGE=) 2: 9BXUrv8yMotCa9wi2rTgBBgI1OA.roa (hash: 4WrQuplF7eXybB0cG6ut10OAMsEsYkXu1xsES1nQaEs=) 3: FwjOhi182_59p8dwQga5XgkbJ0s.roa (hash: Mc8kDGGDUHY1tIZcCKRSsVLGZ6kIEWbGczkswWitHog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:49:54:17:69:99:06:fa:1f:24:f7:54:77:72:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3 Validity Not Before: Dec 19 13:01:17 2025 GMT Not After : Dec 20 13:01:17 2025 GMT Subject: CN=603267951c080b5d41fa1db95be91e5684d864fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:93:1e:0c:80:02:80:ce:f5:5e:55:63:f8:b3: 55:5c:ae:62:be:68:c6:a3:e7:f5:2b:e2:ad:62:c9: 38:24:26:ce:1d:f6:ff:43:08:26:11:e2:48:90:2b: 4f:aa:6b:65:61:e4:0f:3c:7c:d4:9b:84:a9:82:86: 72:0c:9c:92:e6:20:f5:a8:48:f1:b2:a8:8e:50:4d: 63:b7:84:68:cd:ad:a3:e4:de:9c:55:73:cd:35:1d: d9:63:bd:bb:85:22:9c:ff:27:07:6e:39:5a:18:c0: 10:a2:aa:4a:c4:d6:3b:5b:7f:bd:1f:ef:a4:d5:e4: 88:d8:5f:97:37:30:81:ae:15:c6:f4:cc:fd:41:7c: c7:a0:c2:df:52:a6:50:f0:14:1b:04:26:9e:43:1d: 46:85:16:9d:de:97:ce:7b:d4:63:ba:27:90:22:1b: 33:a3:3b:7a:67:de:11:e8:24:f4:fd:6a:42:58:d4: 95:7b:2e:65:ac:91:a9:3c:aa:2c:b4:24:fd:0e:2a: 36:8b:52:a8:52:da:55:93:9f:09:87:c4:8c:04:27: 65:ad:b4:11:72:78:89:35:9c:b0:7c:94:9b:bb:cb: 41:f6:a7:4c:01:5c:0e:4c:06:42:0a:2c:88:1a:a1: 82:bf:e3:63:8c:b0:01:22:b0:06:cc:46:cc:cc:de: 87:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:32:67:95:1C:08:0B:5D:41:FA:1D:B9:5B:E9:1E:56:84:D8:64:FC X509v3 Authority Key Identifier: keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:fc:27:34:ee:5a:30:30:11:ba:c5:0a:93:c6:51:c5:98:51: f0:73:f3:59:8d:19:d3:a7:51:f4:d1:42:56:f3:55:4e:dc:b6: b9:e6:52:0c:5a:28:fa:33:12:37:41:a9:55:49:55:b3:ae:59: 23:5c:8a:dc:57:c0:08:4f:f8:e1:f1:f7:21:fe:bb:23:61:da: e5:b4:55:d3:2c:5b:82:bf:89:f3:64:d0:cb:04:19:fd:53:45: 1e:b0:73:ed:4a:cd:eb:46:97:6f:f7:b6:54:70:bc:7e:33:1f: c8:20:34:db:94:77:ad:8d:7a:24:8e:10:34:23:93:8e:9e:64: a2:f2:6d:26:a7:5c:12:9b:05:52:9b:99:f3:d4:5c:be:67:79: 0d:e6:e3:2f:bc:45:7b:fe:37:75:e1:47:91:b5:e2:53:d7:17: 9a:f6:7f:8d:70:67:87:19:96:97:44:9d:4b:22:d5:87:47:80: 03:72:d9:cb:0a:41:a7:bf:4e:2e:9f:71:31:ea:54:bb:1c:f4: 19:95:95:f1:1f:d1:80:b3:23:7b:e5:2a:87:bb:5a:ef:f1:1e: d4:b3:50:06:26:96:e9:3a:bf:c1:aa:c9:34:13:71:d2:09:a3: b5:eb:e3:09:d5:63:9a:05:b5:ad:67:66:3e:c5:f5:85:a5:51: 1f:a4:2e:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s0lUF2mZBvofJPdUd3LyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZDljYmJlZmRlNjEyZTYxZTBjZDBmZjBiODcxOTYxY2Jm Nzk3ZTMwHhcNMjUxMjE5MTMwMTE3WhcNMjUxMjIwMTMwMTE3WjAzMTEwLwYDVQQD Eyg2MDMyNjc5NTFjMDgwYjVkNDFmYTFkYjk1YmU5MWU1Njg0ZDg2NGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pMeDIACgM71XlVj+LNVXK5ivmjG o+f1K+KtYsk4JCbOHfb/QwgmEeJIkCtPqmtlYeQPPHzUm4SpgoZyDJyS5iD1qEjx sqiOUE1jt4Roza2j5N6cVXPNNR3ZY727hSKc/ycHbjlaGMAQoqpKxNY7W3+9H++k 1eSI2F+XNzCBrhXG9Mz9QXzHoMLfUqZQ8BQbBCaeQx1GhRad3pfOe9RjuieQIhsz ozt6Z94R6CT0/WpCWNSVey5lrJGpPKostCT9Dio2i1KoUtpVk58Jh8SMBCdlrbQR cniJNZywfJSbu8tB9qdMAVwOTAZCCiyIGqGCv+NjjLABIrAGzEbMzN6HCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAyZ5UcCAtdQfoduVvpHlaE2GT8MB8GA1UdIwQY MBaAFPDZy7795hLmHgzQ/wuHGWHL95fjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE5uTHZ2M21FdVllRE5EX0M0Y1pZY3YzbC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80OTk2OWUtNTQ2Yy00M2U1LThkYmQt ZjkyOTE1YTk2OGJjLzEvOE5uTHZ2M21FdVllRE5EX0M0Y1pZY3YzbC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC80OTk2OWUtNTQ2Yy00M2U1LThkYmQtZjkyOTE1YTk2OGJj LzEvOE5uTHZ2M21FdVllRE5EX0M0Y1pZY3YzbC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvwnNO5a MDARusUKk8ZRxZhR8HPzWY0Z06dR9NFCVvNVTty2ueZSDFoo+jMSN0GpVUlVs65Z I1yK3FfACE/44fH3If67I2Ha5bRV0yxbgr+J82TQywQZ/VNFHrBz7UrN60aXb/e2 VHC8fjMfyCA025R3rY16JI4QNCOTjp5kovJtJqdcEpsFUpuZ89Rcvmd5DebjL7xF e/43deFHkbXiU9cXmvZ/jXBnhxmWl0SdSyLVh0eAA3LZywpBp79OLp9xMepUuxz0 GZWV8R/RgLMje+Uqh7ta7/Ee1LNQBiaW6Tq/warJNBNx0gmjtevjCdVjmgW1rWdm PsX1haVRH6QuUQ== -----END CERTIFICATE-----Generated at Fri Dec 19 15:28:29 2025 by rpki-client