This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft File: 8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json) Hash identifier: w9XGe4lbB2u+egjabbtp7DBrx9EPBnVoNvS0IBTFCes= Subject key identifier: A9:E2:70:0C:33:D6:AF:0F:E6:1E:67:1D:E8:1B:22:B7:B5:23:88:A8 Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89 Certificate issuer: /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89 Certificate serial: 019B39EADB639920DDCB948D0A332FD6A3F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 04:00:51 +0000 Manifest this update: Sat 20 Dec 2025 04:00:51 +0000 Manifest next update: Sun 21 Dec 2025 04:00:51 +0000 Files and hashes: 1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: s2p8R1qwI0XJ/EqYqHSj/OgsKLr0qATZH3ec25zhxks=) 2: jfUqkf_BnbSeyvKiFitEY3b5cmY.roa (hash: MkQ1kYsqlZvezBQ/uBC4v1whC4HDYOAxUmlDZ4BgXWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:db:63:99:20:dd:cb:94:8d:0a:33:2f:d6:a3:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89 Validity Not Before: Dec 20 04:00:51 2025 GMT Not After : Dec 21 04:00:51 2025 GMT Subject: CN=a9e2700c33d6af0fe61e671de81b22b7b52388a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1c:84:d0:3d:cd:d3:44:37:7a:59:5a:e1:59: b2:f4:d6:54:1c:31:c7:a3:bb:7e:03:85:b8:b4:e1: 4f:65:00:ff:22:26:15:70:69:1c:28:c3:d3:90:a9: 35:aa:10:3a:77:80:a0:c9:85:23:f3:26:63:f8:bb: 16:06:02:31:3c:a0:32:01:9d:98:b1:ce:98:41:10: 8d:c7:6d:49:c2:da:a3:2d:76:ae:08:f8:74:3f:32: 43:62:62:31:cc:76:75:a0:f2:e9:de:4f:d5:15:a0: f5:14:b0:07:a8:28:cf:5a:f4:3b:f0:3e:31:61:10: 84:b1:6a:86:d7:7b:90:13:3d:0b:58:86:7e:1e:61: 9f:73:db:0c:7d:af:e2:72:29:e4:41:e7:e4:e8:a0: 17:d6:3a:05:65:9c:26:f6:fc:bf:d5:f5:8a:83:02: 85:aa:57:d3:51:15:97:13:cf:be:67:15:c2:40:4a: 3c:aa:e6:8f:22:d3:14:c9:9c:b4:4d:ff:1c:5e:21: 6f:cc:9e:a8:91:d9:97:15:46:6e:04:ff:e9:30:99: 50:08:ce:68:9e:90:ad:1c:6d:b2:7c:db:2b:a8:ac: fc:a3:fd:e2:8c:e3:01:65:97:7b:0b:17:be:b4:bb: a4:8b:f9:eb:03:04:3c:8e:63:5c:0c:cb:83:0f:ec: c5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E2:70:0C:33:D6:AF:0F:E6:1E:67:1D:E8:1B:22:B7:B5:23:88:A8 X509v3 Authority Key Identifier: keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f1:9d:b6:de:74:16:ab:64:e8:24:0c:7c:43:12:fc:09:d1: d0:cb:93:4c:d0:64:85:0b:04:4e:2f:40:c3:51:ed:0c:06:3b: 2b:6d:bf:f4:ff:14:ed:4a:e1:a5:06:0a:5b:a0:e7:b9:cf:36: 04:ff:ad:3c:db:af:9c:fa:d4:eb:5f:a1:3d:e0:fa:a2:5f:08: 4e:d6:f6:60:dd:28:fb:8d:f0:93:90:e8:91:92:e5:9f:c9:a1: ab:00:c6:e3:15:69:47:ed:b6:6e:31:29:dc:54:27:59:ba:85: 7d:ba:38:79:d0:63:ef:23:5d:4f:e3:80:01:95:e5:2e:b8:9d: 27:c7:09:cb:90:d0:13:68:7c:ca:fe:dc:9a:20:49:32:b5:ea: 69:e5:e9:55:db:37:5a:0f:bc:c3:c1:d8:f7:ef:b0:6f:60:15: af:35:2f:b4:22:3e:3e:76:d9:09:3d:3d:9c:97:a2:e2:e2:46: 2f:56:60:c1:5d:4b:95:e6:74:86:ec:c1:d2:09:9e:3f:a6:b3: 85:51:f4:db:9f:e6:4f:96:04:9d:9e:22:3c:a9:de:f1:66:ed: de:29:62:06:b6:56:4b:49:3c:c3:08:78:23:23:68:c7:8d:0b: 39:b4:ad:17:bb:28:44:50:74:83:68:51:f3:70:c3:41:a7:8f: d8:4f:f4:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56ttjmSDdy5SNCjMv1qP5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNzlhM2U4NTRmMDEwMTVlOWQwZTAzZTg5ZDgwNzBjYzll YmNmODkwHhcNMjUxMjIwMDQwMDUxWhcNMjUxMjIxMDQwMDUxWjAzMTEwLwYDVQQD EyhhOWUyNzAwYzMzZDZhZjBmZTYxZTY3MWRlODFiMjJiN2I1MjM4OGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoByE0D3N00Q3ella4Vmy9NZUHDHH o7t+A4W4tOFPZQD/IiYVcGkcKMPTkKk1qhA6d4CgyYUj8yZj+LsWBgIxPKAyAZ2Y sc6YQRCNx21JwtqjLXauCPh0PzJDYmIxzHZ1oPLp3k/VFaD1FLAHqCjPWvQ78D4x YRCEsWqG13uQEz0LWIZ+HmGfc9sMfa/icinkQefk6KAX1joFZZwm9vy/1fWKgwKF qlfTURWXE8++ZxXCQEo8quaPItMUyZy0Tf8cXiFvzJ6okdmXFUZuBP/pMJlQCM5o npCtHG2yfNsrqKz8o/3ijOMBZZd7Cxe+tLuki/nrAwQ8jmNcDMuDD+zFCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnicAwz1q8P5h5nHegbIre1I4ioMB8GA1UdIwQY MBaAFPJ5o+hU8BAV6dDgPonYBwzJ68+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG5tajZGVHdFQlhwME9BLWlkZ0hETW5yejRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84MzhkYjItMGM4OC00ZmY0LWI5YmMt OGJhZTdlOWZkNzVjLzEvOG5tajZGVHdFQlhwME9BLWlkZ0hETW5yejRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC84MzhkYjItMGM4OC00ZmY0LWI5YmMtOGJhZTdlOWZkNzVj LzEvOG5tajZGVHdFQlhwME9BLWlkZ0hETW5yejRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvGdtt50 Fqtk6CQMfEMS/AnR0MuTTNBkhQsETi9Aw1HtDAY7K22/9P8U7UrhpQYKW6Dnuc82 BP+tPNuvnPrU61+hPeD6ol8ITtb2YN0o+43wk5DokZLln8mhqwDG4xVpR+22bjEp 3FQnWbqFfbo4edBj7yNdT+OAAZXlLridJ8cJy5DQE2h8yv7cmiBJMrXqaeXpVds3 Wg+8w8HY9++wb2AVrzUvtCI+PnbZCT09nJei4uJGL1ZgwV1LleZ0huzB0gmeP6az hVH025/mT5YEnZ4iPKne8Wbt3iliBrZWS0k8wwh4IyNox40LObStF7soRFB0g2hR 83DDQaeP2E/0vA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:17:09 2025 by rpki-client