This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft File: g8bKhlGbVtTRhzr24lfefpfzyKw.mft (raw, json) Hash identifier: gs66XPI3dUS2RVB+zbdjcLP+/7LHtZg5wop/dtXep/o= Subject key identifier: 76:E1:56:20:D9:8A:AD:AF:C5:C7:27:A0:EA:81:4A:0C:0A:9F:C6:63 Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC Certificate issuer: /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac Certificate serial: 019B424A22A823DCF1EFE9BB2F8500782F7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft Manifest number: 0C85 Signing time: Sun 21 Dec 2025 19:01:53 +0000 Manifest this update: Sun 21 Dec 2025 19:01:53 +0000 Manifest next update: Mon 22 Dec 2025 19:01:53 +0000 Files and hashes: 1: VgjHvOxBU8eTA_iP_fNUCn81xQg.roa (hash: JJu0mzqFx7iO9SO/UVIC5Bf9dy6p0refWuwflirPpkA=) 2: g8bKhlGbVtTRhzr24lfefpfzyKw.crl (hash: W68J2RnUgGU6eEYN2db+5LfD6PR8QinAGIC22AkgOeo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:22:a8:23:dc:f1:ef:e9:bb:2f:85:00:78:2f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac Validity Not Before: Dec 21 19:01:53 2025 GMT Not After : Dec 22 19:01:53 2025 GMT Subject: CN=76e15620d98aadafc5c727a0ea814a0c0a9fc663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ac:9e:13:9b:26:c9:a4:fa:b6:88:ce:42:17: 1d:26:7e:1b:dd:3e:5c:cc:7e:99:15:72:e4:b1:59: 3a:78:92:92:30:e8:b3:b7:a0:4c:89:47:16:31:8e: 85:f3:d5:c0:85:45:ea:4a:dd:83:3a:6f:3d:a8:c8: c9:a8:ef:ad:e5:f4:e0:ad:08:2b:ec:6a:7c:f8:02: 17:3d:a4:62:12:1a:5f:3f:84:b4:f3:0a:ea:80:02: a8:b3:74:47:49:4a:30:97:4d:45:c4:42:d1:55:d5: 64:c9:3d:a7:8d:b7:e2:bb:e6:0d:5c:d7:c8:f3:44: 5c:ef:f3:f8:ff:19:f4:37:37:c8:06:73:5b:be:9f: 9c:70:ba:d4:50:17:c1:a6:89:6e:cc:57:1f:62:a6: 0e:b9:02:0e:aa:67:6b:31:b2:07:0c:92:95:36:5d: 61:a9:14:4c:93:33:42:06:cb:1f:56:b6:c4:86:dc: d2:97:42:72:2c:fd:17:4f:bc:66:2c:00:b6:1b:c4: 9a:a6:80:94:40:96:b8:dd:7e:ff:15:95:e0:15:ad: 86:36:7a:02:19:08:83:b3:05:14:64:24:c6:ee:a8: a2:a1:9f:d9:9d:a1:df:c1:c0:1c:5f:8c:bb:06:b8: 6e:4c:73:c3:80:b4:3c:1f:b2:59:80:0e:9b:bd:b5: 3b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E1:56:20:D9:8A:AD:AF:C5:C7:27:A0:EA:81:4A:0C:0A:9F:C6:63 X509v3 Authority Key Identifier: keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c0:2e:8b:ed:3f:24:25:9b:a9:2a:b0:e5:a3:3f:0a:26:48: 8d:46:e9:64:83:f8:85:58:8e:d3:99:f6:94:72:f4:10:62:60: be:9f:e5:77:63:61:63:f1:0c:1c:09:3a:84:03:9c:69:c2:05: af:74:a4:0a:51:b6:f2:c1:35:19:db:ef:f1:f1:83:73:d1:e7: 1a:40:29:81:99:ed:df:29:bc:ed:b5:0f:0c:e7:0d:a3:cc:4e: 1b:85:e9:7f:0e:a0:b7:74:af:c9:46:64:bd:7b:a3:b4:54:34: b1:14:81:13:71:21:3a:c6:fe:6f:5e:13:2e:f7:c8:bc:db:ce: 75:96:36:80:c3:72:b5:81:4b:26:de:57:a1:aa:20:02:ee:2a: 03:87:aa:d3:88:28:a3:0a:79:50:35:77:58:0f:cd:3c:88:0b: 9d:3c:86:e5:6b:de:57:30:d5:3f:4f:af:e7:a9:c7:d9:92:bc: ad:4a:9f:f7:e3:a9:09:f5:4d:87:24:1f:d1:6e:df:62:19:78: 8b:65:d8:d0:c2:c9:bf:7f:52:c1:3c:19:f0:db:92:d1:a1:ae: 64:ae:2b:d0:a1:f5:a9:6f:eb:5e:1f:c1:a1:c1:f4:e4:6d:02: 4a:a6:6b:f0:3d:29:bc:e3:cc:6a:a2:56:29:7f:69:4c:4c:ec: 01:cb:ad:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSiKoI9zx7+m7L4UAeC97MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYzZjYTg2NTE5YjU2ZDRkMTg3M2FmNmUyNTdkZTdlOTdm M2M4YWMwHhcNMjUxMjIxMTkwMTUzWhcNMjUxMjIyMTkwMTUzWjAzMTEwLwYDVQQD Eyg3NmUxNTYyMGQ5OGFhZGFmYzVjNzI3YTBlYTgxNGEwYzBhOWZjNjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKyeE5smyaT6tojOQhcdJn4b3T5c zH6ZFXLksVk6eJKSMOizt6BMiUcWMY6F89XAhUXqSt2DOm89qMjJqO+t5fTgrQgr 7Gp8+AIXPaRiEhpfP4S08wrqgAKos3RHSUowl01FxELRVdVkyT2njbfiu+YNXNfI 80Rc7/P4/xn0NzfIBnNbvp+ccLrUUBfBpoluzFcfYqYOuQIOqmdrMbIHDJKVNl1h qRRMkzNCBssfVrbEhtzSl0JyLP0XT7xmLAC2G8SapoCUQJa43X7/FZXgFa2GNnoC GQiDswUUZCTG7qiioZ/ZnaHfwcAcX4y7BrhuTHPDgLQ8H7JZgA6bvbU7KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbhViDZiq2vxccnoOqBSgwKn8ZjMB8GA1UdIwQY MBaAFIPGyoZRm1bU0Yc69uJX3n6X88isMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzhiS2hsR2JWdFRSaHpyMjRsZmVmcGZ6eUt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85OTgyOTYtOTQ2NC00ZmIyLTk4ZTYt Y2E4YWY0ZjUzNTZjLzEvZzhiS2hsR2JWdFRSaHpyMjRsZmVmcGZ6eUt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85OTgyOTYtOTQ2NC00ZmIyLTk4ZTYtY2E4YWY0ZjUzNTZj LzEvZzhiS2hsR2JWdFRSaHpyMjRsZmVmcGZ6eUt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8Aui+0/ JCWbqSqw5aM/CiZIjUbpZIP4hViO05n2lHL0EGJgvp/ld2NhY/EMHAk6hAOcacIF r3SkClG28sE1Gdvv8fGDc9HnGkApgZnt3ym87bUPDOcNo8xOG4Xpfw6gt3SvyUZk vXujtFQ0sRSBE3EhOsb+b14TLvfIvNvOdZY2gMNytYFLJt5XoaogAu4qA4eq04go owp5UDV3WA/NPIgLnTyG5WveVzDVP0+v56nH2ZK8rUqf9+OpCfVNhyQf0W7fYhl4 i2XY0MLJv39SwTwZ8NuS0aGuZK4r0KH1qW/rXh/BocH05G0CSqZr8D0pvOPMaqJW KX9pTEzsAcutXQ== -----END CERTIFICATE-----Generated at Sun Dec 21 21:32:20 2025 by rpki-client