This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft File: g8bKhlGbVtTRhzr24lfefpfzyKw.mft (raw, json) Hash identifier: 2AoHXU9jkssOH0AGnNK/8ZgZBqeYnVTQlKP0Ig8xqjI= Subject key identifier: A2:7A:CF:5D:D6:55:98:27:85:46:25:7C:12:7C:BA:37:1C:36:D7:0C Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC Certificate issuer: /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac Certificate serial: 019B2740A78A05103C53FF11992A8A7C2EFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft Manifest number: 0C77 Signing time: Tue 16 Dec 2025 13:01:47 +0000 Manifest this update: Tue 16 Dec 2025 13:01:47 +0000 Manifest next update: Wed 17 Dec 2025 13:01:47 +0000 Files and hashes: 1: VgjHvOxBU8eTA_iP_fNUCn81xQg.roa (hash: JJu0mzqFx7iO9SO/UVIC5Bf9dy6p0refWuwflirPpkA=) 2: g8bKhlGbVtTRhzr24lfefpfzyKw.crl (hash: EZF8BbYu23yyzMHdB/5yH1TKdffRSJ8FIZAANq9hLkA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:40:a7:8a:05:10:3c:53:ff:11:99:2a:8a:7c:2e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac Validity Not Before: Dec 16 13:01:47 2025 GMT Not After : Dec 17 13:01:47 2025 GMT Subject: CN=a27acf5dd65598278546257c127cba371c36d70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b6:47:82:90:3c:41:72:da:04:c8:c4:b5:1f: 12:e9:24:e8:b3:48:b5:b1:33:3e:3c:09:f1:04:e6: a1:22:df:f1:2c:76:8c:f6:71:65:e4:d6:6e:0d:3d: b9:3f:13:f4:5a:aa:18:e4:ee:50:93:8d:8b:04:72: b7:c6:ab:0e:d2:16:7b:a2:11:25:7a:cb:ed:c4:53: 46:f2:ba:b8:75:f4:09:41:a4:e0:cf:13:53:23:37: 46:13:0b:d3:63:28:21:bc:cc:ff:75:91:26:8e:0b: 73:7b:f6:83:15:09:7f:e6:6e:b3:92:57:e7:8e:c2: a1:14:7e:96:b8:2e:4a:86:d4:59:91:eb:f1:c5:b4: 77:77:fe:61:7e:05:1a:a2:39:91:56:36:93:ff:14: 59:af:e5:7d:73:4f:40:eb:67:14:62:68:02:24:dc: a0:6c:7d:81:92:52:7e:04:01:ef:d4:fe:0a:dc:a5: 77:48:af:87:54:21:83:e1:a9:56:de:f5:45:3b:66: fb:e5:f1:2f:02:2e:f7:91:35:90:95:48:42:3d:43: 0c:c5:60:bc:7c:30:5b:fb:a0:af:9d:04:61:d5:18: f1:0c:0a:7f:1b:ac:e6:9e:ee:ac:13:cd:1f:50:92: b5:67:61:b5:f0:c1:11:b4:6e:6c:83:83:3c:11:9a: 97:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7A:CF:5D:D6:55:98:27:85:46:25:7C:12:7C:BA:37:1C:36:D7:0C X509v3 Authority Key Identifier: keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d7:3b:46:47:84:ca:42:83:7d:77:5f:6b:24:26:0e:fe:db: 6a:40:cb:64:d8:24:5e:7d:b0:d3:83:d7:3a:56:9a:90:08:c9: e6:3a:16:4c:d4:1d:2d:e1:b4:57:c0:f3:76:f8:a7:04:9e:87: 3b:1e:4c:16:c1:b6:02:99:9f:be:57:6d:b7:f9:40:1a:8d:7d: 34:d1:4a:85:84:17:13:d3:d6:8b:69:43:f2:18:34:fa:6f:65: b9:89:1d:e6:fc:3f:ae:1f:25:ae:87:8a:a7:a5:7c:6b:f2:42: 8f:ac:0f:b7:4e:4f:e4:e7:46:ec:bf:0f:39:77:c6:59:14:2d: 2d:fe:67:2a:77:46:08:78:fb:bc:35:b9:56:68:91:22:55:ed: a7:12:f6:ce:02:8d:d5:6c:ab:6d:18:3b:36:59:66:bf:74:14: be:7f:84:db:9c:fe:3c:d3:7a:f9:c7:eb:2f:22:72:7d:29:3d: a0:da:d6:65:e9:48:98:4f:0f:a0:48:41:c5:fd:39:f8:72:5c: f1:7d:5d:17:a3:a4:74:bb:44:41:74:31:36:11:5c:3a:9a:8a: e4:cb:78:81:ea:20:9c:58:73:bf:1f:6f:a3:bf:a9:df:61:9f: 79:81:6a:b7:1e:ea:2f:d7:aa:9e:02:78:e0:e7:da:31:f8:b0: 05:af:16:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQKeKBRA8U/8RmSqKfC78MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYzZjYTg2NTE5YjU2ZDRkMTg3M2FmNmUyNTdkZTdlOTdm M2M4YWMwHhcNMjUxMjE2MTMwMTQ3WhcNMjUxMjE3MTMwMTQ3WjAzMTEwLwYDVQQD EyhhMjdhY2Y1ZGQ2NTU5ODI3ODU0NjI1N2MxMjdjYmEzNzFjMzZkNzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7ZHgpA8QXLaBMjEtR8S6STos0i1 sTM+PAnxBOahIt/xLHaM9nFl5NZuDT25PxP0WqoY5O5Qk42LBHK3xqsO0hZ7ohEl esvtxFNG8rq4dfQJQaTgzxNTIzdGEwvTYyghvMz/dZEmjgtze/aDFQl/5m6zklfn jsKhFH6WuC5KhtRZkevxxbR3d/5hfgUaojmRVjaT/xRZr+V9c09A62cUYmgCJNyg bH2BklJ+BAHv1P4K3KV3SK+HVCGD4alW3vVFO2b75fEvAi73kTWQlUhCPUMMxWC8 fDBb+6CvnQRh1RjxDAp/G6zmnu6sE80fUJK1Z2G18MERtG5sg4M8EZqXmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJ6z13WVZgnhUYlfBJ8ujccNtcMMB8GA1UdIwQY MBaAFIPGyoZRm1bU0Yc69uJX3n6X88isMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzhiS2hsR2JWdFRSaHpyMjRsZmVmcGZ6eUt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85OTgyOTYtOTQ2NC00ZmIyLTk4ZTYt Y2E4YWY0ZjUzNTZjLzEvZzhiS2hsR2JWdFRSaHpyMjRsZmVmcGZ6eUt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85OTgyOTYtOTQ2NC00ZmIyLTk4ZTYtY2E4YWY0ZjUzNTZj LzEvZzhiS2hsR2JWdFRSaHpyMjRsZmVmcGZ6eUt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitc7RkeE ykKDfXdfayQmDv7bakDLZNgkXn2w04PXOlaakAjJ5joWTNQdLeG0V8DzdvinBJ6H Ox5MFsG2Apmfvldtt/lAGo19NNFKhYQXE9PWi2lD8hg0+m9luYkd5vw/rh8lroeK p6V8a/JCj6wPt05P5OdG7L8POXfGWRQtLf5nKndGCHj7vDW5VmiRIlXtpxL2zgKN 1WyrbRg7Nllmv3QUvn+E25z+PNN6+cfrLyJyfSk9oNrWZelImE8PoEhBxf05+HJc 8X1dF6OkdLtEQXQxNhFcOpqK5Mt4geognFhzvx9vo7+p32GfeYFqtx7qL9eqngJ4 4OfaMfiwBa8WUA== -----END CERTIFICATE-----Generated at Tue Dec 16 17:24:00 2025 by rpki-client