This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft File: C8iTN1rRVbX_ztPL7iU1uGWf44k.mft (raw, json) Hash identifier: 6fOQsNjP5fMonpacyRLzNXOPaK/gP+KLZtxEv1T1Ja8= Subject key identifier: EE:9D:B3:77:45:90:0E:15:C8:1E:B9:36:A0:21:17:77:3C:1E:9A:75 Authority key identifier: 0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89 Certificate issuer: /CN=0bc893375ad155b5ffced3cbee2535b8659fe389 Certificate serial: 019B59084AB082F368B5E545854D41D95AC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 05:01:14 +0000 Manifest this update: Fri 26 Dec 2025 05:01:14 +0000 Manifest next update: Sat 27 Dec 2025 05:01:14 +0000 Files and hashes: 1: C8iTN1rRVbX_ztPL7iU1uGWf44k.crl (hash: fY48ypilklTe4dhSwH80YkuaJtRQruU5/8bYjqZM4IE=) 2: uYBmloio0v9Mj1oUCQ7dp4Uq2pg.roa (hash: k0vCLZfeunG/QoHpcwb7GJEwzSKtofkLLPDzKPrjJzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:4a:b0:82:f3:68:b5:e5:45:85:4d:41:d9:5a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bc893375ad155b5ffced3cbee2535b8659fe389 Validity Not Before: Dec 26 05:01:14 2025 GMT Not After : Dec 27 05:01:14 2025 GMT Subject: CN=ee9db37745900e15c81eb936a02117773c1e9a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:02:6d:7e:15:ec:00:40:37:fc:71:f0:19:24: 86:d4:3c:9a:69:82:83:69:1c:94:d4:54:3e:10:16: 22:e0:22:f3:47:5f:02:b4:9c:fb:e7:d8:eb:c4:a2: 0a:1e:c8:b6:ec:7e:79:ab:32:cd:f8:9f:a4:31:2c: f8:eb:53:ef:47:b5:3b:cc:0d:ba:d7:59:7f:b5:b1: 58:70:d2:e0:cd:3a:cf:99:fd:b6:51:b2:27:ad:86: 27:7a:6f:1d:39:32:c7:b2:a2:9a:b5:44:51:e2:2a: e1:27:25:fe:e2:39:87:f5:3c:de:12:e1:47:79:14: 77:62:43:02:63:1e:9f:53:54:00:a0:2d:33:ab:74: 0d:f4:a6:9a:76:98:9a:0b:64:79:29:a8:ca:dc:59: 05:65:3c:3f:30:8b:d4:cf:4a:08:2b:1f:e4:84:3c: 4a:22:97:47:30:f3:02:13:0b:eb:5b:78:ab:5e:68: 66:03:8c:f0:4b:58:82:76:cf:e1:96:89:4d:e9:1a: 6b:fe:ab:b2:ec:85:ea:1a:05:ec:a0:f6:03:55:b8: dc:13:4b:51:42:a3:9d:3c:e7:54:88:58:0f:e9:70: 7c:c0:35:7f:6f:fe:b8:e4:60:d5:00:a1:44:c0:72: 2f:12:00:77:4b:5a:db:51:9c:0b:58:98:5a:93:d9: 3b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9D:B3:77:45:90:0E:15:C8:1E:B9:36:A0:21:17:77:3C:1E:9A:75 X509v3 Authority Key Identifier: keyid:0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:61:a9:27:45:54:43:ad:86:b9:be:d6:20:30:b7:d5:7e:e2: d9:d5:ad:aa:fa:07:26:da:fa:c4:35:79:cb:71:85:0d:c5:93: 0c:45:2d:ff:0f:ca:5d:d0:f4:c7:9b:2b:3e:99:ee:6b:62:18: 5c:2a:14:3c:54:07:3f:ea:c8:90:d6:c9:92:6e:51:c0:b7:da: d1:83:7f:56:f7:cc:12:e2:21:79:60:d1:c1:ce:63:eb:be:64: 44:99:54:7a:aa:c2:59:18:5b:c4:0f:8d:78:ed:88:7f:b5:2a: 1b:e1:30:7e:20:6d:03:2d:fe:f2:86:91:7c:30:dd:e5:f0:8a: ac:0d:ba:92:0f:a8:d0:b7:20:30:d0:1e:42:24:47:c4:b8:a7: 69:66:d6:a1:3f:23:ea:0b:04:80:25:0f:74:b3:e7:22:63:22: ef:d9:69:06:64:91:da:2a:c0:39:80:cc:35:f3:6e:20:83:99: b0:35:04:51:d9:2b:f2:d8:ca:ca:e1:d4:38:50:69:18:52:2f: a3:19:4a:3d:ef:f7:e0:67:87:c9:3e:4e:3c:a5:ee:8f:3c:0c: 47:4c:8e:3a:73:7b:42:f6:aa:3e:fe:63:5e:87:57:9a:2e:65: f7:b0:b6:62:17:48:4b:e4:c9:d5:8f:02:01:ff:d4:0b:40:74: d7:d8:91:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCEqwgvNoteVFhU1B2VrHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYzg5MzM3NWFkMTU1YjVmZmNlZDNjYmVlMjUzNWI4NjU5 ZmUzODkwHhcNMjUxMjI2MDUwMTE0WhcNMjUxMjI3MDUwMTE0WjAzMTEwLwYDVQQD EyhlZTlkYjM3NzQ1OTAwZTE1YzgxZWI5MzZhMDIxMTc3NzNjMWU5YTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQJtfhXsAEA3/HHwGSSG1DyaaYKD aRyU1FQ+EBYi4CLzR18CtJz759jrxKIKHsi27H55qzLN+J+kMSz461PvR7U7zA26 11l/tbFYcNLgzTrPmf22UbInrYYnem8dOTLHsqKatURR4irhJyX+4jmH9TzeEuFH eRR3YkMCYx6fU1QAoC0zq3QN9KaadpiaC2R5KajK3FkFZTw/MIvUz0oIKx/khDxK IpdHMPMCEwvrW3irXmhmA4zwS1iCds/hlolN6Rpr/quy7IXqGgXsoPYDVbjcE0tR QqOdPOdUiFgP6XB8wDV/b/645GDVAKFEwHIvEgB3S1rbUZwLWJhak9k7kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6ds3dFkA4VyB65NqAhF3c8Hpp1MB8GA1UdIwQY MBaAFAvIkzda0VW1/87Ty+4lNbhln+OJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzhpVE4xclJWYlhfenRQTDdpVTF1R1dmNDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8zMzY3MDEtZTM2YS00ZGIyLTk3NGUt MGVkMDc4ZjRiY2FmLzEvQzhpVE4xclJWYlhfenRQTDdpVTF1R1dmNDRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8zMzY3MDEtZTM2YS00ZGIyLTk3NGUtMGVkMDc4ZjRiY2Fm LzEvQzhpVE4xclJWYlhfenRQTDdpVTF1R1dmNDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmGpJ0VU Q62Gub7WIDC31X7i2dWtqvoHJtr6xDV5y3GFDcWTDEUt/w/KXdD0x5srPpnua2IY XCoUPFQHP+rIkNbJkm5RwLfa0YN/VvfMEuIheWDRwc5j675kRJlUeqrCWRhbxA+N eO2If7UqG+EwfiBtAy3+8oaRfDDd5fCKrA26kg+o0LcgMNAeQiRHxLinaWbWoT8j 6gsEgCUPdLPnImMi79lpBmSR2irAOYDMNfNuIIOZsDUEUdkr8tjKyuHUOFBpGFIv oxlKPe/34GeHyT5OPKXujzwMR0yOOnN7QvaqPv5jXodXmi5l97C2YhdIS+TJ1Y8C Af/UC0B019iRdw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:49 2025 by rpki-client