This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft File: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft (raw, json) Hash identifier: +tn9sE2jtN8RgSgyXQiKoQYhHFv4KkXM4Vk9On+0NLI= Subject key identifier: 24:35:D4:72:3A:9D:33:C9:74:9D:B6:CC:A4:F1:BE:43:EE:AB:BB:23 Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4 Certificate issuer: /CN=f22bed3f37cd72826511c574560deb55542550e4 Certificate serial: 019B292F2D855C99D7AB978D4DF7C84D5F70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 22:01:56 +0000 Manifest this update: Tue 16 Dec 2025 22:01:56 +0000 Manifest next update: Wed 17 Dec 2025 22:01:56 +0000 Files and hashes: 1: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl (hash: 3++TZad6THsbjT4gUeqeTNtlmbpD/uny+6vMma1wGRY=) 2: d-g1g1WIQH2eW5zQOoLECyf2CbU.roa (hash: 4hlHKC2roVEpNMRQA5ne6l615543DSp4qxsP/od40+A=) 3: kHVwAjV50K04XcEC52VZ9Z8xRlA.roa (hash: 2Boh063HYNHe4qTfS7TAeZC6aTKdY96/vHBa+9B6mso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2f:2d:85:5c:99:d7:ab:97:8d:4d:f7:c8:4d:5f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4 Validity Not Before: Dec 16 22:01:56 2025 GMT Not After : Dec 17 22:01:56 2025 GMT Subject: CN=2435d4723a9d33c9749db6cca4f1be43eeabbb23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fb:f0:0d:dd:ad:02:de:5a:31:cb:92:46:76: 80:d1:d5:7d:a5:e4:4b:71:8c:e7:28:46:09:94:0c: 37:47:a3:a2:67:5f:08:70:f7:9f:a8:cf:05:9f:7d: fa:b0:e3:01:44:10:de:3b:9f:9a:d6:77:4d:c6:34: 49:1d:d5:fb:d9:54:2a:f7:84:e0:09:c8:dc:7a:62: 1e:41:89:bf:62:de:9a:b3:c9:79:11:ad:a2:db:28: 93:42:26:b6:83:4a:d9:9e:52:92:6b:89:36:a1:34: c9:7d:b5:c4:21:cf:40:40:cc:1a:a7:19:7f:2c:06: 3d:d2:50:04:18:b9:e4:eb:a1:65:0f:18:8e:21:05: c5:f0:ba:8e:6c:49:e0:f1:d8:e6:a5:4e:fe:1d:51: 89:a1:76:ca:8a:e8:a5:7f:17:fc:15:fb:fc:7a:0f: 8c:71:20:9f:18:4c:dc:cc:ea:67:d3:a0:ea:a9:96: f1:29:64:a0:4d:45:2d:a9:c7:63:8c:e8:d6:5d:b5: 9b:f2:af:7c:bb:c0:a7:b2:0f:94:31:67:62:d8:2f: e8:f4:da:0b:33:48:69:43:84:95:f3:a0:db:36:1c: 66:d3:ed:80:78:28:61:40:41:20:76:7c:a1:a8:86: 64:94:64:3a:e9:b9:02:fc:2c:6f:53:ed:83:af:f5: 05:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:35:D4:72:3A:9D:33:C9:74:9D:B6:CC:A4:F1:BE:43:EE:AB:BB:23 X509v3 Authority Key Identifier: keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:78:5c:e3:a8:33:a5:cc:8c:d4:65:92:1c:14:2a:db:0e:ee: ad:cb:9d:f3:df:a2:0f:fe:27:c0:a4:1a:81:79:a7:21:03:63: 23:47:56:12:31:d3:8f:b5:33:d8:36:72:bf:52:03:59:e9:26: f1:34:9d:f1:eb:95:9d:ac:94:78:a4:f9:50:62:4a:b5:b2:b0: d9:08:dc:01:3b:a1:58:a7:aa:3e:19:1c:86:d5:02:da:fa:1e: 3c:04:0b:33:a6:fa:f3:f3:2f:f1:08:35:9b:cf:0c:20:02:58: 77:f5:7f:2a:71:07:a3:1c:bc:34:be:3c:66:ce:df:55:39:90: d8:8f:63:23:62:43:af:a4:30:d8:1f:8f:b7:27:b1:d6:55:00: 2d:d1:00:ce:42:9a:e1:b6:93:fa:be:ea:cb:6c:f7:f2:d6:62: 38:80:bb:d8:da:6b:56:a8:22:5d:30:2c:17:b6:c4:8c:8f:bb: 21:da:79:da:c4:36:08:92:02:7e:01:85:00:72:52:9a:3d:0f: 92:2f:44:b3:e5:b8:91:cb:48:42:2c:3a:77:f0:ec:cb:b7:48: 3d:a5:49:89:b7:70:42:9a:61:67:d2:54:7c:e9:13:17:c2:f9: 4b:e5:95:04:57:00:2b:37:1d:e3:7f:1d:3c:0b:9e:d8:db:c1: 2e:32:ef:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspLy2FXJnXq5eNTffITV9wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMmJlZDNmMzdjZDcyODI2NTExYzU3NDU2MGRlYjU1NTQy NTUwZTQwHhcNMjUxMjE2MjIwMTU2WhcNMjUxMjE3MjIwMTU2WjAzMTEwLwYDVQQD EygyNDM1ZDQ3MjNhOWQzM2M5NzQ5ZGI2Y2NhNGYxYmU0M2VlYWJiYjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfvwDd2tAt5aMcuSRnaA0dV9peRL cYznKEYJlAw3R6OiZ18IcPefqM8Fn336sOMBRBDeO5+a1ndNxjRJHdX72VQq94Tg CcjcemIeQYm/Yt6as8l5Ea2i2yiTQia2g0rZnlKSa4k2oTTJfbXEIc9AQMwapxl/ LAY90lAEGLnk66FlDxiOIQXF8LqObEng8djmpU7+HVGJoXbKiuilfxf8Ffv8eg+M cSCfGEzczOpn06DqqZbxKWSgTUUtqcdjjOjWXbWb8q98u8Cnsg+UMWdi2C/o9NoL M0hpQ4SV86DbNhxm0+2AeChhQEEgdnyhqIZklGQ66bkC/CxvU+2Dr/UFQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQ11HI6nTPJdJ22zKTxvkPuq7sjMB8GA1UdIwQY MBaAFPIr7T83zXKCZRHFdFYN61VUJVDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGl2dFB6Zk5jb0psRWNWMFZnM3JWVlFsVU9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8yOTRmYTEtZTkzOC00Y2QyLTlhODkt MjkwNjJlODcwYjY0LzEvOGl2dFB6Zk5jb0psRWNWMFZnM3JWVlFsVU9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8yOTRmYTEtZTkzOC00Y2QyLTlhODktMjkwNjJlODcwYjY0 LzEvOGl2dFB6Zk5jb0psRWNWMFZnM3JWVlFsVU9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHhc46gz pcyM1GWSHBQq2w7urcud89+iD/4nwKQagXmnIQNjI0dWEjHTj7Uz2DZyv1IDWekm 8TSd8euVnayUeKT5UGJKtbKw2QjcATuhWKeqPhkchtUC2voePAQLM6b68/Mv8Qg1 m88MIAJYd/V/KnEHoxy8NL48Zs7fVTmQ2I9jI2JDr6Qw2B+Ptyex1lUALdEAzkKa 4baT+r7qy2z38tZiOIC72NprVqgiXTAsF7bEjI+7Idp52sQ2CJICfgGFAHJSmj0P ki9Es+W4kctIQiw6d/Dsy7dIPaVJibdwQpphZ9JUfOkTF8L5S+WVBFcAKzcd438d PAue2NvBLjLvqg== -----END CERTIFICATE-----Generated at Wed Dec 17 04:19:04 2025 by rpki-client