This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft File: B8QNcBYPMIZCEpobcq5a5S24g8Q.mft (raw, json) Hash identifier: PCNL46uHbo9+GkHxEDjp0CEN5g+zb2wRYWZSLQQJjOA= Subject key identifier: D1:6C:71:E4:57:C3:CA:C5:80:0D:B4:8C:9A:4A:01:E7:84:69:28:1F Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4 Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4 Certificate serial: 019B3DC7A4849A6D7AB670969DAE7EBF948C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft Manifest number: 1047 Signing time: Sat 20 Dec 2025 22:00:52 +0000 Manifest this update: Sat 20 Dec 2025 22:00:52 +0000 Manifest next update: Sun 21 Dec 2025 22:00:52 +0000 Files and hashes: 1: B8QNcBYPMIZCEpobcq5a5S24g8Q.crl (hash: 5xUPYIOYU0nwOTwxlD50LWYe7CkB/W7kV3HFzV4oD+Y=) 2: FrqlWltvg2IIueyy45ogVbfzXOI.roa (hash: I5FtBNSL1o5XSBQN3V8eqj4CiYkfCwGhk95ch/7f1y0=) 3: w7QCmizrQXeuidochTL3wPaTPwQ.roa (hash: H6wbvBF9uFQ8IN4rm+CScPncC9WaN8oR2hYLVqdaZWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:a4:84:9a:6d:7a:b6:70:96:9d:ae:7e:bf:94:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4 Validity Not Before: Dec 20 22:00:52 2025 GMT Not After : Dec 21 22:00:52 2025 GMT Subject: CN=d16c71e457c3cac5800db48c9a4a01e78469281f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c5:ef:08:dd:ca:44:58:82:30:4c:b6:d3:9f: 49:db:90:c4:56:b2:83:76:9d:88:9f:ca:42:36:e1: f2:4d:14:d8:f9:8b:f1:72:e1:b4:0a:b2:ca:2b:f4: 13:1d:d8:bb:aa:28:db:fb:24:5f:ae:d2:03:60:c9: 25:f5:03:be:7a:a0:bc:fc:5d:15:30:9a:a7:8e:bb: f4:2b:87:4a:02:f4:88:ec:c0:a7:aa:13:87:8d:7a: ce:9b:d2:87:86:a5:62:21:e2:cb:86:e0:ae:ed:f2: cd:01:33:de:d4:df:d2:e7:6a:f2:b3:f6:49:3b:f0: bb:c1:29:a2:51:6b:da:3d:cb:0c:03:46:5a:f2:c0: 6b:dd:4c:a3:b0:50:3b:e1:5d:0e:d1:e0:b3:fa:2b: af:a0:01:5f:94:ea:f2:70:59:1b:68:30:5a:92:5f: 23:65:5b:7a:10:5d:b2:10:4e:83:fd:4e:cf:7e:09: fa:a6:cd:2e:6e:35:a8:5d:97:76:b1:54:96:95:11: 66:21:2a:08:3b:dc:8d:ab:55:3f:2f:d6:e1:74:2e: c2:78:2e:85:1b:62:43:00:15:ea:b7:5f:f3:fd:88: a8:ef:8b:33:aa:a8:50:cf:ca:cd:2e:26:22:15:0a: 58:8a:59:4b:52:c5:af:dc:02:b2:d8:73:68:3a:28: 62:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6C:71:E4:57:C3:CA:C5:80:0D:B4:8C:9A:4A:01:E7:84:69:28:1F X509v3 Authority Key Identifier: keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:1a:cf:a9:c4:49:27:89:00:6b:3c:ca:69:28:ad:48:fe:91: 13:87:7a:c5:82:2d:6b:04:1c:60:88:3a:a6:78:5b:8d:ed:aa: 0d:d1:7e:ac:38:8e:99:d9:aa:2f:c7:f4:8d:e2:22:9a:d8:f2: 1e:6b:ba:c1:85:af:30:9b:c8:d2:be:cf:b8:94:20:3b:3c:7c: 3c:d2:62:b1:6f:56:93:64:49:b0:c9:12:bf:8f:4c:41:40:2b: 49:b7:26:72:10:5d:d1:7a:a4:9b:21:d8:84:51:15:57:fe:d1: 14:69:3d:81:17:cd:8c:97:0c:12:43:1b:4b:ea:bf:79:a7:5d: c2:37:54:2a:bc:b0:71:d3:2b:47:64:8e:cf:54:c8:66:5e:69: 0d:91:9b:3d:8a:23:35:ac:8b:da:c4:03:aa:08:bf:4d:5c:9f: b5:11:c7:f3:e3:cc:49:97:5b:17:d6:3d:24:6a:9b:85:7f:90: 95:29:02:3c:32:22:4d:e7:d8:f9:6e:20:26:9a:d7:4f:44:c3: 2d:9f:fa:eb:01:bf:68:4e:f9:6f:94:9e:ca:40:a8:97:84:7d: 85:74:95:f5:45:9c:18:51:77:5b:60:e6:64:39:8d:c7:f3:17: 94:a2:31:2f:e8:ba:c0:94:89:34:e7:95:02:14:f2:0e:58:77: e7:51:8c:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x6SEmm16tnCWna5+v5SMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YzQwZDcwMTYwZjMwODY0MjEyOWExYjcyYWU1YWU1MmRi ODgzYzQwHhcNMjUxMjIwMjIwMDUyWhcNMjUxMjIxMjIwMDUyWjAzMTEwLwYDVQQD EyhkMTZjNzFlNDU3YzNjYWM1ODAwZGI0OGM5YTRhMDFlNzg0NjkyODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcXvCN3KRFiCMEy2059J25DEVrKD dp2In8pCNuHyTRTY+YvxcuG0CrLKK/QTHdi7qijb+yRfrtIDYMkl9QO+eqC8/F0V MJqnjrv0K4dKAvSI7MCnqhOHjXrOm9KHhqViIeLLhuCu7fLNATPe1N/S52rys/ZJ O/C7wSmiUWvaPcsMA0Za8sBr3UyjsFA74V0O0eCz+iuvoAFflOrycFkbaDBakl8j ZVt6EF2yEE6D/U7Pfgn6ps0ubjWoXZd2sVSWlRFmISoIO9yNq1U/L9bhdC7CeC6F G2JDABXqt1/z/Yio74szqqhQz8rNLiYiFQpYillLUsWv3AKy2HNoOihiCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFsceRXw8rFgA20jJpKAeeEaSgfMB8GA1UdIwQY MBaAFAfEDXAWDzCGQhKaG3KuWuUtuIPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUt OTdkY2JiMDA4NmUzLzEvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUtOTdkY2JiMDA4NmUz LzEvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRrPqcRJ J4kAazzKaSitSP6RE4d6xYItawQcYIg6pnhbje2qDdF+rDiOmdmqL8f0jeIimtjy Hmu6wYWvMJvI0r7PuJQgOzx8PNJisW9Wk2RJsMkSv49MQUArSbcmchBd0XqkmyHY hFEVV/7RFGk9gRfNjJcMEkMbS+q/eaddwjdUKrywcdMrR2SOz1TIZl5pDZGbPYoj NayL2sQDqgi/TVyftRHH8+PMSZdbF9Y9JGqbhX+QlSkCPDIiTefY+W4gJprXT0TD LZ/66wG/aE75b5SeykCol4R9hXSV9UWcGFF3W2DmZDmNx/MXlKIxL+i6wJSJNOeV AhTyDlh351GMFQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:57:20 2025 by rpki-client