This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft File: 8jgjdZZpSOIWiOi6E4OkowngVi8.mft (raw, json) Hash identifier: GPk/I9Pt6bnMAVjFdw6PitrI8Ww/8zan/Vr23+9oH1E= Subject key identifier: 63:24:B4:62:69:F4:2E:A1:0B:D8:0E:9B:7E:42:72:E1:E2:83:98:DB Authority key identifier: F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F Certificate issuer: /CN=f2382375966948e21688e8ba1383a4a309e0562f Certificate serial: 019B2D0BD46F4ADF0D710FF76AC9C138BFE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 16:01:48 +0000 Manifest this update: Wed 17 Dec 2025 16:01:48 +0000 Manifest next update: Thu 18 Dec 2025 16:01:48 +0000 Files and hashes: 1: 8jgjdZZpSOIWiOi6E4OkowngVi8.crl (hash: uSggbi5CrQ4RMRpTZAhWP9bM5I01qLDM0t8/2G53By0=) 2: K1nEMmqR-bv_HJOMVOAQTlZLbDU.roa (hash: W5Jwdvi7etvP6GxGLNbBoK0ap2sodrYQoCXcswND0as=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:d4:6f:4a:df:0d:71:0f:f7:6a:c9:c1:38:bf:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2382375966948e21688e8ba1383a4a309e0562f Validity Not Before: Dec 17 16:01:48 2025 GMT Not After : Dec 18 16:01:48 2025 GMT Subject: CN=6324b46269f42ea10bd80e9b7e4272e1e28398db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:65:1c:ac:bd:1f:56:22:69:b0:a1:b7:e5:15: 7c:ab:aa:60:a4:7d:a6:3a:79:e1:e0:22:59:6d:04: f7:d6:34:b1:61:e7:17:09:78:2d:9c:71:c5:a5:9b: f2:69:82:80:37:62:63:0e:bb:38:98:e4:47:93:89: f5:17:58:5d:bf:21:e2:a9:08:3e:d5:f9:5b:4f:1c: d8:dc:30:bb:15:12:db:0c:2e:52:75:62:6e:cc:14: ab:6e:8c:30:de:08:c5:3c:04:0d:d7:f0:bd:bf:9d: f0:18:1b:56:38:13:eb:45:9f:a6:5d:93:62:2a:3f: 71:da:b0:b7:08:c3:09:0d:aa:f2:d5:43:41:9c:4b: 2a:c3:11:10:61:d9:2a:c3:0f:5d:14:e0:ed:17:5d: a1:25:df:b7:1f:0c:7c:6f:64:5f:69:b0:d0:d2:79: 2d:03:c2:c4:e0:83:73:b5:4d:5f:e7:15:fe:b3:3a: e7:eb:cf:da:0d:db:c7:35:46:5c:74:96:c0:c5:5f: e4:16:0d:a3:71:ca:5d:a5:29:27:1b:ad:53:f8:d8: 6e:a2:85:3a:5e:bf:e2:aa:96:6d:d6:b3:e9:0b:eb: b5:9b:3a:35:26:b8:35:df:27:ad:ad:cb:ed:df:d0: 7f:44:55:56:c8:28:21:26:4f:8c:f3:83:ff:16:e8: a0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:24:B4:62:69:F4:2E:A1:0B:D8:0E:9B:7E:42:72:E1:E2:83:98:DB X509v3 Authority Key Identifier: keyid:F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:9d:c0:1e:2d:d4:0d:27:a3:90:38:ce:67:1c:95:dd:54:75: 37:47:c3:41:72:a8:60:c3:4b:c3:da:89:aa:8a:dd:02:da:d7: 9a:21:1a:b3:5d:92:a0:86:66:a3:6d:43:dc:df:f5:94:a7:dd: e4:57:c0:4b:9b:d3:4b:20:86:43:69:25:05:91:40:c6:31:5c: 53:0d:36:73:aa:12:21:e2:65:f8:b5:86:85:7d:b4:a4:36:f9: 4c:71:47:eb:b2:5d:41:92:24:c2:13:99:eb:98:4e:6b:cd:7f: 72:c9:bc:28:0d:da:33:a5:b8:6e:88:c1:0d:75:25:77:67:95: e9:05:d1:24:f0:ed:eb:1a:5c:2e:98:df:e0:e8:e8:64:3d:2c: de:87:9b:a9:43:09:d0:27:79:50:f3:0e:2a:8e:02:fc:a0:f5: 2b:b7:3f:18:d5:2d:6c:71:c7:79:bc:2e:83:d0:6f:45:26:dc: 83:57:97:d4:62:5d:43:c1:a3:d6:94:89:79:56:aa:5c:7e:5d: 1e:1b:07:05:e4:d9:01:d2:c4:11:12:39:ab:59:a8:96:43:c9: 84:3b:57:13:3a:29:c7:22:9f:44:aa:af:f6:4f:f8:e2:0a:af: ac:34:38:76:c3:83:5b:1c:44:bc:17:12:f4:24:aa:23:74:86: 45:cc:4f:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC9RvSt8NcQ/3asnBOL/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMzgyMzc1OTY2OTQ4ZTIxNjg4ZThiYTEzODNhNGEzMDll MDU2MmYwHhcNMjUxMjE3MTYwMTQ4WhcNMjUxMjE4MTYwMTQ4WjAzMTEwLwYDVQQD Eyg2MzI0YjQ2MjY5ZjQyZWExMGJkODBlOWI3ZTQyNzJlMWUyODM5OGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGUcrL0fViJpsKG35RV8q6pgpH2m Onnh4CJZbQT31jSxYecXCXgtnHHFpZvyaYKAN2JjDrs4mORHk4n1F1hdvyHiqQg+ 1flbTxzY3DC7FRLbDC5SdWJuzBSrboww3gjFPAQN1/C9v53wGBtWOBPrRZ+mXZNi Kj9x2rC3CMMJDary1UNBnEsqwxEQYdkqww9dFODtF12hJd+3Hwx8b2RfabDQ0nkt A8LE4INztU1f5xX+szrn68/aDdvHNUZcdJbAxV/kFg2jccpdpSknG61T+NhuooU6 Xr/iqpZt1rPpC+u1mzo1Jrg13yetrcvt39B/RFVWyCghJk+M84P/FuigSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMktGJp9C6hC9gOm35CcuHig5jbMB8GA1UdIwQY MBaAFPI4I3WWaUjiFojouhODpKMJ4FYvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGpnamRaWnBTT0lXaU9pNkU0T2tvd25nVmk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hZDBmMWEtNmI5NC00ZTBkLThhNGEt ZDJmZDlmZmMzMWJmLzEvOGpnamRaWnBTT0lXaU9pNkU0T2tvd25nVmk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9hZDBmMWEtNmI5NC00ZTBkLThhNGEtZDJmZDlmZmMzMWJm LzEvOGpnamRaWnBTT0lXaU9pNkU0T2tvd25nVmk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZ3AHi3U DSejkDjOZxyV3VR1N0fDQXKoYMNLw9qJqordAtrXmiEas12SoIZmo21D3N/1lKfd 5FfAS5vTSyCGQ2klBZFAxjFcUw02c6oSIeJl+LWGhX20pDb5THFH67JdQZIkwhOZ 65hOa81/csm8KA3aM6W4bojBDXUld2eV6QXRJPDt6xpcLpjf4OjoZD0s3oebqUMJ 0Cd5UPMOKo4C/KD1K7c/GNUtbHHHebwug9BvRSbcg1eX1GJdQ8Gj1pSJeVaqXH5d HhsHBeTZAdLEERI5q1molkPJhDtXEzopxyKfRKqv9k/44gqvrDQ4dsODWxxEvBcS 9CSqI3SGRcxPPA== -----END CERTIFICATE-----Generated at Wed Dec 17 22:28:58 2025 by rpki-client