This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft File: 8yf6fhlHLlg7cgk2w50P0kJmGf0.mft (raw, json) Hash identifier: /Yq6gILLxrhU2W1gNCrL2eiKGX9brE9kh01JqMQBJMk= Subject key identifier: 38:B9:08:36:F6:E1:61:60:96:0D:6F:93:D1:55:C7:85:9E:67:12:6A Authority key identifier: F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD Certificate issuer: /CN=f327fa7e19472e583b720936c39d0fd2426619fd Certificate serial: 019B44389BB8926886D51409383A6C2BB91E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft Manifest number: 0B36 Signing time: Mon 22 Dec 2025 04:01:59 +0000 Manifest this update: Mon 22 Dec 2025 04:01:59 +0000 Manifest next update: Tue 23 Dec 2025 04:01:59 +0000 Files and hashes: 1: 8yf6fhlHLlg7cgk2w50P0kJmGf0.crl (hash: GIUxwpVVkeZpRkwre5bpzK28BdOFbHNSI1rtd4RxoeU=) 2: jteACDbaYC2GMTFvAHtj6JRaDvo.roa (hash: FyyB216euYUAYG4P0lTXHk9/k4BDveAtrAV0IpAsB3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:9b:b8:92:68:86:d5:14:09:38:3a:6c:2b:b9:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f327fa7e19472e583b720936c39d0fd2426619fd Validity Not Before: Dec 22 04:01:59 2025 GMT Not After : Dec 23 04:01:59 2025 GMT Subject: CN=38b90836f6e16160960d6f93d155c7859e67126a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e9:76:43:87:66:d6:01:ca:54:97:37:2b:b8: 1c:d9:83:ca:0b:af:fe:6f:5f:d7:55:98:6f:24:15: 0f:31:ab:d8:d7:f9:8a:3c:bf:29:db:f3:d9:9d:48: ad:08:d7:b2:3d:9e:31:98:03:d3:84:c6:44:7b:6b: f0:c4:5d:21:27:7c:93:58:c1:21:26:66:d7:99:0d: 47:5c:7d:a7:f3:24:13:5e:a7:72:95:db:f1:2f:c1: bb:6c:e4:a5:31:4c:06:53:91:ed:11:00:e5:df:be: 46:b1:79:95:42:7e:68:ca:94:99:ab:37:e6:3f:68: b4:35:12:76:f7:af:24:17:f5:c3:a6:5c:23:57:99: 53:3a:58:c9:67:30:2e:6b:3b:e1:82:2d:2b:a8:42: 60:d7:62:9f:46:80:ff:a8:73:42:ad:bf:2d:7d:72: 9a:4d:6c:8c:75:28:2e:f8:da:e2:a2:5b:2a:06:69: 33:3e:ee:f2:40:d5:df:8b:a5:97:f3:f3:06:a2:f7: bc:eb:2a:87:45:8b:c7:a6:7d:84:06:20:59:2c:74: d2:d2:67:85:db:bd:d1:a6:0a:36:f0:2c:62:a3:34: 3b:86:3d:19:5b:72:8c:c5:b1:7d:01:b8:24:9a:1c: ad:00:0b:41:5d:7f:fe:0a:96:eb:43:c4:39:a7:04: e3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B9:08:36:F6:E1:61:60:96:0D:6F:93:D1:55:C7:85:9E:67:12:6A X509v3 Authority Key Identifier: keyid:F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:db:e6:f6:ca:00:be:9e:56:92:fa:c9:ca:7b:ce:fd:c8:93: cf:a1:4d:6e:31:1b:0f:81:ce:79:04:b2:fc:d9:49:49:c5:97: 1d:73:80:04:82:db:a1:1b:41:8b:2e:6d:b2:85:67:56:1a:4f: 51:83:47:e0:4b:1e:a2:50:05:cc:b8:01:ff:f9:0c:bd:44:45: a0:7f:d2:f2:cf:76:af:13:4c:b1:25:23:0b:14:f3:39:0c:45: b5:b6:e4:23:3c:a7:6c:87:a0:3c:d7:60:ee:44:41:cb:fb:47: 08:48:61:7e:f8:3d:4a:51:2a:96:0f:29:94:b7:d5:05:ae:2b: c5:f8:ee:ad:07:d8:70:96:b1:d2:75:6f:57:29:6d:03:ab:9f: c0:93:8c:c7:1d:d5:ea:11:b1:f0:fb:a2:e7:d8:0b:9c:34:1f: cb:86:90:c6:eb:c2:6e:83:4c:9a:5b:08:6c:c6:3e:c2:92:82: d1:39:9f:89:6b:9c:8e:19:9a:2a:66:e2:47:da:f0:d1:aa:a1: 02:5c:ef:32:55:71:b8:7c:54:19:71:00:58:e7:05:72:9a:ab: 5a:69:f9:dd:a2:8e:2b:0f:74:0f:fa:16:bc:8e:b5:c4:ca:3d: c4:14:c7:28:9c:6f:92:e3:10:c2:20:b1:15:df:90:06:d3:f1: 32:7a:48:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOJu4kmiG1RQJODpsK7keMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjdmYTdlMTk0NzJlNTgzYjcyMDkzNmMzOWQwZmQyNDI2 NjE5ZmQwHhcNMjUxMjIyMDQwMTU5WhcNMjUxMjIzMDQwMTU5WjAzMTEwLwYDVQQD EygzOGI5MDgzNmY2ZTE2MTYwOTYwZDZmOTNkMTU1Yzc4NTllNjcxMjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+l2Q4dm1gHKVJc3K7gc2YPKC6/+ b1/XVZhvJBUPMavY1/mKPL8p2/PZnUitCNeyPZ4xmAPThMZEe2vwxF0hJ3yTWMEh JmbXmQ1HXH2n8yQTXqdyldvxL8G7bOSlMUwGU5HtEQDl375GsXmVQn5oypSZqzfm P2i0NRJ2968kF/XDplwjV5lTOljJZzAuazvhgi0rqEJg12KfRoD/qHNCrb8tfXKa TWyMdSgu+NriolsqBmkzPu7yQNXfi6WX8/MGove86yqHRYvHpn2EBiBZLHTS0meF 273Rpgo28CxiozQ7hj0ZW3KMxbF9AbgkmhytAAtBXX/+CpbrQ8Q5pwTjMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDi5CDb24WFglg1vk9FVx4WeZxJqMB8GA1UdIwQY MBaAFPMn+n4ZRy5YO3IJNsOdD9JCZhn9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlmNmZobEhMbGc3Y2drMnc1MFAwa0ptR2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mODFhZWItMTgxYy00NWUxLTk5Y2Yt MjNjMTYyNjNjZjNiLzEvOHlmNmZobEhMbGc3Y2drMnc1MFAwa0ptR2YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mODFhZWItMTgxYy00NWUxLTk5Y2YtMjNjMTYyNjNjZjNi LzEvOHlmNmZobEhMbGc3Y2drMnc1MFAwa0ptR2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuNvm9soA vp5WkvrJynvO/ciTz6FNbjEbD4HOeQSy/NlJScWXHXOABILboRtBiy5tsoVnVhpP UYNH4EseolAFzLgB//kMvURFoH/S8s92rxNMsSUjCxTzOQxFtbbkIzynbIegPNdg 7kRBy/tHCEhhfvg9SlEqlg8plLfVBa4rxfjurQfYcJax0nVvVyltA6ufwJOMxx3V 6hGx8Pui59gLnDQfy4aQxuvCboNMmlsIbMY+wpKC0TmfiWucjhmaKmbiR9rw0aqh AlzvMlVxuHxUGXEAWOcFcpqrWmn53aKOKw90D/oWvI61xMo9xBTHKJxvkuMQwiCx Fd+QBtPxMnpI0Q== -----END CERTIFICATE-----Generated at Mon Dec 22 05:35:29 2025 by rpki-client