This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft File: 8bv5vuUx897i0Du_Tmnvgu7bma8.mft (raw, json) Hash identifier: YEzHlU1otdRin0d9jx5xAVff48hoj/QrtafBS+SESmY= Subject key identifier: AB:A9:5D:D0:13:37:56:FD:07:2C:6B:E5:3A:97:B9:93:DA:96:5C:57 Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF Certificate issuer: /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af Certificate serial: 019B3A8FFC4224FE2718CB2FED8C09D0D93D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft Manifest number: 1331 Signing time: Sat 20 Dec 2025 07:01:13 +0000 Manifest this update: Sat 20 Dec 2025 07:01:13 +0000 Manifest next update: Sun 21 Dec 2025 07:01:13 +0000 Files and hashes: 1: 0tRdpRIVKa8GC5rndgVUBjWyq_0.roa (hash: zQ8BfDuwqWf4BKhuE29aPhx2YBI5m36iLFxsbczWouw=) 2: 8bv5vuUx897i0Du_Tmnvgu7bma8.crl (hash: VHwD7MlBCQoN8gW6ZwlnJbgdM2kOQ0MEs2JYCNcTWf0=) 3: MkYvLYpqbrY1k1hziBPcgNzDk5A.roa (hash: 9jZ4rUSHtTJBWwTiSaqDWjUP8V/ZrhGAYaJndS1KB3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:fc:42:24:fe:27:18:cb:2f:ed:8c:09:d0:d9:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af Validity Not Before: Dec 20 07:01:13 2025 GMT Not After : Dec 21 07:01:13 2025 GMT Subject: CN=aba95dd0133756fd072c6be53a97b993da965c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9c:3a:85:fc:3d:f4:68:86:d0:68:cc:7b:0e: 09:1a:44:40:14:ec:c2:a1:77:29:13:86:ec:a6:86: aa:12:fb:34:a6:58:2a:2f:60:e7:fe:55:67:06:ef: 8c:14:38:99:da:0c:c3:b9:11:ab:5f:28:fd:58:27: 4c:18:23:e1:c5:10:23:ca:34:b9:65:5d:55:a0:92: 28:2f:dd:25:bb:f9:0b:56:f9:7a:e0:bf:18:0b:91: 06:51:38:06:de:59:67:90:75:7d:cf:08:3c:6c:78: 46:8e:80:64:8f:06:73:e5:e1:9d:44:c4:69:e2:0e: b6:26:f8:6f:6f:b4:47:13:c8:99:8a:b2:39:2e:e7: 21:12:83:7f:99:a0:b7:9c:6e:fa:40:de:f2:54:d3: 3e:03:c8:8b:91:c0:dd:49:3f:3c:20:c4:6a:14:56: d2:f5:37:53:c5:b3:4b:49:75:4f:64:33:94:9c:6d: c6:9c:07:f3:37:05:4f:26:8e:73:06:bc:a2:b7:f7: 1f:56:b7:af:ad:7a:12:ad:96:85:56:10:14:82:29: 27:14:6e:82:87:a5:38:59:2a:bd:86:02:26:43:63: 87:de:ef:4c:ed:ae:ba:c7:f5:b4:ef:6b:a7:9d:4b: 32:82:19:1e:e7:41:21:41:d5:ea:6c:07:c9:d4:ea: 62:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A9:5D:D0:13:37:56:FD:07:2C:6B:E5:3A:97:B9:93:DA:96:5C:57 X509v3 Authority Key Identifier: keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:58:c0:4c:42:45:04:9a:ec:9f:48:26:f4:07:48:d4:37:be: 04:73:f0:f2:a3:68:6f:02:8c:6e:43:a2:a8:8e:07:ae:d5:33: 7a:9b:b1:0a:3e:0c:4f:32:77:bf:b7:40:2d:06:be:14:39:44: 97:c0:91:48:a8:bc:82:54:c0:bd:36:c2:a0:b5:b7:6f:6b:cd: fb:ba:4d:45:c0:87:02:80:42:5c:72:71:fb:02:89:6f:83:f0: d2:7e:2d:3a:36:95:77:d7:f9:c8:98:6f:22:ed:27:41:cb:12: db:48:e2:62:7b:60:ac:7f:a7:c9:1b:7f:8e:67:42:15:d2:96: a0:4a:f4:c8:0e:23:44:2a:16:17:37:4f:cf:1b:0b:e6:e7:19: ef:29:69:ad:5b:80:f0:98:b4:d0:bd:e8:73:f7:fd:0f:93:43: 0d:a9:25:5e:aa:9d:50:bf:62:00:93:2e:4a:d4:98:26:f4:5c: 91:82:f5:f8:dd:c8:e6:1f:3a:67:9f:da:13:0a:69:1b:f1:92: 92:a6:c7:50:a9:d9:de:59:71:e0:2a:3a:3d:e0:e0:89:87:79: fc:ae:23:6d:7d:7c:76:88:21:05:8c:93:61:2f:bc:18:a0:75: 1d:2b:f8:1b:6d:02:47:67:22:48:f6:78:74:18:45:60:f9:9c: bd:50:93:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j/xCJP4nGMsv7YwJ0Nk9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYmJmOWJlZTUzMWYzZGVlMmQwM2JiZjRlNjllZjgyZWVk Yjk5YWYwHhcNMjUxMjIwMDcwMTEzWhcNMjUxMjIxMDcwMTEzWjAzMTEwLwYDVQQD EyhhYmE5NWRkMDEzMzc1NmZkMDcyYzZiZTUzYTk3Yjk5M2RhOTY1YzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZw6hfw99GiG0GjMew4JGkRAFOzC oXcpE4bspoaqEvs0plgqL2Dn/lVnBu+MFDiZ2gzDuRGrXyj9WCdMGCPhxRAjyjS5 ZV1VoJIoL90lu/kLVvl64L8YC5EGUTgG3llnkHV9zwg8bHhGjoBkjwZz5eGdRMRp 4g62Jvhvb7RHE8iZirI5LuchEoN/maC3nG76QN7yVNM+A8iLkcDdST88IMRqFFbS 9TdTxbNLSXVPZDOUnG3GnAfzNwVPJo5zBryit/cfVrevrXoSrZaFVhAUgiknFG6C h6U4WSq9hgImQ2OH3u9M7a66x/W072unnUsyghke50EhQdXqbAfJ1OpirwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKupXdATN1b9Byxr5TqXuZPallxXMB8GA1UdIwQY MBaAFPG7+b7lMfPe4tA7v05p74Lu25mvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGJ2NXZ1VXg4OTdpMER1X1RtbnZndTdibWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8zZjExMGItZGVkYi00OTBmLTllNjYt NmZhZDA4YWEyMGVlLzEvOGJ2NXZ1VXg4OTdpMER1X1RtbnZndTdibWE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8zZjExMGItZGVkYi00OTBmLTllNjYtNmZhZDA4YWEyMGVl LzEvOGJ2NXZ1VXg4OTdpMER1X1RtbnZndTdibWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArVjATEJF BJrsn0gm9AdI1De+BHPw8qNobwKMbkOiqI4HrtUzepuxCj4MTzJ3v7dALQa+FDlE l8CRSKi8glTAvTbCoLW3b2vN+7pNRcCHAoBCXHJx+wKJb4Pw0n4tOjaVd9f5yJhv Iu0nQcsS20jiYntgrH+nyRt/jmdCFdKWoEr0yA4jRCoWFzdPzxsL5ucZ7ylprVuA 8Ji00L3oc/f9D5NDDaklXqqdUL9iAJMuStSYJvRckYL1+N3I5h86Z5/aEwppG/GS kqbHUKnZ3llx4Co6PeDgiYd5/K4jbX18doghBYyTYS+8GKB1HSv4G20CR2ciSPZ4 dBhFYPmcvVCTaA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:49:07 2025 by rpki-client