This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft File: 8C4yJOPjKSgZJijSZIfVAPJwd2U.mft (raw, json) Hash identifier: mc9Cm+WpTtonY5u6axVDrbkpqLpYWyoJEXc0ypzRpt4= Subject key identifier: B7:7E:76:79:0E:F2:71:E4:60:80:93:40:A0:8C:FE:4E:EE:EC:9A:C0 Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65 Certificate issuer: /CN=f02e3224e3e32928192628d26487d500f2707765 Certificate serial: 019B5A88B47F77B3F20B318A13E58470F255 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 12:01:06 +0000 Manifest this update: Fri 26 Dec 2025 12:01:06 +0000 Manifest next update: Sat 27 Dec 2025 12:01:06 +0000 Files and hashes: 1: 3-RywYSjpl9yuamrGaiHfk5Mz6o.roa (hash: khi3zX71hfk8spUUIwuIJwDTfe1y2tzgOMplAgujSag=) 2: 8C4yJOPjKSgZJijSZIfVAPJwd2U.crl (hash: /fKq5XfC1sxOvabmI3RSzYiRgt0US7Y0DAjqw5yBjSU=) 3: qmufYg21c7b0gdjuY1ziryDKce0.roa (hash: cPNs19EWQmBAO/qKhHL4tQL9v8RMF/40vmmVOD5n7Ds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:b4:7f:77:b3:f2:0b:31:8a:13:e5:84:70:f2:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02e3224e3e32928192628d26487d500f2707765 Validity Not Before: Dec 26 12:01:06 2025 GMT Not After : Dec 27 12:01:06 2025 GMT Subject: CN=b77e76790ef271e460809340a08cfe4eeeec9ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c5:b0:5a:ea:08:80:d7:2e:0e:a5:c9:b5:ad: 3c:ff:a6:36:7c:1c:02:e0:3b:34:26:6e:e7:68:c4: e3:3e:fd:eb:a8:08:25:3a:68:f2:5c:4a:fb:30:bc: 78:56:e2:bd:57:4d:c5:c6:d0:fa:c7:a2:26:f2:48: 11:d6:d1:92:62:f9:0c:30:9d:b8:be:30:0f:52:08: 52:f7:44:23:79:29:de:38:0a:0c:2d:06:d2:34:b9: d7:c7:be:dd:08:40:66:11:19:55:b2:76:86:f3:81: 99:ec:f6:d1:97:38:3c:c9:df:08:ad:7d:cd:49:45: b5:9f:85:07:63:d2:44:1c:a3:b6:d2:36:a5:59:14: cc:a6:f5:f2:3a:68:1d:6d:56:95:d9:60:4c:d0:cc: c6:35:ed:52:43:1e:ff:ca:8b:fc:04:49:07:b4:fd: 4c:56:0b:aa:24:5c:98:0a:1e:63:0f:17:16:5f:1c: 4c:9d:e9:2c:84:43:2f:31:0a:ed:7f:50:c8:ac:22: 65:c8:a7:24:ef:d7:85:a5:3b:53:fd:6f:e7:f3:f6: 9a:09:ea:b7:78:ee:33:07:59:55:17:b0:73:8a:f1: eb:6d:56:51:eb:d2:90:e5:61:ca:c4:66:f1:3e:ac: db:6a:26:d7:a7:6b:03:f5:d9:01:9a:1a:5e:2b:a4: 93:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7E:76:79:0E:F2:71:E4:60:80:93:40:A0:8C:FE:4E:EE:EC:9A:C0 X509v3 Authority Key Identifier: keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:cc:31:8d:8c:17:39:5b:7a:23:a7:d3:73:18:54:d4:bc:43: 1d:dc:29:c6:bf:c8:28:d9:bc:e6:04:c3:b2:35:88:92:3d:73: b7:d4:a1:71:49:25:ac:7e:84:7b:3c:44:b2:e4:9c:d3:5f:57: a7:7b:c3:e5:cb:fa:48:4d:46:6e:74:4f:a4:de:5c:4c:e7:ce: 87:5d:4f:5c:1c:0e:48:cb:64:9e:a0:62:40:fb:14:bc:13:1f: ce:50:bb:43:f1:40:a8:71:2a:c2:4e:00:2b:61:6e:ad:d9:95: c0:6e:51:26:07:63:75:20:90:fe:56:10:6d:c0:bd:2c:00:c1: d6:00:47:3c:fe:32:80:e5:4a:65:6a:76:02:65:a5:e9:4c:b4: 06:62:63:20:6b:dc:df:f0:ae:77:70:39:67:96:cf:f2:94:ba: af:8c:df:a2:67:c0:8e:28:0f:8e:6e:4a:04:01:12:bd:33:8c: ad:6f:2c:28:ee:b4:c8:60:b0:b6:ec:ab:ac:d5:58:16:da:14: c8:d4:9f:57:41:82:7b:93:9c:4b:79:d2:88:a0:52:0d:f2:32: 2f:ae:ac:97:b4:cc:5e:50:ea:fb:3c:ba:25:aa:59:51:e6:1d: d9:be:f9:ec:c6:ae:ba:b2:79:67:e7:cc:6b:b1:8c:9f:53:50: 7a:49:3e:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiLR/d7PyCzGKE+WEcPJVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmUzMjI0ZTNlMzI5MjgxOTI2MjhkMjY0ODdkNTAwZjI3 MDc3NjUwHhcNMjUxMjI2MTIwMTA2WhcNMjUxMjI3MTIwMTA2WjAzMTEwLwYDVQQD EyhiNzdlNzY3OTBlZjI3MWU0NjA4MDkzNDBhMDhjZmU0ZWVlZWM5YWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcWwWuoIgNcuDqXJta08/6Y2fBwC 4Ds0Jm7naMTjPv3rqAglOmjyXEr7MLx4VuK9V03FxtD6x6Im8kgR1tGSYvkMMJ24 vjAPUghS90QjeSneOAoMLQbSNLnXx77dCEBmERlVsnaG84GZ7PbRlzg8yd8IrX3N SUW1n4UHY9JEHKO20jalWRTMpvXyOmgdbVaV2WBM0MzGNe1SQx7/yov8BEkHtP1M VguqJFyYCh5jDxcWXxxMnekshEMvMQrtf1DIrCJlyKck79eFpTtT/W/n8/aaCeq3 eO4zB1lVF7BzivHrbVZR69KQ5WHKxGbxPqzbaibXp2sD9dkBmhpeK6STvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLd+dnkO8nHkYICTQKCM/k7u7JrAMB8GA1UdIwQY MBaAFPAuMiTj4ykoGSYo0mSH1QDycHdlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEM0eUpPUGpLU2daSmlqU1pJZlZBUEp3ZDJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNjg4OTAtZDUwOS00NTFlLWI5ZWUt ZmI5OTUzYzA3ZjE1LzEvOEM0eUpPUGpLU2daSmlqU1pJZlZBUEp3ZDJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8yNjg4OTAtZDUwOS00NTFlLWI5ZWUtZmI5OTUzYzA3ZjE1 LzEvOEM0eUpPUGpLU2daSmlqU1pJZlZBUEp3ZDJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8wxjYwX OVt6I6fTcxhU1LxDHdwpxr/IKNm85gTDsjWIkj1zt9ShcUklrH6EezxEsuSc019X p3vD5cv6SE1GbnRPpN5cTOfOh11PXBwOSMtknqBiQPsUvBMfzlC7Q/FAqHEqwk4A K2FurdmVwG5RJgdjdSCQ/lYQbcC9LADB1gBHPP4ygOVKZWp2AmWl6Uy0BmJjIGvc 3/Cud3A5Z5bP8pS6r4zfomfAjigPjm5KBAESvTOMrW8sKO60yGCwtuyrrNVYFtoU yNSfV0GCe5OcS3nSiKBSDfIyL66sl7TMXlDq+zy6JapZUeYd2b757MauurJ5Z+fM a7GMn1NQekk+eQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:19 2025 by rpki-client