This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft File: 8YCPGr745rWc1DWaa0SB_HyWMdE.mft (raw, json) Hash identifier: z7HeUTT32u1g16avxTGIKyowRABu9gpqOTChWKWijmo= Subject key identifier: 18:8D:40:68:39:8A:DE:19:B5:95:F2:E7:62:C3:F3:2F:CB:B9:AF:2E Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1 Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1 Certificate serial: 019B397D86CBDAF70559F4843100D3ACBAF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 02:01:26 +0000 Manifest this update: Sat 20 Dec 2025 02:01:26 +0000 Manifest next update: Sun 21 Dec 2025 02:01:26 +0000 Files and hashes: 1: 1-pC8r9w9eHPboI6UQ9SPxm6C-JI.roa (hash: 4/hN4BZtPakrI9kWgmVlEfI4CA36mWdfywhv2fUv0zc=) 2: 8YCPGr745rWc1DWaa0SB_HyWMdE.crl (hash: w7oWds7uWdUg139k1rJj8zjhnGEfTua/SDpBOx4AQsw=) 3: ewa-i1ZX3x5sx5ypquiCHGcdBZY.roa (hash: oyaoG9o+HMw8UbuIoU2MjdUmgeJrqz7dNC1WMoDWkeM=) 4: f3N3ZaRV0bOdlX13-KIGTXiHS-c.roa (hash: G7D6BUoaKLhAlCeuz2Rq/Eb+8hPzua6dwGFSHRCAqy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:86:cb:da:f7:05:59:f4:84:31:00:d3:ac:ba:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1 Validity Not Before: Dec 20 02:01:26 2025 GMT Not After : Dec 21 02:01:26 2025 GMT Subject: CN=188d4068398ade19b595f2e762c3f32fcbb9af2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c0:ea:cc:e9:15:44:b8:1b:cd:1d:a7:5e:a6: 81:d4:a4:6e:13:13:90:4c:c7:a8:ec:b9:07:69:7f: 88:d9:0d:06:02:73:01:73:42:96:cc:e9:74:b8:61: 28:72:85:41:fc:24:1f:2e:d2:86:e9:62:74:d4:45: 11:35:9b:57:07:9e:7a:2c:b3:be:d9:73:2f:12:e9: 8d:c2:3e:f7:9c:a6:66:5c:5a:81:3d:d5:a4:d8:db: 16:5a:4f:30:46:e9:30:ff:1a:d4:5b:c2:c1:ae:cd: 2e:d9:c1:22:30:fd:e0:fd:92:91:3e:b3:95:47:e0: 54:49:5e:fc:11:3d:00:7c:28:fb:81:01:0a:4e:ff: e0:c5:bb:bc:36:31:d2:99:62:95:3f:e7:fb:4b:a8: 4b:ae:33:09:df:1f:e7:37:16:59:84:71:99:a8:a4: f3:78:4a:5b:cf:44:88:de:ce:52:37:c4:0c:54:88: 71:57:06:16:88:4b:d2:c7:74:92:95:51:30:1a:ac: 6b:1e:8a:5d:cf:5c:d5:e9:88:15:f0:66:54:eb:7a: 23:17:ab:b8:01:6a:52:68:3b:14:ca:67:37:d2:3f: 18:e7:c1:05:83:da:50:3c:2b:e6:19:31:9c:da:3d: 30:a3:49:a8:d0:45:bf:9b:f3:81:eb:3b:aa:f6:45: d1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8D:40:68:39:8A:DE:19:B5:95:F2:E7:62:C3:F3:2F:CB:B9:AF:2E X509v3 Authority Key Identifier: keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:5c:c6:4a:1e:6d:d5:86:b2:d8:62:7b:63:06:68:1d:b8:4d: cb:34:a8:f5:54:1b:71:13:39:44:0c:08:a2:94:2e:a2:b4:15: 9a:ff:ce:eb:44:04:4f:55:f0:bb:57:e4:63:37:3c:4c:5b:b0: 49:71:49:b3:a7:15:aa:45:4a:10:50:58:ed:d2:12:fa:61:b7: 5b:96:7e:67:55:eb:44:f9:62:a7:0b:f9:34:af:2f:8b:1a:21: fc:69:be:a1:92:22:51:d4:11:7d:83:f9:0e:c6:eb:2f:ff:0b: 8f:ff:5f:fc:cf:e4:d6:0c:67:b5:3d:65:96:7b:c1:94:e2:3a: c8:98:1a:ef:57:a5:6d:ed:a9:97:61:93:ba:58:89:78:44:d3: 08:97:99:20:18:d3:64:7f:9d:7f:a5:56:59:43:c0:7d:74:f8: 51:0a:08:11:01:5c:dc:40:70:75:b7:07:66:50:54:f3:b2:49: 89:68:5c:f9:bb:2d:57:df:bc:02:8a:c1:8b:e6:76:af:4e:4b: 91:22:99:06:0f:28:7c:a7:64:3d:7e:59:20:75:cd:6f:08:f7: 97:ea:14:32:e9:e7:b2:2f:e3:c0:94:9e:b6:73:c9:5b:cb:3d: a1:fa:8a:78:c0:e6:45:3e:71:b4:11:14:2d:87:1e:35:85:4d: 21:a1:05:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fYbL2vcFWfSEMQDTrLryMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxODA4ZjFhYmVmOGU2YjU5Y2Q0MzU5YTZiNDQ4MWZjN2M5 NjMxZDEwHhcNMjUxMjIwMDIwMTI2WhcNMjUxMjIxMDIwMTI2WjAzMTEwLwYDVQQD EygxODhkNDA2ODM5OGFkZTE5YjU5NWYyZTc2MmMzZjMyZmNiYjlhZjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsDqzOkVRLgbzR2nXqaB1KRuExOQ TMeo7LkHaX+I2Q0GAnMBc0KWzOl0uGEocoVB/CQfLtKG6WJ01EURNZtXB556LLO+ 2XMvEumNwj73nKZmXFqBPdWk2NsWWk8wRukw/xrUW8LBrs0u2cEiMP3g/ZKRPrOV R+BUSV78ET0AfCj7gQEKTv/gxbu8NjHSmWKVP+f7S6hLrjMJ3x/nNxZZhHGZqKTz eEpbz0SI3s5SN8QMVIhxVwYWiEvSx3SSlVEwGqxrHopdz1zV6YgV8GZU63ojF6u4 AWpSaDsUymc30j8Y58EFg9pQPCvmGTGc2j0wo0mo0EW/m/OB6zuq9kXRUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiNQGg5it4ZtZXy52LD8y/Lua8uMB8GA1UdIwQY MBaAFPGAjxq++Oa1nNQ1mmtEgfx8ljHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYt MDMwNzdlMzdjNjFhLzEvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYtMDMwNzdlMzdjNjFh LzEvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFzGSh5t 1Yay2GJ7YwZoHbhNyzSo9VQbcRM5RAwIopQuorQVmv/O60QET1Xwu1fkYzc8TFuw SXFJs6cVqkVKEFBY7dIS+mG3W5Z+Z1XrRPlipwv5NK8vixoh/Gm+oZIiUdQRfYP5 DsbrL/8Lj/9f/M/k1gxntT1llnvBlOI6yJga71elbe2pl2GTuliJeETTCJeZIBjT ZH+df6VWWUPAfXT4UQoIEQFc3EBwdbcHZlBU87JJiWhc+bstV9+8AorBi+Z2r05L kSKZBg8ofKdkPX5ZIHXNbwj3l+oUMunnsi/jwJSetnPJW8s9ofqKeMDmRT5xtBEU LYceNYVNIaEFjg== -----END CERTIFICATE-----Generated at Sat Dec 20 05:01:07 2025 by rpki-client