This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft File: 8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json) Hash identifier: TrvPCVGnnQowIGhgkAyZfUv1UV0k7qj0jHKb365Lthc= Subject key identifier: 91:71:78:D3:2C:22:FF:07:D8:CB:50:39:59:97:5A:4A:4B:2B:71:D7 Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae Certificate serial: 019B33E8C3329C570D6E58F407A5F6F0884C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft Manifest number: 0702 Signing time: Fri 19 Dec 2025 00:00:50 +0000 Manifest this update: Fri 19 Dec 2025 00:00:50 +0000 Manifest next update: Sat 20 Dec 2025 00:00:50 +0000 Files and hashes: 1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: 6zrl+dNdsK46gqYODT39LQpWSVQzGo+qAGKiyUAAnkU=) 2: yze2rcJ637RL8GZo48PGt4d8nY8.roa (hash: H8OFKVxMCjsZaNXr8DPY/I8jq0ZMaggP4bkjrXxk6OY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:c3:32:9c:57:0d:6e:58:f4:07:a5:f6:f0:88:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae Validity Not Before: Dec 19 00:00:50 2025 GMT Not After : Dec 20 00:00:50 2025 GMT Subject: CN=917178d32c22ff07d8cb503959975a4a4b2b71d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:37:81:82:80:4e:ee:3f:58:16:ad:78:c6:14: 1d:39:ec:09:b3:55:ff:be:40:37:25:44:03:36:f1: fe:f9:bd:f1:59:e3:40:20:c2:c0:c5:f3:2b:7e:39: 3f:8c:42:51:cb:39:4b:43:9c:a5:70:a4:ad:d1:5f: 68:73:7c:f7:86:f3:8d:5a:c0:75:75:ff:b1:7f:f4: d3:a7:fe:8a:ce:ef:30:32:39:2c:46:bd:5b:e1:eb: 07:3e:a7:a4:c5:1e:fd:cc:03:26:23:9a:37:3f:8b: 4a:6f:3f:1c:3b:e1:bc:7a:f0:20:3b:85:a1:fe:32: f5:72:ca:6f:ac:1a:2a:8e:ee:51:6f:15:55:87:1c: cf:af:af:0a:02:9a:e9:d0:cd:6f:8e:46:e4:3f:6e: 42:56:4a:40:3e:f7:d9:af:fe:1b:70:c7:b8:cc:ba: 9a:cb:7c:a6:8a:f2:c5:36:55:d0:ac:85:1b:57:8a: 2d:73:dc:97:5c:54:51:9e:61:37:bf:92:9f:a2:a6: 6d:06:40:db:19:33:fa:92:9e:fe:1c:58:e1:91:c4: c2:af:64:fa:c8:04:50:38:fa:a5:f3:f0:4f:13:db: aa:90:f1:6d:f6:a3:34:c7:48:27:aa:da:c1:2a:54: dd:e3:c0:50:ff:98:fd:23:2b:87:c6:5e:3d:42:33: cd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:71:78:D3:2C:22:FF:07:D8:CB:50:39:59:97:5A:4A:4B:2B:71:D7 X509v3 Authority Key Identifier: keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:f1:81:b8:49:60:37:9a:49:37:4b:64:31:3d:63:46:ed:d7: 95:65:26:ee:f1:d6:cf:0f:22:02:13:49:8a:b8:4a:c1:69:33: cd:ae:7e:9d:01:ed:39:cd:69:49:38:81:ec:7c:77:b6:e4:3b: 50:c9:cb:53:14:52:06:c2:bc:4b:2d:7b:4f:1e:26:6c:11:3c: ee:2e:c5:66:5b:e4:bb:7e:49:3d:80:5b:2d:02:c0:64:86:88: 21:31:23:2e:f8:7a:f2:09:4f:27:f8:6d:a7:67:6f:5f:40:0e: 51:00:ae:a4:08:77:6c:d2:fd:43:ac:38:d7:7a:fd:42:cd:c7: 63:6c:94:31:84:94:75:12:3b:22:ee:be:88:35:5d:f9:42:06: ba:4a:37:4a:04:4b:b4:f8:ab:0e:84:09:cd:82:50:bb:0b:7c: 41:50:ab:71:b2:c0:bf:e8:5e:65:34:1c:f5:f8:8f:e7:43:29: 24:49:57:5d:b5:d5:cc:54:2c:60:b1:0f:c4:22:d5:36:48:35: 9c:a4:09:e4:60:dc:b9:ef:43:f0:2a:3a:8c:c6:6d:f9:49:74: b3:42:10:1f:13:3e:d1:fa:a3:a4:23:fb:8c:5a:eb:8c:13:33: 16:eb:ff:3a:b8:a5:e0:8e:71:e8:8a:01:2b:d3:bb:4d:23:36: 93:8f:0a:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6MMynFcNblj0B6X28IhMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxODUyNzBlODMxOTNkMzI2OWY3Y2RlOWRhMDgwOGIxZWZm NTUyYWUwHhcNMjUxMjE5MDAwMDUwWhcNMjUxMjIwMDAwMDUwWjAzMTEwLwYDVQQD Eyg5MTcxNzhkMzJjMjJmZjA3ZDhjYjUwMzk1OTk3NWE0YTRiMmI3MWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TeBgoBO7j9YFq14xhQdOewJs1X/ vkA3JUQDNvH++b3xWeNAIMLAxfMrfjk/jEJRyzlLQ5ylcKSt0V9oc3z3hvONWsB1 df+xf/TTp/6Kzu8wMjksRr1b4esHPqekxR79zAMmI5o3P4tKbz8cO+G8evAgO4Wh /jL1cspvrBoqju5RbxVVhxzPr68KAprp0M1vjkbkP25CVkpAPvfZr/4bcMe4zLqa y3ymivLFNlXQrIUbV4otc9yXXFRRnmE3v5KfoqZtBkDbGTP6kp7+HFjhkcTCr2T6 yARQOPql8/BPE9uqkPFt9qM0x0gnqtrBKlTd48BQ/5j9IyuHxl49QjPNPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFxeNMsIv8H2MtQOVmXWkpLK3HXMB8GA1UdIwQY MBaAFPGFJw6DGT0yaffN6doICLHv9VKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgt ZmVmOTZlOTVhYmEwLzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgtZmVmOTZlOTVhYmEw LzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvGBuElg N5pJN0tkMT1jRu3XlWUm7vHWzw8iAhNJirhKwWkzza5+nQHtOc1pSTiB7Hx3tuQ7 UMnLUxRSBsK8Sy17Tx4mbBE87i7FZlvku35JPYBbLQLAZIaIITEjLvh68glPJ/ht p2dvX0AOUQCupAh3bNL9Q6w413r9Qs3HY2yUMYSUdRI7Iu6+iDVd+UIGuko3SgRL tPirDoQJzYJQuwt8QVCrcbLAv+heZTQc9fiP50MpJElXXbXVzFQsYLEPxCLVNkg1 nKQJ5GDcue9D8Co6jMZt+Ul0s0IQHxM+0fqjpCP7jFrrjBMzFuv/Oril4I5x6IoB K9O7TSM2k48KkA== -----END CERTIFICATE-----Generated at Fri Dec 19 06:23:21 2025 by rpki-client