This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json) Hash identifier: 21UOXak6+2nt2Y80PsXL8EpTSe5F8Lx38SfYsuJZOZA= Subject key identifier: 2C:4C:73:81:DD:93:9F:78:B5:63:F0:0E:5A:0E:C9:84:AF:96:10:30 Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a Certificate serial: 019B202B6EC785551845B29D9DD64E173257 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 04:01:15 +0000 Manifest this update: Mon 15 Dec 2025 04:01:15 +0000 Manifest next update: Tue 16 Dec 2025 04:01:15 +0000 Files and hashes: 1: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: MoZS4jJM80JpYOShh0GST6DJDcVup8LDoYdA856h7Fc=) 2: Uq0vloXHdFb2aIE_oUN66H2BMxU.roa (hash: 8OMhbaYnopF2Asv1tjCQ758nxv0+wParcC98envOi54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 04:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:2b:6e:c7:85:55:18:45:b2:9d:9d:d6:4e:17:32:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a Validity Not Before: Dec 15 04:01:15 2025 GMT Not After : Dec 16 04:01:15 2025 GMT Subject: CN=2c4c7381dd939f78b563f00e5a0ec984af961030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:97:bd:cc:f0:6e:8f:c2:fc:94:66:e1:cb:ff: fd:dc:95:e9:7b:a8:61:e9:88:91:ae:34:59:19:fc: 06:6f:5a:18:24:7c:20:2a:c5:f5:0e:4c:7d:88:46: 5c:46:d4:18:f6:61:86:fb:ec:c1:85:f6:9d:ec:b5: 4b:7d:bb:e8:ad:a6:38:46:89:a5:f4:5e:72:6c:60: 55:bf:57:61:73:3e:22:c3:e7:1d:32:27:8f:9d:cc: d2:33:15:a5:6f:62:fb:23:93:8e:17:1d:19:ee:7a: 84:c6:af:4e:2d:1f:15:53:45:77:08:58:8f:dc:23: 1a:93:ca:83:e2:f8:fe:ab:2e:c2:9a:00:e9:ed:35: a6:46:62:10:37:7b:66:86:d7:68:94:43:40:fd:ac: 88:82:0a:09:af:37:5a:fa:ed:88:84:35:30:eb:76: b9:b0:dd:59:2d:ba:96:8f:7a:b5:b9:b3:d9:e7:f8: bd:1c:00:28:c8:6e:58:dd:ed:5f:ac:af:fd:69:45: 6e:e5:80:7f:c1:ff:c7:9e:ff:35:f2:cc:5e:ca:82: 3b:4a:e1:79:96:96:f6:68:8a:40:cb:aa:15:66:09: fa:64:aa:dd:b3:92:c7:e8:65:09:f5:ab:2d:a9:6e: 31:12:b2:03:1b:60:31:33:67:51:d5:eb:bd:d9:ae: 68:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4C:73:81:DD:93:9F:78:B5:63:F0:0E:5A:0E:C9:84:AF:96:10:30 X509v3 Authority Key Identifier: keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:84:85:3a:a5:e8:8d:22:11:25:10:60:cc:df:7d:2f:f4:d3: 99:12:0b:bf:f5:2b:d2:17:af:6a:c4:e6:be:fb:31:7f:05:1c: 30:1b:b0:88:d3:e2:47:6c:d7:cc:eb:88:bb:6b:1f:47:87:f3: a6:16:e5:62:59:ec:e1:3a:0a:a3:52:26:e2:5d:2b:92:c8:e8: a7:17:13:70:fa:6c:40:bf:7b:d0:bc:ae:49:d3:f9:82:2d:97: 4f:37:4b:80:a2:d4:94:8a:55:b0:00:e1:71:fb:74:55:3c:fe: e0:d3:5d:04:b9:54:b3:12:85:be:a4:2c:50:59:91:8e:ed:4b: 2a:b0:31:ec:f2:cc:2a:c6:eb:30:26:25:85:54:11:d0:27:43: 26:39:55:9d:37:e6:57:fd:03:04:ab:45:8f:57:bb:6b:bb:d0: ee:60:d5:50:72:ee:80:14:bd:c1:63:77:6c:6e:ac:50:d7:1d: 48:bb:fd:eb:88:6e:92:f8:54:22:e6:f5:86:6d:d6:1a:80:b6: 0f:19:0b:79:0c:cd:e7:d2:dc:7d:a7:3d:b1:e2:c6:bf:92:6c: 82:b8:fe:96:92:f1:7b:be:73:b2:87:7c:30:9d:4e:30:7b:0b: 44:b5:e2:d5:5a:8f:80:17:2f:62:90:9d:06:5f:b0:98:55:6f: 08:84:a2:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgK27HhVUYRbKdndZOFzJXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmUyOGU4YWM3YWIxOGM3MzA3OWRlODRjODA5N2Q3ODJh YWI2OWEwHhcNMjUxMjE1MDQwMTE1WhcNMjUxMjE2MDQwMTE1WjAzMTEwLwYDVQQD EygyYzRjNzM4MWRkOTM5Zjc4YjU2M2YwMGU1YTBlYzk4NGFmOTYxMDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Je9zPBuj8L8lGbhy//93JXpe6hh 6YiRrjRZGfwGb1oYJHwgKsX1Dkx9iEZcRtQY9mGG++zBhfad7LVLfbvoraY4Roml 9F5ybGBVv1dhcz4iw+cdMiePnczSMxWlb2L7I5OOFx0Z7nqExq9OLR8VU0V3CFiP 3CMak8qD4vj+qy7CmgDp7TWmRmIQN3tmhtdolENA/ayIggoJrzda+u2IhDUw63a5 sN1ZLbqWj3q1ubPZ5/i9HAAoyG5Y3e1frK/9aUVu5YB/wf/Hnv818sxeyoI7SuF5 lpb2aIpAy6oVZgn6ZKrds5LH6GUJ9astqW4xErIDG2AxM2dR1eu92a5oQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxMc4Hdk594tWPwDloOyYSvlhAwMB8GA1UdIwQY MBaAFPAuKOiserGMcwed6EyAl9eCqraaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODkt OWZmYjBlNDFjNGVmLzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODktOWZmYjBlNDFjNGVm LzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4SFOqXo jSIRJRBgzN99L/TTmRILv/Ur0hevasTmvvsxfwUcMBuwiNPiR2zXzOuIu2sfR4fz phblYlns4ToKo1Im4l0rksjopxcTcPpsQL970LyuSdP5gi2XTzdLgKLUlIpVsADh cft0VTz+4NNdBLlUsxKFvqQsUFmRju1LKrAx7PLMKsbrMCYlhVQR0CdDJjlVnTfm V/0DBKtFj1e7a7vQ7mDVUHLugBS9wWN3bG6sUNcdSLv964hukvhUIub1hm3WGoC2 DxkLeQzN59Lcfac9seLGv5Jsgrj+lpLxe75zsod8MJ1OMHsLRLXi1VqPgBcvYpCd Bl+wmFVvCISigg== -----END CERTIFICATE-----Generated at Mon Dec 15 13:39:35 2025 by rpki-client