This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft File: c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft (raw, json) Hash identifier: /6eRSSBqc6Wn5p/y5lhrkYciGfWHCHfqnzJuI+6Jzbo= Subject key identifier: C4:8A:74:98:B9:84:DA:D3:4C:9A:06:97:22:DC:91:66:4A:70:D5:5A Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94 Certificate issuer: /CN=73c90ad151d4326a6d62e13046d788f85bf82e94 Certificate serial: 019B0E5BE1FDFC7051B2FE4A7E3A181D8889 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft Manifest number: 10D6 Signing time: Thu 11 Dec 2025 17:01:01 +0000 Manifest this update: Thu 11 Dec 2025 17:01:01 +0000 Manifest next update: Fri 12 Dec 2025 17:01:01 +0000 Files and hashes: 1: 6KWsm-ISjjNa3GCb69ojlbhUSE4.roa (hash: P1LdbF9uJ10tW+331stp5KKcZciYQiQ/KQwCd/ZEwrg=) 2: c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl (hash: VPg34FxIHo0NwUd4PdY+fd3MVSiP+T4q0pN5LPE+sGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:e1:fd:fc:70:51:b2:fe:4a:7e:3a:18:1d:88:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94 Validity Not Before: Dec 11 17:01:01 2025 GMT Not After : Dec 12 17:01:01 2025 GMT Subject: CN=c48a7498b984dad34c9a069722dc91664a70d55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3e:4d:bb:3e:df:4b:0a:fd:77:22:15:2e:78: 03:69:a6:5f:6d:38:4b:47:f8:3b:a0:70:08:99:c4: f1:77:24:cf:b4:5f:40:aa:0d:ba:73:26:40:29:58: ac:7c:61:9e:5d:23:d1:9d:73:44:72:10:bd:73:3a: 50:ff:d8:2b:89:27:3c:fd:52:77:17:8b:ee:02:18: 7c:bd:50:f5:84:2b:7c:42:77:de:c8:48:7e:4b:f7: 91:0e:bd:f0:4e:c9:5c:f4:bb:52:ca:03:4d:89:07: 81:5d:26:a2:56:45:8b:89:28:ec:36:a0:6d:2e:d1: 42:56:e5:57:49:40:9b:33:08:51:2c:81:79:f0:0a: 95:0f:85:4d:8b:2e:76:ba:91:60:1b:fe:1e:59:90: 69:fc:39:81:ba:b2:ef:11:8d:dc:bc:e9:91:f4:80: 11:c0:29:0d:14:72:54:a3:3c:35:6f:45:70:6f:13: e7:21:48:90:bc:e7:8a:83:d0:7b:83:b6:fc:3b:11: ea:82:4b:2c:4e:32:ad:3e:74:44:49:71:b7:5e:16: 49:24:8f:7a:00:ce:7f:b8:98:2c:59:8c:5b:2f:b8: 6b:cd:54:e2:1c:b0:05:46:34:ed:f9:35:5f:10:8f: 82:eb:e0:6a:30:32:70:ef:33:3b:36:03:59:ea:1d: b8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8A:74:98:B9:84:DA:D3:4C:9A:06:97:22:DC:91:66:4A:70:D5:5A X509v3 Authority Key Identifier: keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:01:dd:0a:a0:b5:6e:66:ba:12:b1:70:ab:02:94:41:f6:ef: 7e:e2:90:5b:0e:cc:45:7b:36:c3:b6:be:de:dd:2a:47:da:1b: fc:00:37:93:eb:67:d2:f9:6a:f5:0b:f7:91:75:ac:1f:6d:6b: 00:da:59:42:6a:6b:7a:df:22:19:04:6b:73:d3:9a:bc:a7:9d: 0d:8c:85:35:c1:43:7c:d5:bf:37:c4:85:09:b8:37:e6:ce:05: 88:c9:03:85:94:70:be:af:6e:53:45:32:65:59:32:c0:ae:48: cb:b7:ce:ee:09:a2:de:23:24:d8:ee:b3:9b:10:6a:c0:0c:02: dc:91:6c:4a:ab:32:e6:f1:7e:02:48:a2:48:33:10:80:62:a5: 1a:00:cb:0f:c8:55:6f:9d:ab:56:4f:d8:5b:19:95:95:48:d8: 34:6e:8b:62:b5:d6:1f:93:33:41:86:71:b7:a9:be:c5:28:e4: 73:2d:3e:c9:67:a3:13:de:c2:9b:0b:96:10:62:e1:9c:71:43: f2:ff:4c:cc:82:58:c0:b0:74:33:37:d8:2e:ac:9a:d1:34:63: 16:31:1c:b9:df:3e:ac:44:69:ae:95:64:dc:13:f4:60:82:c2: 9f:bb:ca:33:fb:ed:ea:d9:dc:75:d7:4d:a2:20:11:a4:60:6c: c0:92:e4:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW+H9/HBRsv5KfjoYHYiJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzkwYWQxNTFkNDMyNmE2ZDYyZTEzMDQ2ZDc4OGY4NWJm ODJlOTQwHhcNMjUxMjExMTcwMTAxWhcNMjUxMjEyMTcwMTAxWjAzMTEwLwYDVQQD EyhjNDhhNzQ5OGI5ODRkYWQzNGM5YTA2OTcyMmRjOTE2NjRhNzBkNTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj5Nuz7fSwr9dyIVLngDaaZfbThL R/g7oHAImcTxdyTPtF9Aqg26cyZAKVisfGGeXSPRnXNEchC9czpQ/9griSc8/VJ3 F4vuAhh8vVD1hCt8QnfeyEh+S/eRDr3wTslc9LtSygNNiQeBXSaiVkWLiSjsNqBt LtFCVuVXSUCbMwhRLIF58AqVD4VNiy52upFgG/4eWZBp/DmBurLvEY3cvOmR9IAR wCkNFHJUozw1b0VwbxPnIUiQvOeKg9B7g7b8OxHqgkssTjKtPnRESXG3XhZJJI96 AM5/uJgsWYxbL7hrzVTiHLAFRjTt+TVfEI+C6+BqMDJw7zM7NgNZ6h24RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSKdJi5hNrTTJoGlyLckWZKcNVaMB8GA1UdIwQY MBaAFHPJCtFR1DJqbWLhMEbXiPhb+C6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85YmUyYTAtMTA2MC00MWM3LWI4ZTIt YmE2MjZkMzI1ZDU5LzEvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi85YmUyYTAtMTA2MC00MWM3LWI4ZTItYmE2MjZkMzI1ZDU5 LzEvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwHdCqC1 bma6ErFwqwKUQfbvfuKQWw7MRXs2w7a+3t0qR9ob/AA3k+tn0vlq9Qv3kXWsH21r ANpZQmpret8iGQRrc9OavKedDYyFNcFDfNW/N8SFCbg35s4FiMkDhZRwvq9uU0Uy ZVkywK5Iy7fO7gmi3iMk2O6zmxBqwAwC3JFsSqsy5vF+AkiiSDMQgGKlGgDLD8hV b52rVk/YWxmVlUjYNG6LYrXWH5MzQYZxt6m+xSjkcy0+yWejE97CmwuWEGLhnHFD 8v9MzIJYwLB0MzfYLqya0TRjFjEcud8+rERprpVk3BP0YILCn7vKM/vt6tncdddN oiARpGBswJLkqw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:06:23 2025 by rpki-client