This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft File: 8j79S9kntM6jMSCiG09zFNy-oXk.mft (raw, json) Hash identifier: p/t1JV+YMshAIFbCFzTPtegvT1ZA9bFd4RMPlJWPFAE= Subject key identifier: 06:2D:3A:A3:74:A9:AD:1E:59:44:8C:46:6A:7B:A5:62:31:6A:AF:C9 Authority key identifier: F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79 Certificate issuer: /CN=f23efd4bd927b4cea33120a21b4f7314dcbea179 Certificate serial: 019B5A5200DE316606531F923DF79C22B514 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft Manifest number: 0F3C Signing time: Fri 26 Dec 2025 11:01:22 +0000 Manifest this update: Fri 26 Dec 2025 11:01:22 +0000 Manifest next update: Sat 27 Dec 2025 11:01:22 +0000 Files and hashes: 1: 8j79S9kntM6jMSCiG09zFNy-oXk.crl (hash: kULZJPMOJxa/aO9XSzGoLfv4Ec3I5/8+zyZV39YMlWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:00:de:31:66:06:53:1f:92:3d:f7:9c:22:b5:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f23efd4bd927b4cea33120a21b4f7314dcbea179 Validity Not Before: Dec 26 11:01:22 2025 GMT Not After : Dec 27 11:01:22 2025 GMT Subject: CN=062d3aa374a9ad1e59448c466a7ba562316aafc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f6:a9:e8:d2:b2:1d:50:7a:2b:ac:cc:a6:71: 9c:21:2d:8f:0f:09:e9:fc:32:75:be:ee:c0:2b:9c: 59:d4:6c:b9:6e:b3:5b:c0:fd:f5:d4:a5:ed:4f:9f: 09:8d:2c:da:7c:e6:11:78:cb:4c:22:29:8e:53:da: 51:fe:12:c0:be:4a:e1:f3:a9:4e:22:b7:96:b2:31: 93:eb:20:89:bb:b0:c2:8b:db:cb:e8:20:5f:89:ad: 50:f6:7b:42:74:5d:38:7a:4f:a4:fe:78:87:6f:02: 65:d9:38:5d:ed:e3:ae:80:7e:50:e7:93:0e:53:45: b0:b1:4a:8b:93:c4:41:84:7f:39:c6:08:c6:d7:b7: 03:77:08:e2:3b:fc:9f:24:27:e0:9e:52:8c:02:23: df:a3:de:5b:c8:22:dc:a6:7e:5c:c4:6e:84:4a:88: 7a:f4:50:a6:ce:c1:97:32:05:15:8d:16:2e:32:a0: 88:7d:02:71:8d:ba:51:af:dc:27:06:29:95:81:45: 9e:e9:b6:5f:62:5f:11:d8:eb:86:99:d5:78:85:8b: 98:03:7f:01:4a:1b:3f:7b:1b:97:24:11:88:9e:0b: 17:db:77:19:f6:a6:0b:ad:2e:b2:c7:b8:4b:4c:ef: b5:86:fc:92:41:43:a9:3d:f3:e2:cb:83:dd:02:55: c6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2D:3A:A3:74:A9:AD:1E:59:44:8C:46:6A:7B:A5:62:31:6A:AF:C9 X509v3 Authority Key Identifier: keyid:F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:22:2e:5b:2b:59:5f:d8:b6:c7:df:14:be:4d:cc:b2:6b:c7: c5:b1:15:95:46:cd:3d:c5:1a:74:3b:b4:1f:fc:9d:18:bc:3b: 65:e5:8e:5f:b3:72:b3:49:cf:5a:ed:31:7c:76:fd:23:e3:e9: 54:d2:ab:20:d2:7c:58:00:fe:e1:4e:7b:44:3b:ff:3e:35:4c: ac:65:a6:68:49:5f:1a:91:d3:c4:d1:8e:08:03:f3:82:f5:22: 6c:f1:12:aa:3c:4b:e8:25:a6:05:d9:21:51:75:3c:3d:f4:64: d7:de:ed:a7:b6:6d:20:05:4f:1d:e4:98:b9:3c:1b:6f:08:63: 01:bd:b5:ff:a8:c8:54:6d:1a:c5:a0:5b:a9:25:3b:5b:c4:88: 46:d1:68:d4:ff:a9:fb:74:4c:c0:e8:a0:8b:00:aa:27:4a:42: 39:16:90:31:41:ab:26:68:3b:14:67:b0:e6:8c:08:b5:3f:2e: ff:4b:db:98:e6:52:13:b9:aa:2d:2e:df:15:fd:6f:d3:6b:cd: dd:41:ed:87:17:f3:c7:e6:97:12:d3:a9:3a:c3:31:2b:5a:4a: f6:a3:71:c9:8f:ce:a2:ab:43:9a:26:c0:e6:28:e1:97:40:61: 12:e3:e3:0c:57:45:6e:f1:89:ce:d2:17:b7:b1:86:7a:65:f4: 8f:f7:8c:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUgDeMWYGUx+SPfecIrUUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyM2VmZDRiZDkyN2I0Y2VhMzMxMjBhMjFiNGY3MzE0ZGNi ZWExNzkwHhcNMjUxMjI2MTEwMTIyWhcNMjUxMjI3MTEwMTIyWjAzMTEwLwYDVQQD EygwNjJkM2FhMzc0YTlhZDFlNTk0NDhjNDY2YTdiYTU2MjMxNmFhZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufap6NKyHVB6K6zMpnGcIS2PDwnp /DJ1vu7AK5xZ1Gy5brNbwP311KXtT58JjSzafOYReMtMIimOU9pR/hLAvkrh86lO IreWsjGT6yCJu7DCi9vL6CBfia1Q9ntCdF04ek+k/niHbwJl2Thd7eOugH5Q55MO U0WwsUqLk8RBhH85xgjG17cDdwjiO/yfJCfgnlKMAiPfo95byCLcpn5cxG6ESoh6 9FCmzsGXMgUVjRYuMqCIfQJxjbpRr9wnBimVgUWe6bZfYl8R2OuGmdV4hYuYA38B Shs/exuXJBGIngsX23cZ9qYLrS6yx7hLTO+1hvySQUOpPfPiy4PdAlXGLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYtOqN0qa0eWUSMRmp7pWIxaq/JMB8GA1UdIwQY MBaAFPI+/UvZJ7TOozEgohtPcxTcvqF5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83NzA0OTQtOWYxMy00YTE2LWIyZTIt ZDJjOGE2NWFhY2ZlLzEvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC83NzA0OTQtOWYxMy00YTE2LWIyZTItZDJjOGE2NWFhY2Zl LzEvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiIuWytZ X9i2x98Uvk3MsmvHxbEVlUbNPcUadDu0H/ydGLw7ZeWOX7Nys0nPWu0xfHb9I+Pp VNKrINJ8WAD+4U57RDv/PjVMrGWmaElfGpHTxNGOCAPzgvUibPESqjxL6CWmBdkh UXU8PfRk197tp7ZtIAVPHeSYuTwbbwhjAb21/6jIVG0axaBbqSU7W8SIRtFo1P+p +3RMwOigiwCqJ0pCORaQMUGrJmg7FGew5owItT8u/0vbmOZSE7mqLS7fFf1v02vN 3UHthxfzx+aXEtOpOsMxK1pK9qNxyY/OoqtDmibA5ijhl0BhEuPjDFdFbvGJztIX t7GGemX0j/eMlg== -----END CERTIFICATE-----Generated at Fri Dec 26 17:40:25 2025 by rpki-client