This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft File: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft (raw, json) Hash identifier: 7v/WjssTHoifYyWJdRVqym3fMZtPK9HdLVZqeFPmf4U= Subject key identifier: E8:E3:06:1E:81:00:E5:EE:20:D3:6A:18:DC:69:B3:08:37:A4:CC:45 Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5 Certificate issuer: /CN=f2262faf4376420024aad72983ac3e87944ea7a5 Certificate serial: 019B1BAA368470E899CCB935C3BF76EB45D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft Manifest number: 0458 Signing time: Sun 14 Dec 2025 07:01:38 +0000 Manifest this update: Sun 14 Dec 2025 07:01:38 +0000 Manifest next update: Mon 15 Dec 2025 07:01:38 +0000 Files and hashes: 1: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl (hash: lUeW3pZZeoZl3hFSYYJF5tMzxct9qV/lnD55YwScisY=) 2: 9Mc_YHkeRnOleVXlULa1kHSDpsY.roa (hash: vM50N/l+aDNC1xeVIe5zjbI+WcZUV2cPPG76tUoJrmA=) 3: I-0idQ-x8b_iuF_AN1e-P1ZFsto.roa (hash: J959UKPkKfG7mGSEhJQ4lp0ApYm6t4BNil0ibX/rnJ0=) 4: I8X4-fx8YNfYZj3EvfIsATaUGac.roa (hash: c5YWTRrX3QnWTxXe+8t+vVb1UcDfoatadHEMGSgtrjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:aa:36:84:70:e8:99:cc:b9:35:c3:bf:76:eb:45:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5 Validity Not Before: Dec 14 07:01:38 2025 GMT Not After : Dec 15 07:01:38 2025 GMT Subject: CN=e8e3061e8100e5ee20d36a18dc69b30837a4cc45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b0:53:4f:61:66:dc:61:f4:09:7d:b3:46:35: 83:1f:94:d5:c0:94:cd:93:75:d8:d6:31:b4:a1:70: 02:d8:96:d4:e2:fd:ef:67:3e:02:a3:89:cf:7e:e2: 01:2d:46:d2:09:01:68:90:17:75:1e:22:73:d9:fa: 99:6b:cd:5c:0d:3c:9f:4d:71:97:da:2d:3a:aa:b3: 53:cf:ca:50:05:bb:8d:92:78:fc:f8:c8:80:d3:11: f4:98:de:db:29:42:ca:ac:75:8b:e2:e1:c9:f4:53: f8:1b:42:29:24:65:28:23:83:34:6c:66:96:44:6a: 5b:40:14:34:7a:16:3e:e9:10:45:d0:c9:55:e0:4d: d3:bd:4c:88:9f:d4:9f:34:74:5f:92:5a:ec:27:6a: 4f:59:75:e9:07:a5:00:ae:7a:10:f2:84:e9:cf:15: bd:82:83:93:18:e0:a1:36:6c:f3:d4:cb:72:2b:d9: 49:44:71:5e:3b:32:41:3c:fa:8e:43:59:17:5e:05: 3d:8c:1d:64:80:47:6e:5f:b7:b4:f2:4b:db:f7:92: bd:80:2b:11:a7:44:29:1f:c6:17:17:59:2f:8c:46: e1:dd:02:10:e2:37:9f:14:09:44:3a:51:10:0f:e2: e1:ed:46:dd:44:b4:56:62:de:bf:57:99:1c:69:12: 39:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E3:06:1E:81:00:E5:EE:20:D3:6A:18:DC:69:B3:08:37:A4:CC:45 X509v3 Authority Key Identifier: keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:c8:cc:32:a9:be:74:33:a3:3c:75:0c:d4:c8:ab:02:7b:63: 59:b9:a1:8b:f8:f8:d4:08:61:49:4b:c6:2b:6f:0e:a4:e8:3a: a0:b7:17:5c:91:dd:6a:d5:60:a7:7b:dc:d6:3b:88:4e:49:74: a1:e9:08:ce:e3:55:5c:f7:25:c0:b4:5b:5d:c3:a6:c5:31:a1: a7:38:2a:40:40:d7:df:74:ab:c1:99:eb:f7:23:f2:89:94:23: 27:fa:71:7a:c9:fd:9b:d0:ce:4b:4d:33:b8:61:a2:6a:37:46: 93:c5:d3:dd:4f:ae:6f:74:f1:3f:f4:dd:f0:bc:bf:c7:7c:f5: 83:ec:ff:2a:94:39:30:2c:a6:aa:67:09:f6:e6:c1:ef:3b:77: 90:68:97:5b:df:4d:47:fd:bf:15:f4:89:39:62:e4:f5:9e:d5: 5a:66:11:c1:55:5c:25:47:c5:3b:14:77:8f:f8:17:2d:dc:a9: ab:49:32:03:74:cc:cd:77:f4:24:f0:8e:81:79:8d:ec:08:2e: 0a:3d:4c:8d:02:ef:7a:ee:21:29:31:eb:a3:32:a8:fd:2e:7a: 9e:26:17:31:24:f7:4d:6d:c9:16:14:62:95:0c:30:ad:2b:f2: cc:c9:ca:7d:a4:d3:29:22:e5:f4:e2:81:a6:34:7d:7f:5f:ed: 30:18:5a:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqjaEcOiZzLk1w79260XYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMjYyZmFmNDM3NjQyMDAyNGFhZDcyOTgzYWMzZTg3OTQ0 ZWE3YTUwHhcNMjUxMjE0MDcwMTM4WhcNMjUxMjE1MDcwMTM4WjAzMTEwLwYDVQQD EyhlOGUzMDYxZTgxMDBlNWVlMjBkMzZhMThkYzY5YjMwODM3YTRjYzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7BTT2Fm3GH0CX2zRjWDH5TVwJTN k3XY1jG0oXAC2JbU4v3vZz4Co4nPfuIBLUbSCQFokBd1HiJz2fqZa81cDTyfTXGX 2i06qrNTz8pQBbuNknj8+MiA0xH0mN7bKULKrHWL4uHJ9FP4G0IpJGUoI4M0bGaW RGpbQBQ0ehY+6RBF0MlV4E3TvUyIn9SfNHRfklrsJ2pPWXXpB6UArnoQ8oTpzxW9 goOTGOChNmzz1MtyK9lJRHFeOzJBPPqOQ1kXXgU9jB1kgEduX7e08kvb95K9gCsR p0QpH8YXF1kvjEbh3QIQ4jefFAlEOlEQD+Lh7UbdRLRWYt6/V5kcaRI5UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjjBh6BAOXuINNqGNxpswg3pMxFMB8GA1UdIwQY MBaAFPImL69DdkIAJKrXKYOsPoeUTqelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMt YmFkYWZjYTM5NDRmLzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMtYmFkYWZjYTM5NDRm LzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMjMMqm+ dDOjPHUM1MirAntjWbmhi/j41AhhSUvGK28OpOg6oLcXXJHdatVgp3vc1juITkl0 oekIzuNVXPclwLRbXcOmxTGhpzgqQEDX33SrwZnr9yPyiZQjJ/pxesn9m9DOS00z uGGiajdGk8XT3U+ub3TxP/Td8Ly/x3z1g+z/KpQ5MCymqmcJ9ubB7zt3kGiXW99N R/2/FfSJOWLk9Z7VWmYRwVVcJUfFOxR3j/gXLdypq0kyA3TMzXf0JPCOgXmN7Agu Cj1MjQLveu4hKTHrozKo/S56niYXMST3TW3JFhRilQwwrSvyzMnKfaTTKSLl9OKB pjR9f1/tMBhaaw== -----END CERTIFICATE-----Generated at Sun Dec 14 14:38:07 2025 by rpki-client