This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft File: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft (raw, json) Hash identifier: WgsE8/8xzNibnLOn2d7aZQEaw5p/i3kjUg8XbDGbY18= Subject key identifier: CC:DA:B4:CE:20:4A:77:15:14:28:51:3C:34:52:FF:11:00:5E:F0:0D Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5 Certificate issuer: /CN=f2262faf4376420024aad72983ac3e87944ea7a5 Certificate serial: 019B21769E09227924EAA1B59AADFD98E46D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft Manifest number: 045B Signing time: Mon 15 Dec 2025 10:03:00 +0000 Manifest this update: Mon 15 Dec 2025 10:03:00 +0000 Manifest next update: Tue 16 Dec 2025 10:03:00 +0000 Files and hashes: 1: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl (hash: z3/MAcWwhqXT+3eN3qlh3vwmM6+7so+3z6jJNqhJ0Xk=) 2: 9Mc_YHkeRnOleVXlULa1kHSDpsY.roa (hash: vM50N/l+aDNC1xeVIe5zjbI+WcZUV2cPPG76tUoJrmA=) 3: I-0idQ-x8b_iuF_AN1e-P1ZFsto.roa (hash: J959UKPkKfG7mGSEhJQ4lp0ApYm6t4BNil0ibX/rnJ0=) 4: I8X4-fx8YNfYZj3EvfIsATaUGac.roa (hash: c5YWTRrX3QnWTxXe+8t+vVb1UcDfoatadHEMGSgtrjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:9e:09:22:79:24:ea:a1:b5:9a:ad:fd:98:e4:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5 Validity Not Before: Dec 15 10:03:00 2025 GMT Not After : Dec 16 10:03:00 2025 GMT Subject: CN=ccdab4ce204a77151428513c3452ff11005ef00d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5f:90:d6:de:2b:00:45:f2:0d:78:b5:39:26: 3e:50:6b:b1:78:00:15:19:3e:ad:65:25:8a:3f:22: 3c:a5:76:7b:26:8c:7e:9c:f1:92:a3:94:8f:a2:e3: 74:5c:3a:3e:74:af:30:a9:6a:4f:0e:0b:45:9b:be: 07:31:ff:51:b4:98:93:dc:aa:fa:12:67:ab:11:62: 0d:77:10:9f:7f:24:8c:ef:f2:ed:53:18:e3:b2:54: dd:5d:03:d8:26:cc:10:65:95:ff:6f:08:b9:24:17: 2c:7b:d7:a9:af:82:47:86:ef:73:dd:b9:4c:84:f2: d6:ec:bc:45:e6:d2:f8:d0:aa:b6:43:30:7a:e4:bf: 96:46:71:ac:c1:57:f7:cf:a6:6a:91:92:18:90:5f: f6:ce:2e:0d:3f:ab:e4:fa:3b:3f:52:6f:24:f2:ad: a5:64:a2:fe:f1:ed:6d:8b:ab:65:22:7d:20:38:3a: 38:94:d4:89:1e:62:9f:05:9c:7e:f4:ca:c1:9f:64: 42:ed:92:53:f2:17:5c:31:05:88:9f:45:48:4b:02: 4f:bf:7c:97:30:2e:eb:79:ea:13:08:03:e0:78:9d: dd:06:fe:03:72:81:1f:e9:e4:bf:11:93:bc:79:59: 9c:0c:62:85:84:a9:aa:b3:c1:83:3d:e8:a9:65:3d: 86:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DA:B4:CE:20:4A:77:15:14:28:51:3C:34:52:FF:11:00:5E:F0:0D X509v3 Authority Key Identifier: keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e9:f2:f7:fa:1b:03:02:6d:47:25:28:16:7f:7d:ba:d8:3c: 40:60:77:14:fe:d7:ab:1e:c5:4a:f2:d8:10:70:08:73:1f:08: 8a:2e:7c:d9:cc:87:ed:4e:62:35:c4:9f:85:2f:06:06:02:3b: a3:a0:2d:62:7c:3b:46:e4:b5:5f:92:e3:4b:f8:e6:d7:b2:a5: 78:b3:ea:59:da:57:0c:00:20:42:92:f2:ce:3f:d8:b6:6a:9f: bc:68:9e:dd:cd:36:79:c4:84:cf:0f:78:92:0c:f9:22:19:ff: 8b:33:2f:d6:ed:b4:3d:7d:29:fc:23:20:7a:72:dc:64:e1:e0: 3a:b8:cf:8f:53:7d:fd:f4:87:42:fd:48:c4:f3:5c:1d:20:1c: ec:4f:4b:71:53:43:ec:06:b9:a9:13:28:20:ea:ea:e2:9f:ae: c4:cb:25:c9:23:15:3b:52:4c:03:b7:50:22:fd:f0:eb:78:3d: 5c:f5:a1:de:bd:4c:b1:a2:64:c6:0e:ac:25:c5:1a:fb:14:f2: 50:1d:4f:75:2f:0d:1c:47:6c:77:5e:35:8c:a3:a1:e6:d5:70: 5d:20:b9:85:13:92:ff:cf:49:46:b2:de:49:a7:4b:61:12:12: e1:f0:da:42:01:dc:c9:a5:aa:7d:2e:49:41:4c:e1:41:48:30: ea:9d:1b:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdp4JInkk6qG1mq39mORtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMjYyZmFmNDM3NjQyMDAyNGFhZDcyOTgzYWMzZTg3OTQ0 ZWE3YTUwHhcNMjUxMjE1MTAwMzAwWhcNMjUxMjE2MTAwMzAwWjAzMTEwLwYDVQQD EyhjY2RhYjRjZTIwNGE3NzE1MTQyODUxM2MzNDUyZmYxMTAwNWVmMDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF+Q1t4rAEXyDXi1OSY+UGuxeAAV GT6tZSWKPyI8pXZ7Jox+nPGSo5SPouN0XDo+dK8wqWpPDgtFm74HMf9RtJiT3Kr6 EmerEWINdxCffySM7/LtUxjjslTdXQPYJswQZZX/bwi5JBcse9epr4JHhu9z3blM hPLW7LxF5tL40Kq2QzB65L+WRnGswVf3z6ZqkZIYkF/2zi4NP6vk+js/Um8k8q2l ZKL+8e1ti6tlIn0gODo4lNSJHmKfBZx+9MrBn2RC7ZJT8hdcMQWIn0VISwJPv3yX MC7reeoTCAPgeJ3dBv4DcoEf6eS/EZO8eVmcDGKFhKmqs8GDPeipZT2GAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzatM4gSncVFChRPDRS/xEAXvANMB8GA1UdIwQY MBaAFPImL69DdkIAJKrXKYOsPoeUTqelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMt YmFkYWZjYTM5NDRmLzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMtYmFkYWZjYTM5NDRm LzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOny9/ob AwJtRyUoFn99utg8QGB3FP7Xqx7FSvLYEHAIcx8Iii582cyH7U5iNcSfhS8GBgI7 o6AtYnw7RuS1X5LjS/jm17KleLPqWdpXDAAgQpLyzj/YtmqfvGie3c02ecSEzw94 kgz5Ihn/izMv1u20PX0p/CMgenLcZOHgOrjPj1N9/fSHQv1IxPNcHSAc7E9LcVND 7Aa5qRMoIOrq4p+uxMslySMVO1JMA7dQIv3w63g9XPWh3r1MsaJkxg6sJcUa+xTy UB1PdS8NHEdsd141jKOh5tVwXSC5hROS/89JRrLeSadLYRIS4fDaQgHcyaWqfS5J QUzhQUgw6p0bcA== -----END CERTIFICATE-----Generated at Mon Dec 15 14:41:06 2025 by rpki-client