This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json) Hash identifier: 2XfOvvYzDq/2OqXtWeOqqpUf/uM8SD+1huR5ug8nHBw= Subject key identifier: 72:DB:D7:63:7C:85:79:9D:39:7C:3F:BD:05:81:0E:57:4D:28:C5:79 Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b Certificate serial: 019B31FAE0E2E5766FB0C5E7DE5185B17E55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft Manifest number: 11D1 Signing time: Thu 18 Dec 2025 15:01:23 +0000 Manifest this update: Thu 18 Dec 2025 15:01:23 +0000 Manifest next update: Fri 19 Dec 2025 15:01:23 +0000 Files and hashes: 1: 3hbfOacsgkP1pg9qyg2MfHcWFYc.roa (hash: cOfUIokArUM0fSLBq8ZJr6uobm8IIPK6h0yhiKwO2kU=) 2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: L7/o+WOC5vHknknNgJkr5/3mssWdy/YWdr/3MS7stu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:e0:e2:e5:76:6f:b0:c5:e7:de:51:85:b1:7e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b Validity Not Before: Dec 18 15:01:23 2025 GMT Not After : Dec 19 15:01:23 2025 GMT Subject: CN=72dbd7637c85799d397c3fbd05810e574d28c579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f0:b9:24:ea:7b:5a:0c:0c:82:c6:c0:31:07: f8:bd:04:a6:bb:69:d9:a1:b1:08:0d:f0:2d:a5:35: d0:d6:35:6f:3e:1f:0c:63:4f:21:d5:ca:7e:a5:56: a1:92:3c:c7:32:d4:d3:57:70:34:85:2d:8e:aa:a3: d5:76:4e:ca:3a:8f:40:b0:de:e6:a0:03:99:d8:4a: c9:52:bb:2f:12:d2:b3:83:42:03:d9:9f:fd:0c:0d: c3:6c:df:b4:88:ae:c2:9d:3d:77:0e:5e:50:d0:d2: 62:15:f7:6d:4f:c7:8a:48:11:67:1c:55:8d:2b:5b: 52:79:00:35:24:8c:54:ef:8c:7f:13:21:26:eb:57: 2d:29:81:b7:de:dd:77:dd:4c:f4:46:a7:3f:35:ca: e4:87:91:44:cb:53:c9:9f:74:c9:15:67:c1:63:74: 89:9d:57:23:9b:c0:7f:d7:cb:f9:5b:43:1d:3c:b1: 04:48:e6:a5:42:25:63:23:00:e9:24:d6:ad:e5:2c: 7a:a6:8b:3f:1c:02:35:a1:e2:19:f9:d2:a6:03:f8: b8:6e:48:f1:6d:2b:15:98:be:2c:81:3f:5c:a3:b9: 9e:82:8d:b0:1c:c4:59:97:8e:82:8f:c0:07:34:c2: 81:35:f9:a7:ad:6f:c5:8e:0c:e1:82:d0:77:d3:b6: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DB:D7:63:7C:85:79:9D:39:7C:3F:BD:05:81:0E:57:4D:28:C5:79 X509v3 Authority Key Identifier: keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:f9:95:0e:f7:99:23:86:23:b1:e8:56:54:a2:1e:ea:f9:05: 9b:a6:22:13:09:11:cc:2e:22:94:76:41:7c:31:0b:d4:b0:03: 5c:63:c8:b7:65:79:a2:ee:ee:21:90:0e:d8:b2:fc:36:b6:a9: 9e:86:cc:5a:ec:76:1c:75:50:97:15:6e:de:53:5f:38:c4:fd: 07:2b:33:50:9d:89:91:c6:c2:5e:50:5c:f1:31:6e:7f:3e:d1: cd:dc:8e:ab:ea:83:70:43:38:18:37:96:74:a7:76:31:87:69: 34:5b:de:35:96:41:7b:76:5d:85:20:83:87:ed:36:71:44:50: 1b:c9:6d:d3:6f:66:e6:14:d6:2d:b2:66:3a:cd:0e:cc:e2:79: 9b:5c:cb:1d:3e:6f:82:10:2c:3c:f4:8e:7d:0d:ac:91:b1:fa: b9:30:42:02:a9:f5:33:57:92:4a:27:a7:90:27:9e:1f:45:ea: 38:21:23:c5:7b:2b:53:05:ec:dd:ae:ea:39:fa:c5:c5:97:25: 17:7c:6f:13:79:b8:fd:a9:f8:d7:9f:17:9c:09:69:23:15:86: c3:51:ae:01:97:a4:8f:4c:7c:73:18:b2:58:7e:60:06:00:7a: 1c:11:d4:ef:a7:83:f7:e9:6d:21:b3:a2:e7:49:4c:e4:8f:b8: c2:8d:0c:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+uDi5XZvsMXn3lGFsX5VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNTkwNzdlMDQzODc3MDU5NjAzY2FhMGUzZTU4NGIxNjI2 ZThmN2IwHhcNMjUxMjE4MTUwMTIzWhcNMjUxMjE5MTUwMTIzWjAzMTEwLwYDVQQD Eyg3MmRiZDc2MzdjODU3OTlkMzk3YzNmYmQwNTgxMGU1NzRkMjhjNTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fC5JOp7WgwMgsbAMQf4vQSmu2nZ obEIDfAtpTXQ1jVvPh8MY08h1cp+pVahkjzHMtTTV3A0hS2OqqPVdk7KOo9AsN7m oAOZ2ErJUrsvEtKzg0ID2Z/9DA3DbN+0iK7CnT13Dl5Q0NJiFfdtT8eKSBFnHFWN K1tSeQA1JIxU74x/EyEm61ctKYG33t133Uz0Rqc/Ncrkh5FEy1PJn3TJFWfBY3SJ nVcjm8B/18v5W0MdPLEESOalQiVjIwDpJNat5Sx6pos/HAI1oeIZ+dKmA/i4bkjx bSsVmL4sgT9co7mego2wHMRZl46Cj8AHNMKBNfmnrW/FjgzhgtB307ayvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLb12N8hXmdOXw/vQWBDldNKMV5MB8GA1UdIwQY MBaAFPFZB34EOHcFlgPKoOPlhLFibo97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wYWE1NDEtZTkwZi00NmZkLWEwZGMt MDNkOTA0YzgwMmNlLzEvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8wYWE1NDEtZTkwZi00NmZkLWEwZGMtMDNkOTA0YzgwMmNl LzEvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/mVDveZ I4YjsehWVKIe6vkFm6YiEwkRzC4ilHZBfDEL1LADXGPIt2V5ou7uIZAO2LL8Nrap nobMWux2HHVQlxVu3lNfOMT9ByszUJ2JkcbCXlBc8TFufz7RzdyOq+qDcEM4GDeW dKd2MYdpNFveNZZBe3ZdhSCDh+02cURQG8lt029m5hTWLbJmOs0OzOJ5m1zLHT5v ghAsPPSOfQ2skbH6uTBCAqn1M1eSSienkCeeH0XqOCEjxXsrUwXs3a7qOfrFxZcl F3xvE3m4/an4158XnAlpIxWGw1GuAZekj0x8cxiyWH5gBgB6HBHU76eD9+ltIbOi 50lM5I+4wo0MVA== -----END CERTIFICATE-----Generated at Thu Dec 18 22:37:40 2025 by rpki-client