This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json) Hash identifier: nBlQPjDjQ1rH7vW17Z8uCXTVLMVmERV9lXnUi+NFREc= Subject key identifier: 9A:AA:23:C9:CA:BE:B0:5A:EE:37:E3:32:37:1E:C1:69:F1:DB:09:43 Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac Certificate serial: 019B597662D8C5C21D32849D982118A006B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 07:01:29 +0000 Manifest this update: Fri 26 Dec 2025 07:01:29 +0000 Manifest next update: Sat 27 Dec 2025 07:01:29 +0000 Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: UNmvBfQrDCXoo9kAVpGX4qw++5Ric0lVjfxuW6MiTkY=) 2: m61Skl38qNd_z8iy_icAt6gZ-a0.roa (hash: agPnne36nNKEttk3MarLpGi1Y49vXcfn+4zgZdtH3ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:62:d8:c5:c2:1d:32:84:9d:98:21:18:a0:06:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac Validity Not Before: Dec 26 07:01:29 2025 GMT Not After : Dec 27 07:01:29 2025 GMT Subject: CN=9aaa23c9cabeb05aee37e332371ec169f1db0943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b0:69:24:e9:8b:15:72:90:82:f5:cd:01:43: 5c:a4:93:34:e0:02:13:ad:de:ca:49:30:21:bc:80: 4d:d1:7c:57:ed:37:62:3e:df:e9:0b:4d:49:55:d0: ef:f4:34:a3:fd:07:6b:bd:d2:0f:d4:0a:5f:f9:84: 02:57:06:d8:70:89:38:33:71:d7:4d:61:de:bd:28: d6:e4:a6:35:4f:7e:73:38:03:fc:cb:17:70:78:5a: d1:be:8f:dd:11:9a:e4:12:50:71:27:dd:4d:83:32: d8:4f:a9:7b:4a:f7:1b:a1:16:92:b6:fd:22:73:db: e3:6e:b1:2b:6a:92:ca:5c:7f:d1:fe:b1:81:d5:0f: ea:e7:f2:49:3c:b6:3b:45:fb:05:56:96:79:bb:ba: b3:b2:0a:74:ae:76:c2:0c:7e:10:d5:92:6f:f1:d2: e2:27:25:36:4e:5f:4b:33:f2:a7:aa:32:98:02:6f: d9:f8:e5:87:63:5b:05:10:81:a6:48:6e:10:e9:28: 5c:2d:c0:73:de:b8:fc:d0:47:0b:c5:9e:b5:ff:34: 2d:00:a7:12:98:6e:76:c1:4a:4e:07:6c:01:89:f7: a8:b9:a4:d3:b0:0f:99:56:70:c0:bb:b6:03:f4:6a: b0:94:58:a0:75:b3:af:a3:c8:23:16:a7:62:d5:65: 17:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AA:23:C9:CA:BE:B0:5A:EE:37:E3:32:37:1E:C1:69:F1:DB:09:43 X509v3 Authority Key Identifier: keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:e3:ab:80:a2:ea:2b:f3:64:72:49:6c:3c:cd:aa:14:a8:3a: f4:3a:d4:7f:4e:31:01:36:94:f9:14:dd:4b:4e:8b:82:ba:7f: 14:b9:ad:60:8a:3a:e5:be:e0:02:70:0b:15:15:cb:f4:c8:79: 95:18:81:77:74:50:c7:b9:cc:7d:b5:17:c3:ec:d9:be:9d:7f: ae:c2:1e:f9:33:cc:95:28:8c:0f:3b:88:c9:99:97:b2:d2:cb: 9d:b1:4c:9c:13:39:5b:50:97:f3:a9:28:8d:d8:bd:53:86:52: 35:3f:77:6f:a8:03:42:09:a5:5b:ea:03:87:68:e9:6a:fb:84: 9e:fe:41:f5:5c:a4:7a:24:1e:eb:94:d7:05:30:f1:f4:f4:18: a2:cc:87:68:97:0a:03:23:51:4b:2a:dc:a3:7b:b5:54:f4:b5: db:c4:f5:9e:db:a4:a8:1b:28:72:e4:62:7d:65:44:5d:a3:58: 21:b6:09:2d:ea:f4:2c:20:83:4a:13:c5:a4:4b:54:fe:fb:9a: f2:ad:2b:78:b1:f1:76:7a:d6:fb:ac:92:bd:a7:8c:2c:20:ed: 5a:f8:66:33:fe:04:37:bd:69:26:86:51:eb:40:6f:80:b4:18: 7a:b0:18:9f:84:e2:3a:0b:f3:92:55:a3:9d:2b:32:65:19:02: 2d:f9:1c:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdmLYxcIdMoSdmCEYoAazMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNTZhOWVkYjJkOWFkZTIwNGQ4MjMxM2NjZTk4YjY2MjNh OWQ4YWMwHhcNMjUxMjI2MDcwMTI5WhcNMjUxMjI3MDcwMTI5WjAzMTEwLwYDVQQD Eyg5YWFhMjNjOWNhYmViMDVhZWUzN2UzMzIzNzFlYzE2OWYxZGIwOTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrBpJOmLFXKQgvXNAUNcpJM04AIT rd7KSTAhvIBN0XxX7TdiPt/pC01JVdDv9DSj/QdrvdIP1Apf+YQCVwbYcIk4M3HX TWHevSjW5KY1T35zOAP8yxdweFrRvo/dEZrkElBxJ91NgzLYT6l7SvcboRaStv0i c9vjbrErapLKXH/R/rGB1Q/q5/JJPLY7RfsFVpZ5u7qzsgp0rnbCDH4Q1ZJv8dLi JyU2Tl9LM/KnqjKYAm/Z+OWHY1sFEIGmSG4Q6ShcLcBz3rj80EcLxZ61/zQtAKcS mG52wUpOB2wBifeouaTTsA+ZVnDAu7YD9GqwlFigdbOvo8gjFqdi1WUXMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqqI8nKvrBa7jfjMjcewWnx2wlDMB8GA1UdIwQY MBaAFPJWqe2y2a3iBNgjE8zpi2YjqdisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGxhcDdiTFpyZUlFMkNNVHpPbUxaaU9wMkt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8xMjZjOWUtNGZhNy00OWQ0LTkyOGMt OTEwN2M5MTJkN2Q4LzEvOGxhcDdiTFpyZUlFMkNNVHpPbUxaaU9wMkt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8xMjZjOWUtNGZhNy00OWQ0LTkyOGMtOTEwN2M5MTJkN2Q4 LzEvOGxhcDdiTFpyZUlFMkNNVHpPbUxaaU9wMkt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQeOrgKLq K/NkcklsPM2qFKg69DrUf04xATaU+RTdS06Lgrp/FLmtYIo65b7gAnALFRXL9Mh5 lRiBd3RQx7nMfbUXw+zZvp1/rsIe+TPMlSiMDzuIyZmXstLLnbFMnBM5W1CX86ko jdi9U4ZSNT93b6gDQgmlW+oDh2jpavuEnv5B9VykeiQe65TXBTDx9PQYosyHaJcK AyNRSyrco3u1VPS128T1ntukqBsocuRifWVEXaNYIbYJLer0LCCDShPFpEtU/vua 8q0reLHxdnrW+6ySvaeMLCDtWvhmM/4EN71pJoZR60BvgLQYerAYn4TiOgvzklWj nSsyZRkCLfkchw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:24 2025 by rpki-client