This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json) Hash identifier: 9ANvQIGaBzOCMstlTea48UViUvbCrrf8bzWakgh+i4Q= Subject key identifier: F3:B4:F1:93:23:A3:20:64:FD:18:07:52:E2:4D:AA:16:62:ED:24:3B Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e Certificate serial: 019B5A5219446CC82EA3D2294E7FFC2A8FDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft Manifest number: 1241 Signing time: Fri 26 Dec 2025 11:01:28 +0000 Manifest this update: Fri 26 Dec 2025 11:01:28 +0000 Manifest next update: Sat 27 Dec 2025 11:01:28 +0000 Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: ySEeOSguCiMvkTnvkGrGn6AU3hpPbKfGdv3YVVOgBUw=) 2: mre0Sbb8szBBX4GresgiiwdF634.roa (hash: KGpatw4GtK16xXPbD1RSTnF7RbGtyhCDwaJXsQ0f2K8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:19:44:6c:c8:2e:a3:d2:29:4e:7f:fc:2a:8f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e Validity Not Before: Dec 26 11:01:28 2025 GMT Not After : Dec 27 11:01:28 2025 GMT Subject: CN=f3b4f19323a32064fd180752e24daa1662ed243b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b0:8e:f8:2f:dc:72:1b:a8:67:5d:43:5b:fe: ed:d9:9c:7e:10:04:d6:e7:a6:06:1d:15:c9:83:7f: 62:23:c9:d0:e3:0f:6b:c1:2f:0c:5c:68:e3:f8:70: 19:34:c7:89:f7:21:25:45:e9:b3:0f:78:9a:76:fd: 49:9b:50:ab:15:b2:f9:cd:fa:a2:98:08:14:5b:3d: 64:45:e1:3d:52:65:9f:1a:a1:0c:fd:cc:34:55:a8: 15:6c:fd:b3:44:c5:4a:73:30:5b:72:3a:b2:13:65: c3:38:25:d6:dd:67:7d:1d:52:41:a4:de:71:17:72: be:25:30:f2:44:4a:fd:20:5e:04:e5:3b:04:9a:07: 7a:87:d8:fa:91:9f:63:16:4a:9b:5b:f1:9a:a1:9c: 49:2f:8e:af:0a:83:cf:21:a5:23:b1:9c:c6:e4:d4: d6:12:b0:a3:1c:69:6c:e9:f4:ef:11:e2:f0:e1:3a: 78:58:3a:db:b5:95:46:42:bd:86:47:6b:9b:ed:67: d3:98:e8:ae:fa:3e:25:17:63:08:f0:9a:f6:f2:11: 14:5e:a0:b0:bc:3d:37:be:d0:32:3a:bb:f3:5d:3e: 67:3f:f1:0c:89:c6:ba:c3:03:57:26:10:7c:b1:41: b5:db:49:e6:82:81:23:db:16:37:6d:06:7f:76:c5: 48:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B4:F1:93:23:A3:20:64:FD:18:07:52:E2:4D:AA:16:62:ED:24:3B X509v3 Authority Key Identifier: keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d2:e6:bd:3e:3e:73:ae:0d:46:85:56:ec:94:80:f6:48:8a: b0:c6:8c:a4:98:10:dc:c7:53:15:48:f0:ef:1b:00:b7:fc:07: 69:57:9e:9e:4e:97:38:d3:64:96:19:62:2d:88:ef:3e:24:e2: 0e:14:23:78:db:e7:c8:df:da:fb:34:ff:cb:9d:c9:67:8b:91: be:55:c8:5b:c7:b8:6e:16:51:64:be:ac:4b:ad:21:c5:9e:76: 03:6d:96:6d:93:6d:f7:18:0c:86:03:1c:a8:a0:f8:b9:5e:51: fb:f3:1e:af:81:a3:2b:72:2b:74:3c:e9:ef:09:d7:7c:69:32: 24:0b:58:5a:63:4f:3c:05:6f:b2:47:d1:93:2f:e1:1f:bc:a1: 0e:47:b6:bb:3b:ba:83:8a:6c:ae:65:e8:7e:6a:06:a3:e0:38: e9:7d:9b:79:ab:f3:be:92:23:00:46:ff:99:6a:1b:75:59:aa: 99:8d:4b:f5:2f:86:d5:26:13:c5:ff:9a:87:4f:e7:f1:d2:d5: 62:b8:02:f3:21:22:2d:d5:c7:11:fc:d2:4f:7f:34:90:0c:48: bf:4d:17:ee:ad:fe:ba:75:e1:05:44:0f:ee:aa:a2:83:6b:2d: dc:21:05:27:e9:a4:84:b4:54:7d:2c:ce:85:6c:a7:ef:31:a0: 73:61:bd:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUhlEbMguo9IpTn/8Ko/dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyOGUwYjc1OGJlNzNhMWRkYmZiNTE3ZWU4YjVlNGY4NjNh MjFmOWUwHhcNMjUxMjI2MTEwMTI4WhcNMjUxMjI3MTEwMTI4WjAzMTEwLwYDVQQD EyhmM2I0ZjE5MzIzYTMyMDY0ZmQxODA3NTJlMjRkYWExNjYyZWQyNDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bCO+C/cchuoZ11DW/7t2Zx+EATW 56YGHRXJg39iI8nQ4w9rwS8MXGjj+HAZNMeJ9yElRemzD3iadv1Jm1CrFbL5zfqi mAgUWz1kReE9UmWfGqEM/cw0VagVbP2zRMVKczBbcjqyE2XDOCXW3Wd9HVJBpN5x F3K+JTDyREr9IF4E5TsEmgd6h9j6kZ9jFkqbW/GaoZxJL46vCoPPIaUjsZzG5NTW ErCjHGls6fTvEeLw4Tp4WDrbtZVGQr2GR2ub7WfTmOiu+j4lF2MI8Jr28hEUXqCw vD03vtAyOrvzXT5nP/EMica6wwNXJhB8sUG120nmgoEj2xY3bQZ/dsVIZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPO08ZMjoyBk/RgHUuJNqhZi7SQ7MB8GA1UdIwQY MBaAFPKOC3WL5zod2/tRfui15Phjoh+eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG80TGRZdm5PaDNiLTFGLTZMWGstR09pSDU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wODEyOGEtNjkwYS00ZjA4LTg4NjUt NjllM2QwODY2ZWY2LzEvOG80TGRZdm5PaDNiLTFGLTZMWGstR09pSDU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wODEyOGEtNjkwYS00ZjA4LTg4NjUtNjllM2QwODY2ZWY2 LzEvOG80TGRZdm5PaDNiLTFGLTZMWGstR09pSDU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNLmvT4+ c64NRoVW7JSA9kiKsMaMpJgQ3MdTFUjw7xsAt/wHaVeenk6XONNklhliLYjvPiTi DhQjeNvnyN/a+zT/y53JZ4uRvlXIW8e4bhZRZL6sS60hxZ52A22WbZNt9xgMhgMc qKD4uV5R+/Mer4GjK3IrdDzp7wnXfGkyJAtYWmNPPAVvskfRky/hH7yhDke2uzu6 g4psrmXofmoGo+A46X2beavzvpIjAEb/mWobdVmqmY1L9S+G1SYTxf+ah0/n8dLV YrgC8yEiLdXHEfzST380kAxIv00X7q3+unXhBUQP7qqig2st3CEFJ+mkhLRUfSzO hWyn7zGgc2G9fA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:32 2025 by rpki-client